Analysis

  • max time kernel
    119s
  • max time network
    132s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    19/04/2024, 10:27

General

  • Target

    libmp4_plugin.dll.svn-base?id=e3b43bd36fd50840467669364014ee53553872c1.html

  • Size

    1.2MB

  • MD5

    585d3841a0a2ed092597b9f9d09d12a3

  • SHA1

    682b2b52ef9b2803f638a5be5458a8f0106e1c58

  • SHA256

    79f1e7ad1e541d8345f59487847a69d48b65364bec00403bc47804bdf1e7770c

  • SHA512

    16495dc3ea05e7ca3275c41274cfe981656142376d8eace71e1c3083ff81027f6a88b93a0982551fda5cc088b4b66dc1e5a634192dd969196dccaca1b8ab653a

  • SSDEEP

    24576:y6UtUUYbLXht0r78bS0Mx0hGsfWF/F8Hhhy18kBOysJ:EtUUYbLXht0r78mVBGJ

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\libmp4_plugin.dll.svn-base_id=e3b43bd36fd50840467669364014ee53553872c1.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2088
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2088 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2124

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    50c01910ae172e0269cf7b3760821ed2

    SHA1

    ad8c95d59f0efb1cf512ce98b9803b182df30354

    SHA256

    0eba3746716387a0a3ab04a5ee7cb3beb7a64fac6827ad6052691586a18385be

    SHA512

    6bf6d7dfdcf594462c353d243bb2bc1091b13b678d394e1f09e84597250772a56932c9f588ead6b6a01d0997e36ae29a2606496d74bbff8541c33c988fabd384

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c7f2ecef351a38903955eb3e26392517

    SHA1

    576bb3c8f35ea1f1428041298bc63c4b3c0cda4c

    SHA256

    027dea94bb4de432cbf0b4ebd93932aae79828efdb72a7669c69d2c8b35646c2

    SHA512

    f9c39784b4d9444d35cc31cb8118f51b51f73a76aad34f38ddba72c4f1e7a64b0ef483e06b47ff5c7969eaf367f2c82ecb3506e9d94e854819008544f962a10a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f6160c0ebd0c4e6d0f546eb811a82e3b

    SHA1

    a9d708e31f09f5947dcf3b6c1df2b97e7a925d77

    SHA256

    78be82a45e675deb68801e7faa07ab353c80255739874f6f689007697c0403a9

    SHA512

    4d1346489dfc549b3795597b610fc426f206394ab6ee896eee64d45c5ef0e9c16e07b1b04a22f26a6a5eed7fa5c96719515869e0e34e5f4d2518120d052c8067

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d6ac7d90d116e69aecf1c4d3070d92de

    SHA1

    acde595ac58379673ae9a183ddedf835ca7d9f89

    SHA256

    e59b3c77ceb722050070e0ad996b1e1bc41265652b1ff43fef6a35a6f4bc535d

    SHA512

    d258a340d5f64a17ff4442d18d063732b09411bb45c36812461dbddb51c8e4ee296b4a0d4ba1bf514cd060931a58b2ef6b113c6f242a3acbc342df03f4351782

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    37d9eddbc13a7a262ad31507196620e4

    SHA1

    9124effa3330f3cf487afc051d5d020ef7dd4a0f

    SHA256

    67ef1c8e919f18ec9db2b25709c02de49a1d7799bb8099f9305f1d95a962d2be

    SHA512

    b919c3f25fbae5db10eade74ee84011b46402ef73d68692a7073840007d94fbea791b511189ae24a12a18517313cc508225deea32cbcacec2b44f38264864edd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ccdde010cef1315224dbc6847e7701fa

    SHA1

    4c5222081618a47623cc57ceaa2abb01fe36143b

    SHA256

    a85cffb0c1a0c257a4212746596977b5a210ec9f2630a3b9857b49312af2f5d6

    SHA512

    f6c8c42d080dfbe04c60fb131db148f1020c034b9a3225725935a7084a379cf5fb2b5cb35b64916d1129f94a166f7f2b793c387e6341d5882a141c1582d063f9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7b69b013a1f19b5f4d854b33b681dd78

    SHA1

    b59ca1cf46d5c6479f06d4e203ea102360b41d0e

    SHA256

    7ce133028320178f9b8b9c175c89f9eac6ae975b29b96d017022dcdca6e63e58

    SHA512

    8159b6c1387a26716054fe5fe31016bbad350f0662907230a707175d7ba1f41d14e2a20242e409e58152bb1cad343deaac460d9989e8a3b40f2ee2003b50747e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    14ef6296bc6886393719892f444ecd8f

    SHA1

    c2c8f48d4bea1adfc75cd15665590b001cf850bc

    SHA256

    22c044ca550032d8f0eeaa7999752603a98651d8d2573486334643b5f8642316

    SHA512

    165d1b843975389fdc001c70639b1a58c49df0a8a091c40a7ac036c6bdba7560b4a403059a21f777045b54ae3656a8a3a7fa971d994311451f5532dcb0cf6afc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2b42af4f5c494316d9aa4103b5d309e8

    SHA1

    b072a7820177ed4f22890042049a652f1f30fd9b

    SHA256

    ab6eee231222d221b23700d4c6d3daf235c40d5df8c8b79713b253efc77fe7cc

    SHA512

    e1d351aacef206f6f252cf41b1d6a9b7b2b235601e6fdad2b5d7785c64432fbae27cebfc9dfecc05dba2a1362ecdc944e82cf202005425b18fd4ea92c774ba2c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4ad24e078ccb9884dc9b294865d93ee5

    SHA1

    2fd6add98a496b3c8f9bf441802ad7e3bb6de40b

    SHA256

    d5454758f865b7a8e1d15f21c05361abbbd9a64fcb6c6ffc8f65c2e9bda68aaf

    SHA512

    8aad2590a10a4e17866b9010571590e1ffe99e284866b4d4fd2a720c8574f7240eb3a35e1218cdfa8a5b9a0ad325ad80d4369b7ad2a3d90867d57659065f6de5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    00743859bd1f0fc200e6f9c6ccadd5ae

    SHA1

    ba1a2abbcf134b713e06df9a73a44639ed3de679

    SHA256

    47ede6974fda5fa5905c74a19b5b1e7418d16c0253613149cfd013d6bf2508ce

    SHA512

    37dce285512d32e912dd86e867c754491949517b6f33f0aaada16b6ac77a096adf1f7717db3b56d1d571fda8e1060de14028dea170c7959fe1bc9a60b07f26ff

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b47493615cea698834d0dd5efd9d3dd6

    SHA1

    9b14cef9f02889fb9945bdd9eaa4dfd0e0fb16aa

    SHA256

    d1e403e25b79cf0aa57160ec53a9e581eb458b6aab57cba1a050f6d777f508ce

    SHA512

    64c81ab82d47d96573ecf0f2d8b04bb3263eb1b1118ef393d3698c9d23ecfc06867603c6f52cc922a1c43b0ef67f86f703d1c71fa7f466294371c626b38e620c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    794a784f4d2f540288dd97d0bdbb1714

    SHA1

    b031104eb9a03fcd9b84bc37d5de92740f9f601d

    SHA256

    ead0fd1aa2b523ae9b7ff4b5f7daf674b8480343617650e96d7b57e60c195b42

    SHA512

    6dd7ab85716a937001396fcbce4b9144f7f6154b5e70ae4a54521c1b2bc1491449d7af7fc60906a12a1a80ce593b98a295ac7658eec127c65b3af0fd6f6f1eab

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ef150cfb825219960f0c495635560e06

    SHA1

    063b1c23ca3dae12a15590f84ee568287b0f30e5

    SHA256

    01a0ca6752c8affe0905a76cdcbd03604ed0ce003f99271316f97f94ccfbd818

    SHA512

    ba412947fbb7362e5b522cc880d88b105c85f924940e6a3695814ce72febab07a3257dbaf83f08de92fb0cab2f81a0788c5eba1c658a8086552927e8e4bb0c4d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a58ef6eae2614e718b2513538b4b83b0

    SHA1

    9d92dd41a96b1109024720ea80a29da20359dbb5

    SHA256

    44622d292d8d00561f7aafb04134717dffb785e25aa34cd7fea5ad6707f0c006

    SHA512

    517191e1be0ec360fa54477d222078079de3be4fc30d00ee0e52a6f278f65f5202490573558897585763e40beefee881e7c9cf554a225590b046fff2ba78a576

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3c8506c453b7b74f7c3e8a22dd051206

    SHA1

    36f2a20b02f432d3a3bbaa8813cf5a4b0c93c43d

    SHA256

    98ce6f8fa0c2874dfb7faa8af67c15d18535f7ef07854d404c8768b45f110532

    SHA512

    1123707a500dd11c037bb6731f97c64f8dc1d7e7c29d7a434163b0a2d53fc134d58c08fa0cf12478bd61f2a05c5d147a9fdceceadc183b69aefa66b56e76ec32

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8808671d5247a47a5db5852d8c1d7fdf

    SHA1

    1a4d24aef8bcd0f4d59deef12dde63ffe7127650

    SHA256

    aee31923c45ce1af46f6f8c78bfbba143b6988314241a3d3199444063a512bde

    SHA512

    65905c71fb9b34168ee562b835084fe67a93430ea6b71de52b961c7ba9ab994d8522e889cee80c80361105a8d1c323cb78aa39192a9d3043beb61fb7ac4b2399

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    de4d6d6c5f654fe5bb2f8e734de6985c

    SHA1

    81b128da11b747b707660ac82651bb1d4f6a6a56

    SHA256

    961461e96d6a430161e2de70d0361b06f80165d909045dd9cdcf75804cfe5128

    SHA512

    95efaa7edd4090dd31c2da83cc617818d1462bed39e9f5ae1199a3875f4a120ebc1e1a2e34c11e3933e2c79497e77653357b99e35173647a837635f3b04879d6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4f3747c0f834f22a4f92e5917f382f71

    SHA1

    9eb7489f3d2410bb0f1ec0d85992c1ccc351528b

    SHA256

    6ea32e07cad9ec421b49edfe09293e7e4b85e1c027c177f9337cf7f21474bb9a

    SHA512

    00c1e65e1a381449c87d25b4bab14c4d0513a5a10afa7895971387fef1e4b3407b4cf385a4595f55a5d4c71659c3a609ed77649aedfe5d078d09eb667d5f71e1

  • C:\Users\Admin\AppData\Local\Temp\Cab72C3.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar7431.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a