Analysis

  • max time kernel
    119s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    18/04/2024, 00:43

General

  • Target

    librealaudio_plugin.dll.svn-base?id=3053a167982e379b031fe9fbe2a1d57c23026a90.html

  • Size

    7KB

  • MD5

    2780f3afb640aeb4a20e5180ddd4f43c

  • SHA1

    68e7e6a3f1401ecc7d941fd6be91ce5da0baf4cc

  • SHA256

    4b4a5c98250adfa8c58427b8f32d61d695eaaa6894a58a5ab4b124956c7bdc4a

  • SHA512

    403f40cb4ca9003593e292131ae0d47ee0ee75e84ec351ddb85498511a88076a39615dd7f0f685d99ae1f265adc6eadb29043a04f4b975176506c09a8b6cd00d

  • SSDEEP

    192:Z/vTPMcMHyx1AvJv/jv/dZv/wvCev0mXHP5BxU9v/bvST/lo3fAvvpv/hv3vivgx:ZDPMcMHyx12jdR9mXHP5BxU1+T/26dPN

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 38 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\librealaudio_plugin.dll.svn-base_id=3053a167982e379b031fe9fbe2a1d57c23026a90.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2212
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2212 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2400

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    296a8c735f2f82b366d695eed9ff367d

    SHA1

    b7f645c6c4b300951164c7a015d8500b68a03d6d

    SHA256

    423c30aeda303f4639c6eeecda76165c59a7de5675369a0ddb39e86eeef00a0d

    SHA512

    c6204cb5f7c2faefbd0a92168b08a6ec5c122fa25465440527dda39327324f3d8ff2e442f13ee363fa28bc2a94c6cb23a3720dfd6d4e4cbb3e871bbc0001c755

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5193946a4bb1b2cda1acd971188b3053

    SHA1

    b5fd3a76fdd5e5bf6f9a123e1a9dadd57f58623b

    SHA256

    8db722a307dede76d1a6839ddf7de4f0a2a6882cb0a1772ed21f6777300799cb

    SHA512

    b19acc490b1c808d758e9175f00fe3f57eb13a360f688798c03691bdffb35e1cb66704d70ddc3bec527d651caca0c1566b5b31674be0cbeed7867d0dfad6a9d0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3c9a039fa44b90bf48334afe25688f10

    SHA1

    0dd7268b06436099f0ffaac40af8335abbbb995d

    SHA256

    1779bcc30e2344e70d7c2627843f4470a69781e157cbd1e43b49369f036c3090

    SHA512

    658c8f66d4bc473b8caca5e71d6ab42e8ae1f9aa999092197aaf1205da338811d3f85369361cc1304c189eff504756458866d2d3d0af22e3051b7f2cdb685acf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b4b26b4b459b3e7f1e4076027232414b

    SHA1

    067ff374ddf2c840a8509d0fd1a876581d2a8dd0

    SHA256

    2cd9865cdad2a3e21ff36aedf7be8b794cbc28e1a76d077f8bd15f60384613e8

    SHA512

    648fbe691892c8c641e3293ed382fc6c3efb5a54bf73713998d1be25a7ba317d10b882ec17887c37352dc507350a1f5b7d928b3a01fc30cf6bd3c556d504be83

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cfac5b367a98f849a483c5c9c0d4b03a

    SHA1

    bf34d55c0485e9d387d61998f8c0c6fee18fb6e7

    SHA256

    dc6905582f92483dc0dcfc67719982d0372225d6fd736a46e7edd5fe7164bb51

    SHA512

    02fbdf42dd608c556b41d452d0fd6eb4fcd955a8e1c89de23bab8769140b7302255b3551031732fc963f23299bf8b4afc424d13927b12f58ebf22d86b9d1d4b2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9fca2855e80ba70953e3e5b406f8de23

    SHA1

    de72bcbb7f0630579e194e2f5d29f94f8cdbdd19

    SHA256

    f7f30563a130d206e92fbc99eff3171895b7481bab09fece93f935916520ca32

    SHA512

    1477eb52813cb02eb768a9cd0b7502a9bf1b99a90a7e70cc16de788f0398efad70b7e661d9d4f958ce9396d95e60c5fb59febbd4a2c42260260dd0ec3df20c7e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3c29c10459edd2b600caee2cf61217f2

    SHA1

    042eb9c9756e86cbcdfbcc1576523eaa0a37f892

    SHA256

    8925b26c6e3f62f82da444f90674f556b1f1c111eaff87af59fd7c1e421d5ef9

    SHA512

    6cb0353c5a53bf8d6cba6e3847093ade149998195f2d7c3b7ae74abaa6980ed6d0ee46de58efc73384568d8fbb79c2fef91919c4fdde36680098faeb3aa9a01d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bb4386f927821e8ffe0a195db0cd99c0

    SHA1

    64cd63b1b13cb82275ad945b4e28a7578e6e208e

    SHA256

    190017bed3e7555ac12c25558f3be329df3ddea53a6031bfa265a3cb656abf9b

    SHA512

    5fdf6f92589ccb8deea10fb74e42ebe6fb3f674fac2fc27c07aee5fffc235046cb51060842415db885ee85c543ee60d71ef5220dca1a9d77589889cf563ad86d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2fad9222133e4dedcb36f7d920220c64

    SHA1

    9704c24125391625016036a98b5961acc0b4ff1d

    SHA256

    9a01f526751b9a446fe10acad22b88a480183a3721dd0647a2a5f0c421fa7877

    SHA512

    a0831b95263f24237208618e3cbe3b40ffad4b535fffc808b3a93cd6e4e0f7e1e034741b2246df54456f68408d5c8bfb7fcf5163807be0af68b4a4f2fbcf3438

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1b1f5c472eb7761a11022a64f44f8e18

    SHA1

    d9d06eab0bd2643c90737f254b629e16473d0210

    SHA256

    6b951f9001c8e4c9acc79fc60e882873697cf1fdbf26d003ff8dee11edd012a7

    SHA512

    0e10b4e28d6e29fb899e82dab4c5de8f97b7a285083f22e2fbd9207641321e4292a791433f1017163a2a7f4226b3d583234930d5435c5152971b55822d866d4e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f0e62a8908e52f82a3c469cc944c9e4e

    SHA1

    d86348235f043ed54e9fea6c82aff0166762d54d

    SHA256

    dd7ef0786647eb37ebc4cf152bb590a1e186e3c885842d26f136696cb0f3a974

    SHA512

    62a33fac290ff6d9e823348cdce2ae50821c362042cbe6dec0d7f98c43ffcb20d8c5400f95a96cca7e362175ca394c17855fa8a5c9b1577055ff3fc4d93a44da

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f18dda613585218a0a65db42ad588003

    SHA1

    190d28d42a34888445f12f379f7a214208da0019

    SHA256

    276403782100880f5acdb1addc89c818cfa34e900348ca709b80eae8c38410d0

    SHA512

    8b01e6293547aeb26e47904d1bd4e01e37b28ac0d9f757d17ff10949105db3421ee3f1809b9902f5ad0900fddc9c06c8783c8a77fc095ed56501c1c7a5dd2df7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0050d6450d1be06d89d336cfaef40a4b

    SHA1

    54cb711049930ef161b4755cf0e805cf8bac0c9a

    SHA256

    2096064fc8565722cd02148249d3c142a9680ba5f50334cb1a6b3f918062732e

    SHA512

    ffed8e1d25e199d2f54c8d56a67ddf51885ba91a31db7318b050b3407b0d1eb97d67c8f3b64bcb383dbb02ee7e531df55caa432e59aa4e306e386dbf111d2cd6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1bcce710620ea101d17cbd4f5c2949fa

    SHA1

    38dea1a0736c052ba6a96e4e8382fa24f047876d

    SHA256

    eceb2ba4da65f37b43a54dfefff14ecfd4b80105e8f0b9bc399254908bd599da

    SHA512

    4fca6e911ad8e2aac9636f41d38465db819b5e9c386c091e63cb89107195d779d318075f87dabab5ef10fb884657753b6defe5b53be1e8a4271ed09023fb1133

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    743834bae6c73f84ca7c9a9cd3a9b4c5

    SHA1

    ac923b8309193845df8430478c5ccf619efffe8f

    SHA256

    028761e517e5c23dcacec7c480f0f5ef5f9591bf25766073ef20dc5763f1cbae

    SHA512

    4e19fe07bac84af84abf835fa7dfe5c89d9271c222d6f6815952cf31df733ff23134b47e1a58fef8497a82f04cbaca0f9c102d8956ef5d858b93b8da749a8c23

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bbc6b1db7eac35c7bf634fb91af5518f

    SHA1

    f5c69ddcc7a2c24a0c1157e5c7a4390b783353cd

    SHA256

    49659fe94c4c949e84e5f3df8501e8111a5443c01140949704076c6c7ab82d6d

    SHA512

    533954f06f475f728ecf5e4fbe2b1603394b21a67c1c6399d01624fce61188a22f18bbaca9ca3a74eb754c6c07ea0f3eaf56d072170f620a158f9542462dec24

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    de530ab97a9859a88c31b4e59d0ea1df

    SHA1

    a01151eb1762edd5a5eae44e612d133b36d6418b

    SHA256

    ad6286bdc46efb21b4d8a7ac8cf393ab941a563a579940f43666d04710bfa03b

    SHA512

    50c7e6e2341166a002d9122e498dabf94cd95229f6f752de41cf000e2a50ee7a4733df1f3fdd78a161840fa06c40e86383a7c5973164729429d4f9b5862285ef

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ad6173de70a3e4edd0ac4d3bb94b56ed

    SHA1

    facb9dc40231fb716a1e05f3114e49d7a1809cad

    SHA256

    0c3a2c632a93c47d841fbda97900aa891b48c6825d69c9d1bbb70e0ef908ef85

    SHA512

    4dc7efdcc1ca014986692ba98bc750dd6f94a2e486eb8cb5a9dcc0c9e3bbbad70e7e42695936ab5c31cd49af7124596cb8902fb2fc3b5a6a51cb108d593ae555

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1b8cb0013f9b4d7177020a26ca3dfd59

    SHA1

    6d2d546b504aba0fc4c56dcc213cab066729b04d

    SHA256

    282a8456f059527ab9414043c7183bc35f1f909f5170b88800fbc834ea8c4179

    SHA512

    8447ae7ab8229714adffe19626f7d24e7210aaf1fd3326e8521c6f40f20811624990b8bf249a30f7b3303d7fe178c098521454a88b88588d18a906af4796340a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3b82f9af60323634d44e6c00a0ad31e7

    SHA1

    a8a980d22da5cd2ae6c49daf2b81b7bdbec5d3d8

    SHA256

    3ce2d692eacdf82c0d7658c7409cede7f5291fff8d0407fb724cb85dcc34e3e4

    SHA512

    ada491d832e06ea7fdbe00dd3d3d106a89bf90d0b86805022f6c7dda0d1f843f0aa7148b14ab4c13f2edb94ecc1b4048acc298d2da62b7510e3e2324400aab96

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    901e5cb8fac883b8f76f470fca49410e

    SHA1

    87eb1f59ab7fac2d4fa311d04dd42f1394405442

    SHA256

    bed5c020ffd108da9c2f519c4cd5ad18d8fed352980a739c81897fe02a508bca

    SHA512

    5d79e75d9b51de9b274eb3e709058a32fcb3819a9ec89cc5afd713ccb5ef22a887654094e5795999252f300956ce6cc45778ea249cc24986cd1936df158d499b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\Internet Explorer\Services\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico

    Filesize

    4KB

    MD5

    da597791be3b6e732f0bc8b20e38ee62

    SHA1

    1125c45d285c360542027d7554a5c442288974de

    SHA256

    5b2c34b3c4e8dd898b664dba6c3786e2ff9869eff55d673aa48361f11325ed07

    SHA512

    d8dc8358727590a1ed74dc70356aedc0499552c2dc0cd4f7a01853dd85ceb3aead5fbdc7c75d7da36db6af2448ce5abdff64cebdca3533ecad953c061a9b338e

  • C:\Users\Admin\AppData\Local\Temp\Tar21F8.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a