Analysis

  • max time kernel
    118s
  • max time network
    133s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    15/04/2024, 09:08

General

  • Target

    InfinitCMS1.0Beta/Manage/Admin_ChangePwd.htm

  • Size

    2KB

  • MD5

    cc566e77f2afcef04fd11d79fc881528

  • SHA1

    7f2678197b99af53cdf142f7adb7905af1b9de68

  • SHA256

    5b3093e0730153ee602aa21aef7fdb7f9b7f0c2060a6f7c9a80a63c636bfeaab

  • SHA512

    fedb73a0af2749fc9b4f95da062121367f29aae88d2b964d2be95126e85738aa08fe02f3a7f9ba1bcc6d5aa0375278087ccd1b88c8d0f79f3b1f5fd60642aa90

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\InfinitCMS1.0Beta\Manage\Admin_ChangePwd.htm
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2280
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2280 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2136

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a00be3053c70608cf48ac30b5e1f7fbe

    SHA1

    ff1f6daf7e7b3f1d562d9ea378613b901925abec

    SHA256

    709e01ca64bc97a6bee4851fdc462605205bdbbcf1c02f2e354ccbbd95e2845a

    SHA512

    3dd1f420f6bfe9d63977a6a16f15d11223f558327bece494418dcc040aac29c73538801244eadbb4628aa9be71389470fc54a10a5e341cd4664e5a5636932cb1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    10fe1b95c91b75229f91d0093d082439

    SHA1

    4493cb9e119ed549e43a518deb08eb9049a5a540

    SHA256

    f927dd73ceddf71757b685ff2c69cc7d74fadebfc6d2fc5f2f3e28366be3ae5a

    SHA512

    f4199722b776b6914d6003c1f401c1922b728fb02a3c0a27971c7fca5be397fbc991113aabdd1fce9318b263a2235e39117bd283a9ca556b7de38d50de28ae61

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4e818a2f70257d842303c766a4399432

    SHA1

    50c6738b150b10fb39ff51d3ea2afed4ca127075

    SHA256

    237d016ab51efa01623cd2982eb61c7aa80bde0900086118118a771fee630e43

    SHA512

    9ac6e03cc3ff6d6bcfabf2aea74b260dfe834f0a6b5967e3a79d7aa70209b580a8bec84fa9b10645728e58646efdf043d6e98d966973ec0cb215228da8a04744

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a2ef6325a33f6b1c3f57224f2c1fc1ee

    SHA1

    f37175f7c73c3a474e30bf99180fe980164bc807

    SHA256

    dafdf80eb4a3e1748621bf4c863ddd204f09e1b686241d8a583c37ac55f93ce6

    SHA512

    07e60e9f0720a97a7605dfe838e02a733c424686ce89e85844ce54f857339f605a785fc920cd8f6084c87c56e67613885a9dacadd518f4116bf67a7904cbb668

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ce698c892afa1bed69239ac48d76b0a0

    SHA1

    34bf76c110f6021faf8e8d45988e8163ea5a684c

    SHA256

    3c3175e623946f1bf01364e4339edce5aa83f76fb0266963d7f3cff990a647d9

    SHA512

    dc5b1aeda2708f96b505b42e4bfcb1f63a40771e62d93a847a3cb78220b60b4c078af6cc0a5d924d1f017c38c3606f961dcd8bf1d763c184d0b0c3be465d1236

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8a28bfd7b29dac0777d8a5291582e6d0

    SHA1

    01b05b054e6082c1a462c3f74d52b0b9c31a8272

    SHA256

    552ec7e00498698e44d4df04b5ae6f2906c9feacec52071ff72fbf8373e7c8e8

    SHA512

    8efabc3d5b4654dbde4e15a579470c9b485c3ea2a1a412d9b57fb38d737893eaa626101a4119c244d97cca003ee8b0c4539833fe9b145ca0ae1c86e9d5a1d59a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d47c1e25164430e30bdc09d7083d0837

    SHA1

    f83a770c7f614a4ab47aa2f71cfc5c0e2eb59e4f

    SHA256

    86c08200c63eaf0b976f694804a8bdeebd6c48f6078b35cb13e4de18ba621574

    SHA512

    bbe186a525e89e35c7df59c783499fdefa2ae9fc42e491526a29626aebf09e7894140f53f9c93c8d7315da2addc58895b2c5eea632438416529a0cdd107cb176

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b8dcfd01ff218a64fc78fbb8fd037cc2

    SHA1

    6421187f7119b300a9e1b32289234b1d8b1801aa

    SHA256

    4b21992772a798f71edaa13d4ea005e90e480c0ed171e1a65a66c15adc3101d7

    SHA512

    3eaeb545371575db91e93e79b2ff0c6a9cd61d6eb7d802da8d3cc6525ecfdd4f4632a11a52eae24aa3d33d546da7a96679931c743f57a6a79cd4ea452d31a2f9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    de52d3aab07d78cfee9d246b347ac499

    SHA1

    e506915266cef4ab6335cdb8dc6f12c9d7dc786f

    SHA256

    1f0652d2d337ce7fe5e076e94da4bcfad1f4d1bc2df60fd5f0651eda1b55f44a

    SHA512

    11b5ed3585e2014ec68c5920c024c551f512f32078f6ef018fb4bfefe22b0cabc49d5eb5349b2e9d5c86fb64a560e25bc7f84a4c5cb6c09eaf63368b64499601

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    01cd315a14f419e5d8399c3ae5e72230

    SHA1

    f9ee5a31a21d5b320602aeec3f03659dd9f0196f

    SHA256

    c63d0cf83b50e5c63d764cee9554a5075266413803d777efc941e2e2c9bf456c

    SHA512

    83b250dcbd1b3c460b92ff030e7c92c0b0d805996867698ac291f5eb3e9edcbe36dcc66e1d9c61e00c257afd5c0c55d4c85d78824a23b14cf6cb4baf6719d244

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    61be5bf57a78b53ef0115bce0f88dc96

    SHA1

    842eb8abb4e8120ec0c6c4d986a444f0fe3cb9a3

    SHA256

    6dfda1a8f1f0474b83dbc2d51fa2dae6c4f6787662557f734886af2e8db45c23

    SHA512

    b2788fb31744c7ff377470e4adde84e9deb2beda7025b069a84e780a0e61c1e6d6a3ef38101f566980692f4dd671637ebdf177111a4839422e3bec40a0aecb3b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6bd7c41f5335bdfcd7f61c9cd9143c22

    SHA1

    d39f2c0baeb5cfd08ff163b84b230484acd40e9f

    SHA256

    25429c99fbce1640d3436b6ad4db1ba8bde6cff25a41f7a8baf47d461fc943e6

    SHA512

    6cba271e6ace6dc17e2129804221692cf6c73cf3a226c5a208fab0a857a40fb543d5e31965927fdc570eacf919f18e246b0a89a63b3d50284e5e0f2ae6604389

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c9d0fd280983de78a6f8ce7f16655e46

    SHA1

    117cc415f8175d05d1714549e045ae5652983cbb

    SHA256

    b95af9aa0f0b878d30c4e4b65ef327f136d8d9a31445b5b13470c2a4d1de243d

    SHA512

    0abc1bed37754de3262ee35fdd99a79b913d1a0417418478adf425a6cbc96078b418563b983cba9ca2cf97d745cd6f09d9226f7251ef704922cc5c3b92f0e741

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5b575e4af0c9366b456a6811e3953e58

    SHA1

    163040cd4321cc3058c1e8bbf2eff72e764c3fe0

    SHA256

    18b6facd04b743c29df5ef99ff98a893c719ccc114f2d6ee62c07f617d2cc1d0

    SHA512

    dbd97498bd1bb188104ba2d733e853e2bcf4616cff3f2db4da8eccdf8d533151065ce48cc66e740057f7c237d845464057dded5aa9b0cb26f4159afe7b3bd503

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bf7f0cf0411920a818bf64e5322d7ebc

    SHA1

    a1f2f4e83ffa0a4a85f8fc6b622cc4f7e6d8cb0f

    SHA256

    7238f31f01395f8de45a7c6698386cab5941aefda1a246edd651a53f87995e3d

    SHA512

    117a6ed02d5432b50f34f7acd4a07c25f526d506b535279048b108426606898dd1ac61c153e31cbd0a343b7cde14d8a624231795399fc055aab0339e90501aae

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    14a6dab11c0e6a81ab426d5fa6a0f661

    SHA1

    398afc166091f051fb02d0ec24048899c7109078

    SHA256

    169bf72ffd1eed652dd203d90c8ab4e499c1e91771bc2855ba9d75b217da4334

    SHA512

    0123eb3bb2f89e9d9dd0e122632704a3b04544be9dfcbfd505139b7ca31c32c254331089c80b5355659eba4b513c52a219351523a8c955dfa9a82bdaa131016f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ba35eb50a1e9fd6018cef7cb8bba280a

    SHA1

    589d564d51b646c145643ec2aee44581e1311103

    SHA256

    68f397a6937dc7b0435ce54cd4417c32e04e86188d1d8b832ad21060a95bc044

    SHA512

    57595fbd88244d7040178f0b9b7193b6692eb461e941dee6afef13ede39d0ae0224a173fb6238382d15ad44e3e952277a792cfc328a1883ff2054611140e73e3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e75b54fe3bc1b238a2cdf04620da0eec

    SHA1

    31f59c0f70b7200565c16e261caa2a86f19342a1

    SHA256

    164860bb15c9448bf9e136df0ccf0a67d2bf3c417248b7b14ff14b0dadf9565b

    SHA512

    8d3b066436fe33b81c28fd74c627f8306a27d2c02f379a78a0e73ad90e9d67211a45eea9a737eda434cb62d96e5f7835c048a9e9d5e7501298da3890c658255b

  • C:\Users\Admin\AppData\Local\Temp\Cab7A13.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Cab7AC0.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar7AE5.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a