Analysis

  • max time kernel
    118s
  • max time network
    129s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    06/09/2024, 06:11

General

  • Target

    Archive/public/ssa/eula_brazilian_bigpicture.html

  • Size

    11KB

  • MD5

    b4389e51e3189c2843b145ddc1a8b238

  • SHA1

    55d91208a306c2412b5b05c9fb8d7a0c397dd5d4

  • SHA256

    ff3eebe409ef4e77efac158de6656a5fff87e05eaee0caadfce4a3228a37219a

  • SHA512

    a7210a11dba48d97724b29b41ca418e53a2c2ab8def3739fddef0cb9b57274db71f7f3c764edf7e09c5d96253552903030fee523cbb6ba3e1397beff4beb3d27

  • SSDEEP

    192:G1WQhhhnY37a/D8jfbS2SgLG5FBlcfetYMerfksUMnk18pkwQrHoOneiOayMxuym:Efhnia/DeT9qX4MerPUMk8kLznUVuumS

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\Archive\public\ssa\eula_brazilian_bigpicture.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2308
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2308 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1336

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    674da32fc103b1bcd1c0f7d2ef6b986b

    SHA1

    757eeeb4e198a06cf0c840f64a96c59d82cf75eb

    SHA256

    96500c72e63f55f2a7ec2cdaab6dd1f70905ac270eee8a498f12163e0965e93f

    SHA512

    c5bb00cebca82843254a08e2447f79dc7ff108665c3c63f575dcc19f0ee3f4b681e879a9bad66c455bbd070e853047e344506cc8f2744d23d2db953e27f0f9c5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6904ccbc42e945471c09f760ebbb76c8

    SHA1

    dc0a4c3393bd0166ae607c85aa82857b3e1afb3f

    SHA256

    4fb30478c75cded3996a287ab369efb498c401a860c335f631fbef2b3c147171

    SHA512

    a641dfcc7c18a9ba08c308993b1c0ca26a22b1d4bff6984437f733453485d7e99eaf26dda3c6b9747ae74725ca6e16f119026d9541f480f3cbff996196426baa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    538f20fda4a2592bf65229f0caffb0c1

    SHA1

    5286c6c850940604b1c56c3ecb6e1e6cfa57b7ef

    SHA256

    34ae470572ebde1921d9d8c185057ce3daf43bb952dbd87d10d94e2d5d435fd1

    SHA512

    f79428646470dd189ca33cb70d1a594682ac380a86c4d6804ea3195027af6fc1415eaaae6033e919a8dcd6b3542246e38c56c22d07e4bf5f6d7171fe4b85f24e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5a5f2126edc938bee6c2a7545291fd54

    SHA1

    7ecdc1e85bde280276042e26bb73b9979fa3423b

    SHA256

    52fa9215acb260bfc24109b826d182182e596874d052768224b450ecfbabaa38

    SHA512

    e18b9db9c64a8a3991973cd07b0903f6d23224844a50142132c30a1483a6023aba61f970f5b03ce9592169cda3215be228007ad7eaaece316ae6ca1237cd09ea

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3ebbaf7d26dfb9e24e6c3ea5fe212f58

    SHA1

    c67ecc38f931710741eef0d740e6fe50b0e4d914

    SHA256

    e38f8106aa2f08514cd33202fc19b8c7f81a5ea0b36f5c5c11f5e2b58f08dd9a

    SHA512

    5a32abc2eddbffc7ff0584274321fe9008c54a277afc2447bcbafad9a9aa840a66a40b6fd7c3ba0c9169f779021b4f739edb4206b8fadc9d5c4a6a2853f94630

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    cedb59ef5b246b29d2eadf7fe6aa8698

    SHA1

    01144beb2ad717d4556303535831eeb85c819f73

    SHA256

    9aa663a030a158a93342972066ebb77ab86a07aa2b6225e476d9404abf2251ba

    SHA512

    2e8324f8ead7e6841f7f9a798afb0a2070906106bd92a3e19fddd40ff16c0b4702971e40081ee11a1d4d26dc43b206684f5e8378158eae9ff611bb7835bda063

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c7a9d8a7b3dc0b0dc18dd518ededf2f9

    SHA1

    1416cb962a2feefd24f155ad9cd40b3197136ff2

    SHA256

    2272ea23cf05044f678e706168cedfda5a6b9a7b51c32ae70f27f3c38f038823

    SHA512

    15cd6c018cdb6e7489e6b702b28b0e87ab85b2bf7f664f86743867eb9767ffbc65d446fbda882cac0404ceb0afffe32843af90fa82943b1021c1e60808036d39

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fae4a86138083e0d24603a39495b81ea

    SHA1

    ee166b103a150ba7ae74987910aac390249e5547

    SHA256

    684ce584c72f8eedd99056453ba471a6e754fbad29f0beb48ccbb89ff2f943c8

    SHA512

    be171d43fc53923436fe88f269168aefbcfc57171261a3c48b94869f5255939c1af8b6f4b46fb19f60b10b4578b193540fa94fdbba8b6fbe0934c27586abec3c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d377e0bc2dd88b07184705d0c8f0fc17

    SHA1

    44aaef0ea8aead8d4d558fb444d4f2f576f200ac

    SHA256

    711e9950f3bfea6e45df10ec55e247a2995b8fccf8d96731d66c382c25e5ee52

    SHA512

    2b01b042173f4fcbc690c30df84ae1f31b424af7d514aefc2f43e5c398a4fbe1fbe9d8af4edf4b5e96ec61170da27696dd26b7367629d6457433d6560230c567

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e6144bf368daf4fda69656690ad27365

    SHA1

    e29a8259b4b2b852836c7948ed5cd2ddc8d12947

    SHA256

    6f09765edfff5c044dad160af6ea94148922ab9663bfd049d18b56d2dacca25a

    SHA512

    46df21480d341d1a5975f805adc155c9ecde48810e5e89d37cae21421518b258e02a80f99f810af9886af8ea6d57e728dfb822f173d2a229f9f9bf444c55ecbb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    93fb6a2e0ca4b4fc6d28622cfa61e5aa

    SHA1

    a6da94b55034923aa8517a993fadd3e3cafa6e4f

    SHA256

    a95fc27fc92e9674c903a7a7f029a414b6f0403a83c2382af482c83a4bef0ea5

    SHA512

    9c3fa4fa62a3f3bb13aeff41b8fca9515183f5a9a90d20a0236b9a7d828ea0dd8c2ade75670414192e1ecf76295f76b44529ff7eb74483997518b7f15e71ec03

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3f4cbee3cdc330b904959bc5277e55f7

    SHA1

    ece5231accf29e3c8f96ba36757d2ca9db9523ff

    SHA256

    c7d1eb8db5c65476b7224576af74b0731b4ac8a932eed9a4d4b7c2c1de732393

    SHA512

    b9572008a3ecf86b7af1e681012b2664a1a2d32c32f9355ec496819315cc206e38f271cdf2a5cd305371957171ab686d1ca39607e749e9cc3917b6b017e1a524

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0e1a4043cc7ae2557a41b897f8adb2dd

    SHA1

    0a0ecd51888405720c737dfe17681f54beaa8557

    SHA256

    92377cb1719ed2873a2f86b176b2b8f0d239460f9b4dfaf21c2c27c906119854

    SHA512

    e0ed2917c930e0c78a5b25ca4af714b7fbf8c11c02acaabaf3690407b25967741de09b30f15c9bdbf25a7d4730a1abef686c939f923f2ea2ad44de8c36591ea3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d800cf06bec8d7298abff65bbf536d7d

    SHA1

    b58d70032b78ee3fe6ba9c2fd9af40d60140ae95

    SHA256

    af78dbfc6850cd9dffb878721e13fc955b7b97340d573d8c46da0b936c909ea0

    SHA512

    df6e7c125cc9dde80e48d4c9b0bcc5100a51ebc9a471b97aa105d6286681e132b0e64647bfdd6a997d334c741b5e56eccdc25e22e3253b5902e11d3cefe2c299

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ff840aed8051c8884f335ea74d982abc

    SHA1

    76a1614c680b02a1397639b8f901fb48ff37f5ca

    SHA256

    77fd778b38235901fbebb178726722dbd553cd833bc028d45390e22392adfaa7

    SHA512

    b0787c1c6c9022bed527a8124e62c848f5f581e4faafb80e63687fc744d7c18498a11b4212ad9bb838ef21531f3c73646f599df0c978ee2d21a8dd7340b25130

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    cbb35741ff2bc122721cdfeff9f10c9f

    SHA1

    0397e1bc437631dff97c916cba39ce3a564cd900

    SHA256

    a930b791b469de7f6057bba960a1727b22f6a12d54d9cc4b7aca29dd66ad129a

    SHA512

    a15583e322d248d4088bce1de807d2fc4763a6a97b620963aa4c2f2f367f80ebd012eb1eb58ad2fe9d87d7170ea3e277179451177ec86223f9de797edd1cae08

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7d8d26241f55516308cbfe2ce6230fd9

    SHA1

    5d1dc99bf91ecbb12aa8144e05b3fc7fb0af7224

    SHA256

    1ee3abb40db104298308995f884b9a0105c12e8c83fb44c6c3dcd55f2bcf95ad

    SHA512

    d52374421aab8a9bf6c45bd63428fd8d1dbd943dd8e0d7a67a37a52ea088fe1b1b03e2769fde7a87cb3a6ee7633418ee6ab20073149f80e4f3c4e7b69cecfa3f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e689b3945a3229455801cf2dbbd16c33

    SHA1

    d97f78badfd3b1d3a7d3f1afdc94dd34fb42016f

    SHA256

    c310812bb30c750b41f7fd116de300569408480a0c84f1cf1c7d14fc56a831c3

    SHA512

    528376081aea9706c13adc12ea0b828b2e3bb4d3af729b894b83f455771ba06d6d95f713b27f88675513d8ecb4c2333b2bba162c7d78ca377dbdd8c20615122e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1a4568cc53ce7b83ab032f8d808aa04f

    SHA1

    a9ade831424fbe4af4c18a995071707108754d9a

    SHA256

    027e033e2dbfa1067d3b8dbb4803c9ba7a8567ad51fea861066c3dda89b4742b

    SHA512

    b1178ce8ce57798da959c6f6b35d3646f1853ecba2d4e6eec8007c482e36ed17afe10151b10b65422a4d876d57d42865bee0243ed39febfdcae0a3ca84472e13

  • C:\Users\Admin\AppData\Local\Temp\CabF7BA.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarF878.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b