Analysis

  • max time kernel
    134s
  • max time network
    132s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    20-07-2024 23:31

General

  • Target

    upload/data/index.html

  • Size

    1B

  • MD5

    7215ee9c7d9dc229d2921a40e899ec5f

  • SHA1

    b858cb282617fb0956d960215c8e84d1ccf909c6

  • SHA256

    36a9e7f1c95b82ffb99743e0c5c4ce95d83c9a430aac59f84ef3cbfab6145068

  • SHA512

    f90ddd77e400dfe6a3fcf479b00b1ee29e7015c5bb8cd70f5f15b4886cc339275ff553fc8a053f8ddc7324f45168cffaf81f8c3ac93996f6536eef38e5e40768

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\upload\data\index.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2312
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2312 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2428

Network

MITRE ATT&CK Matrix ATT&CK v13

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    342B

    MD5

    91dfdee102adcfa117a666587e4073e1

    SHA1

    cea5c8cbdd1c2cb569ccb0eb0ab5f731a846ae64

    SHA256

    a04f2469d548f47f4d05c6a69ee425a61fff607218df0ebcbcab7e3dd39d343f

    SHA512

    78f181e07625423c014e354c4e57b2edd6d2db7224e2b0f11b039fb2dd5ac3a8950da1dc5eadebe2f430c5c7d06047c0ca1d882b8ec606ecb766037eec9fb6f4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    342B

    MD5

    3270fb3272220c819b5f0f15328bbba7

    SHA1

    cb7ef909722961549700a1a18ac4e2ec287ab930

    SHA256

    9a9cdec0190420eb007b06c3bd0fe9e9b3f3ebccb633b286a746b27e3b161244

    SHA512

    66817f2174b6d46dc4f019aee73b6bc92390ecfd052c53775ba66697a909c3796f2e259779ac6797fa8ae52a0e81363ee51441161eda8929b3946e5dac3f9b77

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    342B

    MD5

    270966c0f4c76e31698eda6080b3d9a1

    SHA1

    c8c44903ea79a9508b3293a7cef240b372087fb4

    SHA256

    441f507f555bdc8f6afdbe35f35e1ff51fbb9e7b6869c67b2a42f155f220f78e

    SHA512

    6c68562803a960f180df81b6c896170982676d6a08a3ceb6c2f3efba42a92e54b63092f746f529375461ca9ea44123b060ccf9ac8b5c93e7622bb06ce0bb18a9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    342B

    MD5

    71784eedee022fd0a23b896b3c5b835b

    SHA1

    e45cb7d43a2dd21982c05c37c8561c8b942b3561

    SHA256

    eae5138eecc2575cc1c052052c49de93c3962b4a0546522974d3ef129958cadb

    SHA512

    489f2623f1afaaa4f24858bf61ceaca4f1be3632f562f56dac605c1e06af426445119bddb2208d6b2e97df1472c9b9b2099508ccd50766ae25187948e2712e05

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    342B

    MD5

    527bd5e9f584728faea737214b6050c5

    SHA1

    19e88e659ee838205a5ce2404e767dc8b68cbd6d

    SHA256

    fc6869c632ed17a4d742b642ef9b2827c9ba26aeb170d971fa7967138b8161a0

    SHA512

    06a491917088133eb1c0a045188368791b86c9a03b40b511d8d18d04742cfe8d43cb6a356b882722c53fa541e8193151d08a58eb07732c49ea9f603dd90f7107

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    342B

    MD5

    e925535fb80d20de64f7948c14e0d3d6

    SHA1

    146cd5d8d8d2ac8f124f168c15556ac952ff748d

    SHA256

    f1210d12dcf5c70b65ee8490c36d2af89bffa06b2424202f4c0543a089de2bca

    SHA512

    f2b4713bb7dd27fb98c06efa2f3eeded2836eddda6d5899dac89d64e91de12f371b2703391484963d4cd7ee3102d342d4197ab61667002c645f76d9dc474246e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    342B

    MD5

    8cfb1248cd2dab96b84d071b951b2f1f

    SHA1

    4f40f6addc37e07fb533f7f0ee718d21a7878bf6

    SHA256

    bb2c82be452e8e4cb96c7c3bfcb790c9ffe033eb2abd65731aa671bb3626c107

    SHA512

    6a3ca0213d6e674b00e896fc1c3487ffb12264b14757d121b2fb0b34efe829e2d5d74bd21161394b508c7dd27c6abaff8d52e197547b3a5fa171d4c85f9216f7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    342B

    MD5

    d47634b50f24506793f743ff2c04119c

    SHA1

    ef5b67645ab15399fa5fa6f63f5eea9f15d38f9d

    SHA256

    1b5d3e93bcc46e3db716fdbe8392da3d2fb4130673aab5ae4fe9edaf1ca2fb95

    SHA512

    32c9c7c8f55462f636cd9b0324c451ce955a7d957d5a1bef50aacae48955147ab249e265554b7ba67db5614430fd54944927b056ca435515d88bb82fe5dc2c1c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    342B

    MD5

    4497a8e980d3a2b588665c853b82b56b

    SHA1

    c06b4e4cb626046e8da4d82214711ebf20cedc0d

    SHA256

    e302515b3aa431a9c1422a16d13c2b7257ee8917339bacd2bbe1a03089c980a6

    SHA512

    1bb46f380746eafb94d07232e151085929f7b2e8166fcc5630850cc5af533d753feeb346ad01e1d0821cbcba97fa0e5d8c52f6c5d9e14bfc433688bf2b5f9c10

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    342B

    MD5

    3c468d66258374f76e93a0b2817f3655

    SHA1

    f790933f1c77a32eefbb94978429c4e9012b1af2

    SHA256

    727cdfe3c47b9fcc04bb7d5a041ba2810a8430035f18f8fa21afa31779b2ace3

    SHA512

    94357bad155981d6ca71850321d211bf6909b5c4f581450e02cb873a1fac0194ad5da0228de145fb311a0d4a9987ff7567fabbea95034133bbb542f6639c50f3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    342B

    MD5

    e6365f11b382e74f04e68c817b6abf78

    SHA1

    e64a00225a55eba8fcfddc8dedad2f70f3b16e76

    SHA256

    99804dc90912bcf5e59d6cd2940801cd69aaa889dfedff54a509f84bb8bea92f

    SHA512

    7d0aa4adb2dece5b742a2c1eeda3a0521f0eea5c27b5ab40626291f9e7f16956d183605c3e0d7a8b4a22f924b8a02fcf5e7ce0ae66a2cfcb9bc3fca30e6fc492

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    342B

    MD5

    d9f22dfede837631cf441d81575a91ed

    SHA1

    b233ded9f87d4b3fea7d1105cd13159971805d14

    SHA256

    9c8fea6b85f003f66a5c4fea65542cbf10ca2d70041ea0a314ba67fc27eede5b

    SHA512

    f39e27ef78a5a5e913e2ce3643b47e5d690b48511a35c18cf218af4fd39261f221b27b786989717c9d0b663c6239145ef0f764ff596604d5d4233bbd26630042

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    342B

    MD5

    0b0a3322f761350984d9489b43926510

    SHA1

    be88c81a66cacfee377677126e471cdaca26806d

    SHA256

    bd69edbadb3c28a0c1a838e4d60bff686a3d5c315964e1dc4c5ebb5efddcf972

    SHA512

    2b8b9b1754ef5dd43f995addc018c84e49d725adf0bbf73891daf8370200199221d6e4213ce645c8cf0d99d6a09ea417c2641ec16d8bc8a39b0697cc4c85c1fa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    342B

    MD5

    7295dbce39d72192f25b46fae7fc2112

    SHA1

    3ddbe8b7898e4bb9083f123f6e5048f40eb32649

    SHA256

    21f02c3e9945cee5fce5ba00b7f323bb1e3ba3857f469fa7bc825e13b5fff5c5

    SHA512

    cc5bb97149178739fa5e34a3999ac65056a3496b887a3bf57add856a38ac72df8d1b85f8a7e7c16eb4022964e0bc75459866957c72fd0a86fb15edabcbe429fd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    342B

    MD5

    3bbe82b947c8994550fc9e0698a77ee2

    SHA1

    999c2e57e3ed85aba279b889882a9dd8001019b1

    SHA256

    9b853399a3b3dcd2e499452c19da7df50c5fd3de94285ba81d4ce146759766d7

    SHA512

    619d82a6a3321eebeb6e51adbe4b4dce3df581a74ff15ef1ecdb4c89bb08ce143f68350e1928a0609b15ce28d1db25b0e3143b6132674db4692d5c183e0c2e67

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    342B

    MD5

    ec7e2a97ab4370b9e6a9abd303184a8d

    SHA1

    abb3e84a62a11f1c02925bf7a91b94bdf8bc70d0

    SHA256

    c4779667904d09d9c65054a8778a7d384fc436fa03a185231672226235c121ee

    SHA512

    b7e2e7ccf56a26716ac0ac41762657402ba45c6c9899d9294c1b1c43e3c8c06dce7b32f06fc03efe700d2733a1680dceba76f128ff8d5f594353cf9c70b0bb2e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    342B

    MD5

    513fd7a05c60269ce8aaf0fb731411a0

    SHA1

    f14c709a7c93b6e6b5fc439ae0899963f68e748a

    SHA256

    7a21ee8f9ea285e78f3164b8bb3087b0e2a0dad5b15e0fc576eba7903f02c533

    SHA512

    b8a56e014ffe1493cb4a8ad49f822b14a2bf5a5c5f406883249f10e8122e4a0dc835b9fb0ba96e7481e5e42d06555c4cd07890bef6b288816646bb9e0e339af4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    342B

    MD5

    24433ffb5d634f432b5679327fc5ea2c

    SHA1

    af603c8ea85a9b47c88c0c3f165a546acb9ecc73

    SHA256

    f672bedca0f105bbdd03324b6394288edac87cfea3b4c1bcbb451ec044542b00

    SHA512

    0641e45f96a6343430c6cb7f2ed0643427fae6e0cbd9e62fbd54bf93c219f62d284a0ab05df4b7eee847d518241272ed31771403bc0d9e2dcffad1202f160a6a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    342B

    MD5

    1d3a83acbccee72d7236c77b004d8d8e

    SHA1

    7b802f0b051f117ea663bb6eb8a60ddf8d8b50f1

    SHA256

    475c648cdd923e94da79e1ad525d46b5b5676447932336ccba9681743da1c578

    SHA512

    baff0c2f153c71409c7b82497c26c3ff2e9e14f1a2660891b8d0923902a069ed9c4e3bab2771c1ee14361851ca03c08ca245c783a0a37e2f8b2c4d06582f97a9

  • C:\Users\Admin\AppData\Local\Temp\CabC10F.tmp
    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarC1B0.tmp
    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b