Analysis

  • max time kernel
    134s
  • max time network
    136s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    19/04/2024, 09:53

General

  • Target

    libaccess_output_shout_plugin.dll.svn-base?id=e3b43bd36fd50840467669364014ee53553872c1.html

  • Size

    2.4MB

  • MD5

    cc1275ba4d88f8689229d6f4a4fbbc9e

  • SHA1

    af37aef7b82aa371802775074bbcae9e9471ac4e

  • SHA256

    8fbfb520b083270922452d3e2fc5b96db9731bcbb36da5ea519d3aefa8044047

  • SHA512

    d36a6aeffff9b80a22cf46933b7d245e9618fa0a0ba2c33dfc1a8c11c2845efe9448baa839981da3ce471b59843e795974ec774482c8b9961dbd86009aab46f3

  • SSDEEP

    49152:qrElqxoJDR8isfuDEhMrmLvbX1ithpc3id:AElqxoJDR8i0gEhMr8vbX1itbc3M

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\libaccess_output_shout_plugin.dll.svn-base_id=e3b43bd36fd50840467669364014ee53553872c1.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1708
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1708 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2564

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f66caad54ce78a622db78dd3196137c9

    SHA1

    9128016203e2fb7caaef06f61f1ba84981542c9d

    SHA256

    35afa842b9720b0adba7c5ca27a497793f90bb8909ccf141e54825b29d617293

    SHA512

    f2ca3251bc2d441730dd93a4da5e750dd71c21097035d62feea9d5f6004002717c21931ec709fb075652f94f1bfcb9abb15b9de3000706dafbc76495810af498

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    40d505ebc5e1e8ec6076ef8a3190e217

    SHA1

    bd45d409ed8a3c5eb86443b7a156904744e38243

    SHA256

    e5d08d0df6676c493d74b608540055c193b16a0ffe545e208edb5c46899467b3

    SHA512

    5e89c74be5a74e7168ebd99ea51b7da4d8d0c5279d361f3f38d08a70a32c13e863b3c30658f884084211ac0786ec96396e975ad6d4b6c480ba99d00e0de30f8c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4ef182ac4ab1eb63f5021ef023e4d7c4

    SHA1

    ad9e5fce3a2865f9c29cb41a85856a5fc9ad3266

    SHA256

    469ad23e0f8b45e87c4c6d50d551c4b4021f0c9c188cddf16382ec377e919fa3

    SHA512

    e4ba65641b5aff3b57447552d2d80559fbbd86c1cc930141caddfd01578ce755ecae6028df6c46b1670a52f32ac940e96ddce528344fad7f1566d7e62676b0a4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fb97c430f258479ce4f77b1bf6656b42

    SHA1

    85ae3175a2120e6ea7fe457cabad1802249b0a6b

    SHA256

    b227554fc96f8cb15a05b1ca97ec2c3e2858fa224db90bd1c1d5769cecb7c208

    SHA512

    e3ab3f4db7e66adb07544f8fb01f1312da4a48d275ec07b52e6e911e0cfc0465337af1f418310f0548bf41c05208d1e80f0082f7df250469d0b83edff0b3d225

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    00b77f2a05a4771676f032f1b453b62f

    SHA1

    9fbd7bac4465f4ea4ea8e6091ea8cefdf0d130bf

    SHA256

    363c9eba31c5307d129c344b0bce91acaf211ca74fa019eda93d28c59ee08630

    SHA512

    652e1b49a0e91ccbe44d131d81a70fb11a845633d3e85ec5905f17238d722812aa21d7c9ea044637875f5b404fd4630ee684b35018812a5ed7b5e3e90649756c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2ac251d81726f83d490f3cf87f005801

    SHA1

    0361747d7a57ea4fcadbc0aedde1332c7ef4f22b

    SHA256

    d30815f7232dce27c9824b1814db5514df46f8c22bc2694e9bcf3c3f02dff7c6

    SHA512

    34896aa548868deb367f5e43648f1e84a0641b59b1135d6b5eda10c8999f47d20c0cdec2539e484fcc957bb1868ae4c86513a7448c325d61ea092d6b35c26595

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    557b09ac1d5086b16d6a729c074a8144

    SHA1

    7949fb1f5273b4717d48d19c5dd4ec084ebf3036

    SHA256

    06eecbd9f4a8a16a87f098163b67405813231d6f4010ad6ac9d20d0bc5b5b8ac

    SHA512

    56fe7678a2057cef8afe172747eab7162b765210251a13bfb6dd79a4ce56e90d920a3e4c0fbb389ca4e86ecda72a8194db2254166014d5d9573aa84ec8810c12

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a9621debf7fc60d9f7217a36a2939835

    SHA1

    a0accb34cec61f4c691f5c31e79187e44942697a

    SHA256

    8821211e420b87a7bf001b1a047e1eb3af565398b88fddc5d38cabe1a7ca4923

    SHA512

    781e5e454ed22ed53c8c8d9100b7e5fb658ac3fe67f420e3c4b70394dc4fea2d14088dc0be5d51d529947115cfec76cd1f4ba8ece7e01fe424aa3b9dc7cddfb0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b0a22a4ead7fa8254c42c3d1f2d74d8a

    SHA1

    dc6b584b0c641215ae5613873818f1f7a2fd028a

    SHA256

    114b10e8ff6a84fcdf52e3f63854089f00b60b52dff8864806295659539cda89

    SHA512

    85adf9b6745f09d040200beed13052fb9b7c72fc7c3ca1141b823aedb3a8ad97887e1f9982ed512a5cbc734ebd026785830a0205f9ee4aa26d581295f3c9b398

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3fa4f69c6c17324869c44584f8bd7f62

    SHA1

    683acc0dd9ac585d867cccb8856cbeda30b787f5

    SHA256

    9a698630d696d70a88698f9eae4ab1228f592b62c0e3e29fd25d49965726a6c0

    SHA512

    2ac3db2526cffd1095d7590411669d792bd0fc6548d224f69f6c859801b6e8216d03bb29936d86326954a05b5969ffd89d3496e38205476d5a3dab50d1216a96

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    888034627e02f42eccec1a38fef75400

    SHA1

    29bb39a43af681a405ca1ab2b639c68151ce0208

    SHA256

    fe1aab05809fdedbccd0ae0d2f58263419373b3af4830d0f5ad4556a601fc2f1

    SHA512

    49bde152ea9c55c036e8920c4a31d961ab57813888b70715e6dc2fd0027df2632990f2b18eb2815993783a20a398c6bcaaf778c774cb303278734ce06cf01bb6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b0dda21787d43c644e00a8a069e2f708

    SHA1

    244ef8caea20a3f28b6b43c2d40211f27dbbf597

    SHA256

    ae0a842363837e937b539b734eb3c42156b5ca61963087f0dec06524dbd370a2

    SHA512

    3ef2f460807eaf16b8b2b6ac6939e13879288df56692b5cb0d0377adc60f826844670d0236c8081b09b6ef163f8b27bee7d0ea341218d4872970977360ffc91d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0273422395897dcdfc2be137b410dfd5

    SHA1

    706eff6b2877674c68672d991e58fad2a2714bda

    SHA256

    87a9337ee4109422ff79773ffe3009f91133ad85bd21dcc48ebf563df20e9512

    SHA512

    9136333c99bb13f2f15078cf02a69dcd5e9c18211b59d93260ffda0cd18e2f9b4a4cb7a80296267ae33e2f44dec2ef7c8814fbac999f2494c2c1bb94d74b21d0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4db1329d75923d4b18cc87cdca0dc62e

    SHA1

    01c0db406d4d4d53ecd8ed38056cdfebdecdf019

    SHA256

    5f8a8fa5a3c8639a5efb0d3146aa1312acf42d7db6234dd6ff676cce960f0f21

    SHA512

    faeb39afa6136043e25e98d1f6a990ef404becd82ef2482a07310d18cf6f8b09c90a6875e053e938999efcec21b7674a264c112e12cf6e97cb8dba97ea3cbbb3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    499e38346d10d25129fd53900c4f648c

    SHA1

    d8d8d43eca909a70a0d185e7b96e4f2749f60f2e

    SHA256

    7818ae597732e3445c9ad7aa38a16859e1dadadf6cb451b4a68da27071bc7506

    SHA512

    9ba00757fa57a7321e4079f9333bd7a01b9419e690ec1238b7c4796898c474606e6f436be4f16c46bc9d8a01254666999c3a2d721023120f80c32e5ed51859a2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6b83f7a27ac8a00f6f3d34af8b355cb6

    SHA1

    eb2c55c656fff6362b014c6eff26814b72362775

    SHA256

    9417e1f31d2e419d0744ab4ee91a2c1fa694f4f31892e4076dabf036ac9d8e42

    SHA512

    437d96b80efe8488a6f5b4358171f0a84bdc2783e72a3fb8a6d5432ec0feb0983fa64a3e85ba2f490710d625ded5fa3a51be35df3aab1b95ae556259375dc3d1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3b713c23eec1130843da1516bb175def

    SHA1

    4f8788fef3757e49d115cde11ee1bea97d32f356

    SHA256

    b50f98033bc2923f19faa883e1bdae1f1d4ce95ee433224549506c5e14519086

    SHA512

    8308fabec377fa7cd061b23f6ffac1a23a799a2c3624d12da98f06da94bbc8473a01430e6bbbbfd752002787c54feccb87e1460fa7e6d8067ce0cfa782913b6c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d692cacf64b049ca674aee162fbb9a28

    SHA1

    70262d345ba533df618d9b541b89e3b9f6b61d31

    SHA256

    8d7233299d8f153bdbb20cb1b02948836f892b0fe5c1184f06448e5cb3db809c

    SHA512

    d242d68da5e7dedd91f3864e4b97e06eafd2b7f052453cf4b1c026a462fa9e29af5ffb0636c478d8ab7e00b1673c5b893f621d035faf8ca8445c3faf2a4affa2

  • C:\Users\Admin\AppData\Local\Temp\CabB2FB.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\TarB41D.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a