Analysis

  • max time kernel
    136s
  • max time network
    142s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    27-03-2024 16:47

General

  • Target

    LICENSES.chromium.html

  • Size

    5.2MB

  • MD5

    27206d29e7a2d80ee16f7f02ee89fb0f

  • SHA1

    3cf857751158907166f87ed03f74b40621e883ef

  • SHA256

    2282bc8fe1798971d5726d2138eda308244fa713f0061534b8d9fbe9453d59ab

  • SHA512

    390c490f7ff6337ee701bd7fc866354ef1b821d490c54648459c382ba63c1e8c92229e1b089a3bd0b701042b7fa9c6d2431079fd263e2d6754523fce200840e2

  • SSDEEP

    12288:/7etnqnVnMnBnunQ9RBvjYJEi400/Q599b769B9UOE6MwMGucMEbHDuX0YnpWQZO:sFEc5FeWSPZza8yUMmfSHCHWJ4pps

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 38 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\LICENSES.chromium.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1392
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1392 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2156

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    7bb08b19898f5098e04819e2eb5286f5

    SHA1

    637a470f47e8ef5fb82df212ebdc77118fb340ea

    SHA256

    b11221f7885771f574ff5e118ee25aec0af7f3f297700f46f24b74cda54cf3bf

    SHA512

    b977c2c61c4b42883277097c6aea185db2ba74e3c6cdef4270bcaa6659bebb8c699556067e8a383af80a79abbb85b17113eb9529a342cc0733b5da02d0f248ea

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    99536f1c8845c605f9c473f7216375af

    SHA1

    328476773717b6b04b410db7f3e99f6da88a54f8

    SHA256

    8d419888600c95ce81d9d712e1090ea019ca4c467441ed6b75b1ccdaf1c42aac

    SHA512

    b7020f36a18bcfd2bf2103d60a3bdc2930e64664c1cbdb407901cfdeccb144ce72278c4fe7627899de1ac3df51e01c6502b7da293f5ca0b391658acf428293c1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fd77336f6ea76862fa0d20573cda9bc8

    SHA1

    f8bbdf7cf28548624a4eb08ec2a28167e80d04a3

    SHA256

    6b43f8da31ea2801f5522a3c7c1909b9c393a81bb0372c2021a28aa2f27b77e3

    SHA512

    dbfc89a3f4c069b5e9fb166455d2d6c1552b2c3eaa821506a653eba60f70a50e79bafbb05c2c9c168fa3eb16091ff9b5b2b51ed9bc50f1a1fe30c2ab15d75c5e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bbf07a5c6e4e955f6ddb34d0ba5f310e

    SHA1

    c3c2c4c35c96ae0e4274dc440ac73db40abf1631

    SHA256

    835a718801406e4ced8ece85aa0b929f0a6c54d11ba30aae3e2aef940c402374

    SHA512

    2610325fcfbecfe9c26bcfb7530e73d45f474fbb70d60b45cc67bf4c95c17bc38030af9c5917fa80bbb692bd4c6c6bfc6f4dcfc35719698978b71ecc34790d47

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    09d4cbe83fb9d284a5ebbe086550ec0c

    SHA1

    692e1611e78645b77646bd5f4ba7e7ca8f4338e7

    SHA256

    a8964fe5550610396fdf6fccd7a437ef61067d60c33643eb19d992432f5027fa

    SHA512

    efd5dc9bd23863463645a657ea9fee2e7abc5b6b60fa9956314b8582ee113e5c6c27e8876ccaccba620bbd8bf06206340503f4695a09548c68e44a6b36c00f14

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    16316af9a0adc609c21ef8c8ca7fadf1

    SHA1

    c9ec289e7cc9ab153c33191bda113c37d2a2925e

    SHA256

    0d47d94b15d2a94c9afd9c10f9ec9c34b7a8ba0172458d45aee0bb5d6e91fa49

    SHA512

    3822430264f7c73b09847a4f58ab143d59bf5b0b6e6579d09c814cd9614c216fd204c22234293d2ec2261861bbdd5833663c852712cc4cd41ac7c24c0238d717

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4341814484ea3e252e74098ab61f199f

    SHA1

    8322ddcbd8a6e717d6e236f1ee93bd1f51dd3c33

    SHA256

    bf492628639ef693962c5c37b96d350417f6871b7981743ce599db966ddbac1e

    SHA512

    bef0a8077c78f31f02a3b0d00773a90d92e0a7595eb309d5230b37969194c560fe65fe2c1fd8f1ed6b25daf700051df6d4da4a794165aa4867d4a85f81b54a37

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    ec331e6fc5f3ed0af0d477067fbac9fe

    SHA1

    649daf7d5091114936733b94d1592b3b1e32d7f5

    SHA256

    5f1e08f66f6b065b171e0782b62649918d7cb760b1895aa8f9e659e6ad7eefa4

    SHA512

    28ce3b434d0f8dda4c12b51be34f366eb39568b17aad327fce7916ed6c8096cf32abb85c80f9396cad9435afe544ef1795294946a100c83a5981c6f93475dec6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\Internet Explorer\Services\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico

    Filesize

    4KB

    MD5

    da597791be3b6e732f0bc8b20e38ee62

    SHA1

    1125c45d285c360542027d7554a5c442288974de

    SHA256

    5b2c34b3c4e8dd898b664dba6c3786e2ff9869eff55d673aa48361f11325ed07

    SHA512

    d8dc8358727590a1ed74dc70356aedc0499552c2dc0cd4f7a01853dd85ceb3aead5fbdc7c75d7da36db6af2448ce5abdff64cebdca3533ecad953c061a9b338e

  • C:\Users\Admin\AppData\Local\Temp\Tar39FA.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a