Analysis

  • max time kernel
    138s
  • max time network
    144s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    20-07-2024 23:37

General

  • Target

    Joomla_1.7.2-Stable-Full_Package/administrator/components/com_admin/controllers/index.html

  • Size

    31B

  • MD5

    8ca096fda23d564fe62bc65ef5f498e0

  • SHA1

    166b05dab71422b4ce7c55ba3ad66492a8cd8a18

  • SHA256

    b1f5b9c329d8f4c9bb9d4b2dc820419b8a277e2886af023777a399c9ec187a2c

  • SHA512

    4a5b3cd40f4e5ca3637a286ae2884755315897adc9afcd4dda2e49d6a102b10503fca48d851e4fce25b753e932382991d91a1ad2f4d0ed1ab932b99d61f41cef

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\Joomla_1.7.2-Stable-Full_Package\administrator\components\com_admin\controllers\index.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2344
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2344 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2844

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    05ad6bc5b196021f77947c5526646caf

    SHA1

    923fc3fb35b1d4a26ea4d09d089aa25762dd765b

    SHA256

    934289ef4d3d7bc4feacc570bf143490d8679bd72c092cde6fb9a4e9534d2a2e

    SHA512

    2a4080a36153c36dacd7b2e2b5a4e17e869ec2b19750352e0155c3010eaf6cd09e6c99151b6e3781af4603d58112dfc0e6633a471ad4b56576830d2aac3740b2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    51d4f5d0061642c58879e867788f43b2

    SHA1

    8a67902ee9102930cb213ea965988bb0b12f56ac

    SHA256

    e25665c516cc60be59fb506c0bc7fc4875b456b152720ccfb6bb5d78a9b0ac32

    SHA512

    ad172c24382022af739c0d829f0bc375fd5dce5a432c719567cd239339e32cfa9a4d64d62bbef18a7b9bd2c5e8650ba26a23c137a8bdc92d1c35c901ce9171a6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    184b9eecb19b924bd776690fdddc2bf9

    SHA1

    fa716b05afc0506b67a8c2426169e1c72e7f85fe

    SHA256

    8bd382fb46a24e08d0b13db27b23a8a78ffd2f5bccefbf06c6ce8b54c925e2b9

    SHA512

    a68132b32799c74918c86a645e69c888b9d64896d1d06a6260e9d488382788f3a3c599974d90f923fbb3d6cd6f0f8a64a4289e664e7681aee994dda174e52ce6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2bb4dd599bc73d1358ae6bc988ae24d5

    SHA1

    182826fa6cce82e7388882c3bbc9cae138db400d

    SHA256

    7ea42bf9f201e7248c68e9a2dd3c6e3fe94ee4c6eee02ef984f1260fe766d24b

    SHA512

    0b2523b7875d74462e7f18c531539f2717a6c3fedcca755da4b86ae5d8c5ca0eaffc3d79fa3f782f3916b87ac1e7143b7aeae5e99d1e77b082edbaa6bdcaffcd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    17401ff29efad68be3805e2ede55b31a

    SHA1

    52f34b424690ec24949ccca25626dcbff96986ee

    SHA256

    e69e663c89c5651a564146b10203fffbd4d996f98ceefe5d9b1d555b910ed6da

    SHA512

    a15f79e692480644f4fe003c03b62ecb1d5a13f929cf3b847b3312582cdb56a5e6ea515ee7e314e16f9f46ecb34e52b36e7f39b60d921ddac0e30b73f018bfe2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a3ee171adb3ed19f89fc5f8b08811add

    SHA1

    5bdd8134eb8b4a4d07641353840c1d7330a720fe

    SHA256

    fd3e92b961175e45db36c2932455ecdb1f21981814ed49f90f8976b34ee9956a

    SHA512

    66c56f5d1bc776b6be67f69b03ea439cfd70c0d237f0fabe608d1ab98aa145266b5ffa314ce2af3f422ace4fb20372b260f9da0680a0de176ac13f480c64e981

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    55b0bab7da73608300f2636e818c93f2

    SHA1

    163b8ba34c4a5ae45cb1ea82a4a25bb4a41a3b24

    SHA256

    640b4ff3b87d5ac1a724efcf10f1bcd9cfb81e6a4f4273fa6acf52a13bda1b0e

    SHA512

    d402bc20f9543c4f0934f6e63db56f68648869af542e14653a9daef6dbda7d7e1cf0eaa49c73a65934416caa8a3084c6fb4367e63ce11ce4954c01ccadf83de2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    41bb4328da276ab3df10ceb9c99333fe

    SHA1

    2bdbe2e5567d2086671304fcab57788f5b4711a9

    SHA256

    5add7bec79f9a9143caf5cd4d9fac8d063527833ef61a5b8c23276c3c004ca6c

    SHA512

    17011ecf15f978698ed05dd14d3b20891d62231d3df17e30af23cd362da50b6f42e3b1130a5fc7baf23869a05b016cbed437a2e8f2eefa666aeeba700a06f497

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    333c6d680345e851f661de27792e98da

    SHA1

    aac08afadfa6fd3a4f8183696a47fbe02585be3f

    SHA256

    9e0a61690d137a8b467061dfaf1b835e081d8b377da335582add8763d62b9d50

    SHA512

    8c47467b90790257b1d8283dad600990c174173c87182a6d19eca9665b32e74b1bb7904316703aa5afca51a000e8de2dac120b985cf89388229a83cfdc4e56c2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    65a9b38a81969eb3a83cccd64187f5d8

    SHA1

    857881a380431f5ec241499d157e2b1bc8daebdd

    SHA256

    3bfacde3dded7481afa6a8c6345f968d98d4deeed303fa20f0bddaf50f5f41ef

    SHA512

    710088172948b575c13b9b94a9881b05124e65a4685be21e0bcc5b451372177d27567e60ae0dacca3c672cf3a8231a333626ffba06b078d154c7bf4738f35039

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    51f1c7f6d225dcadea71e7a034f6a43f

    SHA1

    ff0e088f946daf1ff96737b35d289a51b0f68699

    SHA256

    a99fe33ce90278f727995b45ce7d05da8d34ee475db7078e06629db5df4927d1

    SHA512

    c401674716b2bbe1ec059fd6a26f641a74ebeae89f4c0ef3eb0adfd8c6f13d2989a0bacb9716a21a51f46880b441281411d1e4af4a82c1f7473bb892fc0e06a7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    848c860ef5fc31a97bbeeaae31ec8a52

    SHA1

    043466e425e7fc01111735dc6d13099043f164ad

    SHA256

    132a162bf888ae75ad980a183d1cd08143052e170440c4e086224b164e2347da

    SHA512

    b08c36c89ad8355472f1e9a9942f75acc11965cac3ec200b8bf84d8295fd3e2c923f7be52917e20bca78159e12c9b6149a123d56c1652e5a820bf6e1e0afe845

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1d110393eb9df7fad957713702b822c1

    SHA1

    b7a4bf19da8ec562d117aa2584d14b138284a7d6

    SHA256

    9f4b84c1b8524d67060bb055098795de11e9950422de9dff595e41a8ebc423c2

    SHA512

    613e003a45c6bf555dc491d175ae864bf40e8c7e646af6510fa67636bfb81fb4cd455f1cf4bf82d6e7318f29e90ba702a05354bbd2d8c008ac93fbb1a2909b08

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e2729b9ad1616c35f7bfe03aa8cff233

    SHA1

    ad0763176d736003f3bb1116e7e71e6e391904e1

    SHA256

    a25fd07823dd985a28bfc6fcb11ad3a9bca1b41fd12e343c990e09496d0aaf25

    SHA512

    841c6c2ab0a3b8cb7efaace92fb9353cb9eb80f72ca06e9aa90912d51db87dd3a2be68c73dc62d9e072faaa1f97054c69cb0eeb60b24a21f9a032fc68302f727

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0edbd15e830453a219f248e3c8e38321

    SHA1

    fa31e75ab51d9beaff96cb865a861fdda005e555

    SHA256

    5fabb26094f15b1642546b56ad5e07d4ea2ffebab5a2430e0eede5c58ee8c161

    SHA512

    9526813a326a003a972689fa6ea63244a48b58b88ddcdb779337d6dc9dff0a971b3964ba0f79759b549fd4ed3bad6e3542140b91100e48367b7a7578fe436d37

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    400d95a1ff40ded533b5e88b09963782

    SHA1

    625f36da849adc5c1b5e21a307f894bb8676898a

    SHA256

    a55e24c0ffdcea292f8fbffe12a63e6780aa661fcb844c2ed461cd65b953e741

    SHA512

    168f2eeff6d162ab2850550663ed13fe3fc66195d7f1557ce96ed3936364f8c40d8dd0dfbe6e76325ce71461e92019343e79b99a4a587e0336717a17df1bb571

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a9cb94ed209689c4205c48124460a065

    SHA1

    8db7ce2f00840f9cbb879a90f3dcf50414d1752b

    SHA256

    8fdae266b86cfb46f8d442c84117ccfb559f5eb8a519d3961611b1d7cdeb8e6a

    SHA512

    6dd9dce2b0e6c64765d08d0680c691e1a7e2d67f2208f4234633dd0d79c07b5f23caee9cf05155e481da54fbdaf65c669c5f1da51d33a942f79f333920dd3496

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8719935f8dffe94e7ecb1dc4265d262c

    SHA1

    90a42fc11b687beedb5be5d2d646103509725c3a

    SHA256

    edd3810fde6b111b84cc37e6c382373e22d40b7348a48981f32df256f94f5f9c

    SHA512

    d82af07e0455fd1eacb54ccff79074a007f224fbd59485ae580c7666fc4b97386e95ff32e6f9ee42b5c25f9cad9e6d3827c89754e05dd650c556e310fa73adbf

  • C:\Users\Admin\AppData\Local\Temp\CabCC66.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarCD15.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b