Analysis

  • max time kernel
    133s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240419-en
  • resource tags

    arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system
  • submitted
    26/05/2024, 03:12

General

  • Target

    02mins30secs_Transcript336.html

  • Size

    5KB

  • MD5

    c5aa29991dd8f3dc47a6a7a5fe032c20

  • SHA1

    084c0b6df0268d8dc4625f6898e010e20f10fbad

  • SHA256

    4558e12dbf948c321c5de75b1c6717f8a3cd9dfd4d50888e06a84c44b6bb6e00

  • SHA512

    e92d8a0997db6e293115178d5f84f74108c02a0c32ed0ec5118987a6f2f3a954a7e8a48b9d5a4f768dbf45d120deb171a3008fd414e54d964a9f88a8496b3a60

  • SSDEEP

    96:LCVkJb8gtcXJFzgE/CSSTalqfJIWx7CpdJST/lI+jK7c5YJN5ST7HfElIG1w:ykJb8hJFzp/CPKqfRdC4++WBA/fjG1w

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 40 IoCs
  • Modifies registry class 5 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 7 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\02mins30secs_Transcript336.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:3000
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:3000 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Modifies registry class
      • Suspicious use of SetWindowsHookEx
      PID:2556

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7fdcdf6e5e9b33087572a250ab16f0a4

    SHA1

    c2a1c60bfdd758d8a81d7520bc15e4cbc304f675

    SHA256

    a2429c8e0ab629bcc8038cdd74601a0cef545cb9bd8986a71d7110e321faccdb

    SHA512

    ec31ed179ff9d1f4d41a14785ef7f24ecc9cd48095e7e16db4f45483247bc42e5eecdac1890388c040c4390587ad2573b3806561e29ecd6557b0e24de278c9d0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    df8c5ecd65836d03b64f15bf87bf2f2e

    SHA1

    1a8bfd08ece59cb7d0816c589dfa51731551b2de

    SHA256

    b6a9a352338665e712cc790ae317e3f52639595e34063b16543531939537018d

    SHA512

    c5da9edcf0d024c24ad2b099d5235836067760d47c97e062a4647550c3bb5cc7df7900cc9a1339a40e4364b3b3c03c752c2c5d771f599734e2b6bc138711f569

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d22961074f40ac2d2652dcb4516fb5d2

    SHA1

    c41fe1fa840fba5da48d90923bad36ae27196bf6

    SHA256

    288c8140c765a0ed1f33b641b77e7fb2bcd155e9740d94c4867d7c88fb033586

    SHA512

    d5c002d470305909aa0701cbafa925739a36c7f0c2a2fa3a05f0b325430e7463801d0764b257998885bb2d3023bce2026ca650a38488cb363e539376cf84ce8d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9dc242981e9aa31085c1e40284e6ad44

    SHA1

    b6d6f8f576bd22182d27af12a6a067f7a75cfe00

    SHA256

    27334d62f6d6a8f569907b5af5f70b1d2c6540b1f44b9854df70817985f35f37

    SHA512

    8fb7231af99af5440931686948dde1cb22933f5e6308571afdd97d9dc58ab2d602fc4b4fbee6d8f86174681d945cdc07e3043a38557a2c22ad67e06c132ca054

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c49c10319975a1e8724400f059284aec

    SHA1

    ea6e238e6554d1909819e1737c8e3135f873becc

    SHA256

    e5a9961263e14f3a5e2585529d64e29c948ce798a9a54f231fa9cc24cfd26a0b

    SHA512

    957d251c2c0497439653ceaf803765276791e853b91521548acf4020414d7def94aaa4bebcd3b22a2751065cac145def7e9ca96f05294577600cb34bb5ac3253

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    21f63dce3285084cf9e5cf2f49f3aafa

    SHA1

    51468811acd88edc0cf40778eeb81da7a86ae2a4

    SHA256

    a84ce882ee17288f6a4c20797510ba46e8e11e1667f1fe627086238464d1206b

    SHA512

    dd3872b81f44fa29e377e959c29971ffe8f2aec46f669c084b4d6a5381787670465d6d9ec068b8b684ce2da0470b299a36ea1879f7f168c41a38202bd6a8af24

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    563769dec2526b299e60dea65c19d66d

    SHA1

    0d770ec3902f31da4498d73a440855a644d00a49

    SHA256

    54fe97d74400bedac08df1f496e034483d516433a3e778aa36689c986b893d4a

    SHA512

    2ab4e83b8747a651afcdde531ad1e34ad7009be3f999a50b5c818a5eeb1ab90621a8937a4965fc2cf5c47a17a6a5b2e8bab4e129d0d9e5f2d90c8db07ce2db73

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7385a72cefdedec19e254975470bd7e4

    SHA1

    3d0e555dbf75cf9189a4cce2ad0a289bcb796906

    SHA256

    a30dda67b458e194e3286d0cea96c0af68b3d3f6b498a108f075938fcfa3e7d8

    SHA512

    54ea0149134c157e5fd9581e26a456bc56517de09301ee340ebb05db26af082a1cad2c00ad2337c6de98780aa6b7be7f5ddbd2c7fcac9827df29216be7b2c099

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4608315b7fedc17ed81e264aac88b733

    SHA1

    ff49b73b7c59cfa407d98b943b76af0496f99e21

    SHA256

    f9af4d20e3bd29f11e94e9a3a375ca5c364a4a32a4715bdfe3109054084cf42d

    SHA512

    9c6769337480e0f46723962f8c70dc63ace90b011b29767793bf2cb265833cdc64c067b70a567619533374c311448404f8cc139fc8465859fad0ea70e09c68ef

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    eafe24046172f8ffda89b22938e7d606

    SHA1

    9d06f3b958accb5304fd0f53c97e499a7340e6d4

    SHA256

    c25513c87d944fa5eb175b6021d0154bcd89358abc7eedf7ceae2233ac4c2bd8

    SHA512

    665ef749e5917dcb22cc13bb9bee500b644cb0f4d5ce3b3767b0f6587dd43068bfcf10d72faa53d0713d47a8dfde6cf6959bbb5f7e21f9ade8817722659f81f7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5be4d2699e866ed89b121b7f049ef3ed

    SHA1

    8709796b99c8c3c4d968c25f6d6fb6628340aced

    SHA256

    9131c32412e347c19172c00d7bc06a7b16e64500b47ca53ecdfe9dc873bfcb44

    SHA512

    83750cf7a2f18e30e1836b55c7cdd9c0a021f88675bb2491e12b9430908196465b5c45b9a2428657172b250da72937f958b71c9f5e899e42d0bc177fde02e800

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    95b8b1b3ca8eabbb9c4a7122e2c3ebb5

    SHA1

    3dc3f5b0c64a0a3940ea447b2bcd40cd886c9ce5

    SHA256

    ac674dba43b9eb19994bf36b2bb66678be460153783f1ce3170cd7bdcadac72f

    SHA512

    8553b3e16a139cc453a4800c5007403f6acacfc4b9a7e8f808b4d3ffb598cb3f4609ac33bbfdf4d15e408860226cf65e69f186fa296481d1377c221bb7f145a0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9f95e311bfc7420b5d4b6d7c08d318a5

    SHA1

    a53ca6defc9246e07bb52d16edb5890d5ae5b0d4

    SHA256

    ece95fa8ebac5f533b716fe7c2a883908caf44b68837e39e1713beb118dd3bd3

    SHA512

    1ee56e856965cb16f3fd8bb7fc28dd06a5d6fd8a108ba3cc40b083cbf6b7e818ef8dafebd20c8ee7e25281c4b26756305ee1e29bae5bb7ed9fe72ff41ae50fb8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8c6f52b286e51d86d3d8c2d3a7d9a98d

    SHA1

    f14933e2a3c0d442876cdc35470dc8b0f8958d3a

    SHA256

    0920c5dbb6c3f238c543b5ce831f57580e0ab20f1f26b8490a9e4c931315e69c

    SHA512

    c0122c19a2c4a4c1ea4e47f1b00e9916164138d61edcb4f69e7939b525a03db0e23962f6db7b5c8f017d37162cf48661833d16f594f317285085736df72fbd66

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d69764c7aee161010a0056ee0ceeaca7

    SHA1

    fb8a008c2dec5dccffda3caa28c4cf980eb7ebab

    SHA256

    13320fd6fa121491a3ddff3580f1e77eb798714ce93a789689f7c68f8ace24b9

    SHA512

    d8065a9263f54ac159e8a095c4ffc732e41b4896fcbc149f3d587b41fcc7350c5264308b4fa73069ef342209c274213b51af18ad2321bcb811a895c5d7f9e2f7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e1cdaf6b31da885d08bcd4665f679cf0

    SHA1

    129bec4e1fba7abcd2bd23f2f0b2ce535da934de

    SHA256

    187a4efdecf2f1b23087ffe47d321d2ed4fab0d0cda0e78966c575e48c2f58b6

    SHA512

    e164f38863ef8a9df3062879f3878a1c9b91acee63dedc4406dd036987537ed90df8da8200e44a885551ce7fc4ffbb95aef3ef194ff7724b6991a131500c0e8b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bd75579297ee1007ddeb85758d538a93

    SHA1

    e42866dcba908457abbd85b4b5886fd2f1749791

    SHA256

    33102f90bbf85a0247368af00e5ef9e7d8139e499c1effc61823f95dcb0de0d5

    SHA512

    a1445ddfc47eebf42d22a42dc4441dd06adfbe11e3936a885ee2658ea164ebb8c57f6e2bf017a7424ff9bbdb0f942a11ae1fe30b20b5047cc6f30123e03f7197

  • C:\Users\Admin\AppData\Local\Temp\Cab2A0F.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar2A70.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a