Analysis

  • max time kernel
    118s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240215-en
  • resource tags

    arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
  • submitted
    05-05-2024 11:06

General

  • Target

    randomprize.html

  • Size

    162B

  • MD5

    b6a1a37fc4ff7a4133530bd086b1e7ca

  • SHA1

    67b4ee209cb3c69b38693c5884a8f5267c7407b5

  • SHA256

    9c8c654fe26ffff624d54b10e91c30938ac4019fe8c64eb6d739783b9b5f10d0

  • SHA512

    b572fd77899459294e8c437f5cfcaf092fa1021558ac8271e82cc57b1012c1c198899b8b303518c5910144a81e7f008524f8cf3b95bfefcc0f750a74a2e9b05a

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 38 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\randomprize.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2900
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2900 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1564

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c9e85fd03b6e3cc96c3c8d793b5e4798

    SHA1

    a8fb7cb7791ffcb1329f27557dfbac80087985a0

    SHA256

    c19653522bfc6c3ca507ea34bce5e40565e519bb57d7c4d75ee8e9685f2175c5

    SHA512

    a42907e39be6c092f0fe187c18b5f780f7996eff484b6b73ce18c6359cc7bbb54966c58c273109c2e966a8d001bf3594a8d3d21999daa5b7ff8d26b737c24c5b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0ff808d780d53b8c346a1133f7256881

    SHA1

    1c0d39cc7193ef5d059e0b62b7323c5e7edc2aff

    SHA256

    4de85ed00dd685932c72b84a472d7b0b07d5c7d661416a336be24c9e4a241d0a

    SHA512

    c39e5100aa4de09ce812e88f8d316ba5a084ab5de3ac1e6e0ce39554fed4a9a0d6acc4b3d74124cc269dc269d8f864bb543fe5eeb256bd722188e9db85b0f6ac

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    534c6ea6126dad2dee74e4a28c674722

    SHA1

    38e6ee7e3e3c3e552a530e4c711b75ce8f24ee49

    SHA256

    cf12bbf5ea5e6615caa76e721f2c98db0b7327b3c47cd91ba92defcbe068fa83

    SHA512

    4728a2b03764b629c79c9b2bbf3677003cfbf1330468468c0e76f5b229c67c55a0b175af3d111db09488e57b6fd6b99a6f86207f884be9beeeba27e97b2f874f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7fd7179d60bebf9c4157ee81b9012d80

    SHA1

    5c7969f16489bc64ddfbac3bc11dc6a583e5aea4

    SHA256

    a35e562db7526237cc51368c9458dcdb802351f2f9914e681d5283d54196aebe

    SHA512

    5fa72bd623591fa64d743e624ad87a6832b911fa78026769b14709ba333d2d1020f818121ef461c53832a4a628e0a77b1ef09e6f99a67f14f4ee47fd785e77f9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    782c5cdf2943442b78525df790d26bfb

    SHA1

    6fe999605a00513beaa9f856e23052fce06b30a3

    SHA256

    fab252a5547e11efff644eae289115b150e1cd057f0ab8e09a111c02d8e12384

    SHA512

    624823317240d533a1911e61ef9d311f6db1eecd4af6449a7f8a8ad2f3cb3695ce2e85de8a24eeb26f210c1ac72a3fe8903ace8eeb52d07eb931a8a3feffd204

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3beec5c20f959b373de9fafaaab59527

    SHA1

    665c01df980b8b12e02633ef6932c11c017a17fa

    SHA256

    5765ff9bfd079c9fcee9d4fb3bf2cdf600af67b4c9270d78e1855066a9e8fe29

    SHA512

    f4e3cf9c6d87f708a064fb1c99f7340f0da5eb4af70521643fa3513187c62f298c68f8329218f21d56e2cf5db52a55bda62772a5f5275f83e5d7b60f8442d92e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d852bfedad6cafdb574066b0847f5cd1

    SHA1

    c174c7575e856292424233f0708822625af50c36

    SHA256

    d1fbd0539296fba59ec2dcb4ad25bf867c924c03f541a77865279ec17ee42dc2

    SHA512

    5cf0fb620429a0265b4cb4cf265ba1ce1ea3fe3aacb8d3155f1711cefed8b362f39839555bbd31f2e70288d55bc6af98dd78a853afe3d1b94d06c4e3afbb1548

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    86a17c1c6ba39f890ad06ba522809bc5

    SHA1

    b3915a662497378e0d3e8dc1f9b3e88fa121f25a

    SHA256

    0175a82664cb38c061d3eb7620ed7ac646ce01da410dc69b4182fb1a89d241a3

    SHA512

    930bf53e2c1d800a16b299db1b776a3541e0a3beccf8f93e1d884d1a5c7d4a18ee75fe7df53ee55f1051ab50daaa4407fe5501d5b703898c1fef40972b671ab3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9d6cd5bdb78dbe52a08248cb0cbd434c

    SHA1

    7a8104703e0f4e1776dd6ace0ac4e3a5330221ba

    SHA256

    2817eddfed70783bb35b9820b36e939efa1237e289ad99fbf097894b84031edd

    SHA512

    8da832bef68e3a4bf1a66cef2ef14a084313e23e3afca91a30fa4e0da06ba5ee9f2d231b3618d2eb967403918b486fb6deb31fe802b9678e7125d99b93ee1edf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8b6df09d904dee8f2147781a48017f4e

    SHA1

    3cade5ff6efddd66dcc096ee8dac6634d405dc77

    SHA256

    887a1c8dab74d2830fff0d2864ea266f7f605fd38140f77e9371df5d6bce935c

    SHA512

    d183e27cc5f74f7b44ecaf0450c88f13b272ed5a39e12dbc9cd9b54f6d2a52f5ae2ed1653ef459beddb50d8336a109deb7b0b049f5ae116749c2585609618b7f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    61b5402f89633d1b4cb436aa2d94e462

    SHA1

    0c50ae6ceb50505a272b5e2e74ccb30f10141518

    SHA256

    5f46e21c3cf0d8293739dcc3adc59fd49d34c969a63e7135b53e87ac6440d44e

    SHA512

    715299b4c28e63149bca21291f70397d61b5c32f060f867d893d419baaa39f843a259d68917828e4403ea59d72b14886884bc41e53cda8796cfeaa163e69d8a8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d09be73616e85a062fae05643c95d3a2

    SHA1

    165dde7811b63b5ca626f34f6fe9be16de2fd943

    SHA256

    4e9c43e8cfe9f003cedb724eaaf96aba778c45b733a79caf04ace1a18e9a4cc0

    SHA512

    dd2df9e69a0733f7e92d6bdea5c082aa1d3163dd1cee605a609182f528979d85f0f5bbbd0a211e7b2fb4f7cbb617d948c9b6b9f04b4d11f7f4fe1f60c2dadc4d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    11d0a726cb53a3e0260771d83efca9f1

    SHA1

    ca51fd5dfbf36fb36daaafa1a9e2489c4ea69490

    SHA256

    ce8970a3cb42fe4bab39225d56318e20d4b25681775fff7d843475768e7419fd

    SHA512

    d34bcc90920218c023e034fc29c32bc698ec31fb12b5b3bb038c93b2f240c05efd4ffcfa547057c7e363d42e8dddad225af0f87ab73fc40f3507b04455d29c21

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2c5a026a75054bfa6af99e4caf493145

    SHA1

    d1d8ffa7791165feda9689566ad9b04e2d04a4fb

    SHA256

    f9417c9556bdcb02e772ecb6b87c0999d2252ed9ad148ce8f27ace9cefafd1ca

    SHA512

    c9c21caeff00b288838f53221b9093e99da3441909055a5e0df3bca866aee55395db24d4ddc31bc8b62e30623764f7986540cdb0d4b0cc3dcc9af6b5c8de2708

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    918924eb4f32686099001788950752cb

    SHA1

    bfadfc8117b286b4dfd409325fb757720860e5b4

    SHA256

    40277b934270d34cdbf13af1205042e2fa373274e43c0a5eb8c07ca75a02cb43

    SHA512

    33401af60086827ac1db29c177687a70681e3ff7d86cc0a107d97e08599e4e2ecbbf0ffab2850b841a924173f758129f4b2f3dd3b84450ce4ca5136a2fffdd6c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    dc8810a4f24a2fc50291f81707e3b2f0

    SHA1

    2b5c8775cab289546bd4f54532ada8ffa6c45516

    SHA256

    53bfbcad495470a00350c16221a2f60f1c75d2363dea49976ec844b16dfd9b1d

    SHA512

    8da52affff970da11b9265d4b883bcce8cce6c48c0c125a4add12dbb247196e8597706ad348a63d58a6ef5d077bf5373fabb8988db6da037d6134652a74a5c61

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    115475314fd430ddb351c57d872e7ace

    SHA1

    0e2c5131195d5d5a282c832adb743a43c919a01b

    SHA256

    83c9386c564ab735ad0539a8caa3f89641793ecb02bd76bab5b5190e6346f021

    SHA512

    72700f14ebf10ccb23bffcd7d9d4e4b3bd7811e92c908283cbe81d20f1739e53399ba561219fbf25633c0e10e78ffc9807d41196f2fe836a7d91d22d8f3c82ec

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3772bc3831a19f218cfb0639b10f8e9a

    SHA1

    ab2c56a62f124b40fd8ed8efd81240d7483fc8df

    SHA256

    1da44462ca71a77bab28a47d51939a499b62758d5684336946e8baaf9f0d6481

    SHA512

    49fc2051db1ad6377f637d44340e39594ad3f0dc192b427ccf0061622af3ed88bf7130494ad6db3b78f369eec98ed20520bb5118a17ab9e8784736bfba6c547e

  • C:\Users\Admin\AppData\Local\Temp\Cab2F3D.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Cab300B.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar301F.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a