Analysis

  • max time kernel
    135s
  • max time network
    133s
  • platform
    windows7_x64
  • resource
    win7-20240611-en
  • resource tags

    arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system
  • submitted
    12-06-2024 16:37

General

  • Target

    Fish-v327-0221/kweb/defaultmini.htm

  • Size

    1KB

  • MD5

    d57a9c61058cdfa65042ffc4b599744a

  • SHA1

    51d665364f57aeee6029495016257a5679165e95

  • SHA256

    7e0aa070280ba7aaae0cb1980a103f0ee4f16839e7203c5c95cf1fde97c96acf

  • SHA512

    5bbbd2d7f10fefdc4efde0c1c904882325b8d961497caf1c095d7a05a9a28c7b9085c0a1b860059f0f648749d1360a7ed35666fb617e00a8a4ce6bfc9c566d79

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\Fish-v327-0221\kweb\defaultmini.htm
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2236
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2236 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1244

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    44e688f4017591553db7dc1928094899

    SHA1

    2ffb2456385bd05b61b11f90a9d0ee842f39e5ec

    SHA256

    476aa69e5f28fd28519f7a43d800a0b0062e36f392118416bdeb30f7b7c44a44

    SHA512

    9eb542777b1bf016568bce02a788dcde84a3a1c322173f8471752ab7e11170987eeb7622a7298d57eebb7eeadb6f1f87438d500934946cb7bfe114cfbf1f8d1a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2e42472c65ebf5ddda3409bc9ba4f0aa

    SHA1

    053606a9f7e18ef01d253d85d17d50ee8814b1fb

    SHA256

    40cff9355753600d4bbf55138dd6413ab89e996942015e4484f407e408a0796f

    SHA512

    3cb0c92eb212f7b53b5847dd1902e8d3d50b1798c341340cbeb700b1177532e5a89dad669e2ecc23ec0302c6119a917b777db9d786d7d5ce208b2faaf297fc98

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c467abea70105f550e3376a301ad30fe

    SHA1

    546b54e48e3381b2af06b2d8480974f5702a0fe2

    SHA256

    e2eddfe730eaeffc46bb9f3b063336ea7a06475787836b32583bbcaae965c3ec

    SHA512

    288ada086c155e7460367f5fc2729ff004bc47f0baf498b8a96a54b5c586f2feb486bc69713c99806ddef996bbb70132a8e655cbdf7fdc1f2d3b81aa4f3be601

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    763fb5743d827c0a5c976436ee6e3ee4

    SHA1

    bf7f6f3d96ef6c7ee33408b304cf5a6c95e4a035

    SHA256

    3f8498d0a1e2897044db5e3723c0173bee6b6f316de650178ddd287a27fe13c3

    SHA512

    93f698bf84a38dda42dbfd9916218262f5815b8359d41ce51302d8e9dabe3f8a113c393be455bd0e1ff3e47475f46eadbddffc7c9806876a98640fe257e2deb8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    92fa289f708ed6358f208ef2cc60e107

    SHA1

    fdfa78c062fa2019d7f0e5fd2c21a4077932a828

    SHA256

    31ee5fd1a470ec02a4c3073f367e02dc20d989280e17abf67a5565dc381fb507

    SHA512

    c362fc0dd9ee44229cc3ce9262440f7a0e5459cbe9b440908876528a250d7e45ae3c9724126aedf9097a5850896752628bc7593693b6b926ff52b4ce69d8bdc0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    43dfd767e3c2c9cf2c8038037e9ad2e2

    SHA1

    6fcd8cab9239aefdfec7ad1c229dd32912fcca5c

    SHA256

    342b9478194dd14c5244735dbdac089bb098fe493c68d8b319bd6ee08e5147cb

    SHA512

    9617f02575f39468f404023bd9a9cc50ccc119ee605e8e227e2b7bf69d1d20e6b40f634a7c24c57e9df1c83001114653ed0a9cc6733b9117af4503b5a5030267

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ec5c185da54e996ed1c8a06022195eb2

    SHA1

    96049ed04a4eea7844c1efee93f3f9a9d9f66460

    SHA256

    c1d150d23ee40fd2d156e2f1cfa3fc9a09140632bd02418da48128c1b40c10bb

    SHA512

    4723d8e6d4796b0af8f38dc746dc9a62fee4f9639b92744478b046185083eef2283bc5f7542270def1b6eb49a1e50b287224f09607a4398c67a03b25e979ea71

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1680b8b21e42a93ac482b27766b2d6f9

    SHA1

    03f2295d171f96c36b7077f8b1b10977a3369c73

    SHA256

    35d58eecb74b09813fb0eee38d22370d599933fd12d469f0e46386fc55f2620c

    SHA512

    f3d02a3f36ea2bd0cfe5095cb0d4c4a3797d3d0c202a7ae7a15c216701761326717b9fd6ecf2cdf6c53516bc611b8f83a34b21e6154d2b8ddfd89d35cbb12fcb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    117ef3e381a3c6655b678339ad51c258

    SHA1

    ef8834f3dcc1a2d7231706e53fdc8670b64a7213

    SHA256

    915bef578b366b7d0912b31158a256c9bbd807f6e62e08ca7b83a3739dbc494a

    SHA512

    5b9e1abbb79f3af958cf15b1caeb20b313d0e53f989b6f48a3bf5060423a89440f21a5f21c50b332d072359e29213a70f4381564db3e3625480db56084379cf0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2ae6be9744597cd3d8ecf42a756ed14d

    SHA1

    d45176027211b1ba5d53e33f0240800bacec00ab

    SHA256

    b9613566727b68dfa917c13d51d520b041cd0993c0a1cdd8031118249b5618ac

    SHA512

    5d728cecc1c8c343e8db3c82917c586f18193c0a72faacf43680305e8c8e67e722839d5dfa7a2fbc8727d0a9f720af23037f6b48781e0eb3aff8312a48ff670c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bccbec2f571358c3921cf8638ddd6b9c

    SHA1

    de7aa0135ab7a084a56fa451c1370fbe6e668c6c

    SHA256

    d7031261713abb2ec01d4eb70974dcad088e41c6157960cb2c8c7b4137cdaeaf

    SHA512

    d0e5121e696d4837c842f0c97f6aff29da61fa6bc8ac581078ab3bc5437657cafa4c30817e5101cd2909fa764dd15cdd208b06bc4e018808a79a4ef37004a21b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4010c5ee623053839985491709569252

    SHA1

    0ed6c43af6535c483b8cb9479251354f66f60e81

    SHA256

    6cb84950c2bc3468284b702f0713d92fc27398e3f8be3f1a14a18361e8db324e

    SHA512

    580a8a0f1667f41894ea578af14d53f0818b4368ceb42f722addb0bf571971cd68e78317b2d746a8be1669518fd0b1d673d3bc8e25054a8a4df708b8eb5dd1bf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f38ad19f1bed11ba6646dc52d74b47c8

    SHA1

    6498536f2a092b0ca0aa1ef5e0c93f60923f44f1

    SHA256

    108433ff003c8c98e2bd1def098c3a47cef6014e3c6c62ab83394f118c075d5c

    SHA512

    6cf850f1fef341ee5f21f72ef13ec2b2d5c0b909a55e92e920b49558d3e49e3026332844fbe76ee15435f60ab539dae09e76d8fd4bc72553c073a40cc1e35107

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    058ea3b87ada9125509c7f512aa8d261

    SHA1

    5286d37b83b3392a05b412bf3c655e153e006477

    SHA256

    215a86b7f872c3325189887f3533dbb66b94169a9186b04943ce223532f52071

    SHA512

    5c9c0d9a362990daa9d9e0e911a21005acc5754a645d2774d83024f64d565116a6986e6e6a6ba89ea28c2a903cb2cb9b2397ebe2acf05410fcd36a2fee54038f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a214f4329b41297290efd760db8ad52c

    SHA1

    c63959b0406c65adba5c7b7b507319aec60c650f

    SHA256

    9981e63fa1c6c1d051a8ec915083a214409551ed8ac1bb8c8b685ca4988e708f

    SHA512

    a849b3402bed74776331fa148597223e53410846c2597a7206957723edea3ca3fe2a81b573c6bc158148104fc1e7e61f65479e4dc00830d8ee97672d9557c361

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    22501c1980ec1f2e079790e8065851ac

    SHA1

    edb0c422ad8f60add976cd6c4d1bd5d21b8393aa

    SHA256

    c0ab0cb5cd52c9bfbd5a7abd35caa6ce02b73502a16b46651795aedae39a1d6a

    SHA512

    17aeb293302525535a38855cf54a51cb1bf59ab6560da10be38ab0629718cf7431f91ef3a5ffd0933be335348956ddb6cf671ce76f65b441246173dec7af63f9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    caa0ff002a3aca0cf9cbdd5dc8c063c3

    SHA1

    0af53cd5cfbf417c314b6111428d2aac1a36fb9d

    SHA256

    18d648bf45a700b2d988814ce9f3a45c818b96dca2389df4afd1d96ce52c2364

    SHA512

    121abdad29f7810e2900d7654061b2529072b30735641c38ebacf6d9e60c66cae3ad5cebc8f4e6ee946772329931465bf78e12764b6e10ae99b4d7af22239310

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3cd498d03bb655a15556a50f312eba0b

    SHA1

    972c43532640f8ac6246d683e41728a5679124cc

    SHA256

    36b0e64c9b4b7d6c6b401645b538e9a1e6f991d41dfb1350be773c25a58eb8ae

    SHA512

    88775bc6ca38f919869bd201e5fa42d7a768d48c8d80b3f1062f0f7ffecbde0b9ddc2deca61eb9c9fcf1f72580a24221c4b74d4f74a9a8f0210c97951997cef2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7f4fcb33850d268a03e406e82aad5e63

    SHA1

    0a4e09e6ec5a4411474cec410ec86ad9a8db46d0

    SHA256

    d5fb34fa63ce7d8318145c896dd2ecfbf37bf2450ceaa49d48e12f1a036d1ce7

    SHA512

    235b72e268117e18ea0e87733c6784b9604993a629c6aa606d3d0bc7f2b810a84bbd763d953b948695165c52575789c00d35b37629319bc2ed5ddaee20b878c8

  • C:\Users\Admin\AppData\Local\Temp\Cab8DDF.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar8E80.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b