Resubmissions

07/03/2024, 11:26

240307-nkakpabb7v 3

07/03/2024, 11:24

240307-nh7gmsbb5x 3

Analysis

  • max time kernel
    118s
  • max time network
    137s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    07/03/2024, 11:26

General

  • Target

    Lossless Scaling/LosslessScaling.exe

  • Size

    953KB

  • MD5

    67378d710b6b8265d7b65ae2cb658744

  • SHA1

    6a2ea3a9cf0a515b87ba6ca89b2e6b672a392d35

  • SHA256

    2ab27f79ace954023876aad019614df089180f8d915e633d134cb47a48f47b2d

  • SHA512

    1725c59dc612cdd6ff94344fc06f1f348e6bb6ba4898354dfccc5650313c9beff8f82a5001b75871689ec1e9edf5103788f86a31377e91b4f28a45573a517b31

  • SSDEEP

    12288:7SSEJEDS4MCLSyf6mOuGyW38yHJc+CKtOaO5Z7WhaGwnzE4ZbuRCwmhI2J+0sDy4:2SEgtMCLPf1Oi32OvzTo4ZiRlT/CS

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 34 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 7 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Lossless Scaling\LosslessScaling.exe
    "C:\Users\Admin\AppData\Local\Temp\Lossless Scaling\LosslessScaling.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:2352
    • C:\Program Files\Internet Explorer\iexplore.exe
      "C:\Program Files\Internet Explorer\iexplore.exe" http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch&plcid=0x409&o1=.NETFramework,Version=v4.8&processName=LosslessScaling.exe&platform=0009&osver=5&isServer=0&shimver=4.0.30319.0
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of SetWindowsHookEx
      • Suspicious use of WriteProcessMemory
      PID:2128
      • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
        "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2128 CREDAT:275457 /prefetch:2
        3⤵
        • Modifies Internet Explorer settings
        • Suspicious use of SetWindowsHookEx
        PID:2376

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    67KB

    MD5

    753df6889fd7410a2e9fe333da83a429

    SHA1

    3c425f16e8267186061dd48ac1c77c122962456e

    SHA256

    b42dc237e44cbc9a43400e7d3f9cbd406dbdefd62bfe87328f8663897d69df78

    SHA512

    9d56f79410ad0cf852c74c3ef9454e7ae86e80bdd6ff67773994b48ccac71142bcf5c90635da6a056e1406e81e64674db9584928e867c55b77b59e2851cf6444

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    16e855428f3cb7f9bcd50ef4e16a042a

    SHA1

    18b5002ed6c0ff0b66c52a7fe0afeca67505ec5b

    SHA256

    b3047d9fc74f18f303d79fb8afc988f60dd160beab5e1d491f572f771a807d36

    SHA512

    f4c3ddb5581753ce7c2ec505d10389a3fe3180f4efa7a658295ab39bdf72beb5caa769077f7e8b4cdd9b24fb17cc64b29faee0ecc60dd86a3dfdf8ddd690f9fd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1f970578963fbf2e513189fa88849b1a

    SHA1

    d89478b3d248103e858ae383f83b7f06777931b9

    SHA256

    e2aaae607d730f251f325cddb6e36c7f8bf448a9b0510ba3e01936583e2ca63d

    SHA512

    6976f659c6db1834a4ae6b9233f5151bbcf6c808b0c4860b31504f489f9658f614250df73bb8aeadd902e5d946118062e1f3373c4140df3827174d935c2bd0ce

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bd3a2a1a5a73d77daf0206c261d19ee1

    SHA1

    bb747841d28ebab927d8871e58997b4fe31ded59

    SHA256

    6242aaac7d2a3d34d0dba971ba30b71061bdb8d079cbdba8de9947bf393ff7d5

    SHA512

    be8dd63fb39c1fd8e71bc3cba919a06149329cd4a1bfd0003431accc4814da36d8baf5265cbd486dd617fc0b98e4e4633c85899eeee0ba648f5127891ea2c115

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e9d5e6b6a59d730077c57e6558da1e49

    SHA1

    c8c3d9a51766097518972cee47bd817f54874327

    SHA256

    2e696dbb8801591063778652b1303b6a5f5b59296b62368bf9d9ef1b1589833d

    SHA512

    c2b503b17bb89d576bc61ec3808802d829f08fdb5d86f9992df76382adc0ce0200ca33198239793258799ca59a7917e749ae630423c3ee513fa4d1051a737a07

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f83cc527f3c4d78ae352005741fec091

    SHA1

    7a5ee430ca0d8d932eb3e99b2bccee510d3682dc

    SHA256

    d3cdb4372a3ae3bf2291caaf78fff4a5df456df36f894300d119356c92f60da4

    SHA512

    4864449538b6c4562e89cde92ec65ca5466a0b380bc28d7343fcfedc3b48bbf6d402943ab0aee0b71b76eb991484841f2cb713c19af63eba19105617141738fd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b606874206d4fa3b61aa846d7916d802

    SHA1

    1d7ce18f1893bbbbce56c31b3fea8a5b86a7a89d

    SHA256

    837acd8d31425f29b0a53f821977002ab39b9f03732b3084c537a1ab0cae3189

    SHA512

    1f14e71f6b86f03a4d575798f9f9f69034eaadf91db7760065d80d4d6e4dc3ac99f3e0161ce1a09db902057921ec039bb5c260a1192c44f24f7b41ada0223404

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5fbee6f759e7d0da85731ebfbee735a1

    SHA1

    d8979a9a6c94477cb060b9829b7d77c3f1796c03

    SHA256

    86865152d499968e7ae91e46c89a9a9d4e4e30e5f478fe2bc97ef46a08a1f09e

    SHA512

    fadb9e94696746af6602264fc1b29d41a5fe122b99d2d4bbb89b7d6783c517fe3eab5f744af8d460a8c069bf449fb8f530594fa6f69105fe214d71f3ee24e7a7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b649f7a2ff25e1823b1bfb7c1acfa797

    SHA1

    b160b3b5a685de9fc8526a890a854e2edc6f6949

    SHA256

    ce4db1dfee188c0d314f60a3074e64a8a399c5e57bde643c3c1a231dda92d8fb

    SHA512

    3faeb22926fda3e73f50a89bf5e252c05c7352cd95e861c86d7c7c5199a1dfc5882e9557d36caf3cc7ad60c16bc63e8145b69177fd01a23a8b260a4a92d76d58

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e262254d78bdc082540848232b7a7e82

    SHA1

    fc81dd49d44aa88f85fe7df670b5ede244bfba96

    SHA256

    2e01efa20b6959a3aa0861eee8496b9590ed0a1d1d828c2b0c449ed6b1dc7b70

    SHA512

    b0ccb6aa08086f31818af483ec17903e87bc60bb699ccb14d1582578c3dd18fedb6bedfbe02c5780c7732c83b5869cbd833f4fdead7f232d126fdbe80daacd15

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f2c4505b15da7bcfea865b2a5a3a9425

    SHA1

    d4cc878a31dd3b26543aade45fd29d6bb624e7f7

    SHA256

    db34b74b4b1ccece6718431dd7eb0f58d3c9e12a047f73fcfb402be1179e7a7f

    SHA512

    f69781b663610fd820ba682c6553c521a6e994f377815c70c862309eb502e5089e0bfcf2a5e70211d77bcde98e2fa9e79bec687e8b3a54242d310622285265c4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    874457f8e1659efdf5bfb103ba896c6a

    SHA1

    ab857a99d2e86b071a31b305dc995b8060561a74

    SHA256

    7aa9c7c8f18a5db94688cb1764b65194d3850c661bc2ba6eb5bb2cef563d1296

    SHA512

    3453b7427e9f8c556463bfccdff5224abd962d7d0d0d9affa7bf9731666c0c70f63ad445afc10c8d0bbd30355e46aa6c1cb40b544e555251c5966ccf01843941

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9cea49e2a6f16227cf4c24c04d8566e5

    SHA1

    cfd64d9c374c1604f685b223c94b757b1ad02455

    SHA256

    26ca7dc78928d6b0f0f7bdb58e7836661b37e9c61bc84db64ff8822215a3db5d

    SHA512

    2494bb9b89207a061c3916e3e9f720eed362f0fd69c38eb20877220774b380a4c678ac5b7abea984384bef2c7455f85e98192f201070b2227178da56cefbd89c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a7f418f7052c3934204b995b0338128d

    SHA1

    5a975da807b54aff260633d199055b0b9cdd5098

    SHA256

    16a2f6683d25dd9f821e9aaa760fbf7e98b0365eb76a41a276bb69d25fbe6639

    SHA512

    24c96c87b883e72a5f419f5cdbf98fb41d8ad1779d4bde83ab1184b227491df7db942225953662e4f9520bfe9f1fc3760a059971c6a877beeecccc24e4320f4e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8074e275151da2f212bc88babc63569a

    SHA1

    40eabdf2092aa7df300c0f39ab12b7b036052d35

    SHA256

    2ca1fde494a2bfac754d48b5ec539d96171c992e2cd2d8f1c4c8d74a25a9a5ec

    SHA512

    bae3c5e36d5fc623d543fe2609065e3143752f3520b31cc5d4fff34b928e0322a87825c072883892abf0d99197d2a0e6f73b71addf8359b0125a82549e68177b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f769f07036f674ea31e88294e12c5481

    SHA1

    8355b123986501a2fbae625063812040f426032e

    SHA256

    1bd4c1cbc715fb736d9b9530295f379b1c72a67d7872bcd7e69d0b0b33215d19

    SHA512

    f20ea1d6e0780d27c67a336ae81b321e92bffdf103349a67290aef24fe5128cd4631626b18ad4f3904ed5e50e9c1450ff851fb9e098ce9815b982bcf08fa3b16

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d6a39452d16595dfd45b9ba0ed5ec9c4

    SHA1

    049d783c04d4832f87d392b1d358d2b00f145b5a

    SHA256

    c6efc5aa23928f4657ced977a4c270f6c16bf9c76a0b3f8983573370ad862d98

    SHA512

    50f94a4557e14000014a1c8180fc58d3e7ced6d0d11f6fb0922818237e1dd7f5ba671532df7283df0c7577c9fde93953a1a23a147b463af335f89836ac9591d5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8c1be6e4e3bda13b0f0680735d0ec93d

    SHA1

    e2c0c351126591ec2792852b91896bee87b5f603

    SHA256

    69ddfcad6afda89aa1fbc1b86baab0a10715e7f8854b2837ec6b38b2bef2717d

    SHA512

    d22583bc9b099effbf06be82b6dda968756f349dd7b570914569fb6a1c6be74eca2151ea936b158476d611456f36ff1c5e983b5b7c135edee3017b361c076309

  • C:\Users\Admin\AppData\Local\Temp\Tar5326.tmp

    Filesize

    175KB

    MD5

    dd73cead4b93366cf3465c8cd32e2796

    SHA1

    74546226dfe9ceb8184651e920d1dbfb432b314e

    SHA256

    a6752b7851b591550e4625b832a393aabcc428de18d83e8593cd540f7d7cae22

    SHA512

    ce1bdd595065c94fa528badf4a6a8777893807d6789267612755df818ba6ffe55e4df429710aea29526ee4aa8ef20e25f2f05341da53992157d21ae032c0fb63