Analysis

  • max time kernel
    121s
  • max time network
    143s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    23/07/2024, 04:15

General

  • Target

    DISCOVER/COMPATBL/MULTSUPP/DVD.htm

  • Size

    1KB

  • MD5

    9f57fca9097f736cdd50b47aac0b0a7b

  • SHA1

    63f7eb8356b09a3f9db22bb486d0089f9a9c90e9

  • SHA256

    6102cfa6e2ed28df49bb54a79020a7b686754fcba270d7397c3f61e74b3b1b70

  • SHA512

    97b6c99827a66468718616601faae1ccb75515a7a2649685b511d50f80c5589aba465553840875804c946e8c96c875b6a1349729c49b6130a9b7b36fd1759d76

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\DISCOVER\COMPATBL\MULTSUPP\DVD.htm
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2948
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2948 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2152

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d5e8e00a54a1f6eeccf915d879b69e33

    SHA1

    c469f2023f2ac7648b939956536e1bd60f9466ec

    SHA256

    35b5c418a4dd70f40d4b32661de913d9b302e4aff79810b937746797178851b7

    SHA512

    eb53fded4388b6bdfea1e9580543bf1ea3c2b799ee82664bfd54f8865ea2121ed02d5dd4ba81d88c8634c450bed6669c7268a8e7cfbb69fb20b447ca4ec86da4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    75c637ba7178d2fb0594f15b38cdc2e9

    SHA1

    f354b73641d9667274a4bd141410f3045dea3468

    SHA256

    dd0079d27fcf124663aa6faecc76e544efab5eaa0b9058cf36f1ea06c46db578

    SHA512

    f6cbd5e48dcc5a2620e462d99dfd36a04b3ef48553c2695e21f7e2fc82bdfb2f74df56e71bb4492686355ae46d155ca2a6b574d95c70bbeeacd5cf8355b29a37

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b59218bb16964745a07f056a70469bc0

    SHA1

    45baee1a517b1fadd212f3d242df2dc6b7644fe7

    SHA256

    d587f085d91a770bbc591048f066d86aaebed87ec3a43fb80b6569146f0f876b

    SHA512

    8b07c5b5136c306d5b4b55904c6972289cb003fdd5b9396dfc62a8eba50fdaaa2502ac0b6f8f140303434b3eb16fa60337fba5d0758357fdf9923d1e36eacf03

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ec1aa1a3948a2dcfcf26cbc02b958ddd

    SHA1

    9eb569cb05cd97e8d95d0dfd1d5775f4354966dc

    SHA256

    a0a18e5e7178def5a9712ab35af5477c5ba773c41e3efac0ba01cec3d9a4bdb3

    SHA512

    442b6d94d8578e2d5fb3f2999c00929574755a4fc14a27bb0b1abbfdcdd78e417ff8b81ea4282ad4d7d1e5d58588d5e2fca9ac853952f3ecb61f772a863fb189

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f605bea85f33420fb686a2b66495fe04

    SHA1

    e673067e3353ce54d59af1a1260dd441949d1c39

    SHA256

    d91d726929c4ad1d7010f365e95807df06139365981aa6fdf45f3b2917e3a8b5

    SHA512

    f4d3f0289410a154533efc640929caeb2bb14fc4a9419a0ef0abac19d6df967b0d28197f65fd3b190d927117b56a33b4499e462b3fceb54ff794e26fc20f4ecf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4e76f7f9fc65ebfec52d3ef2f9b1f806

    SHA1

    c455aec184b0781b5e6aff4ee36d7149c9116914

    SHA256

    e3807a68d1978bcca7e9b2d5a493c97e50ee10fa5e72933a8c17cc79e4af0fad

    SHA512

    6b9b6b52e54fcdb65c3584a50f2090d850af15dbaed52b53754d3beab98be6c4bce6dafc46908159d9ec2e2046a6f636301fdaeb1cb9633578ddf14da420270e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    663285e4f9b9b24636a2f0df0c9fcbe2

    SHA1

    51c1520cf5c6f10008a33d5ab889ab46a5ebbf56

    SHA256

    bc09b6d6adad846596f4ab7807aa16e5934db9a7a9fd1c6afab74468bd3854b6

    SHA512

    3a3e9e6670364a7d6c21b68e2f39de1e709618eb22d6195e91a80f55c487c9b390b14b3d92a7eaa97733ef3ed9735da42a9175ed6fde2bca724b56fddd6e6b15

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e1569068aa51a3f92b5f40ead248a67a

    SHA1

    3f585aa947d535bc968b0764cb2c586dfeedf2a5

    SHA256

    52ec99d3e7db011e9e393e96592ad9e1c075f1325cb01ce9c381700ec9114770

    SHA512

    506b9f2a42cc0d22186f4d6a1938e2f1b23e0efea7518907c184257eff53f30ea04a863529fbca2a1caf3da10199dd0ad3f9034d6a4ffadee7f7a0c9a2b2c4bc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    014fd20f64b0a265b32fd8350d632de0

    SHA1

    b08ec057bf47fbb3cad68555b1ba09603116e847

    SHA256

    64b5ff4389330e367403367af95c47d02d3af10b680dd7ba8a56e0ea56b09b2f

    SHA512

    ec9e5876198dd58d70c1cbec21a9174cb6518ae69ec7f6a19a1991f14da38b65a92952a7e1d4f2b4ccf0c6b79d073b2ed203837d694d3f393439adf582051b9a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2bdef54a1a4586ff64fa092086ec46e8

    SHA1

    3712c59da856dc532752b083f4ab5c5a4de7b2f3

    SHA256

    da71f4b55e5428318756510465928d3c269941b23daddd18f0d58352d1a8eec2

    SHA512

    db3b7237bfa4018a3a9b7bc1a7d77acc85c8173340c70020db8b3a460f832c5718febc3aebd963123ff3653c9fc1dbd54c2c5b0a3046acf2c59fe64a18bac2be

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4ae08f31e479638b37ac484880b8acc4

    SHA1

    5d53f34d214a7ffdc6109a804e2b2f84313198ac

    SHA256

    6322703cc02218c81a299ff01d67d816a9fd697c7a0f5e108e3b697fb1d659c8

    SHA512

    53811eb5cad32dbbca803a2bc86db6de70273af7dd2aacf0b9e3f6d7b8d01d2ea9424d1e164cc70cc02ca62fb7c7a6994552b5ca51f252310aae63af5f108478

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    47503254d860d508f9a4195515fdb91e

    SHA1

    3e39c28b6b392ea36d6e6945a7d94cde24bc8508

    SHA256

    1905c3a52f1e063660cfcabcf8bcf30741ea0f2738c68a85f4ed95fab23698ee

    SHA512

    d143aae3b4d8b32b357c7f1c47b33e90fb6e08ebe3ce6795dc84c3210cb9956a47ee9987a8b9cce17d7b4229759d1c57162e05cf8587cfe9b5267bc106261a99

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9ffd335671c206254889eff4b4d0aa55

    SHA1

    832e63f712ce120a5ac250dc572ad240bf50fdd5

    SHA256

    35f0abf4370577c1d06927c0a95cd2e5d7a95f4f1a073519b00a0f3e0231043a

    SHA512

    72c75061e01ffef2a9c4d567be0fadedc2fe902f539d5a1c34071246a4a808f1c5d9d71fe804ff9f978cc22c6bff5f9d14e7ac889a18a2042f46d3da955f3b15

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5471b2c5f53422f9eddfc28892c81d91

    SHA1

    e5c93e027fdc92933b5b65b7c75ea98d69552c77

    SHA256

    320e9244e940d7673af6f270fb532860627fc33e5aa8affa5215e35bad1afe35

    SHA512

    55ecd8e0036b042d8110ffb0bfba6b59d6d2b3dca66254d399734095a7523a945ab84ce03b01fae8d633a8de6a9f39bead7eb93e7a1cad79acc67352bd732d8b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d1e2a9babd738baa3b942b0cd9de4803

    SHA1

    33ee274e4810cf745c08a2d926ebcf68ffb63041

    SHA256

    d34293e902218c0f20a7fec0d07f2642ed1fc62315c50caecd3e7c631ff5c09f

    SHA512

    f19a0c2ba8eeb0fd5c9973d785a161a55fb4b9785988c5f7422638c2f091117f2e7175b1c9274e115cae0cdcfb40677b5dfb0333a15735e80f435b3557886a98

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    64e99c9049797984c24de296b4b2dcef

    SHA1

    07db86bbf7ddf4df4be4f60960e0026120ea14da

    SHA256

    86ca8a9b18fefc3529205979c2a5479689f21dfa1160550d1e9cef95981dfbce

    SHA512

    119bedbd4dfc837b53becaddaa889b7229cdfc1bc3b8937977c0d75c9ec6107fdeae365211fd31bde800efa3db9dcb86b992ea789fed7cc599aa0664f7465758

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8b68fd5c1994ee1f58141d68fecf0c62

    SHA1

    965164b18c9c07e59a32fdb1fe6724dba3352a00

    SHA256

    d07da115765782364f0463ef8dfa59fd874757eae8ab3c794b8f3466925e663c

    SHA512

    136affc5ab222e1dcc6bcc8416cf03ccd3c335a1b116961ad9b176a88024c07589b7ca3f865813519f2a2d9382e9fb314cce5ef0150bed3be7a9a2c882285dce

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    79426839137c04ddb7d4fde418edd055

    SHA1

    94df87454af24749c0369424af34e0e430649f0b

    SHA256

    8d4540225ef008764162dca8b597b0de96024af6fa8dd339ab37f2c7e6d8fea6

    SHA512

    46536f2e0a829791ad3888abd007f622fc19612b55975f28cd97896b01818ba48e6f30f8069b2827a86d908fd4c814a3f2cefab8bbaa17b831490e252033cc4e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    518b4b4db5d26921f3195c4d959adf05

    SHA1

    e07443870b667b59580b6f140dd04db150cbc004

    SHA256

    2c1ef8c101ebbfd42f02764ebe78f6b4f340b5eca62ab26bc8dbe3bc7ea0cff8

    SHA512

    ccb83b6b23186976b77e41f680e4b9342bd8a95319f030d8029ea3847ffa679fe58da8ad3d5f382e5bd2101211146e20dcbda9e9b877a74fe0e0da9122b3cca2

  • C:\Users\Admin\AppData\Local\Temp\CabBE4.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar1819.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b