Analysis

  • max time kernel
    118s
  • max time network
    133s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • submitted
    03-10-2024 07:49

General

  • Target

    LICENSES.chromium.html

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\LICENSES.chromium.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1380
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1380 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2520

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6f3456d8749a255f3bbbc8bab83bf47c

    SHA1

    6b266fef585a066926b88f5fa5fdb1cacedc617e

    SHA256

    5642155891bee69ca7c0e89d75734c3bbb6baaf8d7f9ed8d1da26d796ce95693

    SHA512

    caeaf1bad92ee2106d32ab031bed90d6ed4c7ac459106c82e0d4935bf26926787a75536d862232faad62277acc40249c6695bdd3fc81342039cf4506e19ba9c1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0df96edb5e4e299effcf9ac377527821

    SHA1

    66e0fb846db837da7d78de939b0b3c24d774dd8f

    SHA256

    0cd1a60ea01b80a45e9ce72976b1a6631d67de05b9a344247104b09d8737ea51

    SHA512

    5ddf8bb30cd2a7bfb87de9a252e0cdd66864989911ba39d294a3dfb69a41fa446f980efc89ae7222eab135b9c9d7dc57769c59b026684fed3e9b7050ad160cbd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3f681c3e7deeac7e8cc7e33039c4489e

    SHA1

    e420f32066e11d639b631e6498cfbb4f80eb6e3f

    SHA256

    a6d07b28d7728ae01444b437437fda3befa2e5539d8f608b9d4f329af4d3a3ba

    SHA512

    e733e290b65a51ad7b7d6d0f266cfd4282627af152ffcc0ca575c7ff3367e4dace3d2d815c962b63a91adc2825a461c7c4e428c862a496ca11c8da438443efcd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d7223b7f52acb267e10cf9d905681dfd

    SHA1

    869a630bd5dda5a01b64165c7df45f314197398b

    SHA256

    c2f531ba240c032c3e83b01f24cc7e5695e4d446c9865ca0f51653713c25c4b8

    SHA512

    153101705d18d3e0da4d01239ec324b1c57ddc6c643b5b10a6cee7bfd19e98aa68ec649b1b3f01fcecf2521fb1c00fe4af96fa9e17d7c0733b7668c5dd00568d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f5753eac91da327e1315a8b5d9375b08

    SHA1

    89a49d55de9ad438f16157c3ba54999d5df5afe3

    SHA256

    252d2e27122423c3249140cb255716228c4b09947beefba736b9ebb78ebd63ab

    SHA512

    f4d1c4a6dc942ce3e13b341c8d1a10324a4ce82c9a29c7978ef36dfdd20cf170080f46f15fcae3c996bb662c6f60bc3f7505a8aaa340e898e53564ecbaec2722

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e243b6bb69936922258ffa12667196c4

    SHA1

    0d14ed69b707f7f50104cba4b18f5cc6309cd524

    SHA256

    15e83fdec6593622870c89dd731f88fb82a9d7410bf2532128afd9c522e11ffc

    SHA512

    03eed21697932fc12ec532d7fd84d448ee20c7bbbec7aec03163bb53650e21612e7c92c8d5721284902783cc6e1c0e45727a21a9010305c7803b6df81a1bf45b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    26fd98a86b42c4a890ba3a58ea6a1e06

    SHA1

    f3f3dac9da6cac7bbd9f87dfda59a5b20ede39b3

    SHA256

    6a6576413ee60fdeb3ec1b1f9f426f1f66b281ee56cd69522433912ba7681a06

    SHA512

    adb277f0ab6defd24754019eed7eb3d38cc445f11a91c311c4ee0cd038b0a8e0732766d52f0b413678c5cf2fc6c6054d961860fd495511fa183e6bc74bd7b377

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    002bef6a51341f866663cbc75be2b8a5

    SHA1

    fc17070405ba21bd0862e999ec6979ec85466d0a

    SHA256

    8db9c90ca3ef6952a71ac201d0f40dd0f4fb6456c49b7b46a3ecf78ded68cf8a

    SHA512

    d64b392af8960b4aaa95d30952ccdff7a4b1a9a5e6fdd094d02115f4dff9843d5bbd6c1a3e1fa7a14e3749d8082728e708af9d6e483b0d06f3e98dcc3723057b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d8dc47d6889b05d09f37b9e2284454b5

    SHA1

    01b5ad5b8393ad37bb2c926ba789c1061d1fed45

    SHA256

    9c363b18ccdd7cceef2e26311888e226fc60b7031f08a833cfd83c212066932f

    SHA512

    4bb0e89bce889be6c56ace8abb1b1cceffa86370870d3acee0ec76cba9aff5fbb44573a0a5ee69685c550c6bf01ccacc24a05058d91dd9dec5c29df7094941c0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9b846800e1afc49c67c4e16d9f918ac3

    SHA1

    d4d50543188269818ffd4501cd5526fc630bb54a

    SHA256

    c1fbb82f3a2a7459bc4fe3b5f95419586b7b54d4cd73a44044d7116b45b08c3a

    SHA512

    c6c3d0531c7600209c43741d28155694efe963f52b4420e15dda3a70aaa5898cc527bff922ecb1a5653610fafafed2ae326398756e14f6a12ba50ec10456d87a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7296c47773cd703fab2fedad3f9fad7a

    SHA1

    dd4f21d25d0bdb43a1f7e971efdbfd54eb40de83

    SHA256

    108dd48e6aff0fdaf83cd9f97ba7ce0fb7f92f466a37116c58e4a9d1a32ddbd1

    SHA512

    6b4876cc4ef41b2b9c09cde44ac78104385dff797fa944202f869136c73d2e431b8fe00c7b4d2c9ff91b39e932cf1a5caab3d83cd1c833b79e103c0c2183df30

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9aaeffa239a50e7a1f6e2e086ec0f170

    SHA1

    1b2fecdb1e9c38e5a50b83519190a2b2763946d3

    SHA256

    d116588eddb165cf1c9fbfc0d6231b4968177cc685769cc80d739f021083d6b9

    SHA512

    207572606d1b1f896426b962eac51cff14fa70ab1ff87475da587a54d51f7cc587963793a6e865af5cd6a173e98528988b1fb16f51c56646a97d709a7bded8c3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    03d374adc16f03966962c9dab8d0f866

    SHA1

    2fbbb14411393f3acc6875e1ec5939bf2ff937d6

    SHA256

    8bab97bef48ba6fb64cb163bcacd915fd62ccd605525c27dbc336596a3b0481d

    SHA512

    67af9f68d9e826c75fb2e977cba6a2668bdd140d0cfedfd7ae30eb9e764690b863c987c80c1bf08cd2c86de2bcd8f401d95206f259191af09c2f30ac39f66e04

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    93e4b56ecdacc76e0060bc634b42476f

    SHA1

    7aaaf78af872b08fb20cada66932a8bb291a33fd

    SHA256

    f7efe801b082a61d58630f429e8651858e42c8469383226ba49450b281eeafd5

    SHA512

    746bf46a221cb66db374a32f60e9c335e2c63ce6c399f279db1e74497e31773bdbb745fef06884668d60cf72b0f912712ac36bf264f836edea787e471da80430

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    57362a3c82476d894b5aaf9c0f8e0c42

    SHA1

    6fe7b867369e8bd51defbe6af389224e8b58a9ea

    SHA256

    d5d8bdeb25b3b3bbcf6c3cdce9396b2e964adf2e2efa8fd3cdb81ef50a205113

    SHA512

    c793a59a385ec68a5cae4b89daf3a8fc2d678bf58986730a89ca5a69bc61b2494ebf6e30a3ef9e131e75bda8b7c3d50521d0810a42055613813fc713ba926e6c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ab36e2ed59d38a4109bd3b153e4f89c8

    SHA1

    a89964738188b529678eb584a1e7abbbd991fb61

    SHA256

    53dd76f1288fbbf418b1c317627590835ae9f0f212fb536670fea02a4a4c5485

    SHA512

    f4d52aa2e8dd2e7ed392478584557cd9d472690730225e207e3c4df5902b37f7fc2d412715492ca2d9d7741b9ed84e748792c710cfec1b3ba2e13ae4f773e4db

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    11de6b8f5291100ac880aa12bd564acf

    SHA1

    18682889c5648856c064d26022a0899c5fac19f8

    SHA256

    fd4bd770517ca73fa4f3ac66b8d40758dcc24b975f9edfd43b2b80e5346ab894

    SHA512

    089f0e1931e19cf4d4a37eeb6d0c1d72cbfac16bc4fe321335e634f349a4a9dcc4bd4ee35af25027779684a83570326f36c81152321c89dc9712bd127768afd3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d3a2508f84b73367f3fe15a745af0fc9

    SHA1

    7b33f8c43bbfbe53077a6146f992df9a7d1296d7

    SHA256

    79f68a77a6219ed3c6fba1b92d1055193dc6ef2df1cb82c12ca8a3d5ce4e21c9

    SHA512

    cb7b31f614503c5c3573c9af3e95a63922671177dbb4429e71b632fac55586abf84c12e3f7bda14ed1a48ca7dfcf34da706cd16320401c8aa13d14566d373326

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9746cacc2a74d1c9bc7f2e4e06fdf19b

    SHA1

    43802d41d9898848c94e7b1f313b8d0c84b5d05d

    SHA256

    3afd09bf6c91556d5cf6d6670aedb7812c37cb33a6b3ee1054906973bb4606b8

    SHA512

    a4be6b1d4a577c9dcd1ccb31c1dbaaaf6cff680df65ea34905289c9a103c58524fae9657b27917dace1cae309c4aa0dd2b76fd701acd63e7abf80c6a21198c95

  • C:\Users\Admin\AppData\Local\Temp\CabE6A9.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarE749.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b