Analysis

  • max time kernel
    118s
  • max time network
    133s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    24-02-2024 08:45

General

  • Target

    boutique-floor/css/owl.carousel.min.html

  • Size

    1KB

  • MD5

    fa6e1ac3efe67f0d21f98a6ee81b869a

  • SHA1

    791d095f6e2d0ea6bdd41e071dbf560502419e27

  • SHA256

    f6676f645d3763cd38a1fa13558f58712b98b96bab067bdd0ca18e9e4f65dd45

  • SHA512

    690ca018442054c85a4cf4f93692d9ab3f08ef9f0ef674b34ab8f08c557a891d99c6275dbef4b9e4faafd1ec16001eca4dae01ea5c34129978a48cf1bc20cc1a

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\boutique-floor\css\owl.carousel.min.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2928
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2928 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:3052

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a27ebacb81e525f216c0c5bf2d6efe12

    SHA1

    4932ced481134bc0d7cd5a48782055bef4673471

    SHA256

    c7471155635461da8424d1dafd18a698f0b4ba4266cf26a2d6c449bbd47eaaf5

    SHA512

    cb6a36432efdedf6757f12a99f4ec75350d06c6d8c1701581bfa0f2f24d1bdb465ba74e1633bb9d6611d67776a279e70e6dc8a236e4d0feba3bb5e3974313eb0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    dc04bfd71fd9d92559dba80819664e2b

    SHA1

    a6d85ffc7629e23c575124c326adad6cb3e75f80

    SHA256

    bda1af896fb093c889867515ef52538a899904ed6fbe19b966b60608dd979f38

    SHA512

    3768107325dba132de21726b48af8b7e6586c0a3ad202a2a76d21b4c034066e3413edfb820997cd2b34ec4e92b0c23a74ca51d9242eb41e5bb734924849fc4f4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7b27c3a2bf102e0f1e66da996ffbb3fc

    SHA1

    1e1766f94d870fa5259d0d03c48c923e49aaace3

    SHA256

    31b9a5813b52a546bbdf618ec653b9fdfaa903a051c03c595420157f4c3dbaa6

    SHA512

    4ff0d7d736eb4b69706830e2817ffc8349829bb40cb38a21ac261ac32e407695f2b851f42ad862ee157b665bd898c7d6d3f10b5daec9b08f4017b5b70f1e762b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e2facb93e9a4fbc8d3b3cabe17af48ac

    SHA1

    fd3b24634bac8cf667f0a26163f1e5215064ecf6

    SHA256

    d9172128080044aed786f3dbf10a19b70d2821c4ab8eaee28fe56bb7f50a7ab8

    SHA512

    84ccec4d221a3150f6115729e83a44100e336e9662f88ccb69c5c068e023fdf32a9ee496b384f7deed1549286f500a59680c544ad0f8657a5781d0cc0745a7c3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f2cfa4c09983e248db1a238365f28801

    SHA1

    165b5016cf41cbc0a9e0ad19b545fc055bc9d8d0

    SHA256

    4183982ca086b177a8c4097054a703c48e4eb5a246d01de831a2de2d80acbde6

    SHA512

    07c726f95be727f34c4dd3b3fdd6b2cf9b01ad6514cf28ff091eb1fd6e189cf4479eb10017773003111ce38fbc7ace052c6a3e52f66d0e2007f44a4206f2d209

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ff6194eefc6ad23a5e2a8247595a09ee

    SHA1

    8e34d4453fb0abad87868a91d7b99b6e10a38a00

    SHA256

    a0049a21a6dc439aa0109fb6df4025f0e85aca4723da4b58a3a90943af0840fa

    SHA512

    20cf10f1aa9ccf3827aad626a4af4689f4552ee783772d7878a6456897d683a62b4123d3ce7764c5540a5fb5db1febe3686ce7091f6a82a5dc57c968863216b1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b44b2101df96fbc0f3be74b6defe0d60

    SHA1

    cfea34057e7f02963b8cfcd3daa4b868498a70c1

    SHA256

    a67a7788da923667ec2948305c9e997b9b2732bd1c40d8fb5a269b60b3b487c8

    SHA512

    eb13f14b314d047207c2e557ecec1154ab10c59ef664550f76d8f7f290ab47e94add9ea011526d27fdd1336810d313da45f4fa600b92b08dd7337502c8380647

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c8d25bb1e25f09f4d129a7b3fdedcfbd

    SHA1

    2ac491e664ffa478b3c424e08702aef6a322e4ad

    SHA256

    889ecd9c66804aa41b490bb761e85ebe25804912f06fa2d82b1c5933fd2e7a80

    SHA512

    b8a224dcd2be26fa8e85d6b6b49f18040af55ad8dc571575a5f3144884eed4160b0e432edd33cb6abc3b50420d31e89328e61e1f5918be730988b91493e6ccf8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    299e63ff8419792e948527f89e32734c

    SHA1

    c6ff98dcd391816500e15271d1b87ae06d89d19f

    SHA256

    044b2780c193af8a930ac2f2b4d3e26d416ad7b0a28acb7e1832e249ed8da190

    SHA512

    50d632e834ee8a892ec5b127ccec3cbdfca2723353f64ce6ed0bf3683fea3025dbb3d0369f067904cbfa798da4efad9eb9c90956a04c0484406f37e6aad792dd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    62fa6f80aa5d6d25715d554d26b5c875

    SHA1

    e1b1a41f70419bba7f8c7236a778ef3eb421a20d

    SHA256

    ea1dd7ca92f3a194ab3d860b4e708b3d12729b707c3ed48566f195e41d1087ba

    SHA512

    bd13fdd5d042d4ffa6d47763c88e16649468698c9cc4b87f7f07818e48142236b5978b622c4a68b2e029ea56eeb710c54d777edddd0667b28704f90c0a8f2886

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1fa3b97459bea379f547e16a909c6190

    SHA1

    24a51b48edfc6c2b0c4c997eedc8275d36c7255b

    SHA256

    cc585f658ed0ac58c5ad500d4deb8a75ddf206f8882a1e324a2ec9b0f2027b98

    SHA512

    e2668f820c9b0abc276e70bb86c69930c1cdb48125d7d384a22fa53c4f4104a96ff4a81d3c62b329f7aa42958c8bfeefb9505cf57da30a3d7b63e6870f32d6c8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f533c9f541e2c6867ab88f4127c56213

    SHA1

    433ddb73e05358274b6b81ee3862fab4ec4b2d59

    SHA256

    e606efbb0810a2f910c48e7a5ba886a39a87a0a65f932c73bdcf2cbab5060036

    SHA512

    a663a4a9c13868427b992c557e40ab9bc27013c85282158dac7ef1aea97db3ef901632bcf2bd73d58640cfb70922efd7d681985739211fcf9e69ed456930ae2e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b2159ec7ffef231bb1e6fd4ccd216ee9

    SHA1

    4c5d1e44fe4a7c19ce34c6188f34dd212be400ec

    SHA256

    e765cbf3c79a16bcb848b12dcb56213b2105a3bd69ff65d3bfd4677986801caf

    SHA512

    0b4143931a720957a07b230d505fdf119cd106376456f1fcf1139757cff6c75e72ab475ec857f7d1fb80094a46bcb9844fc750abc60d0f98718f41cf7e881803

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4227c2a380a584fb752a297e78c1f7bb

    SHA1

    b621f8cdcca04233970616432752ce03d1e4cceb

    SHA256

    083ae181ecdfb98ca3af2df191b3ddf1f09d63821d206cc967630762a6459332

    SHA512

    3bd5779b599439e78e6f65eee97b5b80c97f22c7d0c0bca9dace710d0d27ff66be1b0b63f3ef8d46a5a56fcd206a3d7d1e775bf09724eba34433969ce8c632c0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    54a935cd0ef9efba913e36b7b1e3a45c

    SHA1

    eb2dbc9f54653a0df714e774ede102cd14a86f9a

    SHA256

    14dcea308926162b1a71f9aec3592a57273f410db7cd745be08d04b6b2478831

    SHA512

    1337812ab3e7db92089d80881d29920619c059d50fd0feb66aec8cef35aa3ae216802b7a1aba0cc0fbd9b5dbcff9919c9d4851b247e13d1c3ac03f1dd1868e41

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    937fd1ec061930c74d1d0bd93480641b

    SHA1

    2d8034cfa5129f4a6c504421b555a5e1431b8186

    SHA256

    d85f8fcc39cbe485ced39e16a3e19135a0edeef8201287389b3145f719e48200

    SHA512

    84460ff70e21b0990cd0771c81ea599ba47a57ff6ac74f348d0eb940aa94e18210e7a663e86d1c56ebadb6e079cee1a0002bdaa143fcc3897b09061979c35058

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    67135f8e5602dc1d64fdacea7297c449

    SHA1

    f02b68b4d93d5762994c612419a41e0a4c007f3e

    SHA256

    e20805e24bde3ce4312c2b72a28ddfe5e159f3604fd329a7ce5983cff946f903

    SHA512

    78a43e8511d16b3bb48e9d467e0c475c00d6e4bf90e01f84945c99923d2a0de89805c9ae5a8bf99144bf02116928d512d0c51c47aa0c8e6e764b929729f7e9e1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cfb601566ce559d2e54b121325339a47

    SHA1

    1f16103eeaf4a9c8b6aab6d8cb767b9161632641

    SHA256

    7ba48bec64563b7946230059f7c202f9aa78da8d7daf2045a57ba983167cd910

    SHA512

    c4273f836e5e9a66cc7d0c4d69af60aba56496c2fb2169beaae3d099576f0c5c0e932c5aa2ead525c8d3044a071bf54bd0b67c8cdec95be3f63eb1ea3e9acb4d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    442cd40c153e826a4690959fe945c38a

    SHA1

    dc7450a79202b87f5809301134d9871d07c78fb9

    SHA256

    f3b7ab5fd8e84cb7981d6fa401d8ef3a64ab342aa10d5ebf0522ec797e6f2b56

    SHA512

    d33b376237db20f1b5d8272a8523a5e2cfe3c468d03ddc65d344bf17f4001e43a9b8526f624c582b1bd52da37d6cc53368d081f21201f917bf76f9f72e14c23e

  • C:\Users\Admin\AppData\Local\Temp\Cab7562.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar763F.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06