Analysis

  • max time kernel
    133s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    13/07/2024, 15:08

General

  • Target

    agents.html

  • Size

    60KB

  • MD5

    bb73520b75685225a3945bacd88714db

  • SHA1

    1ed6f430714ab78138a47c2c4158a7cd8e1b0bd7

  • SHA256

    1476f2175bdc85f3eda21165549079f35586940a363b3e662ddc9012614705dc

  • SHA512

    466c56cb013e2cc5ed0c17c94eccaec1bafc2b7edbae851560377a4ddc99d7b9913e4a53a3f3666493183681f79542ee0bb679ded4e76cbe80e675f8ebbfe3b9

  • SSDEEP

    768:pkoRbiegm9tucLkLD+i/eNGNjQfAWYaKV28X4qPZB5aJw+j1U:pRgeYqqejfAWYaK864qPZ2Jw+j1U

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\agents.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2552
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2552 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2528

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    42406472fc0879da1e7f82eb0a9ee18f

    SHA1

    bae876595c344af4047523c469b5727ae990c3ef

    SHA256

    297174b40ac658c827bc284e92839239309fa06d824b3c2e2e2c1ea4c3341a3b

    SHA512

    7a50c3768dd4a8eb7281402bd09d1bbb3bd62b509d318f5fa63ca15871ab14e74463a90a37471671f33e45a44ba24fe747694a3157eb97432ae0eb7d4a3adf44

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c7cb7acdaa9c6534be31e55f60584359

    SHA1

    3d13030c5913a9c46761d376e2becef50fba31d2

    SHA256

    02d06689424042cd4c0e17da75f865a90c6a142e22357cf7549f2d885d60cd8e

    SHA512

    8a24f5ea6bd06049ba4d79335c28272a6fb186f6317e0e69d501e20b898bb62f412dd9856eb1ee3faa971c03e2505a1146309118aed7ccbbd9fd79ee19d0937f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3e6ed02eb251720eb96497b70dfd09ee

    SHA1

    18a7bccbe5e1a0717569778487f9a6b9fc8e65b9

    SHA256

    fcf9eac400959528b85e11c087fc402583428b28e1928502c6ee1de6e34b2b99

    SHA512

    dde4c54dbbc98ed6796dd12214c42cd6d69d4fb257138b6ca7022f35b452c32ab5a9e56a40e5f944b3365ba373d66e30d96421fbf6feda4cc20154df7f08f31f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c32b1532ee7322bc7aa55b605b7a2ea5

    SHA1

    7efab3564a60045a8787dc368e7cc27877fd062c

    SHA256

    89e5b6e13cc8395a211fd0252d8402d2a9a02e32119ad0196e7449181e34ea3c

    SHA512

    c587ec0687e0dbea2f218df5f6c1e267c6578b29a5bd8141784bd8eaa5b3aa36a07b541d1c7b6a176e3ed3440e0a5797bcf3a1bdcb832851ccb4a8b80d6d3409

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    03fc32e3b0c7251dabfa34b258849765

    SHA1

    55f781998638e195aa5bf0ef89b13508211fa85c

    SHA256

    d44b099197c683eff13418eda748c1e3ea72af6a63ee7ed4eb450a622d68b025

    SHA512

    0798372178393797718742571962e1c17b1a146dae66de4e5158ea38300bd92b123add02d967dd43cdd2b35de90b32f36a373fcae4cbe75cff030a2d0a46c037

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0d95f08d6f8d63448c63da0ef1230897

    SHA1

    bf8f4e7cb57a98933f2bdf16ce53e93c6d2eb0bb

    SHA256

    8bd62297d1ced6cdcda35be50701ef34046295e0b49694f84cc5b5f41048e9c7

    SHA512

    f4c5d9ec1d6a99a3c1f5c33031f2b7affeb5822c845fced46d37a0fc741c6a82cb6a66d551434203d989aa3bc85f94832f3db9cb6a32470fd1ea7fb11c2b106c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    72c9d4ba7139627a54919e069c763b03

    SHA1

    a7323cffc01c3eeea9bf09fe0ff7b99dcee16179

    SHA256

    c07f196d7b868ffbb3fe8e13a20c3a11890ef5e204e5ec9288bd6c5aae2e6c69

    SHA512

    8161ac0ce7e5f44a952940df0b6b67f9aabaeb9f01e0cfd5b9e7dcd1c39abe354e7dfb550df6a2dcfbeeceb43db955df0c89294116241c1daa818eadbadd371d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    21093b6ab88d65a7793be73f96f2420e

    SHA1

    8a91ac25d5e8dc5c66ac0880a331745ad8097423

    SHA256

    a7b156f2d78fe3732b6941661b18b926739582e6adc5e9394998bf925d3a7f5c

    SHA512

    1c7985f9cfd1d171cd092573a8ffec5832174cc6140bf54477f74a531be088343bfdd6ae431cef994f51fa85adbd56d493c4d2e6f0048710784fcb42039e65eb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1dbdae44c9d031a62de70d6265c597c0

    SHA1

    dcd68a2f7b51ca0185a122190e0ab431152bf2d5

    SHA256

    b0ae83c8c46bc1044c9caaecbde73698afbbbf2f211f9be1cdc2f2419f6f32d7

    SHA512

    f9f67ceb85e1a3cc7df7fc10ea1db143337c9dc76e0053243e43054a06e7b1d92d11708c7cd327814597b7f5fc9d493b0a78867e1c1e742008f6f7cb348d6f3f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9d910061633051dff2767591e6983bdc

    SHA1

    1c0c5e3f8047589c140be18b92ea1b6c6dffd057

    SHA256

    d04b7fb5427c08eed4fbbb854a0087598243c3b6860f06fff1be4724aa7f4581

    SHA512

    e37a9237ab6aa7ad713454525588f173d7a7a6ade8542600c9f3ee4d80385d137ffb57291a99068fcba9580b3c53ad11cd3662ad0072b1e5b573c5b95d4bdb64

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c43bf7f30f18f39dbe23b7904527d9f2

    SHA1

    30b46b4eca0f6d6c0fb32051da32746aefa36595

    SHA256

    0efc827bb5762cc95ef64342723b913a520bf1af5761af0b864bfbd3324b7658

    SHA512

    4d3ee1220c651b61973eb34f373e1cafc742bafb24812b4974dfb6b9b69a3fb8fffa6b94a4b51a2922085de815da7c37cb35f5e87604f3e5c900d7959edda5c7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4551a7b4acbb55fefd119fe1034d0b1d

    SHA1

    16afc00070aa2c06cde23917dfda9df6c86f3fd9

    SHA256

    b96d70a6af6d29cee1fe6c7cd6f32e8b8c03dfe98fb4f0b44b7145d97251b323

    SHA512

    e867d8cf179b9f99b7387bcc4ee76e6f700824a810c4e313a95f0e1f464ad057a9d96a098581514fd4efa7542e21444c5167831570c03099ff451e314f93a682

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    50f4004a4b7768942ee62aa310e9c6a9

    SHA1

    5f6ff7afca31c8c9c144143fb02471c517347cbb

    SHA256

    bd322e9de4ef061254ffd1af616e85c42348e596df0be19b8f9e829c33a7af8e

    SHA512

    ced795dee2ea6f48b9a34792c7976b601f921a817b8eb6a2f64ab44d8da871d384c6a80be09ed5079a3305a98b4cd403f7302d04dfd0c6a152957cf013f8f8bd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    786c020e6f4ef0eeb87882a537058bdb

    SHA1

    f8728d914eb243c971eb7672b29e7366e5218c2b

    SHA256

    689704a5cb75bf19644cb6e2395709f1a49d9c96022b2cf63f1c2db35e2fbfcf

    SHA512

    51ad2beecd5bf8cab84763c66fca1e2784e36c4650f949f1bb6b8733bee7481e76b45005331a8c564efd8bc994d22177dafecce1a0b8158998b1a0c5ae726d6a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0ee9dbf581a2b872e8aee00707571a62

    SHA1

    eaf510ccd5a5190ba4cbaeb8539f2970faf93542

    SHA256

    28baeec9c841fcde4627af4921305026746005190daedfe9f97bf1c06d17089f

    SHA512

    7dc0ba81f8d539c7afc01c27580b22c428556d67f64709015a5ef4f58849d501b67fa67959ae265fb319556c6ef58b0370af6acce03cd062f86db1c52ec2ae1e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    415f955939bf468e674dfa8c852bd985

    SHA1

    8eaf26ecec4e164aebe25610930a7f45c30e6010

    SHA256

    067d506522298a931d91aa259c75e8b9480461828429265c3c2e0dfb7e7479ad

    SHA512

    f760612642d7c538b418368fd359d39cbb1aee5be5ad7d33b70a7c8a9ecbe49234de55b2773738c791bdd3e13863fbdf65ff7514a47b45c29c2c7f9b355ab4d5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d12f37b6a5d665415236c50a984ef678

    SHA1

    4207aab038d23c25d415c5010ccd5d840552b5ea

    SHA256

    fa7012df2118d2b6f9b63b32fcabfa7a7bad18b8c28d6b07a5ce7e8c22009259

    SHA512

    e4685ec89bdbb093ba5854c4f6cc23636c74f26877657904b0a1a185d6fee7ab9529f86c9a111a9803042a6363ba23de207fbdd892c06d48ba91651eafb65386

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    70ae0d9ca3f9fb99092fae7951589889

    SHA1

    6b4574578214f8e5f7ca5d0ec24f9b3fb1d0048f

    SHA256

    4ac4d42c21b55ae1676d9f1e50ce444d963eae6f02a1d32eb5f1ec5270f8fe65

    SHA512

    41711200294b76341391314d37421922d3b4a94c1ca91f8a3c3771b2bf482fdd43ea2d912f2945a094b891c46f806c2e78ec7216283e5a63dccdf83762f3305c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2812054a1e6bd473934f165e59f4dbb9

    SHA1

    8cf3311aaaa0edbdc937777e3eabc3617859e79d

    SHA256

    c947c851fcf61bb2eb2c0898dbfb09d09f7fff79cb7a90987bf44393e8bbafc4

    SHA512

    62a7237a9ce8157afa8fbaa8da82760d0ece57c836465e5b7d5ac972feb883ef6ad0f54a607f0bdd28fa38fdac1af15e0b366d4e3d8278342ff7d54525f174cb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    63c5bca0600f4fc7de676b8f6c48c07d

    SHA1

    57a549f4f7c7f3f5cc38e6fec8428e1ad2368274

    SHA256

    825e688ae6af092a44d7c1b0e423c76b7982332e04e1b3b7679fe8e2b2a6d203

    SHA512

    c0dfa1524ee89c0f2ba0ff1d1772f85986446d37028691a179a37c9645a9168c73c534febe4f4544363deac957c8363137c2f7ff428d3ef40297baef0449db99

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    dd11b00c0e64c24604e9ef1b4338fd17

    SHA1

    86882f6bd646f3c1ff6bb8bd4bded291044cb673

    SHA256

    a83ed289755c3dabaa9205983ffe5cf052868030fae8a624b2366165c3b6dc0a

    SHA512

    d60c5d9bbd7ed58e9610548c1beb3226f7eece8fce51585b753e482544e5e2b7328f1df18f9751bf4dc8e26f7d2ae4efc1e0b21073cba0a101345ea9c8a71c85

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2b918cb7633e7f8aa0a52e01258edf68

    SHA1

    a93e21ddfbd5e93d338dfb89d097972248990651

    SHA256

    03ffbaadd4e90eaa824b3f489c5c49a5961324cc2523071739b92cb99ef41080

    SHA512

    1c83fae45323e7ad1723bbe141dad54d0242c6d5c78ae29a7ade160c9221558908c22e4e9589e7727efd5e9e9ad5fec36cd24a1be42549cf9ab8ed28f98cda49

  • C:\Users\Admin\AppData\Local\Temp\CabC053.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarC0C5.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b