Analysis

  • max time kernel
    149s
  • max time network
    165s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    21-03-2024 16:55

General

  • Target

    background.html

  • Size

    1KB

  • MD5

    765526318b49b078d35a1a736bb96eb5

  • SHA1

    6dff92a26b1e1194f32ba3f55765d6f2c705ef29

  • SHA256

    b14df17e9b5eda2f908d1a50d37bb287d4c7a42f9732d397323685bfce1ca2c3

  • SHA512

    a948e1be69de00552772d81cecc62cb260e9deaa8821935abb94194a5a4f5f547e47c65dfe2fe156008aaf69064cbb08bf3a874003e31c4cd0a5c580ba1a8e75

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\background.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2204
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2204 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2524

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    67KB

    MD5

    753df6889fd7410a2e9fe333da83a429

    SHA1

    3c425f16e8267186061dd48ac1c77c122962456e

    SHA256

    b42dc237e44cbc9a43400e7d3f9cbd406dbdefd62bfe87328f8663897d69df78

    SHA512

    9d56f79410ad0cf852c74c3ef9454e7ae86e80bdd6ff67773994b48ccac71142bcf5c90635da6a056e1406e81e64674db9584928e867c55b77b59e2851cf6444

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    d2a71cfc2ff3a90c90ce16e3ba83bc10

    SHA1

    f3ac9aa0ff3b4f946f90c5958e505ba8e6cd764b

    SHA256

    34903f05513cb6f4a7f273bd060d68e9b93a0996b954337b5a8339ef1db47493

    SHA512

    69e1a54071b36cd32e9487fb88508cb1fe244a6a35be467cac96ab527b24c2196eff741c987b9609527de55a610a39ecb560da780b7355474176cb1a7594afab

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7d01e8e50ee70ccac262cdc4ee4a030a

    SHA1

    d47c8265629f7fd77184a5d93b8c5987ef8cb06d

    SHA256

    0b4aa49c1c208553bc989ff20bd99bef170cc311553bf0509d8e4fcf43f3b384

    SHA512

    13a642e9a45a0af8aebc4e2d43fba3f5c13929ad6b10ec1a99ea431d0f3fe3e5ed4e1acf0a940ca7008bf62efe0209528108d877ef1b1d82bbe35563cacba096

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d608705a78961c6a847683e84365902d

    SHA1

    51907b2e89bed1e6644c7c78012862fff7459b5e

    SHA256

    33328f766327ea6699b152e829f874abf1b10b8174d07285b8c5e21bcc62bb75

    SHA512

    96b900c258e33a298710224bc3d7287c2b2c1b8e0ef2270e52acb486654f2994c7042a40fffbb5d94984c85a8960911f10c83dc190bdfda2eb9b771906f7e004

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    90141fbbd7c5a65bf11a0edd1af8a82d

    SHA1

    5c03bf4a3ed2202565061b59bc36ad78e2014a23

    SHA256

    f95e98df8e92e0ca9b47c479139fb5591e138cd58873392d2286a5bb81db9abc

    SHA512

    01e58bc60ee35220e17bde085ef927d8067bf2f175a8bbead218cd7f96d17616d634a53dce17c91cf28fcaea651bb87db765fd17e441c6c07ce7abe30edbbc6b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    046809651039bcbd0e42e4e51d6d782e

    SHA1

    ac954d24ef7f9dfcdbd959bc7b91dcdd8c17353d

    SHA256

    37a19f0fb031fac44651d64a39ae64fc186abdc68814da4ac6d6e26b2281cc9f

    SHA512

    d7c27d785db3d614a0bf973334134b5d21a4f0839dc9ec9762860c071855db9d8101ed38ee6028f0d3ca2b1d61c592e5ec2da35298a29ecb4b37ce8a7e9b2340

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3cea8efcb19022a253e1dd6407df87f2

    SHA1

    c00a39ed0570d714b5df919be6a25d5737780a2c

    SHA256

    fa1464a0b100dbac50dae0dba487441df2c657d03e08dbf11e8ab8ae600cd369

    SHA512

    051095a0fa47c222a4398939129afc3ad2e4fa59b7db5117ca893c84f74249abe48923986b2463d40625f34589b30f03e1ca51611977bc18f96077a331d3635d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d0896fec0c405a875aa8b4a7bf16e8d5

    SHA1

    a5dd42f895911f6fad6a0054ae8773c6ca5b0981

    SHA256

    85598e60ab347f0bb66b52ded7843d076a1fde46cce97fbd3300a31cbc82fdbe

    SHA512

    ccc16815a23adec3878a2f2bbc487a7423f80b094bbe02bdeb7def74d82882aa7e22da658fcb2fe5982344d0e7c7cd5da568a7049fa793eb690093f71a4c30d2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    325237d28c318b8f498838d975107eba

    SHA1

    59274793f80174e009d656007665ceacb42f95cc

    SHA256

    f94482c33bbab1747a739174df26d0f2d3f0c8655415f3bdd88af5e5d6ce641a

    SHA512

    8768ebfd0bb4a16e01021e4cfb555bbe39c7dab05d6712c42c8367080ed2b02cb669ab2c6e40c37e99e0529bd5c7834b83853404786a20ea966f04509366c20d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    ce37efc82d490b2e5c436b979afb555b

    SHA1

    6dc0fd09256f734758ca4f57ae021c8a944f2e94

    SHA256

    8f58fcfb6bb4fb15510e5c5044e339993f561b6daa798994b54b80cc5ed0889c

    SHA512

    dbbf096e616acc118167b747c1ecc590fb01a14ca90af7570389ad18bd48e405d3eaa839a457e782248f9fd528e8869102bb496968e7b308178594ce1c9e592e

  • C:\Users\Admin\AppData\Local\Temp\Cab9E91.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar9F6E.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06

  • C:\Users\Admin\AppData\Local\Temp\TarA261.tmp

    Filesize

    175KB

    MD5

    dd73cead4b93366cf3465c8cd32e2796

    SHA1

    74546226dfe9ceb8184651e920d1dbfb432b314e

    SHA256

    a6752b7851b591550e4625b832a393aabcc428de18d83e8593cd540f7d7cae22

    SHA512

    ce1bdd595065c94fa528badf4a6a8777893807d6789267612755df818ba6ffe55e4df429710aea29526ee4aa8ef20e25f2f05341da53992157d21ae032c0fb63