Resubmissions

15/09/2024, 14:51 UTC

240915-r74zlaydmb 10

Analysis

  • max time kernel
    120s
  • max time network
    132s
  • platform
    windows7_x64
  • resource
    win7-20240729-en
  • resource tags

    arch:x64arch:x86image:win7-20240729-enlocale:en-usos:windows7-x64system
  • submitted
    15/09/2024, 14:51 UTC

General

  • Target

    resources/app.asar.unpacked/assets/error.html

  • Size

    1KB

  • MD5

    516758f2fbabae4faf5d0a65302299c6

  • SHA1

    c941f4397432840402c07bf1116b6b9363e9bd5b

  • SHA256

    586b57a0fb53c6da76d1f24f12ed480c883c614f3396fa7b93a746e31411c633

  • SHA512

    27c0c778117f388fc521b40e58d96f668bd019fedaf8557c395e8bafbc09407a5045afd8588d3fab3bf02513385508f2914152ee7f19e35aa7a8e1b95d351d82

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\resources\app.asar.unpacked\assets\error.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2236
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2236 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2952

Network

    No results found
  • 204.79.197.200:443
    ieonline.microsoft.com
    tls
    iexplore.exe
    747 B
    7.8kB
    9
    12
  • 204.79.197.200:443
    ieonline.microsoft.com
    tls
    iexplore.exe
    747 B
    7.8kB
    9
    12
  • 204.79.197.200:443
    ieonline.microsoft.com
    tls
    iexplore.exe
    831 B
    7.9kB
    10
    13
No results found

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d15d00a31157e2783511c26d638e58a3

    SHA1

    cd335ce7e08b319dbd6ec885b23b199d5a25dfcc

    SHA256

    c7cabbed700f4653ce9eeca093363a8e1397ec471891b89cdd348675b770757e

    SHA512

    e3cc53954f6e88079f9ce07b31322d59a124d1fa15f8becd227597d92e0d73287203421e34ce83da343019aae6dfa57133ad8152b8a962b84dd4fecfa18839f1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0608e0221aa382656a652172f2b3595c

    SHA1

    3118364a8e616ca75b4c0bd963d200418300e833

    SHA256

    563362ca84be82a56ff87fe59bcc6a14bf3f6bec6e816c646d96e8e387ac0b1b

    SHA512

    3c54f43e1de7da8cae086f1918566e3f7b87763eacf7a757ac26fd713d4180fff15a8394f5f4203c24c933404197ff38d185a2e1ca8a2e5deef8d85a7fd4e031

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6e81b30cad3d040895cb336fc37c0c9c

    SHA1

    119f246ec59d04fdf434ef62937f2bff1b2776b7

    SHA256

    8d35b41cda3f4d9b9688df023611aec0c4685b904e658797c035f89eb77256aa

    SHA512

    6e666af49a41b64723c59e9c98d09c4e82d76969af492ed07043d1a0ff079fa6f84b27f91806735983b8bd36160b1cbd40d3b86beec5f78461dd2bfb66901949

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9cd8b28cc1bba67b2841c8fda5a27b77

    SHA1

    70a1c5a57c487c39a83de74436dfa9dc5b3acc45

    SHA256

    a64fce1c9719d09433e52719e8787d78b5588935aa5ae19cee7701a24c98de0f

    SHA512

    4a4cdfe8bae2d9260fe20a67726d37741de44899d09265fa8280a2bde23e71690229d7cf61e477e6b658c9044408a33eee2c64299ceaa89e0433ad2a9100bb37

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c8b0867b7bc81529e115009bf7b0ca1d

    SHA1

    b5c7cd2e7f4ff3ebe5ab6a089983160a7ed85b4d

    SHA256

    aa49f46b6b31902c1865a611294190667d5406134cb9c9804f05eaa8a5f5c5ce

    SHA512

    bdaefac42bea4b01e3edf163677700da04f2e44917673e17f5c746f9233b7df498918917d46493d85320c1d2d3c2085ba8ffd295e548bcfac64f273b673e4777

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    cbd72dde9ac1aa28ff1d4f5b86be5466

    SHA1

    61e5037f54a7fba952cd39fd8ee8d10fd9710246

    SHA256

    8dc335f9eb043646d2beaa450cce23d59d9746005b3e52295ac322a921bfa8d9

    SHA512

    45bab7ee4d6fea9c3662a5e415d26927630f6ad80109296f1d0c910c9a6cfb50e16927c6b62ccfe5babe8d8d5cd83747160836bfda9b106bd4d8f9da856a8fb5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7016eaca9901afbd565c93eb8a4de543

    SHA1

    a75aff95ebe01eb33a25b3df57bf767852796213

    SHA256

    4d938d049014acd03e5c9048b10bd9983b92c335fffe2c4b209eafc677b2107d

    SHA512

    df5655c929016a1c6982e3a19803680dc04b55f0ff641f39a448438f03e5af683045e42253d348524ab12f70515754759dc9547917ff9ae75df776be2326a83a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d16a0dc302c7c2c392f33907e930f38d

    SHA1

    1b65facebdd18de7fa664b74f664ac61b087028d

    SHA256

    5a0c5f93a6a1a1b5b921ef34c55150fb16929ea576bec4fbe6830769c54eb887

    SHA512

    c45efba496aee15c4098a4c95feeeaffa0a97cf1dbec9a3f636b3e7ca249e98bd6f1e2f82376a8d9b4423429dc2a5d47b1252fd032cf7a7080e75090485ed117

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4036a337e08b40d106fecda1f9a46d5d

    SHA1

    bb452d1017964ff035fadf757ba1d6b76732ec92

    SHA256

    8f68b29b43f69e2431c404b021a8799424e6816f9f9caabfdf080890a3105099

    SHA512

    cbdc28350ff0fd6846977487cc6718c2377a53402118f054f5e03d999aa694d9dee04ed0db16d1f81284cbf19e788a4d29c040289d65edb3ac6b9f10342bdf65

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d4527ceac3fc3dd3c6466b3e10cc9ece

    SHA1

    40b24cffcf1df4877f85996e265c4bcfb5998ffd

    SHA256

    732225740593aa68b738ea20c5b94afead21d98cbff90e635b0388e5a2f8c5bb

    SHA512

    3596a033feba8cfc6eedc78e5a4feed3cdf5529c8e73bcb04e3b1ec11a27e00a859f322e775e8fc30c856f193bf6f3c3c41d2fc364fb29d0ba5e5bb2d1bf107a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    dc43af4369de5ae1fd87027e9d20b4ea

    SHA1

    1231321c058a2d02d9c7561449152090cc045732

    SHA256

    301b9f509363a0df6b529c651920e9209b02973cdbe6a63b5d818e835393460a

    SHA512

    4375261edf29a4878978da28b34c8daf7231ec3ff1a3d3fcb96bfe468f5d4a5542900ea33e82f122fac11c2148450c186e7f85bc2065c0b70344a17745bd2d22

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e535726969d65df4368c05be0b283ecf

    SHA1

    18f5737f5e4cd92e1d24986680b0e639f1e52336

    SHA256

    378ae31b0a582f38068c9ca48c8d4fac05d72432563b7d99ffc2ad9299ede7c9

    SHA512

    fb3e2513decd368de17ea4785edd5a3261c48af454b2096bebb22cd233e9b7286c073aa45ced8da51f47436e1ac501fa840d15f84581a5ba14df883d6e551f1c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    714be010ff765f50c365ad02c029b226

    SHA1

    dc7fb183491aae2a61f54cfc022cf8cc4d5b62a9

    SHA256

    6ccf7c2886d6fa79a7c8823f94d3662b971899cbad78d090852b247a90c1bb9c

    SHA512

    010065b2bdfcf5f614d60d5b9d01807b327604f75e86ec8674a601b526c566a04bc0551757ed68f2fe5d1b92be46e6643f64e7c5e96d0b42ef84c244d3474893

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    92e69f4767f86b606d39691fdf06a730

    SHA1

    6792fa4eeeceedffcbbc1a8fc275a4d1feebdb2c

    SHA256

    94c6f51e7bfcb567614d5fb7bb2294ab6f00e2b1418d97fe4255ff44a60da806

    SHA512

    de2e05501efc9d93d6bd9198c754ad770a33463dbfc362c97d3b6c874b54cd0f9ca163d78c013fb0c9c4baedc729e2eb3bd385edcce6db7394a570c95a28f536

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3591a75d102c9e52328eb2d7476538d9

    SHA1

    357d16ff8a44df0dbf581df370e2017ac1ecdc75

    SHA256

    4a374e9246101a47f5241c67ed078efcd4933085756e69a3f1dc7ce1ed49ef13

    SHA512

    07ace397cd7e06bb2c60c4655001bc4062d8f883f0a51aefe4ab98dc280462bcf2df837c335d0a663663f07c4ff59b13f30db1da6845708add77292d423577fb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3a460d3588b6e2f19e783c524cd45e91

    SHA1

    fcfe0114ab4a20a0669b1e91ea74363e1a4b9634

    SHA256

    58410f261a31b7724c8c640a71e34a0bcc2042da1dbe15b493d44d785b888e19

    SHA512

    2815b35a837dde794a2a29c955bc35c8dd12a46a9b1c0b89a5ee1b0839c6fca46d15635ca7fefb6dc1be131725b0e44fe31adcaf4325cee1319d350bafcf5c47

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    131f35ed2be7453443a67e286953063f

    SHA1

    4dc18ec7fb24ff448ac31f04a20e93d5552c05b2

    SHA256

    6b0e99725d9aee3eefdc5d4e7a70c77c219742b5c8884a72a85dc5312ec201e9

    SHA512

    45c851a499dbd60e90c403899b9f207fb4fe55571f1d53f18ffcc771fa2a9d2871324ec511f9aa72ab779b548084c0bd8ba2ac6ddf7ca6630ec4043eac248c7b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3b74f3fe9216728fc4c2d62ff42c251f

    SHA1

    8708fdeea5010422c6c6ff876ea57de4877ff322

    SHA256

    34fd5a22b06a22dc89a6b3b58185b2704a029fda7a7db9561be96035956be581

    SHA512

    866e7259123f26092583c88dc04113335e22941f196f0ba3c6b461e0884929715d9e255bb1006047239fdf5979a2de6f16db67babff58a37ed5e8216cfef1625

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    18beeeaafb336c404e9d537980bc1250

    SHA1

    9cfb1b3d7821714aaff93983035f9f867d58d073

    SHA256

    6dd870bbdf00e96fc3ac4d12de52b902582341b848862ee478f09e0a8bd10470

    SHA512

    c9ae5e135e2c88a7fcddfda01f61c6cbf5416ecae533b4b943c7dc1c13f2e0f5ba5d596e90131dd2c646f61892bb079a5c42fa0fee55caaa23113ce1e08521d9

  • C:\Users\Admin\AppData\Local\Temp\Cab6B13.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar6B76.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.