Analysis

  • max time kernel
    121s
  • max time network
    135s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    13-07-2024 15:35

General

  • Target

    LICENSES.chromium.html

  • Size

    4.5MB

  • MD5

    d4a79b5d46f0931b9eb7125fd40baff0

  • SHA1

    3a38fb263dde2251b9fe157b5fddec7acb07c53e

  • SHA256

    03f1d245e6a2facca9edbdaad108169e0765dd9101875bc2d123797994b9e80f

  • SHA512

    17cf94805f11d499ff12d8e42cb262ceecbeb265f56338e0837d291f6a7ed7f8135a025dbe99fdb2e2bb299f2267bed9365976ea51269aafd4c3220cffef9339

  • SSDEEP

    24576:thgBBmnLiLArZ62BrcrnKHq/kUkBAwi9QxruE:rYBmLAehN6KK+xV

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\LICENSES.chromium.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2460
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2460 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1572

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6136b1959947987eadbb0e3360889bb9

    SHA1

    c41e2b42bb9a1b48754ff7863c1d13c4df8f397a

    SHA256

    be7440865342059626f4e57cf936d25ffba46266cda1cc02a85de64fe3c32f8c

    SHA512

    09b1f4edc4c0e57de33d8d9644468e2e980b0551a24e7139b9d9812d2789c59c69f3ab5902ef81d406e6f62a5510dbc5bbc1c13449eaabf280e77c82bb96defa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b54e6ab609c8362c66d967db1101af66

    SHA1

    0cb4e5589458bc1672ae3e65f2e4891f32cff7a5

    SHA256

    47376da9fc52dbc0375466c68bf38eb6a9fb0d8646bfaa8552ccc2d7b27c1bfa

    SHA512

    85c42650f6190ad43aff0e35836cedf41e453daa9eff0bb07d506c198ca362e72f1b9361b08327d349b8272d6b21fff2f41e9fa13f89d83729fb57b115b540af

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    046cd945ff32ac7b961a444667a801d6

    SHA1

    1851cd67bf9602de9803d8a5b74461ece92767ff

    SHA256

    3954113b265a468562b50b346758abd1caea7456820d8d25693c73ca2caae5da

    SHA512

    1f921441c9d255307a7609d0fdead9edf6990cd50baa629eee0bc0b309846a0be4a962649cce6a6fbf0f563ea9c73ff1c296beb9ae0927b89e8bcc541720a962

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6bbfcb3f0eb56e0ae135e07499d66da6

    SHA1

    a83dd2ad7a02b144867b2c709a9a9d52f0003f97

    SHA256

    353354b30d5fb9274862b2f3363cb3f404b6cadbd1ff71cd4f612c7016c3c7db

    SHA512

    d7f36fc0d79c255c91bb046322c1ec0b21104dce60e42f680d72ffbe2172c82fb4481f1d96963d295796cd603cbdad34ec4eb6d4c4c17140d791929b3fcceea1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    de0ece7abff7e1bb9f3d51308fb2b0b0

    SHA1

    f4f5c0c824dd9840b6ad91f46dd5b9495c22ed39

    SHA256

    48c2a85be12ee9cc6427b99fcd01294a839777abe47a8f23dcf8f78491b399b9

    SHA512

    8c985e2081a59c577173d8e03d144b6fe1346134868ab9a509851bbb7a7c5ad307fa29ec1375e09351cb0c59fe062562edb09f50a93d63f9d51301b800088444

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6aa08de03fd6ce37c20c829eaad91dff

    SHA1

    bf124d539d5fba4e9e655fc2f6a5d68f95d6a84b

    SHA256

    c98e2c7cb6a9da73a52eed708bd922e7529d13eb4a7a6359b56d2d0e982573c2

    SHA512

    31640b936920ff80ce5218c3d69c108acfb1c1d321f510b54b66be86ad2cf4bddf6716457ecac399be0b4ae2e1478bef401197c720669568dc2bf5ad62dd49ec

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    321d6eedac1741127b89a5e07dfcb131

    SHA1

    c547e1590b6c636596e276951bce713da6b0f3d4

    SHA256

    653cb8ae5f29f06c8cd8e01c147fe721f43c04228d60a12f0a8c37dc3ce5e7c3

    SHA512

    bd9b85b13ca10971597b67852f9acd1a06bd83f6fdc9359c3693298c0d1edc912daa6df08546632d870a02b8526d1f00e762add80312aa8f58b5ee534956da04

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    90986ecad259ada5557c80156ff862b4

    SHA1

    973d62cac39c4edd73bf6cc9ef0255af85a281a4

    SHA256

    f4459e4a5836cc6e56abf28588c6e5beebff80a576c35433bcf03dcd3511c3ea

    SHA512

    fd9ab219137c2502e211f09cf91c56846551b8128e9ba984a609a8d3968dcdda5d29a6e444fbe7017b99d5d6734e995aad38cf2ea37a36afff8283dd17a02ed5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9f58525182eda2827f7bbcd88ebd0b3e

    SHA1

    82cc0b5041af92dbf210fc9b1e19f46ab8a63985

    SHA256

    4747234432efdc3cef225707214cefa4545aad5700d0cf87f192cf8ffab931b8

    SHA512

    0df1fd4a1ac3cc4897842d68bd2d3ba21974bcb2c4fc4e73f36fcc4c05f5f482ce25f2d9485947b0f16eab673b86f29c513f27adddf718e10b2b3510a1462452

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6f982fd22b4b55ece76d7815bae33251

    SHA1

    4b86dbc2955f8ae7485ab593b2455d4ff01fdbbe

    SHA256

    3fb66a666d5942607abb7f38033142c02375a3739468615d674498b80df22482

    SHA512

    d55a3566ad38ec0e66a6e535899de756b27c665df3b697c823e4ac56ab75e604a0dc7a0a274320e010c2e6b91a82430db806311492eadb7979a5822ec00c6861

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c2bc67475d147b0ca75594ac639ecbba

    SHA1

    61b1bb337f9b256a47a3be8299245516178321c5

    SHA256

    8dc6e2b662c6d86d83a51c133f7d2365cfde99927d0dc49c3313a3a03cea9dfd

    SHA512

    e016bf6007ffbf0f5e5a5d90036ef33e007a8f3fc5f77e920855290aad734f6d52254c7d952ec54760d09c583f6205d56ef643af8c0ff29b41b9059016799353

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    19adfbc2bb2aa753b2ca69715182a71e

    SHA1

    3fa90e6118f9aabe05c44dd4ebf17eb9ce94d659

    SHA256

    6f5da12f9877041b46e2dd4a29bc78bd1a1fd3b3e7c0ded2e4864592e495c7cc

    SHA512

    028e73030eec976d614242c7ba3d667de1d61018f46c9ebdc7de5c2e2c22d93d16443ceda1f7be6d30d629c80e10f9ee40d0e601d13edf40ff6e4a7f3b84ea2b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    75bb55b63896351dc7c1fdedda22b127

    SHA1

    d3e63eb1aacd53e38dfaee5f058fad0dd36b101e

    SHA256

    7314133908f4cab2fce27fd85c9ade3a56e224ef8c16a164bdf8406706d94f11

    SHA512

    27b661c3497b4049a02c8a978c28905fce3e81c7279639159ef4d30781603a9b6fdc34eaa35722c5564434c606335013306624cbf6687308a8c3c85279fd2c61

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fa3b5bf630273066ccde8bd5b51336bd

    SHA1

    fd584eb4cf8fe09dfdadd8466c2395dced78d97d

    SHA256

    5cb9090a7266521414e5e56fef95b1adff1782f862b805c2786f96c56c48defd

    SHA512

    7e28905a4c0c77a49c1240838f73f0a7b629493b0e4fbbd46091c3480ff8badd6b2582d450b414ae2d58a76e0b2d881ba9f9c55d04b2ad88418897cf4fd0509c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    df37d7faa6528174f88ee931d906803d

    SHA1

    09392602532273e29b6717e3cae7097c32ee0812

    SHA256

    887fea5c23e82f64e55f9fbc9f0231e7c2f60cadbabf7f6f477c51de3a41e593

    SHA512

    a2e1912234761d690d2a4d9528472f39df526d945e1423bce54803f2daad0671bdf1affefe56a6bce8ab1f6ab59903406fa83e87786db6d1517620f08422cb8b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    68f03f2ed83bd15892a63f8640521aae

    SHA1

    6881c43e09cdf2273995abcc02a3b9e753f34d6d

    SHA256

    32a66a3047ef5832357b481ead8cd0964640e227fa2dea02ac810cafbdd1dd49

    SHA512

    3ef44faa59b8a2ac047da0256cc6aa49a73022033ebfa1c6ba1e77a4fc0312bc5d38145720d1bc9ec6af8b8b6d9f6e3827b53c4497ab712574999b2c434c296f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d79b16bd6d8c283159d3a02acd6ec7e7

    SHA1

    ae4a9a089b303f9652e5f7f22a8b6b28eb1a1123

    SHA256

    806ec814bb09c374658714b05c68bb3da5c623db4bf39f33b6cc4c22e717a0c3

    SHA512

    215e448ea0b009241b06f1716777d8e7c1aa24959af0a07f47ba3c273799fdba3e4b18e1ebe51c3923a764384268995f52a9097b0c998260f52e04d1c555c5b3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    02b64019448d1e8919dbe49e56d13bc9

    SHA1

    e35022c672790db9cbebf76a95b14828655c42a1

    SHA256

    c2f04efc3a799a6de7937e674d124738f36abab54cdd351b3eb44c311ba944cf

    SHA512

    5e118f25f3149b93e17fd812e4a2ebb4f43e8cf7eddd551e48b6d43a99cc35fbd57937e2d63ecd3454aba796e1d1df61ce068a30aeeec79d9125b4a55b362cca

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c6888e0d353af57f4e82afa256cc9332

    SHA1

    399ecdbb2a4bf07425390ab9fa3ec9bd3b052d9d

    SHA256

    fd94def98f8c3fdfd583d67db476e659a45be9496a6d83f783ed63726fc20a7f

    SHA512

    deef9b72b130d76e7a2432c56fa43b750adde251196d2b3a7dd3053b7bf84f1cc51bc3506a5269f76219e926a00fc1aecbe69761352b11ffbeebaeaa04e1ea05

  • C:\Users\Admin\AppData\Local\Temp\CabCEF.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarD50.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b