Analysis

  • max time kernel
    1563s
  • max time network
    1570s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    27/03/2024, 06:27

General

  • Target

    purchase_order.html

  • Size

    26KB

  • MD5

    d03954d5e37f47c66accde2d7a81f831

  • SHA1

    f9fd6bd3fdce1b823a8766eb65a734d6e053aa86

  • SHA256

    87f476dc1c4d3c9771b6308197fbcd837bc51e95c3f59d78237f2a6e4aca5766

  • SHA512

    b66f7dd973251b33a9f11b4f3171b374a578ac19cec5deb915e232e5ee91e932679838d49cef600934cc870767ebe88452688c27b7076e8073fd19de8f573713

  • SSDEEP

    768:nWA485o5tjz8j4yhEmntbR4cdYUGMcycoWcPNGPT82WA6WWUvg:nD5sXo

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 10 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\purchase_order.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2372
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2372 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2528

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c661232c67763c158f51565927cffade

    SHA1

    3b9d29a945ea5489993a1e74cb07aac32007c86f

    SHA256

    01ad897c604724804955d6e81bfcbd3f03004b9b63daa72ea64100e4c47c299f

    SHA512

    74443f75a7c326b618151c43d98a55ea2693e0d2ff4400b6d7e970c3f2f95d617972ed25f92e8caaa0e9b732e2dd9e780ee6595090b8fdea2cd2735dee6803f8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e65857ce594033481516f481fbf75b76

    SHA1

    a086b4f94fab574786be21c8d288aa691305f5fa

    SHA256

    67b4c6fdcbeae41ab0e3d96c183d9df9891c9e4481b2c030afa2d04e368be5bd

    SHA512

    6137313c6e287c8e87fff0f98527ebb5c3495bbb76ed08856eb17985f915d4b0e33bb116cc1921f770868c982d8138e53603d8994247c682a56a098664681745

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c5f69cac2a261b67a34eec97b2d980a1

    SHA1

    1cfff025d6b8acc0c5e029efa66541f256cb33e9

    SHA256

    8d755082cae4eb9699265a343e7c751a1af3ea5f12fc21ee65ac59fc907732dd

    SHA512

    34681ab9440859674575542f9bd3b156b49b4dab4e91508fe4b5302f5763f898ed237b84b9c17a52ca96e9b52b6580a9caf807510bdda34bd2d1824e0851f017

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c0605bbdb6946ef62482442a6b8b49c3

    SHA1

    17a0f85e5bce928d4ac55de7de0bbd3b595e7936

    SHA256

    da4781bbbbe4464aadec7f2e5af51e50c2f4f7114be264c86f89299eca881d6c

    SHA512

    6b478f42349b88bc1d0d9beeecd2c9e82fe6461f6d26d1c6e23c902d038aa68bdb2b087b78d83653d764a7e354cf69bcc0c713c51567b5ad71ba1ba468316578

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f415b1c2a0648fac63ea3785d5dcfde7

    SHA1

    ffe81c71e6c63679b80c6fbfac73a4696fd4c22e

    SHA256

    253cce1d656a92be7ad208aded34c4af74533b7e11ce673bbc7a7b9ea7ddf162

    SHA512

    6a7f6fa73e94b240b5a82b10121827156e2af6b72efcd6e5b5e1a0d42971828116194c3bb67d562a62f98d11f5cd750bfa646024455152ef54c1e81646d13dc3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b45f17f9d7db3035443627a9859a5dcf

    SHA1

    e3f600e5b8d5056e796a230e49f4c7f3964088d5

    SHA256

    93edc051be1f98217d225cf509ff5dbdf84b1a05dc5351c3e1f0333e765a9127

    SHA512

    bd81378f84d2b3f541ee7c8b0d506fd7a43958a4fa9479c62690db7efbfebab03c216f3dbebaec18189879956ee266281926c7c5332261896d19fca3d5887b9f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    36ebd13c7238865be6dab607d8227b1d

    SHA1

    a8c4a9a2a6d6ffa51b593838ff90b61e5bfd25d7

    SHA256

    9e654714f92f6906335b958e4205ed2937e5c2c9ea46ed810edbebac1e998da0

    SHA512

    3a1acc42eef8ecbacf9c863d44a0aa4c0b1a8ed5cf69f192b391111febb2e09d1f87a0f22b6bef468428041bb0bf437520e0eb628376a44fac0e08ac595191d4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    df9b0e81ae277caebd2021f8fcdce617

    SHA1

    8aec95f6d29c1247afb06cc8f507daafda509edd

    SHA256

    394f3fd1f6c7da5d223800d7d7e0d92e5265945bcc866ec246b9100952052ccf

    SHA512

    9ab7c1f1c46dfaa0f10224e8cb18ce3b604617e22a120dc1451bd9a6244c624c80d92a53471e7f184cf46310bc5814e84320450b0148e17d0569783ee5ca90f1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8fc19b65912f156781fb02025eb612bf

    SHA1

    201cd052ac789b37e6d3397356ca14b2c45b998e

    SHA256

    748b8f7924d879464ecf26cf526226bd8f8c4821284f1766ddb2b2a53930d943

    SHA512

    6e2b1467f1cbf22007bc46400cc4f1fd47812964cc5c70bf289580222e28e69b1a7892a305a72798a2c71c46dc4dd85c26b0b04be92b23ae73e15b5bcaa4f8ce

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8f7a7482073e485fc3f1c20258e3eb68

    SHA1

    93f7b80d07fc33b4cae8b04164ad2de918bcd58e

    SHA256

    530cd0001e0843debc287be526c50c355089bbdd1bf799b395df95208ae49360

    SHA512

    326c8c5d340b95315bf1080e8296a4494a5a52bbfd560a84bbcd7f3d3244279733c5d0f8198aa1600662176503f896a1a42c6f393114580ede9de2d56247d3f5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f1e43b74a4be9accbd3eff457dc8b3a0

    SHA1

    aaead738ff0bcaa6fd8756aa4628b9dc2c071c44

    SHA256

    3014232f23693231b8b3d45309dedb03c6958f61b230dd51cf44eb7c7c253e1c

    SHA512

    6a445156cbb4918231aaac7cd812e25b11487e68bc5378fddd69f3b0017b675be6e1825083c2ea66438f1e8af8fe998f61007ef128afdd08ed77debe678d4bde

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    644b38a3d000cf7a214030409403908b

    SHA1

    a42c98180c220a422ac12333655d1b7b6703871f

    SHA256

    9024e8e2588d1b918ce902dd1c5e6513f8f78545f3e10267fc6db171c1ee409d

    SHA512

    22fd29d2ef58b30692f29967b10ef245da45ec4619fb2d3b1786ac3ba04fc90647547e7b208ef85a660148c67ace79612204f7e35b53613e17b910d82693afb1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1ce2851196d60ca1e1b4282c40d1d201

    SHA1

    5d52231ef55b9c8a354ff7e8760607925e814265

    SHA256

    e97a7e430257032ff97fff99ea1191d87071d0dc504bc3649470e2f7b0322a19

    SHA512

    0b10afdacddb090367312eb8e92cdff0a5622b6ca3b1be0fdc701b217665200c24cc836d87a93a6b72c3bfd3183c90af6a9a74cb236640df049592c6685dcce9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e19e5b1c789df63c3a4ba9adc169f7b0

    SHA1

    07e657c6b675be105d8d5c25eeb69e739a58655b

    SHA256

    15802a585924bada6b626bd544dacf12a0753fa8abe07e2599a40245cb4d0e59

    SHA512

    9191df47616fdff0d47bcb1410d0535f2a12caa2c8bbbd3f6118ea83393e9a2d21b74a55857ff7e1bacdd0513480d148f5102ba1b0585b5cba3f7ed37ef6d74c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c0c6dcf2f08f5c9a7b232e5b38486dbc

    SHA1

    c448679efd60942eea788f9bc7df3f33c2c3dcb9

    SHA256

    aac48fd5659f2f13375ed882ab89502b757b96bf392da42ab0e621dbf48a1f38

    SHA512

    2c7729b4e1f8ed2f0d39555a38cbf079c8db0d19c7755b3e61df47a9b4244d36c2955b0240d4a7649a8ab9ada0343722be2c7ee30544112790d8f106c1025a58

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8f45d984ce0ba978377dfae9f96b34bc

    SHA1

    095e2b1fcf7eb6f7877a72e4aef673e881ba69e4

    SHA256

    2047e8df27b86dcb6e38d42cced13cb78351694fbfc913fba606b8a4cb10f5b6

    SHA512

    107930fea1ec1550b3791e2e4c1cd461329234c6b1f6317120d3c348ddc44b6db98dfc0e6f0d8311910c7c63f4d9677e2f578d3cb3dd0145036360eb16bc3619

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    346695ce65607c26ed68e6ca5ece4a3e

    SHA1

    bbfcdad153589121336b1b01c104148e4eb79665

    SHA256

    efb094c84ee742a34766e20c1896f3c385ebcfe8632cdb20922cb3b82967bd7d

    SHA512

    c38ecbd759feb6638600b129020f43c5a653ec6ede8ff8064d2855b1d4976c2237a350a3856400ab4c8c6ab835dd6b98c4edb148c7c53e128766e408259d7156

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    72b335d9bd8ef7d21161645664cb977e

    SHA1

    5bdfef5515ec09cdd3a0f915a0fe4d2f6db4f2d2

    SHA256

    c85c8a1f4dd5fd451d158288dbd0c47d4eac42da0caa9f14976750538062eb6c

    SHA512

    653be8e6f44e73c26e33a9bfa53270ff82a02b98421c5e7b85ff8153b0076785a7d22b3a01b6d23a96d46592d1ff9b73b31f825b4040379fb586ec69b4cbc094

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b7aedfd96df65713f4ade465d9ecdf25

    SHA1

    42ca65522634abea827f4e50f269a4e14cff6ceb

    SHA256

    f2dd4e410b47803a470abfcf1cc092f711682602aa8b4bf5678cd8901610b330

    SHA512

    c286f52889301b3513631752696dc1bad235f50442292321f3e6f47a21ec3e21acf741f79d47a2a5a4ddfff90233208c057bce6cd63e07d479964534a3fbbf27

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    89d6c2912c6cc4daa483b99f531e0639

    SHA1

    f2fda340afafb1f62034aa08e55c6879c562ef58

    SHA256

    c6e2c2631f33faaa9c665f58359bcdf022fca29cfc4b205382c9321013ffb126

    SHA512

    886badfe5f77d2f29a60440287035bb6ffdfa567984536f7faa140f9c6d8fee8caef515189d168188d719d9b6d948cb40f319767e9135de8b6cf6bf93d3ea61f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d5da6f77b849d7f158adfeaa2cc13507

    SHA1

    59b10dc81c249234e24182c760b8ea7dd7c5d87b

    SHA256

    5faaaae2f236500d5b9ce3ff4770ebd0056fe8a051ef34a4273eed7662f8f4c7

    SHA512

    495623252e86764de6785e37aa66527116177465465c5d031e0fbc12a2971e097fc4bf9d9c0260d37154e7ddb7a8204afb9220836ffb6b2cb8bafa17b74efba4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0253f720c5f36d5d41fa2cc0aecc1c9d

    SHA1

    275f0c14447e67e6878a77bf59039921c73370a4

    SHA256

    2d5a1c3d93097c3922948fdd68f4c91de9a6cf549141345e61c37db9dc4f8ca5

    SHA512

    d25f83bcc8bdfeaf3421759067ebd7ad5422596b01171bbb268b5d060edd3f6281a93db7ee658dfa3cec284465ee0126940937f54ede458e428c78582ff1841e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    86ffbeffc571239f57d498dd8ebcc964

    SHA1

    9a66beacf975621505f838da4d413e8f16ca655a

    SHA256

    ed7a64b35935ca9bda9ac2d0ffdf31b905d4fd589ff05b0bb113f3facbfe8b56

    SHA512

    f3a8e918f98159238e65bc294cbd091dc9861791621dbd4d8b4345dccebbbb37e3ece126fff502885ccde1b3c3cdfc812d39a0e15dab499bf1a419e192cc37b8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c1fd339fa666aa16e8afe43d0fc7666c

    SHA1

    0fa16f4014fecc5628e56252bf400fc2724d21be

    SHA256

    ef645112913232c258f24f6a65bf67f1c24cc6ecec769ecb5a369fed556acd5e

    SHA512

    335f3cf1ac3903e19933065ad53b673c43775226c2bcce1dd9d21635d7d312e32935e5caff1401c308161ce25bed35f9877df2a6ffbf96fe0f23f4ed22743186

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3a8d27c0f9b8bdf053e333827561e9f1

    SHA1

    57636aabc3dbf591a5a6c36d8550cdb65241a228

    SHA256

    2b70a9b8efafb756c2879785d4b25d558f0aabd63019c69c9d1881fb0fc2f789

    SHA512

    3256b2d86845d5214d588c28e03cc2ada75c3d9b90ba4c9ec4c4d5cf72d3b7232c44f028d64bdbc0f02e676683c3271b4532c4f1f4ac3775d872f3c7bf34b855

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a0a7feadbbe77e7334c5b8c01dd02cef

    SHA1

    3efe6214916c625866f232496819c2445926d4f1

    SHA256

    99423dcd56dff7b3d8380d9c928121d7b5b0a1af59611347b175d0707f86c4f5

    SHA512

    6c5ad95d972bb0a93dd6a72faf358c24ec1c185171b0d0e0eab6f190d0d724a0f1dcaaa618a711284904f7fba667a4365c610b201a405adaffd5a158d2a4a0c0

  • C:\Users\Admin\AppData\Local\Temp\Cab5C36.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar5E4F.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a