Analysis

  • max time kernel
    118s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240705-en
  • resource tags

    arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
  • submitted
    16/07/2024, 01:45

General

  • Target

    doc/InterfaceDeviceInformationWindow.html

  • Size

    7KB

  • MD5

    447fbf3422c78d56d3af97f507036c71

  • SHA1

    4563d496a36845d2588d0f8eebefd5738c7ef48a

  • SHA256

    7849562cdbfad4b57c65480d8c40856a881c94752a481c38d9948920773261b7

  • SHA512

    c1678359e95d1c64709c4d91d3f0b69e0863d3c568797f3064b00b421508745b9800a3f54e9752138bd6fb119b3a0e862f84d2e36a47fac96629f01d7e6604e4

  • SSDEEP

    192:ScQyHeiCuhMq33+HRDk/wKmg16pt+sx6FEu36F+UmZv0OA8D6KSWkUzyhww8gntO:SQeiCuhMq33+xwoKmgwt+sg8+UEvvFS8

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\doc\InterfaceDeviceInformationWindow.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2164
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2164 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1860

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    26df339e25b1b8ea61c5fa5850981e71

    SHA1

    1140b25f6162663d4e963f92c3c039867813e828

    SHA256

    e134152477e2f85c10793f3cd24857d01e0e1381558d4dc59aa0c306480bb02c

    SHA512

    07064fdd6a785654711abfb4e00eea3fec9b5343c88f51b89a0c8af4b3596d21236e8db4ac93e03e694e7088da8389af79446903ab614bb0e0da278c285c6ff5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    40784c22dc5babeefd099d3890d9ad1c

    SHA1

    8ea8cb407ad8d107b0646afd3502dfc9b87c5e9d

    SHA256

    c238cce26135d5810e366852f5053ccf65653d0e6328a90519d26345bd077cf4

    SHA512

    3ff1acd7d0c4381a77ed6ad96472302cc0fc72c79beb592e1a966de3089fcfbbe0fbc0c433fa7f8b7893386e5aae42221711e48dd5b650dbfd5c4dcfd92b17e5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0e3b2cac9897f9295777926a5ac6c0a9

    SHA1

    602e2ecf3d3198b848a985ef00bf5c304f60335c

    SHA256

    24651d3de6efc676e100419feabc5abb15ff86b702c84ebcf23d4d5aea952e6c

    SHA512

    ed5ff2fbd674b9516a983b8475e380eb155f22aa3d609e8d6e492862ac2f8d7eba13153d9e36afaa452d9a0aec6894032801bc88c942bd016701a1f806efdd87

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1aadae71565113e3ee7fbc485968ae5f

    SHA1

    dae82c5063348eb402c209f3a40f52c3eba61399

    SHA256

    5e7952e3c86447d3feafeec5496b3684a20f8ebd1a7e3a5cd3a3df1d94e0f6bb

    SHA512

    2bbd241e202b11f4946db26ed2c2f20537bf0e82bfa56edd51d831efc4c750869d1bc955310ffb5ca529497fdae9833020436af6f8d2d5b0c1e1283cda889ec4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    adeb39d19d9eaee04c8bf6d44546dbf8

    SHA1

    bf9d0803527c120ccc0146280f054134cec03161

    SHA256

    afe03dd8955db5f3d6d3fd0304ef7a8bb71f72ae5bc857d29c1b417a7a76d3e5

    SHA512

    aa279cf5192e779bb3719a3fe896c704e78ac2d60fd3d7ffad3fd1a0a0ba1f0736f012aa3f20ff1fe818e84dae2702dafe77ae659b70db539aab9e897df78c0c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    cddd012eb62f7939c11737634691f37d

    SHA1

    f243c844e47e9eb241096b6176a594a2e1ed581c

    SHA256

    25812108fcc721532975676d6b34c827da56994c34ded9565bf0bfbf3440c17b

    SHA512

    763b031d7e1b84145ccab86846e18cac0427296e687ea352b33db45331a11e382424a7002db399d17168bd47054b9225dec139ff81d7fb8d4454dd204efd3d9f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0d184f10421c0042b22dcbe2d40982c4

    SHA1

    d96d065bbe27885448905c2c91264ce1b2a27e7a

    SHA256

    18d23e81718d2094a872e47fe4893e5742b43e8f7af47343b301e4bd599924fe

    SHA512

    ea69832c1950406e9ac7e79c7e9f2e3a7be8f1a1b66c7b4ce6bedee42414acf7b6458c2d60a6c38f37b8996c27b497c739efd873e01dca2404e7bc435c743d61

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    51674c18eb58534d0fad3c6739e2f150

    SHA1

    4c36c738f0778e43fc2db9d7cc3caaff8fb36b33

    SHA256

    e7c880df30a0060e5b7cad7df3ceaa3b78e349e47fc1d9b82c8c572bae11bad0

    SHA512

    a80ed63191025139225177a80dad53428a485fe5bf79945f3e1f4b7279c2cef707f501a4c64fe0f8b1d18ced3f186f98b482a5228f526a174bffbbee57d7d1d4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    81fff70df4382fe509f8708e09ff955c

    SHA1

    f53eff003cdedce3b5590fed17d08b97c63f2d93

    SHA256

    6007b893beb8465a4a4ce64408286844880aa1864b50c1484f46d6143e5c3594

    SHA512

    c2c5bc5b566400e0c34381c69f0f130fea9098b66caa88491380e668b8a6b7bf37d577bf30f899c357a6f499cb9b4a933d4b1a0253476b961678171dd85f7267

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    97c070c374d422b1352fb423950b4d68

    SHA1

    22343bfc6a5817ceedffa8f0029618e4733da4e9

    SHA256

    4af90cadbb2c848189605c27224bcc0ce6101e78212eb2332baa9778ea36326e

    SHA512

    f544a74497754ba00653e207a8ca55a43f64e46d6daa41410c03ddedd614030f2dc901647e480bbdaf70afb21d17f5d9c55708efdc8d09671de065ecce535b40

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ecec4d5ef535499cee5696db46874de2

    SHA1

    76998baf4579e566ac7056efbc9ac7a3cb116ee3

    SHA256

    9e4e775a363e93cddf2495f7878eccbd688500ef21b25102a58f7c844334b088

    SHA512

    6024fb3ef542428f049ae1dfea1e197df71aa87522bf3f6d60a6e1997b4e2cfadc9456c8660ec95c59704c5dd1e17c0bfcaace16dd1b929736968bb65fd2aa67

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6fd120947b97293d175a71d527efdc82

    SHA1

    471bf808a5fdd3dfa83df0f223dced689887dd0a

    SHA256

    7f7e4755d0438d49f62859d59d180934f8e58cdc3ecbaccd1244a1fa9645789e

    SHA512

    1759d19c2b2d330cf0de48da9d299ca0c46bfb037229f89777b00715c4259c87226a39a75f2a2ef01aad2257fb64f74231a9581f12a99504d2df5bf17e56f106

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d0622019f713eb4d79ea16113dc5fa49

    SHA1

    b1af6646c7c04189002cd46d282ec3595cf7127b

    SHA256

    1898f777c1da52df94aedf13939fb499312a297e852d026e3749692565ab540f

    SHA512

    6ecbc256b9de3e719c42e1752d1c444f796c37ba26e810497cf9b948330fb88c49620b7918a57c721edd1c86c6107d0cb523ccf3abe990a407d6b5ea8c77e7d2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e8593d7d4101966d1c22293acf588de6

    SHA1

    ae26b64d2c09ee2924b9bf0165451d3b64026bd1

    SHA256

    9f72a7ad2804adf11282c538489cc22d55a9dc6e4782c26c756ccf815bbf42de

    SHA512

    858ef9db4f39e1e9255a3e3345768f13a25f1b7696f880e80d1c614a304e130e516a0128f07197e1cc1ac0b7bb45f1420d1fe83778e65efaf68fadd92d66ec32

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1a07c08e45411ba2c1ee24f37eb95b15

    SHA1

    f8ee7ce80a7d346a4f1670df1995b365f7da6a87

    SHA256

    199ffabe711e098705b8288fb1371ee9faf857a90c42026169cedae49dfee82c

    SHA512

    6d981f4232ab44ad21a69e07e7a5ab4da3c46ce68020b3c52be2609c2de56fe931cba0ebd76b91d09276769374bd7e5b6e31dc8076bc9369a6a5cda19292933b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a2638c6bbe1649481c292ca4f391e740

    SHA1

    e85a94f9db981d4a40382c18320c95c349a04ea7

    SHA256

    6d2e2312f78fbb3410f4befe895ae1d656550904a01480f224471a7a58f60d16

    SHA512

    b2b711c8c1bceb4d7be5c9b8c1248edbc06cc2c8659c12e1927608e60c0c25b2442ff0f4e0463ef4f6af558deb09083b005865e3e6e60aab9da0bd5ad44f6eda

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c17291d4944d5b398c6b3d11b25a4cdd

    SHA1

    20b0ef355066e25b70664ceb7adddc34f82c7acf

    SHA256

    5428ec1214b32c9b090ed1faa53887d4b70985c6b23ddf096fdc6f7bdb7909b1

    SHA512

    23a89ea8c5f11616cdc120768ee1479678b30a16856521a21055415d1d8da699a32f33ffec00cfe4993a32ecbd036d6549af210cf45d2a7e922b8169e54d7afc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    34421c7386dfa2f24ca788a18eca7c0c

    SHA1

    ff8e15bbcc7021f04e13915a49d869847bf26bc9

    SHA256

    4335447ed9b50bdbfd4c26907ea85c4f1f0c3bf9fc1c885564ab66eddaa81a89

    SHA512

    f49ca663e658f270c2d2f28efbe4b15e429c67a0a2cb1059281e851fb0670e4b3f295a915f19901432e6c0694e9d2fb720a61b1f24c70b9124cbdd39a65926d5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d6c803d46de32de92080c24e0d71211e

    SHA1

    9347354e5056fc81b5c74f9fcdf98634ba7e060b

    SHA256

    f468153de2667e75cc90f8b0f9a7fbc245a821f2601401ef040a2401216560c0

    SHA512

    801730b3fb9195d11d6034fec12ffdd284f20834a4bd5769bca68e5a62cad4db291c8c21e94571f3378757c21378b9510e644ef81b5867140c9488ca13d75604

  • C:\Users\Admin\AppData\Local\Temp\Cab1E2E.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar1EDC.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b