Analysis

  • max time kernel
    88s
  • max time network
    215s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    23/07/2024, 04:15

General

  • Target

    DISCOVER/COMPATBL/LGCYSUPP/SOFTWARE.htm

  • Size

    1KB

  • MD5

    e465dd5daaa8c64e71c01dbe04fce846

  • SHA1

    aed880e5444ea24009b9ae3c8a0da559259adf17

  • SHA256

    c6a828cd6bb199207031cff469e32d6a1c5582ba400e7717631dedc526172b9c

  • SHA512

    a55eeb804919fdcfcc56b6c76832be6319524d7d6c19cdea5fe6daa019d6180130e0ed871c44c75f482e82e879e34f0fcca68974fa72561448e1fad525a3b284

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\DISCOVER\COMPATBL\LGCYSUPP\SOFTWARE.htm
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2976
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2976 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2700

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    33e24f32765bc40a4a3f435f85a74143

    SHA1

    1eafe06f36347eb68a36c4de1eed21c48774fe9c

    SHA256

    d9c5216f88d4b8b6f3bab01d4b8ba3c6da92cd1fec881c05acf98b96e604f06f

    SHA512

    e2b3374b4ef4238abd46da561e531e94a372dab09d66043228aa6aea8cb0b31aec286dc61671100f3c5ee6c9277e93b916e018fa5d44ef02274dd71d7a21d009

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c98cc24c1803e723ad17de36113dd0a9

    SHA1

    47a873cbdb2e6187b1a999ab5e9e09eeb3b15beb

    SHA256

    27cc1f6942f5f4bdb84d443878764c70a0505774b347e0802fcf9cb8f81e3027

    SHA512

    00691bf6cb6c73114e40efae940d92a1c389b69ce21b2402c61c581b0351b34e22b0e898e779d345d0cf0b038dcb4b408f48f89f212f10517c0895077deb60d5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fcc1f890ddc164dc4e0ce703c664f414

    SHA1

    45ee64cb2ff6123ccf2f3922729169f25b5c0c08

    SHA256

    419cd34f61aafcb8cc555dcecb94285a6394bfeb76daa521c32f520dea570aee

    SHA512

    07941adb8c4b4030109d9130630596d69002824c2df4eb233cd0ea4d93f310951b2278d418d753176f40b215609ee97b4dbae6ce2373c10c7a3816de04e15d64

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c4950d91776ac5a91c861a47aff67f77

    SHA1

    2f936da76610da69325e84788610182a0d1572f4

    SHA256

    c94858736938eab6f3fdb25f9947a2de1f9ec0474d1f56493881115a0c50fb13

    SHA512

    6a377797552be22aaf303e288fea6fce236c8d779f4fb79bffd333223cced3b1fcdb879202fb8e961db0904a5f20ba09079735810fa2ce125a5fbe2699022ab2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    cd276968191b73b0ee613cd2bd1a6008

    SHA1

    00a3ace0587771d6be376aedb6fae51eb173a2f7

    SHA256

    9ba6567d706433c2c945e3bdc628c4ddb1a4451d89c77e5e882b04b5066a66fa

    SHA512

    ac2e24ac109e6cb51a3c5389ea2d0b2a54c2490eba5e735f41c1655161bb725a097ba3d162b8bb0c2d7bca078e64b6a5546145d37f059db2bd18494245873515

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9fe134677cb5399b91a1be913af9fec4

    SHA1

    c8bc0add0a79c2157cf8742471a061ebc98394af

    SHA256

    1574bff0e014457fdb04e91f954ad6ae8e9e18e62a0ebf7b43c700fbcfb8a437

    SHA512

    41766a1c22e209ec75dcc49a6cbd8762ff124f62049d811531c3f78beb31ce956a1d665a161fe02bc70b14a2dce863a0273f1b5d17fa3ce12260d6210c4a3a57

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    573de21b04a1b386c69e46ca14f90af5

    SHA1

    f8fde40825da4c9c0860089f47f7d7a65942748d

    SHA256

    366a8f8ea1561b66658aa36183888c61cc871c2b55bebf75b43357d5bf2ba16b

    SHA512

    9ff22d707e2351bcff4334636bd19eb745ab99b96a714e930f6fe84d3178005669095a758cd5f956ffb109ea6098aab8bc78d0774f6251c080f383fa99788385

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2312aac5a579a98b2ec56421f8be7570

    SHA1

    cdb7b135bc5d142834f427ef42a037553b7eb559

    SHA256

    393477b582e094f4a471182083166a14568ac1c3d5765bc51a7dee6ad0485018

    SHA512

    3b7f830d59882f023dd684b64e768d21a4148d5754dc7462bfe0b5862b6fcdb44586918b0283ba203b30d1ceb3f75ac5ccfaf7adf4c8332344fc96830662c16e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    01a87ff919207be20995c3f3b0ff2ab7

    SHA1

    e651d3805628ad547b154136c2a6cf02a7e31cee

    SHA256

    70803b7a08063b264710d95d176dc9c5f79f7431ad6708e7d30db9ab97d2b833

    SHA512

    228d1d5e85b3d0fbbf5dd31d1a6754060d702146340cadba6da4c9141763e6ee0dd03c845cd1cff7a6f7c52350fa5826771e0ad20610958318e6f0ebab4fd057

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d32ffd1c23e8b9dacf191befe5b2e0d2

    SHA1

    065099c72b7a38263d75fc74e83012b92e91c16b

    SHA256

    5a805d7a13c34bbf25585bbf0ec519cd82c6dedc5ce632b9f7dc2cd1a875a173

    SHA512

    01a91ef839a944545ac437f398837486936d71d363e3e5d4df3e29fc4b42a2c1f1b366d8ad7165af16df8d1f6caaa036b2a1cc04bc54222ed5967ae1b6bdffcb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    52096500fd4afdaa6b1c539f2dc8d278

    SHA1

    6cd740e6cdd7616b13641bc84d8fe7272e670e85

    SHA256

    2cd3ce230fd0e1ce60ef4f40420cfd338d83d032f1875aa4efbb314a596c988f

    SHA512

    b71ae7228afe75b120ac73437bbb0ddca25cd4c966da7f0fbf1e221d9bae0cefd5111cce9597723db5917b71e3a913ed9dc37308d42677c9930eafc91eba3c53

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    67365e0387f02b77b7303afb0630668d

    SHA1

    28f5548c59368ee83914892ce264d33840a8e159

    SHA256

    485b8b3a31a7c3360945947ca1acbf2896de5b09214e94a2b6e75c3f73a5886f

    SHA512

    d85b9462bbc9b847ab268d28a7ea3bb24c1ba60a9b5093822180bdb89b311b2ae46bb57b62ad5c4e5ad66543ae714e3214cdbb48fa65cf94e32c044b6f8067a3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    35fc22655aff78e532571e9e61310cb6

    SHA1

    3660b2f698e9c11ff090000d801a18536eaa84b4

    SHA256

    1e445db427e64aa13d1175ba0de2d30b992dc9e2b426d75a8ab66b51bb38b997

    SHA512

    0f782a5e26c17b490a3e81b6b54be03e3961ffd48cc755748e562609806c67d0ee917752ae7493529e42aee5fcae97138f9ea6ebf4e94238a08a464e9fee87b9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    311ad11918e0129bfffeefac60361c5e

    SHA1

    7886044c4e961e481ce2dd16b4fbb9a52bb5fc56

    SHA256

    88865afe65300ab4e57e8f7f61a3f887ac526ab8d7f1b8a64a6e8fe6a8e359a3

    SHA512

    2d79174dc6b28b79a39d7fc0c6f10018c2213c8f89d2ce065b22dcf1db9c1c4587f4f7e5468746a24a3d8716c4d6b0bc1ea56c5f988d3a6d9d667b32b1e8dfd4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1d1dbf06e8d6c8b02768862fc43ca41f

    SHA1

    05520d6016d7dbb84b368deee46aba8a27e89215

    SHA256

    563209e2b2a82938c0d68b230627becc1e0fc791628eafdf08631aa8cdd1ac56

    SHA512

    de564707e7da0385b59f0234b9a872ba53b2f49aadd572c24cb76f85b366a6c2d74b7a8913ff6ad66dcfa57609561bfedaef578bb2bf18305578a4bcd369999c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6347b9903f3fb80e3279acf073510e01

    SHA1

    e7cafd6188b877149211ae0667fc456e1594e60b

    SHA256

    586ff0f74f236439afeff23e20b9197faedd8092fb11ffbd545bc15f9f87c652

    SHA512

    a463043d2039697fdafc40f96fb66b611018641022b34e7d59e1069f40b7cb82091ad5a9649ecc3f364f7d12366269c0ca08266134b3c611617f82e7ef114613

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f63aead6b135aa3cc357a843f84078b4

    SHA1

    9033bf3048776180aa79b982f5e0ccefa57b4851

    SHA256

    9bd70fd20a2029ef1bf747416151646952feb4c18e677fda4b67508aed0687f4

    SHA512

    a20148e2f12b0b70d4a803c4e8f318100289b7d04e545a27f8ffb41dd0cca3f080b281edd373ba196b752e58ffad74e208f9632e633daa563531cb6d79cea849

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1a6ff6b2a3583edce0f0e6ab1dbdbf6d

    SHA1

    f8532fad9227ff310230ea0b5c241aa36ff58807

    SHA256

    b8ce078543f0677c648528cd01f9df97530a6bb37d6c937fd9ac3ad601be98e0

    SHA512

    a1d831dab01d898531904ef818fac0a5f686b1e7935764083c5421254e6da773c45db148de66a3c0fd8ddc6f960df381d0ff97dccae0e285accd5d137cd362f5

  • C:\Users\Admin\AppData\Local\Temp\Cab7053.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar7111.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b