Analysis

  • max time kernel
    119s
  • max time network
    144s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    25-02-2024 02:55

General

  • Target

    lua/http/dialogs/offset_window.html

  • Size

    1KB

  • MD5

    be2110a67187e5529b0b5c264d64ff2c

  • SHA1

    4b5d5f7c1ac90ad298c47323aa3e07548b9096a5

  • SHA256

    f0c8450d88f4a64396304652811c3b9d215b9cceb24c36a0753042e68a688ab5

  • SHA512

    7c305a2c9375f24e769a292d960f8e38ea4cf934aa3de2f80620badc6b20d68ab07adfe77840105d8721299bc3be794a27b1fc33e54c10f0b3fe52ab5de13ba9

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\lua\http\dialogs\offset_window.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2356
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2356 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2992

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e443e249772e3e429119bac396212c91

    SHA1

    e74faf6b6fb78f947a030ec038269d06b17a338e

    SHA256

    1147e3ad4c0882284459c0e4f2a6d0d5f5a91d92fc2297790eae53c2e9db77df

    SHA512

    e279d3cb2a19b2a1586b39e430c346e667b62b1f6338d7ddde62781780f532dada9513dbb6cefcd0dfe4b0fdc2792fbd9c1e66a4faa08456707d45fb6f9377ed

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d365b749d63a35c3ede0884911a0351b

    SHA1

    95d569e2655042433e0b19522d45b53aae45b1e6

    SHA256

    f41a70f42c4da259153d6e8f2a63f0f55bc6acaead13f221ce93c87529cdbdd1

    SHA512

    acbbd7048b8e780e35194fb5937527ab5b71ef0bf25c54214ea30e28bf344cec3b66a9572ed7d08b2e201cabcaaeb42a9eaae98434ea7d42375b4bddf8904bdd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fbdd099ea016972d6dd8d9385484ed23

    SHA1

    9fc8907456f9937bc0663596f030f6b346c51dfb

    SHA256

    711b470c6fef4ea425348d857ce8d628f16134b281f6ef2e8d39b32fd5f50258

    SHA512

    aa4e210039d428bc4705542b9cf32de8eb57b6c64a96b99157c3a30fcf2319ed9ae926ce0141c4468615349ce0b1f6f3e79fe9622cb455e158da3a6693754c2d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3e9888aa783bb4a2717c86f275850406

    SHA1

    f17479dccff838605efefaa81dc529d50853e935

    SHA256

    a375211b01afc5467c1ab8710144256630ec683fedbccb2b1882d1f299431476

    SHA512

    7ec4a428b433d36c3983b69bc22a387cb86423c690a793d7357603e03f70530d58e4c3601d3fcbad2aab3b3fe495dec1934aec33f5cc0255ccefa3aa7210c4e8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c3f0109a4be955976b5c1805d1b9ce9e

    SHA1

    a35d084bf9e31a9427200871845338d3701444fd

    SHA256

    b93aaa7aa245abdb8cd534c93d70f38d640cfccef1df78dc181e2ed839973b5b

    SHA512

    c356dd877f3aa0edcf433db23a581728526b97e7e5a71a1051ef0dc0bf3207dd740b3818a708cb0dd885b9a826491d565f4fde8cdbcf4a4c3efdd3f80f5a786d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    61a6d0cfa661cb3ca3f391c630c24920

    SHA1

    deefbbc3c1fac82279255e87cee67c79a4b9a1be

    SHA256

    25e8b35f47a59a000bb1ab7f9a8ed5589ea26787eedd5830132a2e3900d2245b

    SHA512

    d602fef3c123409db6a18e4a1317a85a20c808275dd28cab45a0faffd5f70f89e036ed7ca2db344fcbb530c7246d20b5457e0132ebc489c4b9a147c02b1ba979

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5edff620b6522b8b96c9b0fc32bf3ec6

    SHA1

    edb08d736eb8b15ac2b11ec2f12d2d765eac0663

    SHA256

    fd2941f0ce0dceea5a85a5931dbca1961939ca6b052d35af17ab904c499054ad

    SHA512

    daf0d3cf186fff696dee304f7c76ec3374a6244a457eb83f604dad20c5562f0d601bf68c7a66f002ebfdd1c2137ab8e316c4bba70c0b3e7977a49388baa43755

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b9d4e0dc6d90673cab36044c8aa1ba45

    SHA1

    d5e59509b4f5a3339b81895c0c2b802763adfdd4

    SHA256

    3689a301a5cc51dac32fc7c8380430e6116a031b2f0acfcb66b93c0a7856ba75

    SHA512

    44b4e114792926650e0c2358dae966efa8092302571a91dee1fcbb1df3612f5def3889892caef3bc11821ca887972bc630caf84985e993fbf12f242c97b313ae

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ece5fea55353fd367051f6da7082430b

    SHA1

    20c1ff851694d395e7e36eaf34efdeb6560cd03f

    SHA256

    5986d0e21fc5d9a0177417471dcffbb018d49bef710dea5abaa24a6217f4d9d7

    SHA512

    218a0923f2fce72ea1d0bc1c5dfc0044123ad144506619aec246236ee0d32b08c3590c64d12d9d9de30e89cf6958405619cd44673424bc74849166fe98fe7177

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    18ae81b4a237aff089daadf56e011a01

    SHA1

    76ab6f207d30b3a2696f64e13ad4872f7223eaf8

    SHA256

    35b888aaea5e83d53b733742427608f24205458e9080b6e93b232357ee3770ce

    SHA512

    822cf33849ba08eb2cf54b099deab6870c5c1a3d00ac0e5e644edf03db1359f4bd8f4792a865c1bc8734f8ab3551f17cf98ae687a9bb779277b45f4f19e2529f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c5832c267ed388a3f7e43e952561758c

    SHA1

    e75e32f5c6dafcc2880e86c28daf2ecca58058e6

    SHA256

    d63c7d8b81c0622687e29ec89768523f6c71c14ae2ea7d246c0949b8795efa87

    SHA512

    238fb413dda4ced28404e0b52a86dc2a513c0181d75cac2cd30c053a3f8205701b0b209dcec1147cdc12fcf8e55478b960c78dc3d710b8d1697269c7ec02a768

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    db07eca660fb95579bfe1a3d5d3e4c4f

    SHA1

    82ceaafb61c229f864e07c6b0b1efdf952728855

    SHA256

    688c01b8c905da2fba0b0f5a809e2ed6e1fde6a4c653e51c5550961e4f477013

    SHA512

    2bcf9611ee7e2450e151346fbe084ae6610b0897ccbd274bb3da1f27719da3b26a7aacf05aa56404d960f084de1c766f439c541209567bba6275f2ed32dbbfc1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3c3d72e8724c5682034d39872ff0db01

    SHA1

    5fb36a3d5e8ecdeced5edaef0efa7845b08cfc42

    SHA256

    f09bbf8019a16a5af3bc290af6c307136d1f30d910a59bd87033f8b71acff5df

    SHA512

    6e007903e2f58d34bfb68d68a2922c1883480e82377725be0a8283b137d65da563d897ef76ba1b4f18377a1390ec85031b0958fac1f0e204609ae692d9bab572

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a3befb6da59fe5d79e14f70b50d5db64

    SHA1

    f5d5afe01ad9382a108d3c19969ff58d3225cf99

    SHA256

    84fef85729b68d61d4f87b2e8530b9ba7410ab5187bbede61837f8d3ffce6e3d

    SHA512

    8fc3e3fd4f70058d0eb70399e76719fbb7659d6d1a9a1fd8dbca7ee90f940b092f5e4ac9ebb5a36d75f756a8a2bcb1de8acb684921ef53103bfd62ce2cf5441e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4bc4bb4898c9761720d88d7f16496041

    SHA1

    292e5f24bda7d865d6ed9254337426199e20608d

    SHA256

    10fdd4619b176bb5943cd22557b3eb5acb1ea29fe4e14ff69f164b3c2f5437d8

    SHA512

    ac68bb6f1dce2eb39ee6a49261516839dd9e174db368f389fd740bcc92f9356eeecfa2ed39e02efc7265fca253ef097a8f3db7970fcdec8a28a0d8a2302c694c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9449c28fab12bc4a73d21a16cc43b999

    SHA1

    756833d91d476243eee82e6c9c0860033483e095

    SHA256

    b2e7a37a9aea41a47509f14a8f4545c924cd1dc83d6d9b75ab7968d48df8c1bd

    SHA512

    9ed44308bfc29b86389187fc179179f108e2f4cbce305badb7c5e165ff5f6bc0afc271d1c14a7bdc25da81a7ece2887c3d6a8aaf46e2448009ea91f255d433a9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4842acc700745d0c0ad7501720c53b3e

    SHA1

    1976689dec51aeb7a97cf2175ec02767c1d4e13f

    SHA256

    ba9ea0e7b8888c9d589eb5761056ff2fefe45b914f975c6aed69387845d2dd31

    SHA512

    a7dbc4d4f147f6d42c3d8e00ed82a1683c94ca356e611d1af95178876b1d4299b9561fb4fc33fef292c928dc7d5a0f9844b71b1728987616f5b9768474509498

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f9c9f62156947f99f22cae8f1b60b142

    SHA1

    9a4b1fa72da77659911417ac50120d13b35ce275

    SHA256

    9848c7d49fae8e67dc66cb64b84a1b79787c657c2307e8c34d2a23098e24fe1c

    SHA512

    30a27c5b79929c9988eeaa05f7442b0903236f74689fda2c530010ed7b76df57dc1ea0449210ccbeadcd22eababfb2fce79540e1cd6a054a6f97458354d7d8ce

  • C:\Users\Admin\AppData\Local\Temp\Cab81EF.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar833A.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06