Analysis

  • max time kernel
    134s
  • max time network
    138s
  • platform
    windows7_x64
  • resource
    win7-20240729-en
  • resource tags

    arch:x64arch:x86image:win7-20240729-enlocale:en-usos:windows7-x64system
  • submitted
    14/09/2024, 02:46

General

  • Target

    LICENSES.chromium.html

  • Size

    8.8MB

  • MD5

    2675b30d524b6c79b6cee41af86fc619

  • SHA1

    407716c1bb83c211bcb51efbbcb6bf2ef1664e5b

  • SHA256

    6a717038f81271f62318212f00b1a2173b9cb0cc435f984710ac8355eb409081

  • SHA512

    3214341da8bf3347a6874535bb0ff8d059ee604e779491780f2b29172f9963e23acbe3c534d888f7a3b99274f46d0628962e1e72a5d3fc6f18ca2b62343df485

  • SSDEEP

    24576:cpD6826x5kSWSsRinoHnmfm646a6N6z68SH4SApTJ:cHSek

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\LICENSES.chromium.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2188
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2188 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2732

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f53018b8fc290894e280549322a77b29

    SHA1

    101b612c2b8a4024ea11d31f668b05fdd545683b

    SHA256

    5877cad43488aa5b686c02677078bba98c8f2e0020ec01212124aca668ae4f0d

    SHA512

    dba486d7873a3e0ce20a4a3e9b4c434481e7925a03ebdcdc5938c3586d049afedd72487cbd5c92da37b1d73506538247fbf593180397948ef660825e2c673691

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d4e258c354c82b6cc0683ce52124f80e

    SHA1

    be11c0b4dd292d6263cbe98afb02d690a1a6cd4e

    SHA256

    b77d58a8d59beaa7ac2503f8e0b535f9cdfbc03e1e0d468ea47aac8844cd7eb4

    SHA512

    18b715bc248ead49f8dee5088d2db280f47169952b92a6ba97024189cbb3d0a80f23b08f5f3ad5d553747c983426cd798c0a6854759ff85b382ea4a7f32bbe02

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4b425ed08b10a7dd09b7f6e3f4de8c0c

    SHA1

    59cbd8e312b859cdcdda8a16fc44c50ced53ae8d

    SHA256

    dd03193c66688d68f20af80fb0338e8fb83c74f1c543a9aef71ab124ee268cd8

    SHA512

    0c48e6151c6e140061379ce69b8e0c25943cc108853398602f32ca3686ceb7082702828c2131a0f1ea37d23e1e920686517d9020ff6eaf0d4fdc47c995bef1cd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8832bb75d359ac4925b2eeeeaa3550af

    SHA1

    03f8892b90aa3a4da46433967ed87e52854d4891

    SHA256

    d8c9ea5b02e496ef24f944307a40208f58763a156dc5a7454748abb7e70c15f2

    SHA512

    71c5cc815ec0d23a42000762e5218ebbaef26f7a8bd2325ebd28bcd86d534c31320535a00291eda83a881dcaf3b4513c4a84024eed53b695acec0b9954fd2b29

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5f1bb9563c6c9da79cc3bc1b996eab17

    SHA1

    c6ba809856c95baa22622fbc2a987f9959bc536b

    SHA256

    1a71d9b795949aa96f824744e021527abb6f13517320ff390c393ff196e0f3b0

    SHA512

    9b58c5cb7a12c594aa25e282f9eb4b06f2736208960c485e0ecc36c242f7da13883ea15f6775222981a1f0a8d2efe5af4f24742a09fd0aab3f0fd8d4ea66e130

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    249e7edf7353be14bc94d703483b0932

    SHA1

    831b24292a44ca9d281d0c9e0307650ae97c3234

    SHA256

    2afc5f77f6a97d2b7bfd01e991b14d343382c6a2c5529de5c3245772022533bb

    SHA512

    97ad5ee1a3cf8c33888ed3fa89684652869eae890e1fee89a95131c70ed82a8106f008ac4333918153f1b93ca53a8ee485ee990824af1dc6225726a696097643

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d85505085d8793eb0472e786af537847

    SHA1

    5c6688dba19b2738526c640ef2bd5a2c7e6a2589

    SHA256

    dba8a4da552ba423d7a0071291ca50949c640e9ad730f094115a405b8996de94

    SHA512

    bfc7d0961a61f311919cb404496231788d0cd6273f3307173c8ef58517a5b19bf472358e4ba8e05bb701b2ea6e5b94340369444e77f61cd2e56db9837754eb08

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6c6ef674395b5672fb7a9405381444f7

    SHA1

    0f786d7c25c012b5f2f8fe2b4c4e9d1c886c6ae0

    SHA256

    6f2ee1252b781147587ccd28b5b1baefde152e919514e0274b20891ea338e31c

    SHA512

    d2b7c7e3c09acca261a3b5d7a8c1a67fc88ff0d3f8c5fb82c4e21e0b8f3da0effa73e3108aa989f5805a303c03fcd54868e3182d513a95da03fcf6c5f60e5898

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4848f3c4a97df49f909b640f9db9631d

    SHA1

    fcac6424d37e45a31cebe4be8ff8f5ee575db3d0

    SHA256

    b57b77240e7a8ea1fd586c3f03510022997a57c022b57abeac9d415b24fc7d74

    SHA512

    3c30f4e3882932255ffe995a1167db6f17b488472ccaefd32bdfcf29e3c6c92b41527f937f647e4038da32ba2ba564c805cda35b505a9c3be8410c874040e579

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bfc5745520d85d5582f186ba7a23f43c

    SHA1

    77e979b07836b7a42dc3073144e8416cd2272817

    SHA256

    1fd24ad9db0aeae7c9a5a22400181f21ae9a70454111c1a5264c9fd24dc0a708

    SHA512

    f6f3a3e8eb04d538553dab954e9843d65a4b49bf1a160b291e7f2a374c5a136ea8d3de9e6f69d98b41e5b2ccc6975d56404f124a02194cc18503a6ce85e5d5cb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3bb449f71816c62c1ed27bfb736bf2c9

    SHA1

    3ce6a9c5cc0d6c46762946f95fbd3c80e13e0e08

    SHA256

    e48b0715794b81b060de9bd19653fc6bf82c372931cb5b804ab68d6651763089

    SHA512

    9bfb69944069f6d76a5cbe2346c037d1d01d4d70ea46b010368418afe24cdf516e49893061e170fde688ea5f630817724438bf6c6e9b03dfc5238d8ace54c8e7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    18f3bb2949f8c5cfc7d83d91b2bac9da

    SHA1

    4d0ac5cd04b9b71f89b6fb77f9182e78d00d39dd

    SHA256

    94516a5b22cdb5bab5069d029a793429ddf04c723dd0d7b246678efa74b07e1f

    SHA512

    42e69e01ca64eb7b7d59a4084f3d5b1c81674eefaa4a7477b106cb4e3c8c2b42ff44e5cc72eaebf30bdfc3dd647a8e138028103cf36e689aca13ad4e300002f0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a84b2af53fd542b8c3050736ea2ff738

    SHA1

    c1a6dd9878590c4f3afc883463d4e4891e7a7421

    SHA256

    cb6081fd8ec6562e8755b35dbdfb1e3a48451b4164dfbf26ed60acda369e583f

    SHA512

    414a651e4eb1a7282d39f6f162fa2a3388958f5f1dcf3f836fad5ee6f069924decb8075d0512d9a76bfd113a8b65831ca0bc89c740b54ec9ebe8043765b4968d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    93ee24cf6787ec0ecb2a36b2bd6b1b80

    SHA1

    79ca5657b2f2a63d76f83dcdb4c06eb7505211eb

    SHA256

    f2c943ef22f6eadf67cb92e05e508a16de4381227694f383eaa7bebc06b1b085

    SHA512

    0510a3a6756363bc3319f4aad2ac976a912946ce7dcd932b1d129f035d4ed26d28aec8ecd3bff41fe6fe20d27a06ab647de2c6bf425af38131610dd0c1869b9c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    83a197b99fc0449227d1deea423c9c56

    SHA1

    8ee24ca2ef5b319c25e096f3e85e4d7cedff798a

    SHA256

    65fff6a50509c9c20aa21b3fedd8887caee55cb1f9df6ac29400388a5b62f17e

    SHA512

    4492de31a3fc29beb6582dbb4f15ca27a94e724b2a62e4f2ffabc57b8caea74b257693518317fc5def66e0e8d47d3b834682996cc84f6a6b7ca7618dd37598c2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4c56e660f69da6ab3db75e5c3a69e958

    SHA1

    8ad5ed343525c1907669d1f9eb1fa0538e046e34

    SHA256

    e2c7ed4bf54aa771bb8c8e5f3bd841755dc2e1e124598b370b8b0ea35a61ddfa

    SHA512

    a73e784e2f5b19f74bad56b0a968d77c30010c7f5b066bf87cf5e194f5996480bee85f4f4db6e2a64b32329e7eecd9d86a889073ee377597ae169a4b333aeac5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d8fa5d2374690bf685cf0ecd530f422a

    SHA1

    7ace7e8b58b5c4a34710e4dc6cba48124c61b727

    SHA256

    d9b75da9e048ad69e209513a343330ea2a839bca19becb35e3fb50440644d4e1

    SHA512

    07299871512efbfad84cff4a14daf5fec04aef4d4a009d04045cfe826d455a75a108029b3a58f2e2d66d0fe57570d27039b9a18910401df77479e13603cc53a0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    192fbaa640a8489fd4ef7674a6fd2b71

    SHA1

    c7dd49c510e10f42e9ba51bc0c8a2156a66a251e

    SHA256

    cdbae77f12a844d846cc59d36eb3e67d550008160554cec57870d6ea20a28379

    SHA512

    2debad8fa3e135c26e3488a21509b9575904fbbb1ca8fa69feeedc1da1363c47cac6d85b316fb0202bf8d19ee106acc716a15aa96d9fbdb0eeee082e0d22ad33

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    de125c80d6e2e527c869617fe41f76cb

    SHA1

    239ded217909806096024a23d70fafc61de9ad7f

    SHA256

    a1af3d7a81246f207cf3799c72aa2907320dbe924b1813c1c1e7d5d3313a20bf

    SHA512

    99a697af18cfbb1ccbf356dd14b920f0af7039855aac56046e90971fc42c5804a172ff4fa080634850ca050cc680093b14e33c69b67367787d2a9b8a4e320bc5

  • C:\Users\Admin\AppData\Local\Temp\Cab5737.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar57A8.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b