Analysis

  • max time kernel
    138s
  • max time network
    139s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    10-07-2024 13:18

General

  • Target

    $APPDATA/seemao/config/map/www.99read.com.html

  • Size

    2B

  • MD5

    54cafa3a6d69c189cf2df3978fbdd435

  • SHA1

    ab34955f0a30619fc4faa49013902031d85ddc46

  • SHA256

    e12a7e051731cf1dbeefa2142a8e1abb1eb5898e2cbe4aa522120829a5588dc7

  • SHA512

    43e539801d00eb39811341d67327e0e8b7d97677e08c8cd14d501c1276592a80dcc0983306f292c702a7553d34bad9fa768cf9d046059c3a4b2a1a0a892f9410

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\$APPDATA\seemao\config\map\www.99read.com.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2972
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2972 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2740

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4ef2a97a006c9ae03b85bb3725586c8a

    SHA1

    43cfa925bdd4a7e85b694edae256171263155c6d

    SHA256

    9bcedc0d0e44a021e17af3eead44a24f871dd6692622e903cf20feed48821b3b

    SHA512

    37621323bf4813cbd007dc691aee8d2610f735413e06cec5adfc80400ac194a8eb7a895562806858c3183b15ede724901ddbf6fad8416cae87c3dd750c567107

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f3d8e3bdcb202f707627afd0462058f0

    SHA1

    89899723cab8c95d94e1d547aff06278900456b5

    SHA256

    33e81fb6383f2afe861ea14a04a8ab4a872058fec1a98f4303b31d714affbe70

    SHA512

    17bb4590d2fcddf04ee082dde2ad9a66db8495859c049a5d0f07bbd6bce19ab81bc5aa575e3e9ecef67cb487687aed60db8b48e336003718a27aeab40076a663

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0b0bcd3a92420b3ff7eeaff18babf47a

    SHA1

    987152e61b47e739cf0fd2b3f64d57be9cb3f3b5

    SHA256

    4648656231ca3d87366fbbb07402975166af61d581d39ddf468ec88be38685e3

    SHA512

    e4a847f9416889d439e1f0ecbfafcbbbdf5862dd86443a026cce0d971337adcb19dd8de1ea1abe38473517b1bf43c196914e00b72a97f28b7abfc82dbb0f0b00

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0bfe1e67551e8098ad507efc383b26dc

    SHA1

    32137838697ca704933d0ac19ec3013be066c375

    SHA256

    5ff22721b77ee765e4d003f28dc0de76f5d5102ebd475ffb5c83e598ce59224c

    SHA512

    938b5331fc9df8c3f767af3d0fb2036bfb24ecfb2f5684908ad74aeff778bbeb5ea7ab1dbcbf16182692f128dc9599c38f0106fadd41e7e96c7bb7c916ef2ec4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6821c13d31650341d0f0077911f86427

    SHA1

    03b0c747f30ed128c251f412277bf91e179b4a7f

    SHA256

    bae1f8d02d394f413804fb600787bc4bf005595275a4b5dc0d901c66c05ced4b

    SHA512

    f9802dbc4964c6c13644575527373c97b1bc07502082dc8d95cd2799a59deb6b907d8d6b04f506a06c2fbbedcf995ce74e612962a57bbe9aa6df49ab7a0243e8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    dfb9556582792f1aed2953e15a447ca4

    SHA1

    e4dc3d2e38bdc8b0a1573833b211df4b9b0b3ce5

    SHA256

    4b58a64d22cda30c4bfa0e7591263f4fc029e0d8882f7866fd0a9186c4b6e0d2

    SHA512

    79b7fdd33eb88bc64326bb89c222ef76a712d10db042b2aa241e44b02bef4900430f79f3d45e05ed6860abc3ee6460262e63a242174d6cd8d3ae28acfd5712e4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a8efd6fd93bf8c3a5083e1a6974ebb09

    SHA1

    0a8c90dc53114934173166637ee401044a31ff1b

    SHA256

    f49f2e549570c4e7c31c40a183a47380499eb047474d6f9ad1649b69238e2740

    SHA512

    cbacfc95d44573845004077edb2966693d9947bb2604b414a95b8bfe913cdd35ba95c72d1247e2af19fe56f3ee9c5b4ec64e1887d5ce620fbcbf1fe20b5221c2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9274b00446e99b12726f7dbc6877a796

    SHA1

    37da795f77e2cb84b8237c2ab6f824a79a3589bd

    SHA256

    50b3d607e852663e8aa9832a7d7baf5c4d7b8af647961267ccbf04adaef45698

    SHA512

    5dfb73367768bf75ecd99a70c3f9ce664f121743f9de16bc4639f8741c0fbe4251eec2aeb1303ad004e0242eb0a4ef9081ec8b1a38c94619efb04830c41ff135

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ee4cccf0bca7ba1fff3864d1ea8d2e7b

    SHA1

    d3480c1e87a7f4c03d5e2e707f7ee257dcb797ee

    SHA256

    438903d13c081340be01e170b5f966cc97c706b78ef993af361f07a5def05ab2

    SHA512

    debf1d2415949cdb2d1d2207f52f7232cc9538ad6cd8123f4c537dac3a991e320c774af945945843f4945f73d5327fcdffa9ecbd4268203708496be74d11cd02

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a394464fcf4636ee21d1026a22510e82

    SHA1

    f5b51124f09a8631b331cc30f6143429f63ae1b0

    SHA256

    be57208e1ffe46d3a66d3131ed7a15715dbcfcf649a032c0d98c87a6c7c887b0

    SHA512

    eeb8239dca55ef181fe72e634be9f90943c3a48ac6feb50b815d0f8cbc30229edd380f061ab9eb7a0e1c44a5227ea4ff09349a1610106d8fc36f31beaa1368b8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2d979109d26aa5ae737981c6d2e15c9b

    SHA1

    9db1a53e3e2e5a2ff88a513a782f125b78365e93

    SHA256

    f8315fa33735209e58992926346181483ff4ac9e5e529795534b41c34a848365

    SHA512

    18d317cf161a165966c73ba0c208bfcbce42d89ca70571fbcfd0e862e92e1ff884bb37b22d926efd3d11776c04a48e1dd9665b2f05e4581eab93d96134630bb4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ed4e0f77f78e449115617ffc4194cea3

    SHA1

    e905ea6cd33cf67517b5984140639b94ec662f3b

    SHA256

    937306d0a70056041371fe1c4bea72f1aa301871ad90822cbac64f74a4fb8932

    SHA512

    b9665d9b40427257aa7339663e0923c1794d6c0466e140e20b2fe7de506209ecb4f85a1a829a75e932a489f83e5a0ee81097879fce8a563a39ccc3026d890c4c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    28e975c98410fad272cff001abffa0cc

    SHA1

    4b28ed58d2192735faf395bb9b2dec31f9396dea

    SHA256

    9a6331327bb8616c042902d79c9fd43552705a23d8708dcda77f78a24b30bb2a

    SHA512

    dfdfae1ba9cf2928005d45ba99c525d4523173cae56afc64dfc0c127178fafa10d81bbbdf2fc228596243a7e749451e61f07bcadf98a732ac2e1905b4f9cc386

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    52fe8d4b7a83b008d71eef9e1db419f6

    SHA1

    64420daddcbac2a81b4d533b5dcae987f06dcbef

    SHA256

    baf8ed636d013b776b5b8081a68ede3fab6e73f4567472bc9b8a0ecd6bd0d79b

    SHA512

    3304aa2d81d0262edb68ff4eeea598c5af20b5f007a3043b83008de6a81bba16015773d2b066c39536461b177756516ff6b7bb777c69e9bbe9c2da01683f2c90

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5e6080b4762a605955ea052987481c5a

    SHA1

    034e603e1e79b1a8b0293914b53edeb47330caa9

    SHA256

    4ee5cbe0da97474da0ee84e0f878754e05e384b2dfc2201ca119ac306fabfd63

    SHA512

    0d3795b08ec1564f3391029afce1c24aad57f460c393687bebd7dcc32804c8ac9f68653292159405167eab1af83be1ac7ae4c5c84808b7a568421f83b5e29a5e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    368d81d7041ceea721ef644576f8ac7a

    SHA1

    c237bfb56839497d3cca8521a31f68b25f58f36c

    SHA256

    9cc84c769111099b69a7f38262138573b8f649026ec22fc1ddc2ad2dc61213cf

    SHA512

    e2ed8346c21148eecd3088d237d54090eae3e44d54c1fa3f767aaeb45195dea196e7ef5fdb17c0d331821b2306ae8b4d29313be09f7073f92f9f2c41430b4824

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    11d0b9e2d4f465d168db0b0ea8b0a4f5

    SHA1

    d2085e6995e6f6e9aab39578c190bc32cd3dfd41

    SHA256

    bb978eeb60c92015aa47fbdfc8f0c3664089b752f13837641b57a10220ade807

    SHA512

    54198eaa47cc01cbc12020ec423dfc89c873b5a9cf2997f1079dcb62bce62651590713ed8a97deb57b8a26cee3f2d4b2e09899f5868a360cd15c25d6f1de741d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    80ad0816686a889d392fc3497cd411d4

    SHA1

    98c2e543b1574161bd401f153c106d07116ff2c9

    SHA256

    02ec86e956401ca0ecdd85feaebd29b0c463e0f7597d55222d5b7d201eed2838

    SHA512

    466b7c02b7ba8e98f94baebb16339e964854e8017aee4068cbb3fd79f1aa0bdf5f56523db9e4b31bcd3b7e2549caa75700325b216579d46ab79cb3882d146b29

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9201cb12bb9ae07cbf730ba70c38b423

    SHA1

    d7149b264086d64851cbf354d69a2d139d86cd79

    SHA256

    463da39f6fc7db9741b09bd7423be24c0e8b7283460f395ddb928db1b1e9ab82

    SHA512

    06625c3aec14f939ff599a2819a5843e5d6a6aac5f1fc4293af45af953f9ce0cfc5a22f2f7ffa734e0dec1db87653ca3461287fad510ec61a2fd572abcbe325d

  • C:\Users\Admin\AppData\Local\Temp\Cab58BD.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar596C.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b