Analysis

  • max time kernel
    121s
  • max time network
    132s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    14-07-2024 04:59

General

  • Target

    OEBPS/Text/introduccion.html

  • Size

    15KB

  • MD5

    0ca439585fbe4f98005feba94f687e17

  • SHA1

    149416e0af37158eaaad81d93958a29a3459d324

  • SHA256

    32d1951e7f88b0c72465a78cba67c909a142f16171f3129baf9492e5d5d6cae5

  • SHA512

    10eca588b507099586a3acd117f2abcec6eda09c488573e35dc370757179a4bf0765cc11d5bb52aa7e76b34301f4149009f03c3c28aaef60dfce7b36c5730952

  • SSDEEP

    384:PTakS2AK1yJp6OotdUJ0HOG4NfX+T1JbwNeehl:P/LkqgJAqhhl

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\OEBPS\Text\introduccion.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:3024
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:3024 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:584

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4914359ef7dbb020a4be8abe86d1627f

    SHA1

    db2d445a9116a08306aaa0a60993f9acc5b0f233

    SHA256

    5084cdd3c57ea8d7a0dffbba475fe9e45ca523815da9ab7213128bd3c73c840c

    SHA512

    1902903fcc0500b9ad1178f2ddab06474ab72a79a0df91542283d9deed2d254cc048eff35cd3cfd3be739ab66b58bb62a2a9c5579804dfcfdb3f826ca617c1cd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e57d96c4cba08d41a2846d6595459b9e

    SHA1

    d94a55b66e2f39b7f996b49b7e9e13acae598aed

    SHA256

    3757638de4dfc32daf92c4c4c4a74051ff48ce740a68ea3f9baf09256974ae2b

    SHA512

    835672c3fc9a4fdbbdbf0a1a3c72213018a28887517e8282bc12cfb154eb439f07fc16df5933d0c88e37a5c2c54da99e588b326b714f157cffc5957c8dcf8040

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e1047ca89ec180b8e7d7b252f878c64c

    SHA1

    fc6eb23bfc7c51862cf6643e5b11b48e23f0272d

    SHA256

    d557166a50427d8eda22ea7095631416ff1c1244e17d0a0b39c9d9cd0f3880cc

    SHA512

    0b5f1231516ff33d3199197572158a524a4cda5a289e4039943085b0a70cff34cf7cc33662687329ed9b5de0b9bef04a505f2d404cc5ee92b07964ccc318ff46

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b9d0ea46c23e3e90db89bbd17c4157e0

    SHA1

    644da6e2145c6cc916de303250b71ae53278c060

    SHA256

    09978249ce6f5ecc6313c4476a45409ae4952f851ae3b1f103e92c721108b5b4

    SHA512

    3f6962fe05909ce1427f9eab9f5acea5555c05e1e1d3e68ab84b99b8dd0d3ab6fa626c8e300f41889f73689e6055b8f964d787d3840963ea48790a1f5d8290c6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    921c12a3ebe44771819f4c628b94939c

    SHA1

    e7deb7901bdad471b65f7fe0458ac4ebc9ed0811

    SHA256

    7a056fd0c39c7da32db786b2adcd772e5ef416237a8e223e077b354b0e215489

    SHA512

    0970672000abe8abfb99df01f35b1fe4591ada678b16124f50c5deb448ff3e6c6b7cdafe3f5e3b1de7742f771f8fbaabd9aafc98ae6310c299202e97924e71a7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b9a300ecdf4a90468c1c49900d08c5ca

    SHA1

    bc596721ef852486e57c9609c8efebed8e46eacb

    SHA256

    d970c70cb4701992364699871343cb498e1624fd3ee5aed73b3c3c469fcd797c

    SHA512

    882467ba457d382b6c0e7a3469eae3a1261b53ccacf1df531e444a3625cdb733a6aa594b43667bd60feb888bc7d9da570f748ff6323800e2b1cad97879336ba7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9cac5c3b998ebe0322f132dda4e49502

    SHA1

    209f15b6e7d69a532c7a02845b436f42da94d4a0

    SHA256

    28d1f156c1b6712eac5ae88450ba541894004b9f891b6e6c5006e2ec1bc5411b

    SHA512

    49cea285b2e2437b78f82ec8d722a5c661636ca7178bbdca7ad9adc2d58edea3b9f5203de80debc09f134da2f7eb80eafc18c72f4569ae464010822bf0de2f2f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2276503171cccfc57a2630eadb648d2a

    SHA1

    e7f50ffccb9a7bf360558b51729cda250562ff91

    SHA256

    6fc7d33a1a04a44dafd434af726dd011ba041d56b2603a9152a5df2d94caa70a

    SHA512

    79638ba715f05b849f9c99276dc80a7d2aa3892bed89e9c2503e219b820a06ad4ec83eb09a89fbb7e381564ca74e7a535043c097392bdf0db865f08f92f6cf04

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4e0b2c5ce6a35863b99231c894224f77

    SHA1

    270dee4bcf122677e0dfa4cbd21cde644d6e8fc8

    SHA256

    b66a9d520c7488789f26d306d51e9c5f7f7b1a1527c871b679736479b19faaef

    SHA512

    3b0e73e2467872a17c9b7f5606c3c32166923b81b3bb481b1882351e627e965b6b5e9de2b5de51fa437383422e887d91e5c7ad99db6caf69b6cec267a1d385ef

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    405ba0c9f70e03486a8da6d802dbdf90

    SHA1

    f2d7e5e1143b261be08f4a7142bbc6a38349a346

    SHA256

    3009bf8958c13f5d177a6c2f6d36fc26c534659d6e82514a611810057e55a1c4

    SHA512

    8a8c2b73eda1aca97c21853de8e137a0b6416b4a588c4c558be5d985377160c4e74230bbf340addf0d3d1d15fc13a764cafb51e83f12a26fe84e000ae2bf4f25

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    881eddf6d74aa740fa56480f6642fa07

    SHA1

    3f02f906572440c6c3a9d4c999ac2f8b8112b72a

    SHA256

    ec39ad1a507953e1e5ed75f04076a3958a3fcd1d622d3b0b96d6d6e05d14f698

    SHA512

    b50dd494ecc44b17cd4ba93fa314752deb774090ee04cd07ab501efe0c88afbdb1797fe11aad30c7963c990d82a82b71e3c1a96c6685da539724e8ae8e0f75fc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bec1a440d53d487a903336f370be6863

    SHA1

    69d31ebac1f6eb01d10366af99cf498432de105f

    SHA256

    731779cb591ae6716406358706905863bc83394404b858deaff376b08841c5e5

    SHA512

    1297bcf937eddeaa8ec7902b8d67af2103228d7e706b4cce23f2da500d7b92680b74607a6eeec80feb0ef8ec22002ad673eacc7f6e567abb17597e3d9128446a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    10c3a9d639a708288e09c304858609fe

    SHA1

    14102ce980c5fcba6bb8be68b6693c4ac849486d

    SHA256

    9053b1639620a72373dcf84dc00061d13cfe60653d3b069744d216c6696b6b71

    SHA512

    d7d4089a8c9ddb7e8012e12dc2bd49df707cb9ec87101c6d16138cf2184b3ecf93db71ea238388aade74aa4c074dcc614ac64f4e120d5628abdcf61c6d2d6dd9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c7ad6e6d5194c482fc029dced3c2a133

    SHA1

    753cb5e87f167a3541dff522d80bf998fcb310be

    SHA256

    34f0a906780376c68cda88a678e7e80908647547814a688cd69a5127c9a4b091

    SHA512

    55832f04a7952e789000b7d3918e5ed1fd19fdedce56541d52453fe77104e77c04cef7b148db093f315e42977445e64a3a6854b98ac1dcf53758a6587803bd02

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    056f56a605617797da9c00241f9880b1

    SHA1

    0eb3abf7175a90d538e71efa59a1ee3da02856b8

    SHA256

    33b68886ed5a545c1410db6f891c6344313b7b12d73f8ec5a60fc1b9817fb672

    SHA512

    5e89dfd243344dbf9af041b4e0eaff9792432afb90962e22b69820e19fb3d5bcfc398008f715dc081113baf628ec7ead4e36bca2cbf63a912e93b5e04620e639

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a798fbd9d274496b37ae77544a1b56b5

    SHA1

    27023e453946124bc2fbd5d95ff3b36ce3788aab

    SHA256

    597bfea5e5a08144e3be7e827033cecec88be36a90cbbb50ba6b78beebd20c5e

    SHA512

    59b5024bd4e387f726ad2c832355d4d64d4a73cb2974f6cbf016c6efcac6398afda93c847330265a052366d72ad31a391f2d3747c2f27d3b2351d9715627c63b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    32f64e0ceab28cd07dc6d32ef6ed16fd

    SHA1

    81640e9690838130cd6a8fed96f70e17bccd14db

    SHA256

    9653820a6dcc3626092f797eeb7a98eacae36fec157904d624d9f7ca5d223b85

    SHA512

    16a6c46d34fba11123a5767c4b2a1bbd668e6db4491690602656053da9caca0916ee836f26944d9f0eee9dc8707524b71162808e96908e2c1ba4f76ad418f236

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d405fdb7e02d1a18894f990ecc954cb9

    SHA1

    e23ba2ee3e535c54b7e9bf5080f9c7a8ea8bbec9

    SHA256

    b1e894c71a41033e811d6655be97d7f468c103906dc9b402a6e3257c7141e3a8

    SHA512

    77b8b43bbfe24e3592346fac862de55a8782958ef9b85cfaecbbe4385f418797347316018bf20ac8f8fb0b564630bbd66f98ae7b9db02836a06e51f3e7c039e4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4cb0d6f793dfbc286837607c0d9dd1e4

    SHA1

    77f34ec650842881111419b3d19812039f0e9549

    SHA256

    87b1e283b2edff9b645686b73c96b189113f4321550e2a650f837698cf94d374

    SHA512

    19147e48a81181d71ee223b76ff427f1730c6a76c33172c47fed97842df5c510be53f7f816e34434e1daeabc04e3cdab553b371e123fa3717ba4822411952c89

  • C:\Users\Admin\AppData\Local\Temp\CabF20F.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar19AE.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b