Analysis

  • max time kernel
    121s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    09-05-2024 07:02

General

  • Target

    chrome563036112.html

  • Size

    2KB

  • MD5

    c0e63dfcdb0d83e094482a3674d4fb8d

  • SHA1

    be928178dd9dc26dc648060eae7f34754430b2ab

  • SHA256

    fc9eace9f611eebcaa9724441d21b57c09edc6a0bc72e8c467283e62dae482f8

  • SHA512

    46a82ab801f0802c368a6de833a7eb9ac8bd2cd750d8741025e3599ae8d9d60cd70a3b5acbdc1cae7c90e394191c7b95d69c7026b96129b666869a1c4f9fcf2f

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 34 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\chrome563036112.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1668
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1668 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1976

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    436bd3a212a532bdee678907247d7e9a

    SHA1

    f81d5fd7e0efffe9317276b693e92fbefda7a9ae

    SHA256

    200bfdb02246bba8a208bf7ed2721491ab2f8597aa5f6d1ad6084e70e8992d94

    SHA512

    9fb7af45ca54971b9a217c4113db6ee4b69637b7a24f4c18251eea6953c2c6a245b3ce40b03b855a31467ed48ba403ec794111c4722bb6c9bd5a5473c5c026d5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1b050b60c22e448f33221e19e941a20f

    SHA1

    136f8c1da311155ed3abb2156e22c3488d32949c

    SHA256

    789c05aacd4885dbbdadd2f891b5ab076e919d7a6e0986eb667cb605c0bc3044

    SHA512

    a3cee49c6e4594f9617adee4828963361358bc469f1efdecc9cf48e7137bb368a925a4ae47dd1ec12688da9c7fff90b49a6af6fb53e6e3c46a21bb2f2c4f24a1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6924ed4b13b914ed3ca3b1dd5f2529e5

    SHA1

    432ef3128a16e31c2aa7e37ae0fad7ea1b7acdf4

    SHA256

    9caf4661cfe489d77829db93fdb6518fe40e0eb3371b0d77bd4f3aacf7326030

    SHA512

    a4bd65b3db706ee0d1906bed08460f48993595cec702315d68fa855c9d4c29cd0dbcbdf4a87cf4d302ac2e8b51e5a447e7479a1ed8b5381ed05efec0b10f1592

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e9e3c7e4800ec6e1eed165da3015519f

    SHA1

    84524c2cd481a3fb82c730355f1c69e9ec652547

    SHA256

    4743ca35d1c2b96a26ee513d25dad740c6e5665312484c9ec99069044c618654

    SHA512

    b283aa90ed235a6ba36c894fcd4c7debb57d001e07b75200efe543a72cb69f1b7c384e278e8d5db6e0d70bfaafb57868774d607aa364c0c81a1572bd8c2bb7e3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    705b4cc805dc249066b461e168b8c503

    SHA1

    53979ff97ce1486378247ba1c4ff8bfa26989075

    SHA256

    4ecb8a7b3c78ca061745d96af2da8fe0c0d9036f75121f17ce16ab589c5d2aad

    SHA512

    b49c69d04460f32e9f699ab4bbba4d3d74138f91fb5b143bbc4239c9b56c60565632349c21a5fae638bf24d78f78062a2bd45aa99e5a3220a8c23ee39a396d49

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a6fef93d66fa938669634a5f7d51816c

    SHA1

    e058bbad7f8f696982b43b7dd1c99cf2fbf5bdb9

    SHA256

    00890726922f0c11adb748931c363e97f2ccc0bfd2aaeb64214329e7af857e09

    SHA512

    708ca8811a780a2824caa2934837095399eb9b7601af0023bbe24630dd65925d522f3afb2388477597eba37ff3399b330d41c0fa10ef92c1591a9dacd7fa7651

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    117735d0b69cd7230ce832bd9d8772da

    SHA1

    bded52f319c280c416b87120037cdf489e4fb63a

    SHA256

    1319d0b99f71fe112a17d9666cbde4df1c61b6b004bd47018e326ab799a40f22

    SHA512

    4c5b69c931013b3d100dcda7fde0db658b702ba576e6f7fb545f853b556b5da091ff6d39ec632ba19d1e9c2e8a88735a09ba7aed73030191c114cf3c33efcb3a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c75f69ef1387242da560d058c3cbbf17

    SHA1

    3c2f3d2e20ecfa59ec485c921f7a4840d333b3d0

    SHA256

    007f95f619d806ad32b7ddbd8ab5292a54cd30f1ff3deee8623e90d480c8f4cd

    SHA512

    67a5b5a6f6ef54d51e9e2715a0091b1ad2ec5d8adfd416536fe1dda12c286f9377400f66e1b42350f536f931ad96b9873b7091bd78e96649c7d0cfba714157b2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    63d9cf51d27e980ba4491ff760eb52fa

    SHA1

    a67694dbeea502706cf9a2f559fb95583acac9d6

    SHA256

    c5bd625784a9cceb6fd739318196892fd153c54f6414ca462138e9e2c494ff07

    SHA512

    315357e55e1b8f8e1340f4d29937fc833f2593938e9acdaa7a9d6500a774bdba79827d65479e8a72a1a69f152f26c3573c1d14c445a547cd4b3d0dc8b0b365a9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bccf9ffbf8dd38c7882dd909975b8bff

    SHA1

    d4d6307f5e1e83dd74c676a17074f2be984261f9

    SHA256

    ce365764e4b66edafe034780a32339db64589f29dc0c7df6228d488a1582182a

    SHA512

    10d5ecc4ae4353258657e32ac54f32436cb2679639352224f8a5f54effb424e643eb1d593e18fc2262c2ab4937baea7c8dc70f12fffcafe4ed262eda6af0667c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    af09c46dabca3a8cdb5318aa92322ee2

    SHA1

    80a5bd65fcbe2208737e1bca3155761c8ba592ee

    SHA256

    4a2d3d8ab9d0ed015beb2d9f288d542fdae0810bb234aee3a3b92c5a1653eff8

    SHA512

    57509e727a4ccea478d46d5faaa98d8bb180d634a30e57b2fcd44424912363765618232f8ee3447f9e27451ee3cd68dd3dad1343756b1af8c92c558a3a67ecba

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e1fabab5da6a4f5ce6b00d81f23455c7

    SHA1

    da083020de750f823778f8dba9e01720cbce9772

    SHA256

    32b70c8c7f7bd4b61c6ee980cf0dc7f11fe1249b93ce71ccdc0989ae810ade3d

    SHA512

    24e304c73494f4c4f128ffcfda91cdb6710f7866cb4c4f21ca67985384f17fda5a28f2254ee72344e59debfc1fed25721d31a89d16155509d746b22f6b99c02b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    54ab92ced7ad1cdbf15b789579726177

    SHA1

    d79ec0184a24b50eef9b18d630347c88f7c03b14

    SHA256

    e2c8af57ab9ace213565f1a7a6ecc227ab2abd1834aabf59b986c2624d34f1e0

    SHA512

    aaf9151a455507f901ce9d06c9c776db7b283aa01fd5e4a2f464c08bd1f386848b8e26df24c172a5390c33d44e8822e3afab7cd8b15e5b2a75f041aa6dd278fe

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7656258dbd6f66132605a62dab6731b4

    SHA1

    62837e3bc0053ddd7ed11e52e2ca9bc4f836c6c6

    SHA256

    d0de3261bc153537d92c81cb53793e831b185e27fb2d2685d92385c90e6e466b

    SHA512

    bbc491718f108af70d5afc702df07185734152210c8784c223542143f97d3f4efd3983327d7ddb5c9ebe5f9ee817d23d1c72735600f1b5bc8dfc0a9574b78c47

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f4adb21fc9aa5d62a61bb8b68214f88f

    SHA1

    4a9023fa0646e6a8069edd3802c4aedf8948c8a9

    SHA256

    7e25689751e4ac8964167ac9b95f6ef6bb8c08f7421fde44209e47994e1faeb2

    SHA512

    d86b1b6fba53ad3966abf1b7e1267eed8f190d423031e4a2d6ef2636f01e9493d1950c9750e09f809349067f159a91f3b10b946071d72f926d33b5d1a27b3a1c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b963c4ac0d1e37147d4a98944d58086b

    SHA1

    c6942f50f464a0a80acf4cab2b61c0709474bfab

    SHA256

    2946112b504f51f70463f6ba3b854c67fa4e28225edde029dbc5d8c8494d2374

    SHA512

    50c5f8330470d6a1a166c256d23bed8c52deae70188d75fa15136e843b8376660a1649bff735af89034bed3478e24e3c6e30704aa45c62a0bfa62847e21845cc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6fc0bfc9fd694d0638499de0b336b506

    SHA1

    b3860aa0de1ad72f2800f6afebdebb597e9cbb33

    SHA256

    7317bd1880cfd65ea09605064326114358f135085bf74abcda80490ccfcf638c

    SHA512

    1332060a28eed7a8c14a70f3fffe6e3bcc5f6392f65463131ee803488466987348c94f885733c00d33236bb19f966a9a8496e06364b23a255d2ba21fa3ca9107

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b083c45616060f5d170eba55af8d7a26

    SHA1

    87067cc98781b79060214433918e7ff4bc83c44f

    SHA256

    0538b4a8d26678469378138729c939aa9d3ec58301284d6172edc5d5f0ed4434

    SHA512

    f26f71f5b09fd22b8d32272b549530edd23c8600e16b8ff1b9c72359060db3856b34c33bc3c3b4cbe84af95c1def2f70d9913a25a98b862d8d7fd1bfd45464c5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    800598cfd0688ba268c477b25e8286df

    SHA1

    75988cf69ba046e230a50dbff123b32fdceddc14

    SHA256

    031072afd5252f7b5b4f5366b34c74b8457bc30b5d51011ec1a709da695243ac

    SHA512

    00c2f50a6b0be75ab50d6d433ea1bdc09670ffa2188d37fd955e04487e43012fa9e3adf069709b5c8a21e0c2f1f6a415d84c19897112256f6e921b3e90e796f3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    291732253879e9fac1ad64ac3072dd8d

    SHA1

    0261f6c8d7aba8358d62864a066f411d95af4c8a

    SHA256

    2e5e48063640f3fe3e092cb6f9c9cbbaf2ed241c1931fa5e308e74bfbb355a08

    SHA512

    6821a68772a61c5da6b2a60136f34c178d383ed3620d45081dde3be4255628982f064c3d39b3fdaa244c5e6ebd5f7f4ac328c5e0e15e1489b1e11aab1c9d9393

  • C:\Users\Admin\AppData\Local\Temp\Cab3009.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar305A.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a