Analysis

  • max time kernel
    120s
  • max time network
    129s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    25/06/2024, 16:48

General

  • Target

    114/Extension/Ext_JCAdvComponent/0.1.1.0/Skin/UITemplate/template.Ext_JCAdvComponent_UICtrl_Date.html

  • Size

    112B

  • MD5

    bfa69aff44bc233b0b5f81699f39f309

  • SHA1

    e8cca144d04f9f71437d0535121f5d11966d5985

  • SHA256

    383233d9c8642a8bfc52c7638e625e393244f7de0b923d0c24cdf6551412d411

  • SHA512

    b1b7eac180da513e417a307ef68347a2d5065caf7c9d355bd25ebb040f04a88975f40fa89293b7e029349a5debee4f87c9e294da0a0b9ce8ab0b31a6f02ea2ea

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 38 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\114\Extension\Ext_JCAdvComponent\0.1.1.0\Skin\UITemplate\template.Ext_JCAdvComponent_UICtrl_Date.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2148
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2148 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2416

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    783d48c049961fb2ce9f009bcc890d48

    SHA1

    ccab6c0720d32957e8c37c87bc06465f38cc08bb

    SHA256

    17f61592a065b38aa571bd1b5d6a314e094c68176a164bea9e4ff404bca95418

    SHA512

    e8630298d82e382ebf6c644e7f8ff44bce29654eed58a379294c8832d9923b67826e9507b29605c0221e22914ae109be01288396032282e402e88ff33ad49157

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    ebcc0b8ecd70c1b37c14e22ee606ea82

    SHA1

    756e183d16347bb486d396b41a13e09fa5ed3908

    SHA256

    506dd46d4b99f13f59178d6834ff6d088d42f33607dd783c09131caf2e71c73d

    SHA512

    efbcd89d3b21e4e46471f7bbfa7ef618103ddcad2b27f6acab7292e42d610042ef33f1294ea81e543f9a9fa57a2c0e087d715592bccd3fc021e4f65167a23918

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    17ab2b443fc81df552050204bd335bdd

    SHA1

    c230271d44ee726134cbe84ff6d063d203c66f68

    SHA256

    b9be698156229ea6c93c1410d268fce5895ba129f9b2e922832a4386770fffd8

    SHA512

    33528db2f3224beb4c301f1c494e19bb69f05547ceea3fbdb8f8da9efab7e08a342c7e1763da875ed27d5eff3c9c05bb1bd15331ae0a428af73dfafe63eaebe7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f8a342d06b4379f102ddca12db4a01a5

    SHA1

    f45a939f0568a3e1eeb0918fef2100222cc45754

    SHA256

    ed2c671f67c455ffcd96cd66f2ece424511d6b1f422cd5faf9bec1953f6f7353

    SHA512

    115fb478576067fb12a42a17489f994ef2f7347cb487a58a4ed4ea23107a1795049c63a58847e1f8ef1aad16cbadce8b3d0ab6514918f8d173cb61f2fc37f999

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    00e600559876bbf16a10aa80ef777209

    SHA1

    ed0548fd98a6bdd013837d3ce324c275e235b2f8

    SHA256

    0141e6760c1f8534bcbe4ca14b83111a39fd541c004c451ead152cc3e8262696

    SHA512

    8b66c0c0c81dd109480a5959737df1c854fb0189b470fa39b1ff3d215f40c299b1e5c9f448692b933a9d53ad44bc6a1e169285a94d55aaa4201d73deb3e42930

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3dc0738aa0772fa980e19728d68f5f2d

    SHA1

    8e84630053dd3d09fcb8abfd68a2181109b3f466

    SHA256

    48b0b0f7e3dc30b7ab340e7b7c3b38c06aa5be3a40a787e9d85e897b433a84db

    SHA512

    411f6d8fb51504678ab1b3d7ed8faab84303c7e69bf69fc04d66b4f62f0469c970c8fe296413a85e0979dca3c88ba16492a15d6f004002e4fae19538143a5812

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    798805340374a593c851eb1cdef8de17

    SHA1

    a982f5805a0e7533f63a27b1ee9a3fbb4fe7401a

    SHA256

    00ef8c52a7d1f1eb3a05f627e1c3b0441147a11c72d0645f7d4bfecc63ea0ad4

    SHA512

    1f0e519aa74747fe2609dc76786396acea8829a00970e4d9de4e7c2dbb32a31f459a5a1667da449a6c2e47786d3355dd4229144d65ff1f8d088ca80f3bb68cf9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    765e89f7b077e4dccfa3e30b89623a00

    SHA1

    89f87f2909cd667cd3a38aa9b82dc6e51691b6e6

    SHA256

    222ef0cb7830003c652a6c75e093e70d7856cf5c76084653d905b7401da50c40

    SHA512

    3eeab8e4cf767b58a614fdfa3117df09602c53618388c0f4405fe94947f62f76e36f81a960c550ddfc4814e9356ade696950f7f1d0711f82dd0e5941e2f2df68

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e6f5980b20d93ba58dc291872a991304

    SHA1

    ac9140b48ca14ef43fe93dc568a5d08cb3cf6c3a

    SHA256

    9ac4c9f6d4faf57bee744fcdbae50ead2c4b559fe08235ae80eadecd18abfbbb

    SHA512

    8c9366746f5eb1ce70f90b6a05bd07f8079c258393686fdd4a88adf95fcb41dcbac1006dea416469239236665bd52315ff5056dffb70fc7379c780d2a3daf66f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1449f4850e19519a76d9bbf0e8d42266

    SHA1

    60fe7168203e9c34938653dfc6b3f4b2c938f1d2

    SHA256

    2ddf4670e6cb5e6a12793c072376140af68a5706a628b976b7d28359d90cd0dd

    SHA512

    88268c82222f0c69b36eb89180df5380b3b4a8dbcb86e720838bc8ec14de2063df1a765d5f2f9e2ad75fcb72af6a2b2e2a4d99c71625d82062c23bd552383dfc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fbb78ac74de176d37b268a949bc26058

    SHA1

    b27c142f22dddb0c5413df8178f7edbec47983b9

    SHA256

    a2585e3704e6d13ed7ae610f59312a4368cee221d128cb8736c82988af77b252

    SHA512

    7232b7f36b9f99aaa7b548d86362249e835d79492aebd8bc6a137ded2e62e9a3ecee2fea4d0cb89357fb2c416be1f6e88273a2e12ffef95fa6f6ba0d35fab75c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f386668551921fb33410b9b911c25e56

    SHA1

    5d92208555d1d64528f0bfc91770db11ac670ad2

    SHA256

    49eeedf8800471c9c73936d666fde5a93830afcb7a64163c910e73b9f474a336

    SHA512

    e06aefa1b6d9676cece2063cb2f8779616bb2683fdb106577b0b9edd79f3cbd9e06e6cac6b7f936224be87b62d17896ba90027c55504001f35f4d13ca668a3ff

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9ce50cc81b8f81ab4b596de5b550fd10

    SHA1

    6c72ae3d3d223298610fc4a487affe59fde3b1c8

    SHA256

    beb522c514062fd9b25a973168655c43b65a057d81d4f083f3ce43de50c8da20

    SHA512

    85dba9fb411e4284be4fa461cf559b3eecd5b4035b9ca10bbe0e4ba51f3342117eae2f1ff213728b9424725824f0fe18d7de8aaa27dd13b2e3269d8b3a1ea0f3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    7f71218a61bcd76375be0de310b1cda3

    SHA1

    08c9e702b6860bf32fcde4a2b899f3f284cb51ee

    SHA256

    4030f27d4d95f5948fd1058f63314fd717eae39284b1fd1e49ceb93b122782a2

    SHA512

    f1e468887463e70175bb1b7ec800cde7d90902bc76915ebf2a8691a4dcfdf8e875cce3ca332bf28bf0005cb80b59b31c46f90bdf058b827b9dd6c6fecaa0dc99

  • C:\Users\Admin\AppData\LocalLow\Microsoft\Internet Explorer\Services\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico

    Filesize

    4KB

    MD5

    da597791be3b6e732f0bc8b20e38ee62

    SHA1

    1125c45d285c360542027d7554a5c442288974de

    SHA256

    5b2c34b3c4e8dd898b664dba6c3786e2ff9869eff55d673aa48361f11325ed07

    SHA512

    d8dc8358727590a1ed74dc70356aedc0499552c2dc0cd4f7a01853dd85ceb3aead5fbdc7c75d7da36db6af2448ce5abdff64cebdca3533ecad953c061a9b338e

  • C:\Users\Admin\AppData\Local\Temp\Tar2330.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b