Analysis

  • max time kernel
    72s
  • max time network
    140s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    21/07/2024, 19:24

General

  • Target

    BBS/index.html

  • Size

    77B

  • MD5

    ad04a29e652cd282e2e4b6626dd15e52

  • SHA1

    6ae7149f8a5f80d75ddcb23f1e2ed8729df90762

  • SHA256

    8bed9caf1f8cc47ea3afde4e7cb673e8932eeff558c9c10107f580638819657a

  • SHA512

    f1e7b01ef78b7c8852e754110384ea1736650f94b4d8f3e7571f695f0e5d45a9cee7ac2cb43f0ef6e7ac67f52dc93a1f07f40bb8c450857f6769d3ccd9945d7c

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\BBS\index.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2884
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2884 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2760

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          64cfd2e1419cfa2814016ad63903ac52

          SHA1

          5147245812b77bb538105668e32f411b0f37b0c2

          SHA256

          2e891e2d27d4888884ba1f4f7d4d90043cca6312bf2ea209caea904f20c1a9f7

          SHA512

          6fd1d425ed0fa4285e8b9f8733485f156fe9e87d66e06c7ecade38fc9c630acafe8f7189e6677a75303a7e7307826a5db4ff30a04ff29fb4c9788be467a67f8d

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          d3cf3c7f372c06aa0156e125aaf0e8df

          SHA1

          36accbdcb9bf2ae8af11a13dbf90c5783380d9b7

          SHA256

          841083728b700465120b7e65c3a40835e110fe34504a02d08945e58ba9c142f9

          SHA512

          96e7baf36669770b75b499cc5aa431a44304188736a79af15bd73cfe21a2535ff949279d30b4a70ea866a56968feaecdf8d979e1574537d9a66c78ff01d954bd

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          8932b7a036adc40c6bc57d4887286bab

          SHA1

          5092f46e3832288f3e27465a841d6ebb76f2a4e0

          SHA256

          dcff1f995bf13a4ca6bb1fbbc4d4126fe1468b1811b403483f6e17e6985a0129

          SHA512

          cc63305faf682931518a100549cce8f86c0482b31933dc84b36ff6bbdf2ed0ec204dbad38e8da5a404c9d7117a18a5a93d3487366f8d0f5f369389d8fce5b7e2

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          d6f680ff729ae51c631192ec9c370bc7

          SHA1

          adcbbe718cdb13f21742c16a6296ff8e208f57ac

          SHA256

          3831fcfa751f19e0cbfc59ee4fe19a1de9a20a90bd75aef097af79f906d8c572

          SHA512

          28cf05cdd668b5ce88ddcd83a36f4e0d8bf96b7c7bef40ea55973a5b7b523da149587b2d0b652a61c4a2ed42d128bbd4175e9ba05957cf7dba0d330453844aeb

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          b6636f31194e05d263c21bb291a25cc0

          SHA1

          7f095fa02c3b0d19b24adff1372c403a414be576

          SHA256

          6953e024f2e8033012ab240f036d4a6dae94f28a213c0e41d2eb1cd2739d00bf

          SHA512

          0b9a7ba0ebb3adc7168c723de25574f24e86ed69ba38e9074b9a528e43c6b875c03bd2310ceec53206aeb095b1445cad7bb64d24354769515b8e76d405e398a2

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          904915eaef07a5122a7009978da4738c

          SHA1

          2ef916bab2d67980c0786cccb3db73a3c8bcca3f

          SHA256

          2bcbb491ace13a08f3900228173deaa32d094e17dac25ca55adf4b3858f5e570

          SHA512

          51c175b9ee8711fdb0109f3d8b8cf7d8976b3914c050c764b3da3152b6b45f73f46318d88bbfa11410cc2a162b416dae3ae37abbfa8e407a0f9682eb001dda65

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          80355d6cd94a1a578624f4f67790c7e2

          SHA1

          a36b979e64f454b07f4a11b279f2d94b95181023

          SHA256

          46c3502c1baa48599a91f09b86ee39d2f02422396df5f82ba111f6f71b79de7e

          SHA512

          002df5d10f966fd3a1827b4fe069109fbeea97c9a41666107b7907bc50046b54eedd19082d731d041a85b4d35fee9f12948b049d2bc5c54024f061ffdf9e4751

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          46e45151dd4dd7c33f05f77c41511e25

          SHA1

          f292e326b2432fc8103787dde3a5263d072d0e05

          SHA256

          a1ed349640ed39e39955af515d71fbada6ca3e4df8fd874b1ee02118de4f1ae4

          SHA512

          f7fc9943da1473cd0a97e8f1b36518fa02d9f02c16f849f84749af7875654e6a01960ffde6a228851b73de9352856aaa80274a155542ce1869c119e346245b96

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          0ff2d2e0fcbb2dd7dfa30c29d2f30697

          SHA1

          c64b5e91d452cbe5f580e513e1e8c1fa3bc7f7d5

          SHA256

          d051340f0dc1c293d15ba45c4d6ac2f7059c90ac2e40de287d59966d77ccf9b1

          SHA512

          92ff4585a38ef08c8d07b0fee006ea024f45046c2f20b6b04876fa91302304ecfe587549a62652c92528a8d78f546e1566147854d1f0d50ff8abcae6d6f8b1b3

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          7e20fc507784b0f26baa4a28fc54487a

          SHA1

          f39574dc86aa81626407bdce1c20ebbabf205a03

          SHA256

          d4a602efa8d1b8badf0c33065fb1869affff662838c52413406d7236888fa1da

          SHA512

          bed84be293515a1213af1416606513e5e31baed20df4ee2b53786e291b7bfa9c704e6f90efbcfa862dddf653c0bbed1d0cd702f0adb7245a4cf42b172b824781

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          be9f331f2a8e90ce461faf90feb7d437

          SHA1

          ee55eefb71eb502861b3486f50c92113c999307f

          SHA256

          84068762cfa3239d3e338e4ebff2cff773e01fa334f1541794cd0c2eb70b0116

          SHA512

          36674703e7781bc1a1b8fc1b9a5098359bbcc68922a81399b3c8b85285e77cd14ce7370008601545ecd6284faf5c52abf4a245c1b39e47b617419eb95bb93435

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          9d1545028b578d323cb0f515dcacb447

          SHA1

          b61eb5db585cced9c053a02b7c3119d74aebd609

          SHA256

          36e57b01aaad121a2c3645290ac78ee2f6945c254004b0f4dbfa03b7e27ef23e

          SHA512

          9192a6d6480e761f3b4d2db968cb859ba98225411025f052fd39d6185b6b191838c087aaca694c4b89fbe253b2bccf3b5167f68f2ae4bea3ca97b07950e287e5

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          92f20e70635b362cf45e7e93c5b9e10c

          SHA1

          4744cfcc75ce5b3b593922ee98226f8c61ae2e5c

          SHA256

          edc82a46d498ddd5bae4c61c461af1832265aad753b8bdf87e555181156b8242

          SHA512

          556d74bd3644401f74c99abf5721b58c0a860eb70f20db4947e1a5dc441f562d01397f302d5fec5c424ea8f847a26c0846eab809cae4a76fdb95cd1361250225

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          5626d81569849324668d04d9f4565575

          SHA1

          1c5630d274eb741905c671aeaf9bf61eb7e7e732

          SHA256

          4e2ff50f7d734701815b6faaff0314aa06783e8604a8bcec74800be9a3c36250

          SHA512

          2185d2f72ea25d9fa9bee858f760e35b4aada060ebd3a18e7f0abc3d1d6dd725da15601192413f36ee499e7dfc4b9f3bf1f45b064034d7e13add152c05ff3358

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          858d9a0f8e4feeba2ea385151c5b0fac

          SHA1

          9a52e9c531b4e2ee9f668e0e53b1ab1f2ef13e8e

          SHA256

          7a849df768d6d3bccf1d43044826bca893371d8f76f3e5a54a8bb38c642a1a47

          SHA512

          fabb9ea3752247d9992dd9774e51ea294bc69c744f571d77be29f3ff1050710ffdd29e91507a89e769f13ab4e633ac9a7bd7176036ec588836995918242fcd9e

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          1b1ae2d1630892181009d797013fddfe

          SHA1

          da7140a1ba3b781e050587913fc60dfab996fb31

          SHA256

          524e7a9f5eb3c90518e9e868820898caeea4d6d8ce7fe4429ad66dda382dc6d7

          SHA512

          abb662bfff5507e987b408bb8f460ec2819b59b9edf6d53f8300ddb3810b34272bd52fdad210c472642f47c719f2f70359472e82b7c969969e0e0d580c4fa7d4

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          9cfe590191f95e92a29e3713a47e09f8

          SHA1

          985772d073e4381b48f4a2019c59055772f5d3db

          SHA256

          e68fe248db7c0541627ac44103e25dfde9e2db6f17548b09fd8917f66e937f56

          SHA512

          342a2f223ad855f8d1695d5f5d3b230dd7a1ceef1b3576f933d1e07934eef5e1c60d095b328a5f71f40b5e8079c5ececc139152ac8d10eaeff3c6de4572d3d26

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          d8c7cb4e1a62da2f9aadd327ca896a8f

          SHA1

          40db2fab0fd4a43fbeae6bee724cc53339523522

          SHA256

          b951403ce8ead000d77ff2cb7ad4a6cc2e6f3e90f62aa5181b893d363908b15c

          SHA512

          031b057034937ac393a8f1556c926645e539d9b990025c390cb69e908748e7eac4d31ddc4d189b168f1e59e6faf32160b4ae721d969642308e943a95cd1f2c59

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          66f66e54ceae910bd616bd0fa420ff94

          SHA1

          bba184c0c29e326576e8375c9f5f6ea686d385c4

          SHA256

          3d01ed22471cbf088b8759f60f3d779bf3fc1a83c3eb94731c549ca7201776ff

          SHA512

          cc8176a8a6905e8a4a1931de181e359c5d9e8969ec62e3e6a71d2f8198d6a02cf7e83b7ed2cee92152166a6e0a365d3458994a87b2df2bd5e68bf84f8a25d0bd

        • C:\Users\Admin\AppData\Local\Temp\Cab49BF.tmp

          Filesize

          70KB

          MD5

          49aebf8cbd62d92ac215b2923fb1b9f5

          SHA1

          1723be06719828dda65ad804298d0431f6aff976

          SHA256

          b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

          SHA512

          bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

        • C:\Users\Admin\AppData\Local\Temp\Tar4AFB.tmp

          Filesize

          181KB

          MD5

          4ea6026cf93ec6338144661bf1202cd1

          SHA1

          a1dec9044f750ad887935a01430bf49322fbdcb7

          SHA256

          8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

          SHA512

          6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b