Analysis

  • max time kernel
    117s
  • max time network
    132s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    01/07/2024, 20:13

General

  • Target

    LICENSES.chromium.html

  • Size

    4.5MB

  • MD5

    d4a79b5d46f0931b9eb7125fd40baff0

  • SHA1

    3a38fb263dde2251b9fe157b5fddec7acb07c53e

  • SHA256

    03f1d245e6a2facca9edbdaad108169e0765dd9101875bc2d123797994b9e80f

  • SHA512

    17cf94805f11d499ff12d8e42cb262ceecbeb265f56338e0837d291f6a7ed7f8135a025dbe99fdb2e2bb299f2267bed9365976ea51269aafd4c3220cffef9339

  • SSDEEP

    24576:thgBBmnLiLArZ62BrcrnKHq/kUkBAwi9QxruE:rYBmLAehN6KK+xV

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\LICENSES.chromium.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2836
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2836 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2560

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8a8ffd5d3c7604fcee6615cd29ff7865

    SHA1

    d7ced104aaa3dc308b8769933f24a8da3181ae56

    SHA256

    925d66cdbdf567aa16d5a5b7f7974185ab7fcbdd76a8d3df712966afeea0239c

    SHA512

    f736af0c7c46c4195b945f04352d0ebcb2b1aa77ca7a9359ddf981bacff5e9543c4f0db70f51125d7faacc1edd22d99c57e392dca6cde6833eb644249f433b1e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5678127d42c12fa466a02bb3aee1a9b2

    SHA1

    06a2c9c44cd69a2ece21ad7d0752c164dd1d04db

    SHA256

    bbf4e5a26e4228b7aa7c961259db4fb4ad3e14ee55229476910db2903ab9a336

    SHA512

    aa5404b762e55c02da6582cfd35f1c1663e23f3e9b2feab4e778196471918af67e78ceebacb1abea3ed2b7aed1fd48c88783c98534f5298b1935c775a98b4717

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3e5d0f8980f2eccb2083fbe0f8181664

    SHA1

    4ae89d5e36a3dcd107d09989f47a81915a8d0971

    SHA256

    4a5c8f5d6c89358599d37219c46f0680c1d8d44390e65af119038a98774ae285

    SHA512

    90c0465ab6c56f3137844a441ebb09fb9ba55ea06990a9eb7f84ed69b11bc7d1aa2478f6aa6a4b816c679e71dbfbaf0787c5798581ce2f2c159aaef0bfd4c512

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c5ea3941952011251a2e5ac812a3b4ee

    SHA1

    3e5d5e16413692e18df67398178b89918f76629e

    SHA256

    3dfdb9bf83124a259a9d9fe5019582c2859f7a4408afc3609f0b852775f5ca8c

    SHA512

    07c912bea7d44ac351bbe3752f067f02fede24b30aaa5f1c192ed15797ba9dd47ee36ed9b6db8bb8b035ca2642994b380c096e45577bcba7353df1b1a45eb5c6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    22a04240ca7c849cff27c78bd09ed667

    SHA1

    d055f8b0a085fb854160562c1d6ba957335623de

    SHA256

    5fb922dee52b56a5068f616d64719c9884b8b95249d497128fd1ed831f7b5a0f

    SHA512

    2aa34122a7c2083bf6abcfe03a035ccf04c349bb667ac4ea5b0948de747e6454b8fcf06777424ad3b42507ef0d977060a622d9a90acae5603a6ba38095853708

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    099849e9260397a3aaa0803efe07190a

    SHA1

    42ab3406f5d88b5cc2179f446354482d4d444238

    SHA256

    39d7fe72c12f6622849effe3a276ab12f3634678c12ea70c9d7394e473f63b37

    SHA512

    a3683f20931b00b6904f2fe6dbca7232239b007809f2e24e4e7438aeb71c4d85525485289940ec406c695fa19b4ed46af5c5321c9e3f67d7336a0fadf3f8cd52

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    23c8c451edf8ece1e69fa7b33997f736

    SHA1

    9943e326997d0c6b77ad17a01ce04b9ad8329311

    SHA256

    024a723819e07cb0845fa7a7a8697ad46d9592db22ebc564d553ef54d80d2099

    SHA512

    7be75c1e9ad869c4a35a6f24234533cf7f1da4f2bff0cef94db2c227141e8f8a103fe26659f8b248772a020021d574de10d3dbb621e57bf19179222a196e859d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    eabd6bf2823e0c19b6abc853ba6c797b

    SHA1

    0566137592ac0d491d01ae93354c32b99671e4a7

    SHA256

    2da5a7fdb68a0002d9b374bf965fc49223fbfa9b903e7182d788a1f6a1be268e

    SHA512

    b8ca34c4a5a927d11cb739ea7a65065067baae33d2e12f3cc0f15da366ffaca6e04539ff7fee7b880910b08b8538cc99d794ba1a3f4b792b3a6b783de18d204b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c13e353399f5e037af5acbf75b7d4057

    SHA1

    bc38312103da11790bb0007adf819917d94fa367

    SHA256

    d2312b63905ecc1438a36e1c4e982d33c815b4a58db59484a9fe20e08feee2ef

    SHA512

    d727f0e6c5619cd57716da88cb4cd61a993a6e7a1dd573b13573cf05e554a86cb4b7a62a267a542d4675f0191304c913420f26150c8dc4c40fa05ca01310f396

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    79b7527fbed098ebe7834b70e41403df

    SHA1

    38a07599d2538be729331331f4e0d6764a2e6f86

    SHA256

    48620e78ff8716776c252bc6cfb38a4ba76c1a3a5864637c1ac3c7aeb4d94c3b

    SHA512

    48c222b3e2862627eb43ae11f2ea79c412d30d17f8473870336edaf7d0c1f9a6babc008fff12821de2348f4846697b3dd4b51aabb3225f1524b6b4702a3f8b96

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4faec29b9516c946a839e8c52b79aad7

    SHA1

    051fdd32049b0bfa559cb05aa00c3d8fcd1bcc41

    SHA256

    ecf5b89c919cf3c98026d80ee444abec2289697c644514f05aef19b971c21a52

    SHA512

    9d02fea6fc6e8b3f5e17b33e8fc61f35d87b113fc577465fee3b187e309f02554a45d19c2736d0f2212f5f5ba1ba5d25f1f396f31ff98c933cac2dda5d2e1f02

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7ee6cf99424e15e2c9af7eb9a1ba4b86

    SHA1

    f1fc82ce6e6ff759f1418493aa44af41d6a6ef09

    SHA256

    a4092f7ac5728e2cfa972d678f9430de86ec3209e2ba251a061d6e58482dc568

    SHA512

    5c19f9141eeb4285fc69bb7ea5daeedbbc27098d8c74ccaeed5d8676ebd5e0cf38886035798eebb9f7d55f95413985c9b8220c8be1bc83c1fdb9fd45410c7db2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ae1d4e56ae1547c9ba71b0cdda244220

    SHA1

    558e442d7b1290ae043f8acaf382b6282597c1a1

    SHA256

    3f7f39f2fb82cf502d9c22638243a319886343b2be264377a4e955a166b07169

    SHA512

    7b0d40d208838f9a1146a1f970b079017cb57dcc440b5ef9c06d0d656ae349d37e7c4c4745e41cf629cae7778ad69ba6da7b0e9d4923567851f8ee7e3a606b4c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a9eb79df313446c67f89a1fe44b02baa

    SHA1

    fea11691369a2b73c5d33cf4205e4c3c761bc978

    SHA256

    20fc68c9d4a7946275c754271fe953470725d514441d947207d50c7acc9c1454

    SHA512

    f5c192c50783fac3e94e08cde6efae491403fa9c6db993c590b8afd82fbf0c61b769a1556a9fc572911b94db0b1de7da26da9de48b775179dcb3b8760f58658d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    01596596d11ad715e6d32d6672cda702

    SHA1

    c888178c0f55d3c803b5d3b13b872c82941d9ec9

    SHA256

    c0e29acf6ec7c8670cf1735c7deda87e4076850a8941c468803a864ef779da0c

    SHA512

    0233f2550499960f076b109b028c798d68468b8087218452770ed1e8dbb48ac11fc418259bd1c054168b0764cc90b26093c8c1cda5ebc88072e8d415555d5ffa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    db03b85d14156b3c976e3f7c12d85650

    SHA1

    2fe3ea382b59fe9c0ae14ba87e6248be73125012

    SHA256

    e36810479a9706c9f52f2b1755ff7237e7bf46f1cc8884cb2bcb66f4efe592b6

    SHA512

    76d3b341ed2e60374ed8e22de00ba4913398925dbb41bca846f3678405671f2cc5de5115e2e32f30772207d7d1f1122c8e275c2aba7b9109ccd5d115ab6af63d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    63de5a0129d44a2a833fa2ebe20dd3d1

    SHA1

    c76fc4d205af4d04810501d9d983951a76e5ea52

    SHA256

    d37827f9b920543780f889976f73be62a68dc6ea98f1a661cdddeee700fd19a5

    SHA512

    195cbafd8d9a64844f3a1b7ef6c6f160b39d1bfb275d6d644dd17b4b10b970257af61a935ae63dd4fbe61b5aa40b6ef5bea4e30a9124ec271abb3f7f6374776d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1029f51a4661f4c0bff3051547cdbf5f

    SHA1

    7c837e791094391b933fffcb84b07db8b9236756

    SHA256

    08c50d91cf458503fd82a6b20ab81beeb74adc78cc1a8cdbfd2c09204f5607b6

    SHA512

    753da1283bc46f9bbb8819169db70ac253d8ace524070dddb4ec1ab7061c18fe0afe3daba3960849aa61ee02c9b9540afa542bef7bd69bf6586f1e941a698c86

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1b2e2dbe95b0e1f013c1f6c643249085

    SHA1

    c0c73694229ca7a826ab847e4417c4f5c22b9c10

    SHA256

    e9c13dee300a9d6a3737db827339f4988f1f26e654fcd5bf7d696037a3ab5d34

    SHA512

    4676085fcecd9594c07aaf13b3164fb6e5a21be21fcac1e92f39f3ae3328dc3b4edfb5d837c3eb6e085895de8e6039e3a0fcf2c85373bb28518924ea43957d16

  • C:\Users\Admin\AppData\Local\Temp\Cab4F4B.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar508A.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b