Analysis

  • max time kernel
    117s
  • max time network
    135s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    09-06-2024 01:06

General

  • Target

    447b7be51ab6156722c4f87d5d76c7f9dcc2eea6906e2c4a79ecbe6afdb55101.exe

  • Size

    38.6MB

  • MD5

    2e75d3c7e817581b378bbcc75082281b

  • SHA1

    5b45e7eb54287486ae76768a20d46087204d95e7

  • SHA256

    447b7be51ab6156722c4f87d5d76c7f9dcc2eea6906e2c4a79ecbe6afdb55101

  • SHA512

    16d2b42d8f6a0076129b8a6cb71b0a7c09f31d834b598e7790584bdad743b772f2d7cbbd61e8726ff6bd6f5f0f52009c5542922cfd50fd6af544a346d9218215

  • SSDEEP

    786432:8Kn6iTfRwFOUPofAl2jtyGIdcDxvVEyaPZP:Tf2VP9l20GMcD1kP

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 34 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 8 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\447b7be51ab6156722c4f87d5d76c7f9dcc2eea6906e2c4a79ecbe6afdb55101.exe
    "C:\Users\Admin\AppData\Local\Temp\447b7be51ab6156722c4f87d5d76c7f9dcc2eea6906e2c4a79ecbe6afdb55101.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:1724
    • C:\Program Files\Internet Explorer\iexplore.exe
      "C:\Program Files\Internet Explorer\iexplore.exe" https://aka.ms/dotnet-core-applaunch?missing_runtime=true&arch=x86&rid=win7-x86&apphost_version=7.0.10&gui=true
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of SetWindowsHookEx
      • Suspicious use of WriteProcessMemory
      PID:2332
      • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
        "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2332 CREDAT:275457 /prefetch:2
        3⤵
        • Modifies Internet Explorer settings
        • Suspicious use of SetWindowsHookEx
        PID:3048

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ab5a63b3f976b966d416cf18000fc1a9

    SHA1

    72ce3b19db71cc21c2975a01c3491e63455a904c

    SHA256

    4f42fe2bb765bbe18fc7a97dab41066996a1e02f2a5224165bbc982a76d1bb94

    SHA512

    f3cf7b4a70a6d3743bc5326357a4f9839e704fab329e95b4b7bbcd4fb3b42f1fed5c379ce24813e937e8ff7da7ba8aac677c2b768d4a567f1c0228f8bf7d420b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bd8cd23183ba558191ec54a118493f9f

    SHA1

    d8a87c70ebac3080f3d4b00cb0d908e2b0a8053c

    SHA256

    892940db4b83e2f89d5f7652298d53124cf32eaba66689241f873391aa28282f

    SHA512

    4131fd7789f38267ee845d10c8bb27c5db67be7687060e3fc027b4cbeadf7b947c3750968447475c44a3b28189aebf6918793532efe6a7aebf46b6b4a552422a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    675651dbae0f4772dc4a7dfb29607f5a

    SHA1

    9f956c09d05abebe7c152510d594870e56bc5f2e

    SHA256

    2b99fa719ed9ffc32acb859926dc454eeb2e912c59b6e2aedd103c55ed236a46

    SHA512

    b856cefe43ea341c421f8e7e26c27fa3b11d883d41d9eaac2e4f17b59f6b0da029250b83741e0a623434a79158752f08d7beb90f723d03fecad272f6112ae95f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    647c8ed60b9d047c3ad7559cd5ac43f4

    SHA1

    1a2191a848cd879efe66267860d7b7c5459f3085

    SHA256

    5a1637dae4c8f1bce7b2ce8c564b639aa86032585cbce791ae0a99853be0b4a8

    SHA512

    df40bafba6e6f146967a51228ec95639a825a3deb3958510a040292660c7585a867045084b8fd054d59236025768f90128d55eff339194ea8ceb9667ddc5c0e9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3ad40a7aa36ef7618c9b74d9c2f6cbbd

    SHA1

    0f2539510af4f7a5e02b188c5a7afc0eca0debe0

    SHA256

    438c1373c5efab11d2e5c7405d65ba7f2a54b470187eab9733e5478d58668c6a

    SHA512

    259c0f2f65ba26b4b090d3ef6188a0aaa2feeb1f454db29d7983b71afe31aeb5b20f63dfa500649ff7bd466d8e20c3ba67a329cf9fedd1797301686983ddd286

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4b1a5603de4049cb7121c473381efa99

    SHA1

    e12e86821980606b87752b97f63ad07705bc6bb4

    SHA256

    33075d06e943d913329014a585cf7a751cd34c05a4a73dfb49e6bcd055af9778

    SHA512

    6d96f2d193d6b689f2864b6985280d14a0779f0580d1fd540988588ab586d8b29e82e6cb0f9f373cc2a10804fe76468cf87c6d054b3b1a055eb6bf8e9651825e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fced66809c3e3dc763fb46fe7cc9184a

    SHA1

    4c422417196160544698e386e2385f4804921a77

    SHA256

    8804bbade373dac0b2a1d73b0147ca71a116caf10880c5477a64b77793a49b14

    SHA512

    3850626c200778df797cb5fb2fb0e8a9e5735e1c3e5266c023a1ff8dc9ef85a5f6df7e3bf6a172fe7797b94f514426e34aa3be8688499a410c367e4347df69d4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    80f8ccc91ea1a4480859504ca0d27b7e

    SHA1

    d5073fb9b81ea24351f8de97d8117b4d4e520e0a

    SHA256

    9e10b08ce2ef72c755010bedf7b4fea09a5cf05b40af2d86f0ec79b97a591d08

    SHA512

    fde7924ac0aaf2e569d2a351e05edd91605304857082b93660539fbc7a1967f62d62bb260a5329ec2cdcc59946f268caf3394c1e26efcc5b3fc557b3d028baa2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fa079705d964f48c91a4c4150ca30059

    SHA1

    d9a9fe7aa91b4d253740d36fd2f64352234de3af

    SHA256

    05248b57aef651064319ed4c4dbd63fe51de817a01fc5f068d18417666fa0b84

    SHA512

    4d8a2c0dc2375f49302e6d62be5ea98078c64e76e0b8dc28cfcba86e870efa0f64a8ccbf440a1329fb6900b6e7ff6bc7f225346148c1c619e1d9702faac9a71f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f04aeec1afaec62ad24c7037368eeab8

    SHA1

    22a66195c59ca1d88bcc252e9c7586d4e8efb238

    SHA256

    d15998aa3a78c3137739bfccd8eef59956269cb3ae454d588b24e328bc440f8b

    SHA512

    d1cc23f07037785e102352a50108c999ad1ee8982b77fc1b533d2373cc58119979af05d31a97f0cbffa18ec0ba9467e7adf628962dab4968339b6935e8db4407

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    98c497099845187c9587a68f9bd51b07

    SHA1

    ef0dfe10a02d790d68e88edfe341c050e44c85fb

    SHA256

    a20d45d56a1aaaeeb7e71d98f065623d2220ac600d1681a15463fa868fa2fd6c

    SHA512

    36a18715d26231b69d61f582642a045bd24f5b5ef24155c05eb6e21e711c0896a6442d7c20d54b4dc2125c6653edd0a74cfeade3a0d0075a37c5555a7add1245

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0558b9d598471a880af71611ef7a2c3a

    SHA1

    33472f62f23418fcfff364fc05df1414c29d6828

    SHA256

    dd07e97e532c8f09bb1a4f011a1289fd2444c6a919252a3b330490952867944f

    SHA512

    513c4be650a8ea0ed045ad02f54773711ee8919a1e88b5b817967fe956527b87715cb82e02264ef3d644be48b64bd0c2ff75322bb55951283cf9e042a638778f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    184c97a3f6b097f1405b8b4feb1d2c26

    SHA1

    727efd224656057d6d253230272bd021f985ddeb

    SHA256

    a2d482b170e968bce2303bb345916092d407f7350e9acaa20ccf641ab789716e

    SHA512

    3aec33ab26b3055fbed5e02e6d9186777f8b63c9f63da5becb83eb0640c3898bfe2ee7f5e8b97ec04daf1f4905bdcf2999a5e17385c75891673eae69fd3f92e2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    79a36e0069bda1916ccc2f68b2072a64

    SHA1

    ec023ff7f9dc66dc2a873a8649f13ae31394a968

    SHA256

    7e262dc7c30b496a5bda76593797c4a1cec0fa64eff6d824fa09b01a5da3407b

    SHA512

    3dbfaf98a5d17ed924d426160702dc5f8d4a3d0bb4a63500d7e5a0f58819a427a3e6d3febd8a2e62868a46f95a64f85862470762e24dc3ef85d6ca028a8ec6ef

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e91e5d2e0bb80a6b0f84f5bfb5d11a83

    SHA1

    f523b63a5665d649d25f9cb2f6ae36bd23d708bd

    SHA256

    918f5ac58f60e1d0d2a5b4ed8eacf80d381d787adb6908b6cc3c135e9cb7cee2

    SHA512

    5faeb56c4ca7b17d16a7bd376213d5a6410b7544fc57558f429e84aa6c0e978e916de539a3c567c54cd9d4e9c98ef58cf1403220c85b1e553faed7c331dc7131

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    91fc3d2951c87c4396f3c11257205405

    SHA1

    3d087f909c57158023576ba674df327128f35073

    SHA256

    cc9e0dae18b99f1087278ec6025c0894b7f0995bafcda98e28d139e1a456eb9c

    SHA512

    783cb883be3917401caa7e8d4e3b002f1e6824d92ecae7703916af23da6851c63ea62439c6a17ddaf23bbaf63fca5d27cfecee78f3d9a8899bb81fb09a19d0fd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    87b2d1972330dd71bb26df29dcafa302

    SHA1

    9fbabb6b7d87d26098bbe3d4ba3b124f07ee3dc6

    SHA256

    88ed2a61c3049e923ecc77ae08866d1fddb169f4540cfb2821e58f018b733877

    SHA512

    6087abc37b0939c3479bd1b7030683076fca1d4e03202c004ad4783005ad47fb31955956ea1cc238575f4df7ed39d71c4daf29f28bc4abe7dfcd169daa84a46c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4c3de611443555360b4fe82d8b1487a0

    SHA1

    2bcfc4fd08558de27cdf9e1c46c505d361640899

    SHA256

    7c009529d4046272748e1448f5b6f1c7f5f501d656e60abdd98f849de5d707e4

    SHA512

    12fb3cad3b7db77758293173a6d0b52e076f3b3de5449640883e8dc418f1c68d6048fee9acadf44643326c0598b8bd17867ff0680de786c2293ce8a6b91f0c94

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e2688016b3a96fc2d51cf31a6b7b2259

    SHA1

    889760dbc92876cb51002d562465b4737d0a913a

    SHA256

    e684742853dfd1009a2385f4996aa92d3592cbebd0003d1ed098889a1a1b024e

    SHA512

    8511aa2bd44e9271d128622ee2fc837e2ea7bfbd2a594eae53ab66e6830d29d43c1dc680313a22bde60dd4dee8a77da2c8ccbec2f0a620553e7045924c78e3fe

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2097270a889fbce30701a06a0440c5a7

    SHA1

    9091c105222dae6ab4f579b0269383d7cbaf1605

    SHA256

    f39ef55108f007e242d05053edd9c5e7aa9dbed3f91d8f228c4d38692fe08908

    SHA512

    49352a0a3ae79edf3a00ef5c74e4197fa7f323b4e0971aa46b934250400d6bf1f7ed74c668b097882784c9ac166f36e0fc6810dd6585bd37a00501a5fb98936e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    347ad5d29dcba20b33c128211ac3abff

    SHA1

    47bee1d45fd211672ebc7f2a2e18e6d6f2320f65

    SHA256

    dffb7dd52430551f7821b69c9311315421a5bd7b84b73cab622974dff2e40ed2

    SHA512

    0ffa55e74a3335ebdb072a7edf9b243e51b7da01b53cada8df665eb271ae9b285f7d83d12cbf38f9394d21217a36319f9b4919b9bd6d1317e3d3ffbeefa404aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    115c9d304ef1f2adfa15ff4d96921ed8

    SHA1

    9f5c165be1595e8277d8b3f37d3af81c997d50a9

    SHA256

    c9f9570981d9132678608e189f1d66a4213ea9e20624dd05c0c1b5dc76d30ad5

    SHA512

    0c795bf791ed4cdcacf08c97ee5d8af9d65c34a8ed154106d5922312c3dcf6f7733ad908ba2f990297bfb5f93d4fcfe3d74d712e0d56d8ea88521063430c4063

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c6b901f483e30fb2532c09470376bfba

    SHA1

    f75a38e688aa317b481963b6ab434c9d4ff5e6f3

    SHA256

    83dfe05fd016297266872426dda83d02512fd33f2998b53f6818ffbb138d5515

    SHA512

    22f5fe4be6c5e9b6de7c6eb818687d8d1cc1815ab0f14bdc07a523a1f41cafd8acd7bd23ea85bacc6b0187046c858cf6935f25fe6cd55be840d2c458808e5b09

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f63d045d343f5782053bb361e871a6b4

    SHA1

    1f51f6c0985893b521e62b5431207cb3fa3eb25b

    SHA256

    a5f6ba9c8173851f3b58d5419120d3ae43ba551ab54be692160fbe43370e286c

    SHA512

    1dac0d07acbecccb84345f31a4dad6c5f61cb481ac395df47dd481934ea01b885850ee94cbd14371e156e2d35b4a6b2a97f28e1b54170be96c315b501034c5d8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    aa5e9621148e22d24eebb934cff54ef7

    SHA1

    7a8f1d71e5d4dd248a997114a3fb0512a828ac4c

    SHA256

    56c69a0c1a239ba2b5de62c196894786193eddefaa0ecf520721689371659956

    SHA512

    c36e7f65a8cefc74cc34aab9aeffcf969dfbf6dd76d9a93427631a61c617c0de6ce40ea55bcd3e9670b3bb5dd84572a672fa09c0369a24d17c0bf715468dd37e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5ce933fe8efede0a41c87ea4bef40332

    SHA1

    203d5608e22319e5ca41732d33bf6858fa606a39

    SHA256

    66a82bbf19a7d419a8686002778771a00b523a1bb1a2bf770692b866fb950e34

    SHA512

    554e1fa8a023d0f8e47bfba1a39d7135ea031ea47d0f0120a9adf302c5305dc59de793f74e8ff16632d012772e0e924f60b27bac569d5d4ee2c416df2cbb6384

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c3fa65c8d4d57ee978be732b17566204

    SHA1

    1d146aa8edda5932497b0180254813e3e246d766

    SHA256

    4cec4f4bc25dfbb458d3c4f0583038b1fa5361151169fa3a8dba62e107276fbd

    SHA512

    44e4800d651e106777ec2e5b2347021d39bb02ad3b35fdd5a00329dc75d572e5c105026c86f7e7ebb4570ca1d92c6a96cfaff48ce475e6fbd3b656f97f87e37b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    05a5caed351b4ab5c96fb6874418e1a2

    SHA1

    1ca9ad07e123569ea0ae30cce49b31f4acf508a9

    SHA256

    9278be7fe884fab6ebf34f3a69839dd6f4013cf6a206a75f336a04536a609cd7

    SHA512

    11d3a8cb07387f78454d8b4fe0159d9027059493ae65773848dabc799e3746d31c4c31d4a6405ce06ab3bded92f15f5b460ab11e458105b676075ff6314d167a

  • C:\Users\Admin\AppData\Local\Temp\Cab2C9E.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar2D9F.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b