Analysis

  • max time kernel
    120s
  • max time network
    131s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    29/05/2024, 03:17

General

  • Target

    ibs-clearing.ch verification form.html

  • Size

    278B

  • MD5

    c197f28ff518a6afb7fc42c07089d2bd

  • SHA1

    90e405eb0e75c6ee89bf927ce783ba73923de9f8

  • SHA256

    708cc81e4ee33761cf1cc84cc8e4dec30263000764ab7f7e9116837f8fa504b2

  • SHA512

    8e3d20cca330bbbad708bd215219232ba38a202000b4e2a2bf4cebcc0079edc6a26ef77470e7d2f8c3ea3bbd53ae50704a134a3d81dc98182fa817ed7858cadf

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" "C:\Users\Admin\AppData\Local\Temp\ibs-clearing.ch verification form.html"
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1912
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1912 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2868

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    44830018f43d5d4217ea0ef6bd5b6530

    SHA1

    02ea5b9ed311a6ec0d0700733a9131f745b69e33

    SHA256

    a96405c6f0640c06f31f36ca8321af4cdf37bbfbba21d5b3237944368a9c2d05

    SHA512

    139c5f62e5f4160b8bd0562f4ae81394c908183ebcd2f4e0e3c90af47976c58d1b63dc7f50b6fa9582b0c8d7a20fc8b0cfd2f49fa212ecb6954a4c403375c11c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fdfcc9b9a36dacfe0fe5418c1183b49d

    SHA1

    7db93672789c3931e5b30f9f1b17f4cf5ad112ea

    SHA256

    998830682a1c852a4faa4ac7a9c29a29f4e562a3789f620bd397a94999c0b3cd

    SHA512

    4a17f09477c768c3194bff3d973fba196162e73066fcd2068010f0e7add77fb9c74bb98a5df1db53c69e132fc190dbd6cc99345506905bf5103eec76646336bc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    60b52415e46793f4b722be62a369c5eb

    SHA1

    365a5bd61c4fafca80be6e370e790de4bfe27240

    SHA256

    dda3975a27a3f71fa7885ba9d64853dc29e78d4dce62b99d76606264b1a6f835

    SHA512

    197a80af96e9983c785ee0d752678302f762530ff340177a97d32ef577bb2112ddac1fe771b3e05ab10550196242085dc287b6fe3f2dbb4325bbca2933fba470

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    af16eaec05d92e567d35bf755159eece

    SHA1

    7fe8d151d2155a86dbd81365ba1b5362ed8cf5a4

    SHA256

    fb625014806d64fd253781ca53c297a1d3db3e95d42346b73747f720ca16908f

    SHA512

    77caeb52638fa3df877e3087926ac66afed97b82e46857b4442755e0aaa360e68829e7f656f74b1b6eb67eee0f134838aef5cbdc27e706e90e8cec29950020f6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e9979570f1a72edd31f4fee4db1a2f70

    SHA1

    4aa91e04209f90e88c094c661a9cfc8f59b770ca

    SHA256

    c1e8b83d5a54dbb70efd23f31aa2d680a9fcb15351f168bd52500ef585241aa3

    SHA512

    398df14a671f24829b5213de27a3da7adfdeddf48e30dbee261387948f0eb33e861afaa74a7063b1b0c4d5de6ec8f186623d9460598808774c7b3f8b3ddf7b73

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    50b5b1d2fcf1225000e915f9577b09fb

    SHA1

    fdcf19b6c753a84c9cecec860eb8b14338702a87

    SHA256

    2c57817cc8e57ec25e79d2d36db058f8ce71ff8abbc5165512c490ef2bbef502

    SHA512

    5bab5a0ce8cafc6ade358437df4931cc4e9274de6c465ef6d141eaef381b58b464e6ba683aaa2cff321f262021c38eddd06853370728dbd1efa0908febc793f6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5b966605b06c00fcf3a2587fdfdb82fa

    SHA1

    c21b0e34e29218479e12b3e06e3e20d808d1fff2

    SHA256

    7b4bfffe54514c738d6107f0b1dddd5f1dd9c4c11952c9f18f05c8a0592f570d

    SHA512

    b5f11b9d2ac545d703ace0d54f2f4f3fe93e019a1916b9ea435bf66963852244b5277e8eceb0c7f88a46c8d4c7601bf9889832807a3bd40f8c2e3300f11daf8c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0cf21ec5ed900644afb092f25b6882a8

    SHA1

    1752598e7bbc69cd7b8ae549fe6009073294d445

    SHA256

    e071c5441155bce069f002518ff3ac7c55e108b8a54c11578943202b71769506

    SHA512

    730c85117c59a19a97336dce4121f14e203fe7498fc1f1511e8f3882ab984b6874fa220fc8b09991e7dd8d54c3ceaf3aa8f48f3b3b835b9093b3c8f6b7a963fd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0094169912422af7e2d35252c81b7a2d

    SHA1

    235fda068bbb79a1e2298c1f98a7e0bee30d0012

    SHA256

    890ace4c1003c6742243d7055f724a069763c13b9fe7b00e47ce645fb9552b0e

    SHA512

    4165ac58f98d36b1a10c1e76051ca086924b4108500b4d81ada47708172b650260b62d0b866c392cd697cb7d0ce4079a625f511bd7cf4101cabc09bc1b2d95ac

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    11e915fc9c5e566f5a2b16753203182d

    SHA1

    8dda4b18f957e0856cb23820983490ecb242e91f

    SHA256

    bb38dbb2c2817db9a2dccb6aed6d06179f6d90adc7ea88ace36b528b25b54d53

    SHA512

    3d2029e60214c377f8a7d49f3a3dc428add4d069a33b45437bc88714fe99164388e5ffb05a0a513b3cfd613c2a97003b55014afe1b3af4e995cf84b7db498ecb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    25194859f47918874335640baefca7cb

    SHA1

    2db458ddd22f1072fddeff9a3fbf011870db32a2

    SHA256

    dd0916100414874a4fd88edf32bc0d9d34be08914c35b0425e32050099fa71fe

    SHA512

    683f4a7162380eb62ba6dd925f47eeb851e084a45a317a349e8c6a9e50c404d4bba4b28cda2890e6b6963605a1678e1302a46465d622250f99e716f9028f0182

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3a1bc2a8e3315a5056f468da4d2b7b9e

    SHA1

    93b931b7a147811e326daf63317a45df096d8c55

    SHA256

    3700b9f87a1a76e0f50fbc06a3b8d4fb4759ddaadb7bb0480b168884c49b2d64

    SHA512

    73c31771d67d7f2f8facf9052db002ced6fe57b9f683100e81ea7a0482470c2b92ed8dd4823582f948cd6a82df3a999f467317bed031b758871669b743f1578c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    98b75f6c13ab8735d6842921cf32f17f

    SHA1

    a75e0650d0667581453f42b6907646a25c0661ef

    SHA256

    4d3b2de1f2039137a81c559fd397327762d42967fb2984be82ea58cd9ac5a200

    SHA512

    86fef3d2bda1852d4a72270f43a25a372b69cd236c9566e3b74a6589c23f805bb2dba29d1016980a7ccbba2dbafffe598c4c9b37f280d0c5e1f5fb79cb0c4774

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    89857c1937bb073535660b50ff92116d

    SHA1

    36e11fad583149944112ff99ddedd0d7e5d68f85

    SHA256

    c667692a12dd696a7323823b811a5e11e629e08bd44156b8cbbe881eccc9bf2c

    SHA512

    38faafd8e81e29b5609f15aa20555c9430193e75b7700fa37012887bcef5eb73ccb27bd67bf41e8400b61caf08bebb9752cc80e47846e42e9cef0dca9b88c3fb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f23a40f3c2f14d0cc794c7fdf0183ad3

    SHA1

    af8f65121d28b6c263d15741a531818a7aae6d49

    SHA256

    fe86b01aeef19385b781ffa71eaac0274b4177099680c5aaa4f797fa4ed6516f

    SHA512

    e1980f2ab109e79e173773e63fb6b105d4ed9c9f96bbdd9214e5565c8d99ac0363cefafe2aeb402297c552f6d436300599a543100bb088a3c7a4f31cc1ae83c0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    68855f7627aca2ab27ea5c643cd3b64d

    SHA1

    fe16ea1aaa094f47a281a200f773c71e017b982d

    SHA256

    b6a1e868d9d4788edd3d2277608ec1cf334db8eeeebee804010034685d28445c

    SHA512

    4d89a77add874089650ad69e21484789dadb5b6a83cf7d1db9ec1828b8adc7cefc284ce07e7ab5ee175fe4bf723f6b0d66c21cd570be90a8fdd6925174226206

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0f5f9ddd8c0f49e996c50feb7e499397

    SHA1

    51ea1ada6a94f01e6cc352090c11defde9e0d0b6

    SHA256

    356233d04ebac5cccf0cc3d88cbef788fe9770b69dfd28ed5e3985ac6478194e

    SHA512

    11101139ddb0812a5e5db71ee06596bc0a183b7467b0c8684241d155244dc347876cf19050c042cd1733cccaa3fd79d82eb64a186b5e1fb5e4b671f7a94c11ad

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b28c89aee98a42b51224e524538d38c5

    SHA1

    6b191a4c6ec880acff309bf49301ee148cc88824

    SHA256

    9679612aa59c4564676b806466da0541b117be7f46a3792dea7e9f0a0676abbb

    SHA512

    08af6752a60b094da2a65bc1016403d643e72583022a2d8d4e3271bffe430b2c631124c136bbc0280f4c7a3e11f8876c51992f36b599ee83d5392eacb2e05678

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e7cee8ed4323fd1c07cf746b2669c860

    SHA1

    df67ad5963038c445aeacfec11d5e99c0d1feeae

    SHA256

    5174862136f745b11b0d565395c4ebb978eb5f954fd3b83418a0b6d030d9029d

    SHA512

    3806f171a85d52c569ec0f4a5a68b81ef97d4b81d914ebc25c14ebd0619fad82d9cbb5ba0f9b1db8f67d2f323878ee76f11b7b93caa9a4a5b0b1964695056acd

  • C:\Users\Admin\AppData\Local\Temp\Cab22CD.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar23E0.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b