Analysis

  • max time kernel
    118s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240215-en
  • resource tags

    arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
  • submitted
    04/05/2024, 17:24

General

  • Target

    You-Are-An-Idiot-main/YouAreAnIdiot/bin/Debug/Idiot.html

  • Size

    178B

  • MD5

    934a02d4710c7c4c60822dc2a0503696

  • SHA1

    9ba1a0c272b86b18cd397ca9f696a82f5e1cdeba

  • SHA256

    a58f42a785a7e8113f870470391e5f7898adfc85e9d95aaec7045b17d36fd782

  • SHA512

    e5feb23374c7c50398d28de18377dd3a78c7cccb64f742d79c19b42da42cfa949aef32f1b21549c2e89e6fbe51f1f56a6be203fc8f41dd5cc165eeba8dab12ba

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\You-Are-An-Idiot-main\YouAreAnIdiot\bin\Debug\Idiot.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2356
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2356 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2564

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    912c7e7ac6d7478858b2d3a17bccfd04

    SHA1

    c5d8b2ec803b5fd42548839054daae35695f45c0

    SHA256

    8ae2725c887b764a73091fbaaf5da674e968116d1ec23943fe181f4c84843598

    SHA512

    f7630e3b6d44464410416593b206e063ec2feada41a8d7bc507c770d042b20e1746de712aa718e52ba30e8a65c25eb6d2ba890fe9676c1b0aecf8c69ac9b1df2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a7dadd47b2066cb518dc1065f6dddc92

    SHA1

    6dcc43bf16be7d6a71729cff7f067218098fd3bd

    SHA256

    31d4d391fdf74bbe1c4306c68c3f0af0e9fad61fd91fb00d36d4049cc669b266

    SHA512

    c744f9024b414030ddb7d3a440e5768814d860acbb151278e675a19334bcb4d83e3f81a6058127030fc76217a9f499c42181dd47b0a85c884cd9f3ff1c4df70f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5ce56f11967c2b7122f7127eebd50ee7

    SHA1

    883dcfd6e860bb36eba340f80b6a998fbcd5138a

    SHA256

    f0ef0b723f65cdfa7fda57a6efc2ab308a67ee8661526773de2a4d572e50e4bc

    SHA512

    3e48816a652cdb919071e41c3cfe6dd0d4dae304022af5a413549a817d219a00c9fe16affcb794935b63a01cf18a954c7b5a723639fe42c64d6ce2de42b29970

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ac04f2307bf75422fc3541459fd7d488

    SHA1

    7d6c697f3b514de173545af4c699f87277ea4df4

    SHA256

    f2994bd875b3bdfce781426e97f173c8fb8b20472fff4053a622aa5658b49cad

    SHA512

    a6310750e7d2d9b64d9231988311d7bb785676cebe8a5f320833f730513a59c57db1d9574c21c837eb52d9a6a31619eaf485f6ff35a6fd8cef6790a3b240d563

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e8e74caf080483383f6a39e59336793f

    SHA1

    daeff4b698f6a949697ab50feb18ccb0bf64cd38

    SHA256

    b8939819c8a9591196a78cb9a5867ec7bda47a92ce41df9226c4bc21632c9687

    SHA512

    149396b51d2e4e613fefee2ebaa67b32286ad50a439b781ca77c42a10b26fe39283cd1206fa6158d70e23f868d2f81eca261415b6badcf6d9f334c47b4f2e17f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    adb20d4f4ae334d79a82bab8bd5f6f24

    SHA1

    944f632c90b3bf3c03835f6d357b02da70073233

    SHA256

    fe75904f7799df0130b2bc67751a16728029a81c51bf5a1fe292d84ef3f6120b

    SHA512

    1e21cfa57428eacb7869171688d091f397afe8a8fa76da8d77b6d29291b58846c06c3ebc191bb3e11377d67be34d8bfa048ec0de244aeb7130809cab23628d4f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    328b10e1e1ffbf8b1b4823cdd99f3d5f

    SHA1

    2896db0009cd54f79b908c8827f10b227fb1ccdc

    SHA256

    4794f17a49c3929540632c6cbd99a4dd24a6557d5c63ff7cb4987e6715912787

    SHA512

    467ec1ebae7c2dbd4a51c40214d6c811ce6979a83dde841eb392ebe5b0d4c807e9484c1422a17a7fc4aaa498e7f09f1caedf47075212ad3a1d695fa3f45c2a49

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e4e8ace68da7c3bd4a8488724d9c75d8

    SHA1

    e575998761e9fbdd4ecfb33824a2f555e1c62e10

    SHA256

    ff97bcfe7bb55889f1dfb672c4c6332500e4bc48f543cf90d1ba41413a83dcae

    SHA512

    f5dec81ddc9576ff4ba002d704a2b4747d588a0157872f9c4421cf9d7ffb4c4ef16d4332a2496da334232d93d6a4142b887e367c26abc4f2b040f89c892513ee

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    138157c572a5f18643f0d3b4ff1b534c

    SHA1

    d047beff4e917264af1ef4c8e5878c9deb6176cc

    SHA256

    03fdb0760853e2545a4756767e1e4626adc3ae75203e0107daa8713e9390e232

    SHA512

    e87d1bb366d3ba395b89d020280d4a23454771258d759af66ac23a2eedac3d42d82c36c9ab49d195f389beb1aa604a7c57778afe51884ab75a4c420e3945baf9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    80659fb6401e517e38d8279a1f05bf02

    SHA1

    fb7e9e2ebdf243c39da47c2dbaf0a2cff5a04b6e

    SHA256

    37085db8c4f0dea4bc2d9345988aa52d9117482c79eaa60edd04a3c5c345ecab

    SHA512

    08fc865f74536bb31da6ce92c495917cb30bedb7fc5517d740b63c4ebb7f95da3b9c2f446fe24dd85c5d78e041716d3ec57382cd3951782f7bcbf3c9a268a9a3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    36755ca2553b9e5599fc0df88f8eed7f

    SHA1

    20ac215b63a2ecd3b16e93c93843989dec4f3518

    SHA256

    a4df5629fcdb55dd4005f2e4892370ddec321aa059924e8459e797a895cbd001

    SHA512

    51f49ef41a9a419d9bc7a68802bce425cd012efed246fdb63a17e2ef3137f6e4b0ff0bd19a5066b2c8bafdc96f5c09bd18a74ada91fe7e998e16fe5c481d9c2e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    42852ee752520f3217174a933ca764df

    SHA1

    0811766573ba149ffedbdc3e473f317e6459e151

    SHA256

    5d33d3c130cc702798ba58976f1cf4afa9c0df00a985b2cf4d2dea7de2564414

    SHA512

    9f35ca491a6aa2ed376345b0db46af85c8c88ca24854c1522fff462ed3753bdb18e21889533fbe7cb4b632f8b9faa6dde2bf9c14b11dad4e26d013d40bffc35b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    39cec505457a87c007619cafa73b2ff4

    SHA1

    942dd4e0c215591cc3a098fe04e1779e709f075e

    SHA256

    a0fdcf948cd49bfb2d7559010f16a78e30a534cc049bf912c7115ee3e4c0e66c

    SHA512

    8d6905143cbccfc7b76425f44b2fc1031158df97badf999e616dc09d5e286f488f7a081d8f3c2e6b2d198d89f8443534c1d5b73cefb73d95b7de409eb3f229af

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    266f274551bcff76f2e2234395668a35

    SHA1

    ed80e6a3f28381ecff8760b0102ad30ba327462f

    SHA256

    d589b849959c69338345dd98c9559c8bca4f7a82f906b158b83a169eae327a84

    SHA512

    391d402380406667dd3fdfddf1436a30ac99119eaa78ea2c0327d7119a4c520ec278aceeac79c5bd535301153379fbca6c31101d9f34d48b71d39a1c7a36c38f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    893873c69e15aec2b2b36c206acb0db2

    SHA1

    2b11b939e4602f76b525c16ecca3660908cb8e47

    SHA256

    c4ebbfde8fc48bfde6be8d8f15e76df25b5ee5ec885d37a7fb2dc9d20394faf3

    SHA512

    e15f872637dabc70cca8953dbab7367d7830b58fd55d209c8f900784185b2440b892b9a95edd3f2778425fc71afd9b4d3c483e859f8d60f6871ec35757408654

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    73d9a6f39bf7bf9b82d8b178602d0f0c

    SHA1

    19819a7605a22a5d5881500850e6dc23109b0721

    SHA256

    ce5729faf7769694c68710187e4b4cabc8a7a6e03c3e9037f36e20eefe9ec23f

    SHA512

    2befca660d9d3aea7a3b3d58d10c1109b1d71e91cda8f2ee7882766d7ed7e2b2e850a998baff4d1f858a0d0e88b80143d9b095ad50d3e0516d49b3799c10b6cf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ed7a5b076f2696714ab939bfd6f1dfc4

    SHA1

    ff8dd04c02f2a759f48cc192d0cf6c10898a09d7

    SHA256

    7df130d390dde71016ae7f3dbf56ec235efe28e5c8f3526829d2628c1a964a31

    SHA512

    581f7085bb0412e2ada1cba3f24ad575f7c07ad4e5a8fb9f1e7b806fd28d9507266f590dbf00057e9129f9dda86f5b83de8d64b2a6c6b56d450335ec6a86bde7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    af0c958175ed2f9b274223b5c04ef439

    SHA1

    bd468aa5334be27fbe213ba6df5ceecba5e2c992

    SHA256

    6a657041217bd44ee7c937bb8fa7160bd8761b9e3651cce836b1bada3c679e0d

    SHA512

    a331f0fb6a27cc41bab68d03fdf491dead1df9db01239a3daa59c105312969cec818fa4d4bc78b49b88dffd45723d750cf4197a3fb8522f1bc4caecffaebef75

  • C:\Users\Admin\AppData\Local\Temp\Cab1FF2.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar20E3.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a