Overview

overview

6

Static

static

3

899c747ae6...8b.exe

windows7-x64

6

899c747ae6...8b.exe

windows10-2004-x64

6

Analysis

  • max time kernel
    150s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    20/05/2024, 00:09

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target

    899c747ae6ff7b15a76d708fb4efb52a834c6d077571d9b4ffdec7484af9a88b.exe

  • Size

    758KB

  • MD5

    cfbcf79d687ecfe0383b079c211fe8d1

  • SHA1

    38b22656a5ae434575e4720bef14718a18e99431

  • SHA256

    899c747ae6ff7b15a76d708fb4efb52a834c6d077571d9b4ffdec7484af9a88b

  • SHA512

    28583b5774416778429ba84764c3f5b7d17623bf56daa096998a4299b02f4cbef6cbaa32ef2b540f23c30c623ef79ab73fe5d24150edac5ded677a33bd3d0228

  • SSDEEP

    12288:dxhmZlL/73ouOmUkfsmifxSW6/oNPlIrnLyqb5ub1JV+bHtGobvi:dxhmZN73RUkf8fYR/oNP64JJV+LtGoL

Score
6/10
persistence

Malware Config

Signatures

  • Adds Run key to start application 2 TTPs 1 IoCs
    persistence
  • Drops file in Windows directory 1 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Modifies Internet Explorer settings 1 TTPs 2 IoCs
    adwarespyware
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\899c747ae6ff7b15a76d708fb4efb52a834c6d077571d9b4ffdec7484af9a88b.exe
    "C:\Users\Admin\AppData\Local\Temp\899c747ae6ff7b15a76d708fb4efb52a834c6d077571d9b4ffdec7484af9a88b.exe"
    1⤵
    • Adds Run key to start application
    • Drops file in Windows directory
    • Modifies Internet Explorer settings
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2232

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC
          Filesize

          914B

          MD5

          e4a68ac854ac5242460afd72481b2a44

          SHA1

          df3c24f9bfd666761b268073fe06d1cc8d4f82a4

          SHA256

          cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

          SHA512

          5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

          Download Submit

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\6B2043001D270792DFFD725518EAFE2C
          Filesize

          579B

          MD5

          f55da450a5fb287e1e0f0dcc965756ca

          SHA1

          7e04de896a3e666d00e687d33ffad93be83d349e

          SHA256

          31ad6648f8104138c738f39ea4320133393e3a18cc02296ef97c2ac9ef6731d0

          SHA512

          19bd9a319dfdaad7c13a6b085e51c67c0f9cb1eb4babc4c2b5cdf921c13002ca324e62dfa05f344e340d0d100aa4d6fac0683552162ccc7c0321a8d146da0630

          Download Submit

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015
          Filesize

          68KB

          MD5

          29f65ba8e88c063813cc50a4ea544e93

          SHA1

          05a7040d5c127e68c25d81cc51271ffb8bef3568

          SHA256

          1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

          SHA512

          e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

          Download Submit

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357
          Filesize

          1KB

          MD5

          a266bb7dcc38a562631361bbf61dd11b

          SHA1

          3b1efd3a66ea28b16697394703a72ca340a05bd5

          SHA256

          df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

          SHA512

          0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

          Download Submit

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC
          Filesize

          252B

          MD5

          f726de0b90f7eb921c161eb0fe3fcd58

          SHA1

          3106da1ddd7942421d883ba189a91fd00343175e

          SHA256

          852a1c771323a26f077f5ee78b2bd8c620856585849ebfd2ec8c90eb7b32659d

          SHA512

          a770b7f22c66571665a6436597b4ae78e5e68acc7b2d624cda8ae9c6a2be57e0513502702618b3808ef0cc194ba3c8995b4586b978d9c3522601ca63f05b8877

          Download Submit

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\6B2043001D270792DFFD725518EAFE2C
          Filesize

          252B

          MD5

          8eb0c49b35fcc452b42437ee95dc0756

          SHA1

          1bd9c4ab36a71b0868a83e0e8957acfb510d0ad8

          SHA256

          8c53100621eff7e9f2ec7a4114f5f3ae4e5b7d2a2be72179816fbef575325425

          SHA512

          b7ddbc5fb832f61264b855a02353a22b427f19dfcf7c1e742291d47d42a84c7289daa4dd7e03d1f35cd8d03a4180498d800bab810ebcbce6533865c84ee7a6bf

          Download Submit

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
          Filesize

          344B

          MD5

          46b6fee3d123994bda4a9db3f676081d

          SHA1

          63aab439e0e10072e397fe83b48faff6f427ff20

          SHA256

          12317b43eba494bba3e1342d8f19d67e13ede8c77c8121fbb68efae687176767

          SHA512

          740a63130d14e31ce6ba0743181077a92ddab7233d74af1585dd734501ba836150856bd8f36c90f953fd6f4244e6518ca92da14f5c81729baa6470013c42c486

          Download Submit

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
          Filesize

          344B

          MD5

          661a6eabacb9e8a7f30d5baaf4c9684f

          SHA1

          061d62fbd30726e991d04a3425bae761a83f5f32

          SHA256

          1e036a764ff6bca79c6aa029284e64bd111bcacf486289a2aa3badc420221c6a

          SHA512

          e684bafbc49a4254a49a3dc85706407ba1e0155fea1562fa581eb610827718684db8a7def64d75aa1ad835af7938647cb80bafea4764dfd36c2c549b8281262e

          Download Submit

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
          Filesize

          344B

          MD5

          0e2c417380276f1374bc992b61dc7877

          SHA1

          ea72ebc94dd51917c3f6fea7e44cbd0cc1bb242e

          SHA256

          45852ddacc4f15299a952edacca910b365630fff1fcac666d9c26f294a9f8430

          SHA512

          02a02c3e51af0f58db23bca49c34c1bd81d64f9d30112c58bbeb134782a9fccc57a7abe7b63161e670b925e530a6e492e7e4208b079265de863b14c541763b85

          Download Submit

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
          Filesize

          344B

          MD5

          5d6f208f2e15e61128d263b8f5c173b4

          SHA1

          eaca17995411ad4809428be89661b3887a07060b

          SHA256

          8ed78ce31b95559eba5461e8ce0ee655a6356a613f4fcd35ecaf1ce6d29a3eea

          SHA512

          3bd2510912b2645a0aea72edc120d6a07a0a86bf5bead6827c94c25d86a1384d273f4b5a181f88b1ed75c5f8589bb2d632007e9270ac695a303019e9411240db

          Download Submit

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
          Filesize

          344B

          MD5

          ca4196923765279308a86fdd8f94b439

          SHA1

          273fbb9dff52a20140eb0b4053e08b2e89d924b2

          SHA256

          b1a453c3b424df81dcb5fbf5660decd2856811e351b5f99835f866118a057b05

          SHA512

          cb87a2e8506384dc06150bd64f6947dc14863e7aba4de03289947f678504226d8f7bed1082e952126e6cd1e6efdccd8f979b0d8e7a8f36075f43e201fb87146f

          Download Submit

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
          Filesize

          344B

          MD5

          1903916223c026fd38621e3e31ce6152

          SHA1

          0eb6b2011f4522f6c7e1140aae75b8ddb013c222

          SHA256

          b1a274480661653dc3f3d7b89ab75eaa8009236c4ea3233774e3459a56d92ef3

          SHA512

          7691ba5a1773a06d9c6bd95cd11522f5f9fb5d24e2051c7f35e839e21bb7c9ae446258d8b833dd447cf7d19a434066b4ca3fb7544b7baced2487d716c30cdc4c

          Download Submit

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
          Filesize

          344B

          MD5

          8096057fe464e53bb1274359178b2561

          SHA1

          d2c08abbde0fb2970ad968fc95bd9e74d9026f8f

          SHA256

          5da403ba4bddc57aef2b34bfa63a716018229d8abaebbded4c67930f2e23fb26

          SHA512

          f8f4de93776c1d468f46baadd864d5378fe40732caea9d37fb56099d3a11b314b1809cbb4fd1b2b3c112475a1c067f7c0b74e16511e399860a924368d7c3ef84

          Download Submit

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
          Filesize

          344B

          MD5

          1f4870c8a5005dd7d06ab3bdcb43e6cb

          SHA1

          57a781bed4d4cb70c0c65bcd8951504a0d0d0662

          SHA256

          5f0918ac1b404aa000a8fcc8068176b83c105815c2395539a1e4a231799056cf

          SHA512

          cf7b307eb9e6426c7706b793ad0b04526701ec22e4ef7761b3aa60ec7bd7bdb912a7a57541d835b3d26bda9d35e238b21ca187ae2cad5bf2fd9c4c7660623e1d

          Download Submit

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
          Filesize

          344B

          MD5

          72326d6a2040575c21bfb8e53be5c9c5

          SHA1

          5544f0917f4b3b3edf4720c38c11fe524833783f

          SHA256

          3cb8562adb049a5a0109e8e937ec4c4812b49b69b85806957187193586b8eb3c

          SHA512

          b6805bbba3cb7df042e9a56df0e2cd005bd0e4860e19adc85067704465d7f7eeb924f9b3f9f8921d2bed0b4ed7cca7fe27c5f23c1f4419f766f3dcb3d0011a25

          Download Submit

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
          Filesize

          344B

          MD5

          268669a7994d40b61e93c446b562ceac

          SHA1

          7b025192f79be90aaf437c526b2fd7669a71e859

          SHA256

          a5e55d7d39649ecdd67f73b67e2c37e8d73f068cf040c6722a6b67f73d6aea02

          SHA512

          12d11c803548e20e5fdc1e0a987aaa1f88a9c07c7e264db57f4334d8141bc4780fa14b1e6c871683d94ed01dad34596ce976068eff1e12aefe103794791a3a68

          Download Submit

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
          Filesize

          344B

          MD5

          fbe4617fa8c1294ee5022c9f9b5a11f8

          SHA1

          b653a03b4ec7552eda265f7fcb302b76e87afe39

          SHA256

          3e94f8dbb0d5c1e5ba1a0cd7b8c4088a38aef545104819969bbc07116dff1497

          SHA512

          8edd691c71e57455e208cd11fff671e9a923105b99299903676ac1bf29a4c987d7c1c89b66bec8de4d1a841337412778787f9f5098527bf844a7a37a46f575d0

          Download Submit

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
          Filesize

          344B

          MD5

          e4cabb21cb812f60bd0892589416a081

          SHA1

          82566969a2ef63c48a84e658c5c247143e88acf1

          SHA256

          da2a19f220b350694f2503c97d51a6c1952307d189ebf4265b78d8025a537830

          SHA512

          07b455ddc3a6692af2be3bd93fee982509aba0c824c41918b860d34e9aff85ebc2e36f690e8701e235c019bf265419821159d473b7db3296019de5d9c0056d41

          Download Submit

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
          Filesize

          344B

          MD5

          c8a09d7b545277a228bb6f0ca3425f66

          SHA1

          f57d956efe874a997ee347fa6c018c4e8ac35048

          SHA256

          2779286cc44594bd34bec45b685f918d8366b6a5e7ef59fab5ef7465c0ee2af5

          SHA512

          922db7f315c7b364d29a0fe8597117cae539ea03153fa3a0aa3a3b9979ae6fed45fa60b18b8e0cea5db8cc5ec6a3548089a2bcf8bc523f6e20cd5655f0122e0a

          Download Submit

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
          Filesize

          344B

          MD5

          70be0cc57269a2bf26a1ef66c56d4556

          SHA1

          033028b97a44be0b6ace0d089d341eca73245332

          SHA256

          858d2b964066f617e40a5489e202372aa1670c220a30cb6bb53f6a6f7d72dee1

          SHA512

          b82b4682db1e21d64504d0f11ab6fdbfc346a14dee8b23381b3b23c466d739ce0c17873a20aa4ce0115c17b97acb544676dab034a42a73fc6aab1b95be693987

          Download Submit

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
          Filesize

          344B

          MD5

          67c4c66f2ca516dd193644eeb331e38e

          SHA1

          ba1fa2fc5fd3f11b9964a25ebee39dbe1875d5da

          SHA256

          be93165c860315b146ca5e894a9cd3d4c7b3005b15502414f81997d2fdee2ad8

          SHA512

          6175252b71a1a8eb0fac5e697367a66f4c4e8b475bcbcd5e080bd1cecd84fc874250160b2e777eaba35e31d58a2e6f729563be22a3c8e6930b16485baad8aebb

          Download Submit

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
          Filesize

          344B

          MD5

          07467584d96e5afa34488bce4058814a

          SHA1

          2c9a0ced8dfe20ae754e035c408ca4b1ab8980e8

          SHA256

          1755bf4285e4c75542b9a438601a9453d6f4be7b76092ff0c905f7c61f254740

          SHA512

          54b0a2ea8050978d67c05d86ad573b12bdb61e8d3c469e4d9e1ebee8e264f037fddf8e871770744651c9deca3524741a85f9e3d54ba54e1b35f399a7b4d88669

          Download Submit

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
          Filesize

          344B

          MD5

          81a9e9718d35afeecc1afc86520855be

          SHA1

          152c34ee90fff208e86a474207720464367930b9

          SHA256

          ff87b3bf234cb514cfc7756c2e37031aa977c53724e1a5024623bb8688a95e02

          SHA512

          717591bf46cad38f4aeebbb14f24bb7bd3f3496bd781fb8ff9854f88a324938481d6a526b1823527f23e5a8cf1dfd35d61c8f4f540fb0e398be0c0386e494d52

          Download Submit

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
          Filesize

          344B

          MD5

          87c31900565bc73be19fc278346dd11f

          SHA1

          51baee620f040260356c1630c30bcb5ee4b7b403

          SHA256

          3e93e3e3babdf20ba438de81a8fccae90be2ed37f6ee4e4cb72b3fa37adfb6f6

          SHA512

          4986db06b182d58f6dfeff741d94255683c91f793a19cb54dd8092891dccd445fe66e0fb97e9c1ee6ea65b4d725097f60097cd2de5d02938b7e1b0aff39594b8

          Download Submit

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
          Filesize

          344B

          MD5

          d7c28082125ce2cdaa9c65ba8a79529c

          SHA1

          32973cbfc740966720702cd62a5a3f1087cacb29

          SHA256

          98810d1c8cda4b477d6198f2a1a3c8b6e7f863651beeb12b9d4fdaa85e8cfd02

          SHA512

          4ef8b34387cbb993002c3fa59fab3017c907fd8eed11156347fff88ecaa00a6c3f6cb7a450e4bd3759ab6f18905353618d47bbfe1f58feb488e0e1dd87c561de

          Download Submit

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
          Filesize

          344B

          MD5

          7b50227784677d3118bd1db3090f7a0c

          SHA1

          96def99009287f3035ae032e13d4311517fbf718

          SHA256

          1f811a5c936d4892575557cb02d2b7131f5670fa0b635f292d9a4a77d6b1919e

          SHA512

          8633f6d9ddbb8cbefb32fb4b898dd7cbc7ed77309f0c9406f2521b5b87990ef344f5c7d28c2db3ab3121995388e1b474517add13ab5f1aa27ece017f8b371910

          Download Submit

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357
          Filesize

          242B

          MD5

          4890e7f0bd48170bbd1e5a5547a9c7ec

          SHA1

          e987db9e08684bb81e32642de3ce24e42815ca62

          SHA256

          4e75832f9b612ba81808d1da76a23e0f42ad8cfce9a8f63109a2de9d8890fb12

          SHA512

          c399747d72e00ba6ddea744fa47f6307ee4a2e0e210619c22a684d1247c717562b07965a585347e1827c0a204a4c8165c15f627ffedef5899e182e5b027125a2

          Download Submit

        • C:\Users\Admin\AppData\Local\Temp\Tar14ED.tmp
          Filesize

          177KB

          MD5

          435a9ac180383f9fa094131b173a2f7b

          SHA1

          76944ea657a9db94f9a4bef38f88c46ed4166983

          SHA256

          67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

          SHA512

          1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a

          Download Submit

        • C:\Windows\syst.dat
          Filesize

          59B

          MD5

          608cc37046815bca65f8911101fde569

          SHA1

          1973bd22e2f6dd8676c25bd2ccc9a778e444b9cc

          SHA256

          851cbe5bfdcd2e18005852408243b985ad81f90d8f36d7fe479b460cf0015efd

          SHA512

          39d967911fcbad11d2672bb6dca1d426ef4cfdaeb8555248baf51df0ccbbb1d38da0d849e7e54a165889d772aacaf26f58383d2593b3a41898d6f824d2addeb8

          Download Submit

        • memory/2232-2428-0x0000000000400000-0x00000000006B0000-memory.dmp

          Filesize

          2.7MB

          Download

        • memory/2232-2507-0x0000000000250000-0x0000000000251000-memory.dmp

          Filesize

          4KB

          Download

        • memory/2232-0-0x0000000000400000-0x00000000006B0000-memory.dmp

          Filesize

          2.7MB

          Download

        • memory/2232-2-0x0000000000250000-0x0000000000251000-memory.dmp

          Filesize

          4KB

          Download

        • memory/2232-717-0x0000000000400000-0x00000000006B0000-memory.dmp

          Filesize

          2.7MB

          Download

        • memory/2232-2432-0x0000000000020000-0x0000000000022000-memory.dmp

          Filesize

          8KB

          Download

        • memory/2232-2431-0x0000000000400000-0x00000000006B0000-memory.dmp

          Filesize

          2.7MB

          Download

        • memory/2232-1-0x0000000000020000-0x0000000000022000-memory.dmp

          Filesize

          8KB

          Download

        • memory/2232-2883-0x0000000000400000-0x00000000006B0000-memory.dmp

          Filesize

          2.7MB

          Download

        • memory/2232-5281-0x0000000000400000-0x00000000006B0000-memory.dmp

          Filesize

          2.7MB

          Download

        • memory/2232-5582-0x0000000000400000-0x00000000006B0000-memory.dmp

          Filesize

          2.7MB

          Download

        • memory/2232-5883-0x0000000000400000-0x00000000006B0000-memory.dmp

          Filesize

          2.7MB

          Download

        • memory/2232-6184-0x0000000000400000-0x00000000006B0000-memory.dmp

          Filesize

          2.7MB

          Download

        • memory/2232-6860-0x0000000000400000-0x00000000006B0000-memory.dmp

          Filesize

          2.7MB

          Download