Analysis

  • max time kernel
    117s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    19/04/2024, 10:54

General

  • Target

    libstream_out_mosaic_bridge_plugin.dll.svn-base?id=3053a167982e379b031fe9fbe2a1d57c23026a90.html

  • Size

    7KB

  • MD5

    dce3705cf11bb5fa6d122ef6c5a4cf96

  • SHA1

    245c20b8e29115590c77a32467058f2582f6ab77

  • SHA256

    437c91ae0f9fa48e61df2c3c94a023e7615daf5560986ad20554838c51a464ce

  • SHA512

    59b1fa672a6024da5693dc3ddc218be5d46f4fc8cbf644b03bbf48b5567b2bf9f6df61aba29b4748ad19184bc0584758a0ca5c2884153fe2a76e755e40da4e56

  • SSDEEP

    192:Z9vTPMcMHyx1Mvbv/Rv/dLv/cvCOv0mXHP5BxSpv/rvST/lo3fMvv7v/jvLBvyvW:ZVPMcMHyx12Zd7JmXHP5BxSBOT/2yiqN

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\libstream_out_mosaic_bridge_plugin.dll.svn-base_id=3053a167982e379b031fe9fbe2a1d57c23026a90.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2156
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2156 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:3012

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1b433993480677a772a2582cbca0be6a

    SHA1

    794dad793fb2af2d11032d861f5f42898dc1f5a9

    SHA256

    dcf6713702bd1375d78328108ae5495bbb787200d856312d870286059117ad22

    SHA512

    ba2ea588e6956018c5adb6b01704a07f9e2cfea31d16dbeb96fdda19ea0071ce43ec9729c3bc8a0c836f082232e1c36229d1fccf2f3afd0648839b925489bcad

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    80a5ab50ef687becf796ad7b84938505

    SHA1

    09a8c8398d3cba27bc72e13d20389359ef3ae6a8

    SHA256

    095686ff01f861099a7063a7bb2a8a2bca97efb5392efa74d7f2fa735eda1377

    SHA512

    f3446793846f8157e7030ad6d0ea496852514046fbd3a54b065d00c1127080f1387d17f2e5fd8a62dc8a69a2bd540d8c5b41b2c4cc66e14a6f8e11a390233c44

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    42ac70f249bfd19c693acc64b650c990

    SHA1

    469d39d16409e48894382d89dde7e28855589d99

    SHA256

    dfc45e3950fd5caa1defd7ecbc02a9c8e90a0efdd03c21de92f3a7697677266c

    SHA512

    745fd927c8d86792c94807c4f97d37592cd73968fac8e4820b5643f0179e2e73d15a64ccdd46925b7e719ae6cd0e5839d1a922fed762577fe327eee5682df073

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b4b396a96497a594d3a1ea565904e996

    SHA1

    684e81bb7da222933ab59730ec920926f380f997

    SHA256

    d6bbd5b30d394f1c37cb68fccad97adaeae3e2449feadd0b06f195c59352f295

    SHA512

    8f4781355d373b786f678f2776944e3d730611debba83de6c3f312581f532d533ab147bf58b3fc6dda8e65c45a36247147641d1d697c4ccd885b7de91cea1e1c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    86fc53ee9ee3715e8bede4dbca946da4

    SHA1

    1eaf23bccd42ea0ec778cb244a7c4bf46ba7f0ed

    SHA256

    d31db6cae325db27cfa2d310386df76a0f97f13a4cae82ab22f00b04bc613701

    SHA512

    62fe4837c4e1d88c32bc0a1c79113ca283d863d5e80834801bd26b5582998955f8c9d4b7b8066851530df2314908ce4f1918211ac0747996b9b8549b32ad3cbf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e12fd9c773b90870e22762936f287303

    SHA1

    861641e42b83298af187cc0b2fba2856ed35144e

    SHA256

    0bf46c7d0c5c23c918245e89063e2fba7eebdf85334e60fca8bbfc81f6045c7f

    SHA512

    fcacb6a3eb7026fc3c3e96a501a834211202d534ab3a6985662faf49fe94772ad3cb4d8b2335cd8559096417f12e247d8da6a090e4b051e20ef1f63070aefc98

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6cb90883abe2f57ef859fad14eaa3e55

    SHA1

    fcdaf91aea6e87f843c5a90ab7a7ec477e2073f9

    SHA256

    32f9bd769ae23f4d1051996fc0966f2a7bb76920bac7476f16851a590eec4762

    SHA512

    1fb0385d7e0e4474128dc820862c14d003d3a726dfa16f89e9caad75412d22676b01112d549fe7cecaaa129b3e3348a08e0cf492145ab2e4b3e033b06649371e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4153361fce0088375ddbb7412f5c2f24

    SHA1

    5d931fb63067fa4bf2f9884e90865e98f7f66fff

    SHA256

    52d055fd1ceefbe56fcf462f9cefa32105a20be59462cc71309fec65a859e18f

    SHA512

    bfc3ea0a4671c61dcb3ce35e9d494240bbd5c1fffda7af56e0f65e6584a12ea4a3c861b91ec8fdd0931b2307ede0e2b1e1765cd3a33336ebbb3a579b088b97aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b0329e66783706c371ed90acf766b5af

    SHA1

    e3c13945599ff6b2bb97b4ccb7f2601e515b3ead

    SHA256

    6dc94415c8abf3721fdfc4390483a0127c785f823ec0da13ddbe5e5216b90eed

    SHA512

    7225865c7a99bcd0e145274c7101029e25f828e50deefea99c6f6fce69c9a9e4f827031067036ea55542d6e15a9aeb60bc38fb7d549ef5c5dfaa8e51f8d10dbd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a22f16afd5e12fec7369414ea3f69282

    SHA1

    4a3c8aa7849bdd070a2431cc97690d6a1b6838ef

    SHA256

    a677c65b4aa14f2cbbda44a95a04534dd52dfd5d77aed933d549022d4c8d8fc4

    SHA512

    f90e9c6223defab4201fe40f9962e4fcc5688740381a1a39af4a53e817166538a1c270a8a53dc87b3903825a68c6ef2186bdc5011ed040612e7a2d8f0d2362bc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8055354f0c7fd45161b7d035cd61e351

    SHA1

    ca32149b2fd7c3a3622bcc87344e18a8522c89ca

    SHA256

    4939c508b20769a07cee245eabe7055ca244a2b93af825093a2a322945cdee87

    SHA512

    b20b187667958ac575c654eba68c4b905f7148868ebca07a0fc5fabf8c417c13b7be1beecd620cb58c4929ddcbaf291262e98962e6dcb89fabb5a84374e602c3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0e246e37122eec020b2f5843977a7ee5

    SHA1

    92e813f5d61ab28999a726c0683b581f519d362e

    SHA256

    774ce1336e070d0e0cbce826aee849809e746a501ff51762ca54c57cdf78a44a

    SHA512

    dc502953568eb47b50a95ee462d8e0661fcde99b1ac251b5fe1cb1a9a554264001b163e329e4ebb3fb21df57dec01d402d73a8aaa9cafac098c2f7dc8070b2a2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e1360156758645f2b1beb1fb15d8862c

    SHA1

    00fdb79adb8b94ab6719bf8ddb15002ef6d5a99d

    SHA256

    e3c367a0c2c3848092c8051d4aaee0e5f0b53e41cd4d1a63bfd8f20c26d1a4a0

    SHA512

    d937f30056c11dd237b9f4fef0b4e7d83a73e51a8d34334fb80d659d5df4905c2b1332733c1ce5f77fc40a908defd4d63cb666604afc4796c1f9574f99d0c869

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    28031a21e9b938dc21faf6b4368c630a

    SHA1

    c30bedb977ea806ae7c554c50fe399a37704c754

    SHA256

    2065e8cd6b335265cbb3ff71c3794be346cd89fbcf58b9b72df8b05913c4bec0

    SHA512

    f60cf9352ee87de7de6a5f2e9c843f84344d76e2fb6aacdf9c0859001eb7500ef4642b324670077a8d6d9ec2a39f8591a8d572a10c30c8fbd04203f3f0eec480

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2ae2ad7e16bad83a34cf4fcee4b43083

    SHA1

    3a7d8ae93a912bbafa7b50f021fe54507f526189

    SHA256

    1a0a6f7c35a4f57628851af17802731b4ab9dcf883774121a523e0a082f27878

    SHA512

    acffe75105c64cc8664bc98e82f1fdcf4561430c07b66fa2f2b03e82e9b2ed4de17024db5d29b7d772f917fdf145c4e893064a22e058fa5943385a0c2f73182c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f96ab73ec6435580385c0e2a7274e6b6

    SHA1

    22634691306c17e35513cbdfa474bdf0f750f2c6

    SHA256

    9736648e1baced7a2cc00f3fb13b0e4ff2e4969fa8910491a473fc9f790a655d

    SHA512

    ce2f1056cfc727d109e6d6fd1ea78cddbb9956f290c91bef0b333bb2d2242acdf4bc8aa5fd5de9f41e945c99488fc6e91d0b9775ebd3393fdb4baa344eba0208

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b92fc46ded3c91e73110bfb19f8a7a07

    SHA1

    cd22a29a2d895613e4a1490056769b139f6324d7

    SHA256

    38bd72b15dabc28477214a73f03a4315046ccd2c32324802122af788bc161918

    SHA512

    9fec36582956a0bd19a1ac1f031563850d559112023cc8e30a8bab25ad8f266e884d8a40ce56ecb503469d2759a7edda42383ead3f311fb4d4a155fdb3d7bf7d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ab7462d515220ceaf24ca90ef4ed1655

    SHA1

    30ba29f17eced9a6403a2fae3a6d8dcedb23ef99

    SHA256

    be722ce7e044b97f5cead45946945dc68cb4145096a037974536236d81caccb0

    SHA512

    c7d4f39d2b2897f41792e253f53b5ff1a16b636cceb5128f139176d74d7f8da90a7fc7d1262b146df0dda391fc5c415d6e3bbfb7ee0b705bb197273b5b40f48a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    899a9af1b92dbc8460e3012325d851c5

    SHA1

    be80724ed74dd1b868ec7c67aad8f4c038020ce4

    SHA256

    3a8ba10e3d1df01acd14c24d2dd42ffd509a857ef74a65a2772a08fa40bf186e

    SHA512

    15133a1c9b2c8c8925f69781877a2aac70d5013fd46b39ecfe69469bc0b492a1403d0fb7b922ffb69e79d052eee237daa0ba5aff41ceed5e0f24eb77e94b4f29

  • C:\Users\Admin\AppData\Local\Temp\Cab4166.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar4267.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a