Analysis

  • max time kernel
    121s
  • max time network
    134s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    20-08-2024 01:40

General

  • Target

    exe/non crypted/index.html

  • Size

    360B

  • MD5

    6eb00be1c3f69a79915a5099511e7eee

  • SHA1

    5d8e5a97d6273ae32eb12d10c35fc0f1da668c90

  • SHA256

    67b9aee949ea0c9afd1e408a78bda767ac38fe2386626abe844dca4c754425f1

  • SHA512

    7a3d896307440ddebfb04cfd5f8d09ad0b75a936ba6a7db3440f7ba049564e7380f26cad55a747cad111060302d907c1559e99335f948c9fba2d5b4a3c9a8a3f

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" "C:\Users\Admin\AppData\Local\Temp\exe\non crypted\index.html"
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2336
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2336 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2236

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5af59e51ebf919469c07e6116db03287

    SHA1

    cb55a44f8e5039718e2a050ff1c969bb8e60e647

    SHA256

    e0a29a7c17c56bc3617969df8b49b9b9f054b383431673cdb99d2186cc4b4089

    SHA512

    682d65ce3f6122ec550398e426700a46eefd122e5145ca7628e3df4f67974368c654633b74ced6636864b2988d0d09670530e4246785a1785b802ef36cdff4b1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5bb9091059b62c48b7c94860caf728c3

    SHA1

    c28542c2ab5f45f0e218cc706a0202b9d0fc2a6d

    SHA256

    fc2dd2e7eabca02fed58bc2fc4e0d430122cdae8215e8345c35ef2c32b695d73

    SHA512

    69a5a844b38151a084d6faf6e0e09afd382f653352473f3d510fa0fe577ca456a23a2f641343d991795994f46efad78ef39e819965b07214659e6c44c69f5828

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6c9ec4f6151c1d951388149a81a70e51

    SHA1

    fc0873d15a1d45d1081948254f8224ccf5ec3623

    SHA256

    e4e663577fc94774da2b94a6e00eccc4503ec9fdc817a9e7f0c752e61d1416cb

    SHA512

    00f840f6b5ab968954977516d333e148450774cbcf0e8d84f357273d6c90929a2c74d409c3e5abb5f73557d04de2839e09e74f8cea3d543876a3db3a5ddb319b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    39686210f1683d9a50e94b20b4d764d1

    SHA1

    a222288363e497e27db39c7fcf4ef16083878d62

    SHA256

    674839e3841c55e26d5eeb12b923dd1e0ffa93397f3b7b2994973a743fbcba33

    SHA512

    a42414a5c1ea6f9656e8ff5e4ac9e7aeaef7a2dad76163d6a0f0fb1a5fc58111aa7aa6767eb9ef798aa1dc5cb5321699058b331748cd495a884557ed4f1f4ecf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8222ac9697cc0eddf2831e35fa5b37d8

    SHA1

    82a68c41d9224cad6b905d80976ee1c59472c35d

    SHA256

    474e50b0a9ff8c561dfb720c4b851e40341f4de84ba72663809e7d5fb5a47420

    SHA512

    27cc396f55bec5f6d3065d89622698c65051c9f389f5066ca9c16a7a5d2ab9e865ecda44a8871f93f31ad6993da75f3ce3ceb4d14771366d7f9e13a27b917594

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d4f47df4ceaf7ac6b880a93c81d6ee59

    SHA1

    a8d3d43f233a36ed3c3cd0cc47f49497f462084d

    SHA256

    71d035d1de21f08229118145a653c44132d01dbb96eac099a43981215f8b2111

    SHA512

    9e990801f5e1cb0d4753a0bd061296571e9ec2ecd4aeccdcf697ea06acb14c4bdb36491cf5b8e90a4921b9e0bae79be566c025a98f33266a7efbacf86d3abd64

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6fd0b2bdacf23cb46ef45710cddd4577

    SHA1

    796807562d03380d1050136e145326a10c2e3099

    SHA256

    51947f0265ee6ad9bc1e7ea5b69e84781031190b0868597b6f2a676a19fcdd50

    SHA512

    9bc62be1db2004fb8b2d6835ce362fff44dcd1844a82d6905ca90c8bd127e4f62f53ed1d748049b4b21fdd2e7bc092835a15cdc6d0f51cfed4432b740247fee5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c072f5e7b064e6fe7e2180c236b26e1e

    SHA1

    804ea8f3cd052106bb442c75528d8470e05e3063

    SHA256

    431eec9e21d1070dde5c8a64676c9e962d4f0da8f29682e3e91ee536018ff055

    SHA512

    9da38440676da8e93a70ccb109dcf4bc6762f23af3919c9108d9cdee88aea3719c554576e77fbe08f0ddc443f1cf4816d6d1363f8b3465006c98f2dfd912b72c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    51bb693494c57743fe138b19eadfbc39

    SHA1

    2d0e0520d4f3c07dd9bc448c21c0e26b9f86d3c0

    SHA256

    a5ea4fee4b2793e638f58eacfb940994ec42706d2abd61abf5c32edabd2e6749

    SHA512

    b0336fe04016ad68683d5e700bc901817b23e6ae90093fd2cbeab83a8d091ad2bd433a2ac186a7e82905c651a7dea07f66c9db8c177341117fe2877848907034

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    70be15172fc86670b7dd3a65488d9090

    SHA1

    c6107e46dec1bae85193baa012e2512d33b19a67

    SHA256

    858a78fad865f5b1a6d269e779107c57f54a5ed101553688effb949104722900

    SHA512

    7eb438b1d01118d23c8140a80d5cddd29e0b5acb72dd5db506a4733ba8ff9d2f988e1827aa0f3e43ae0a4643e3e26297503fdc2ddba7d9f380456144bc88a521

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    cc38d190145a9fd633acd1901410c3fd

    SHA1

    a010054daa89f24fd4d84a80cc9d19fb1b48c7cd

    SHA256

    5a689e6a6d2309b2baa6c838f55367fa10902bd070a240c93c1f5be125cf6102

    SHA512

    5f8532e0ce180f0bf449318f730d1efbee8a8ebc9d776fecc9639a722b934ae2e96c8f5e691f2f23324bb444d001dacee07110267b61b987988fe65cd3119655

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    418061792653b45106901acf5795cfea

    SHA1

    952552231d0d099bc9c80fef6611a4f80daf32ef

    SHA256

    05575268f463ac1d6dbbf7714fcdd729cc4dac6542dc2516d391e1222f2d0bb2

    SHA512

    b4869718f6e79638df48a6abc4e2e73c91fef029231c82b9f4223323d94819a94ec98ec659e0454562025e65be632f43b4c9a97def9931a99e26197f6c8b6917

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    95d8f657d21c09dff3774c75b6f0d507

    SHA1

    0d37b88c414d3c618fb1204a8793e42cfd9b2991

    SHA256

    7fa0de6abbdae4fb7f0b94b3bfaba36b6f4e003ffb1bf051a1d99b8bf5f39269

    SHA512

    208fad8bd3bf28e8370e0658e2f70f7ef3bf3d9cb017473700254d937ba68ae8c17f3b28b450e5bd8f18285474e489276f61de85a5ea142dfed5173b2c54e841

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    52a46383af6225b046fef3ee5c6835f9

    SHA1

    237c5dcdc3b6ce11dbe25113be7d49fdc5da62b8

    SHA256

    aa9ed586ab441ba3ea53157b81aee72b70c48c165946f422cb2beb1e8f795498

    SHA512

    0c8b1bf1d3b6a25dab3ca9ae081232e44e22e26d776b598cf388e84943219371586f9a7afc4ab9e54e356793c73da4059fb50b3b792019d80bbdd495dfc1ef3e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8da6017760a6f6992e5d952702694d2a

    SHA1

    c5cf49d5a39b818cc8ad54d0d90bd6a219c0d59a

    SHA256

    7dffdc85f0b63d76dcab5bb922ea52d755c18d35a7cba0c244fca6a917dc472b

    SHA512

    ee87dce58642bfd3db46c3a872f0eab2f403bcb65db0edf00e5123b5dcb738b1b1f2d799bf36dec4a2fff9209eb6354b98870b13dd01d12f9f16990a912ad323

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8f2580ec8b78c56dfed5cc8a6bf8931e

    SHA1

    26a231b9b2ff15206f0601baccbf96c7b41f45f2

    SHA256

    5bddae529e63a193dc6059c0e0cc7de210a46189c731b5fcb685cd8bd1f5cc0a

    SHA512

    10a92b87a7315762b566fe93c6e821dd3dade24346f812b8460e2fd344a2633b122eda5a4d3dceb14d2f7391c04a2f88ba0c17dd94546e031ab9f23e1ed5128e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1f57f16c414e98952de20416320b0bfb

    SHA1

    0e08498173e9373048d5bc6e4cef04941c1268ba

    SHA256

    18d5dd9958b0c1d675f4d77712e90b5cf5f5c99b74299abb7cc7650860489c06

    SHA512

    f9c7339396005c05461fa334fb10ba8e56a83d610a49f2023a7c1b55d83f3c72089227c268ffa7c37772a35e18d6118e70838b1bf3212929905b5a75943f0407

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    191a38d9af71a0691b4867c6b56fd215

    SHA1

    629da9a29adecd8e53995bfb07948a5f99e545e7

    SHA256

    0e999f6a14a966359ac3a36bfebdc68b2c5278d96ff1d0a56369d78ec4f04304

    SHA512

    5b016a477111a0545b182710f1e0156248b15431ecf628b4e20ce64bbe765b828431c3c9ef0904dff4ac182a2b42251b857f98907f4a54b7a7c353c1e6b85e52

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    695002fb9afd8b38f6c34507564d21bd

    SHA1

    98689923164fec0effb5e0ef9a5956b3067e57c9

    SHA256

    ece4b198ad37ff54a240d6600675253c7f2de3008f496a3c3c312b4e84d5e94b

    SHA512

    e654064ef0750067ee1d684fb7b557a8e5ce9e10c581140d2261f18a90d851f3432faa914cfcfb38d55bd4f82b5bfb9d0a331e6cb933390b0f7e3cb7189a9a75

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6da2fa89fdb378cf0de5d73cfe5f79c9

    SHA1

    efa73c81317c3ecca54612ac4a0f5b15785f922c

    SHA256

    e28836f7078e84b4c3127c81766f35ccba4c117a58463d8b1bb87c1b71a4629d

    SHA512

    e36d0e97590e6f124f15be5c3bb8b5608b115c473a3d7b2946338e673adce336b7f1959ee25be540b03f431a92bd90bfdbefc428696c49914fae806df5c1b872

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4484d43677be752924cb1ee7eeb3c7af

    SHA1

    b1ff76c121da3a240613eb31d9e1fdc6202fc7fc

    SHA256

    dda7315ec480aedea201babb30eb4fbae810171b0772eb8099a4c909ed24c745

    SHA512

    9de93a9a8a1c29ee35ddf5dd2e26d0a33d4e3e6d3b190ee004d96cad01aa01869e862ff5ee694106f89efbf71a5fba85c5c4fa8bb3adca5429311a16287b4b60

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1258d1e374a7ae52b88d8040a123a8ea

    SHA1

    a45c1fd3fb5b3b1319fce5d5ea870b37ef0bb3bb

    SHA256

    28df8d65898d9aed7806bc8ae197632595341e837ca8ddcd36a18df785c9e9c8

    SHA512

    8efe5b1a6b0edcd1ba06ac954eebb15c5aee4504496af829d8e47888735985ac2db15d88eb335c1aa29b3bd40574e2993a16b747f2928d76a312d559facb5363

  • C:\Users\Admin\AppData\Local\Temp\CabB942.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarBA12.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b