Resubmissions

04/07/2025, 17:03

250704-vkm94sbm6v4

27/06/2025, 15:25

250627-stk51afp3s4

02/08/2024, 14:44

240802-r4hl7asgrd3

02/08/2024, 14:41

240802-r2tlnssgla3

Analysis

  • max time kernel
    119s
  • max time network
    132s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    02/08/2024, 14:44

General

  • Target
    You-Are-An-Idiot-main/YouAreAnIdiot/Idiot.html
  • Size 178B
  • Sample240802-r4hl7asgrd
  • SHA256 a58f42a785a7e8113f870470391e5f7898adfc85e9d95aaec7045b17d36fd782
  • MD5 SHA1 SHA512
Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\You-Are-An-Idiot-main\YouAreAnIdiot\Idiot.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:3016
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:3016 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1028

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        94308059B57B3142E455B38A6EB92015

        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
        • Size 342B
        • SHA256 a22199ddc1ef5053deffa78207cc32d7e824c08aace5e985c2112acd7d08c363
        • MD5 SHA1 SHA512

        94308059B57B3142E455B38A6EB92015

        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
        • Size 342B
        • SHA256 27a0035431a2fa4f033f3b246b25df3745637ed55653c45144ea3fe70c911244
        • MD5 SHA1 SHA512

        94308059B57B3142E455B38A6EB92015

        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
        • Size 342B
        • SHA256 491f3d86e49205ef9bcb8caddc3159fc8a68331c944ca5aca731a72bedbad65f
        • MD5 SHA1 SHA512

        94308059B57B3142E455B38A6EB92015

        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
        • Size 342B
        • SHA256 17d648876e2753eb8c79ba061cd9f9891ff3c407125289ba8b734ba362769f3d
        • MD5 SHA1 SHA512

        94308059B57B3142E455B38A6EB92015

        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
        • Size 342B
        • SHA256 76e9f2d218c70caf5942de0079a4672ee5c22f86e5980b645c1a9fff233d1ae7
        • MD5 SHA1 SHA512

        94308059B57B3142E455B38A6EB92015

        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
        • Size 342B
        • SHA256 6d6a6ce286450179489a78d8f41c9772e63cdbbc11da87aa96040ba3bed3f513
        • MD5 SHA1 SHA512

        94308059B57B3142E455B38A6EB92015

        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
        • Size 342B
        • SHA256 f767e2226042a4aacc65f7b43b37fb06b79135186eb2d303ad9b2c8ab1c35fe4
        • MD5 SHA1 SHA512

        94308059B57B3142E455B38A6EB92015

        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
        • Size 342B
        • SHA256 70fc766ebdf1c51e6903cea5bdff04557fca9e16215a11b56dceb611c2550f00
        • MD5 SHA1 SHA512

        94308059B57B3142E455B38A6EB92015

        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
        • Size 342B
        • SHA256 84afc9188ea101cadfe927a2bc5cd106d705e8c08d867a295a09490a6d03d02d
        • MD5 SHA1 SHA512

        94308059B57B3142E455B38A6EB92015

        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
        • Size 342B
        • SHA256 336d59a47c64afd627b1ff158bc147eea52d606c135c3a4519e21127fdd752e7
        • MD5 SHA1 SHA512

        94308059B57B3142E455B38A6EB92015

        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
        • Size 342B
        • SHA256 ed532f405820455471a41670cb5965733ecbbf45f88e1b174535b85f7c6438c1
        • MD5 SHA1 SHA512

        CabA8B0.tmp

        • Path C:\Users\Admin\AppData\Local\Temp\CabA8B0.tmp
        • Size 70KB
        • SHA256 b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f
        • MD5 SHA1 SHA512 SSDEEP

        TarA97F.tmp

        • Path C:\Users\Admin\AppData\Local\Temp\TarA97F.tmp
        • Size 181KB
        • SHA256 8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8
        • MD5 SHA1 SHA512 SSDEEP