Analysis

  • max time kernel
    117s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    05-10-2024 04:29

General

  • Target

    $_48_/1.html

  • Size

    330B

  • MD5

    4ecb6bc4e74b1e2e8925e98dcecf4064

  • SHA1

    be7eadd5e2d8fc2ef124d91d6d8928e5470aae6a

  • SHA256

    e76a426d901f44a9c4327c02abd2870dc541b9db6c32187a75abd2f73c73910b

  • SHA512

    9ea3141670783e18df810c1072d2d3116b1e1c5fcd033786e62b0e08aff92866e1d5151603907824cb0b38a1432e0720d85b03c1bd41b54dcb15ad6c230e5c43

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\$_48_\1.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2168
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2168 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2788

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d2fd23f876b0a557e65b5f560279fadf

    SHA1

    470a223e6e816b56151c1de79ef0378bfdb10448

    SHA256

    a48446c532925823e401d2d7fb7a2d7bf4b8828c24df65b21fadf642e44a53e7

    SHA512

    ef87328d4cb9b4a3230148bc82e802bd1bf5e620f01f9d16cdd19fde2254b820501c1728cc485faf671ee5dfad8819b009690ff27a26feaa4608f13b221bff9e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    185358c5c247bffd595a0d95aec9dc00

    SHA1

    e728313e6353361c54290c301346992f09392378

    SHA256

    adb7cd3acd44a9d9ba48f5f9a4c5feafd9cebeb5e96676967253e1b0f412ecbe

    SHA512

    9848e9523899b1432acd6ba7b88f96835acfb19bd743921486cdc391ee461ea5b6c8727a4388f56ac4d7ac73630529c51a8ce627d4810db985533c5c4f3fda3e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0866e747095a05792af842ae38bf1384

    SHA1

    1852bcd2ea22224e9d1c214135b609467dde29c6

    SHA256

    eb6a2e6402e7a8813b56750913db7a23181baeade5144a57060cbd6bece3cfd4

    SHA512

    f52eb2c7125984a93532a273f9d9482fcf37d0a431e61842580c77e19e7fc688797cc4fb74c38584f8f2c81f01c84a49075b6737b7c2e8c3651e87fa80a3abdc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    611cbce39d59844da1dbb9c95063c4db

    SHA1

    a3477f25cddca5fa09d644aef80e57ef6954ab83

    SHA256

    0f6d9c1ce8c5fbcfda33c99cc56acb4c75c4a6bd37a2d00d876ad198d3444ad3

    SHA512

    f9f960ff9f843843a40548ed6c2a7432e8a45b98143525dd407d229cf32c6b8e1617debe785c1e373c6572fe8aff062b8ac4dc261ee4a5ad41d6661e5f37d760

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7c3763f5bced77ed264e460ecd1eab1c

    SHA1

    a6c49339fb91ead98e9d7cb64441e1bf25754841

    SHA256

    da13bd00bdbc8a16651923a4728a8b9e76a39d5d81af83d8352c3e49c3ff8ee6

    SHA512

    9b19229c7bca15835f6804938f3a7bf584b9da589f188760aa7c11392fd15ee4820920b19a62c6ca619637ee96365c8bcc0509b025b18f1bec2601a5c2fa080c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2a9f64b92a00fb2aa5b1b7a705f52e26

    SHA1

    3c588b56f0ba34c55f018a89e79c7014877d899b

    SHA256

    25043f5183bd33a48c927b392cc8c688159ca15e7618fe3107aa9328933b6cd5

    SHA512

    8f7aa087200ee069f02a472fa9d35d622a050a82d1f920c505e34066217879536c78e898ab7748063ec26d562ed2acf67a4e4d890336ed9d0d26525d49eab268

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1d5565c5e122aee57ddd57d1c9cb09d1

    SHA1

    07d2e2561cc8e7a50d4594dd9ebfa972fbf7e55b

    SHA256

    7133240f2f5d297017bfe7cdb22d7a9aacdc73892c027dfb3236f2e218c7ce65

    SHA512

    0b31e92455d6778fb2975d8e54ac7fbab7a3475f3ef41a5cc3ce58b4120c8c9f67a4950d16cbabcef2e31b22acde8b9533afbd359d6f7761881d5cd0073e7e5f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3dfc5c99aa85a265dea22c47e5fceb89

    SHA1

    914cb525589c3274dd34615f0533a00b457119e5

    SHA256

    3a44b48d8eb378220aeefc9d20ec399401f101ea8ba21062182d94a51df19c4d

    SHA512

    0d3a39913625dfd58a24478a4d73301867514588125f0118aa8be25e6ca2d52ebd185acbc4413af34e2abb206c9cb8b55903da73fe4f582e7ebb1842f8dedebf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0fe44bc01fbcae41fb443de64f5dd56f

    SHA1

    1240597bb4eb82d83be0bfb2e4285719f9d20845

    SHA256

    ef9ffae0caa400b844eea5efe3289d5745ff9f5b05fcc11ae9d2dda64bdf70e3

    SHA512

    ddf0c0780938bb64f6887105639a4b9f41f9cb9d73635b24c40abb3be55dbc9df6f675d341f43883fe742af20eb753e985f31bca106dc4e52ba5460760e90af9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    53a15ce65315ea6f1c8ec85b4e0c165c

    SHA1

    1804f4efb504a9b72e2882ec8bcbceac344d5383

    SHA256

    1bebe8caf97f8070fb2fc41d43535f640e48e39006783778e391e612dbbfdf4f

    SHA512

    82d4e9b2886bbc4366d92834af0f0866d8919e14a665132cc64521b409a4087feb8607da2599780cd1f0163ef4965d272c4d8f0b9854ab61582baeeee7f557b9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e8637407ef568bc92f8fa485e4b1ae08

    SHA1

    cb968477d094aa66cb51559380c1c3bb4d80886d

    SHA256

    0ee99151d9170fea2514ede8ac8c1fa788c917559a023be82fd08596962206a5

    SHA512

    2673f2dc5fb9abedf064fab27f3ab19e1ef0f921623d2240e31b67261561123912322d74eb7c977718f434f9fc086b34a6804b512e7bde49df315a66f0e3427c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a55af7da0e7ec22806f466b4414bca81

    SHA1

    6a0611b42166a995e4bc798d83fea64a147c8f39

    SHA256

    38f88154eb789e16a3e7cd8df22406e1976751a17fe03a892c38d68889314cce

    SHA512

    88cf7ebe87515745e7d7355fba77cc576b3f01c37b389d288c1a91a478512611f67164a2e4c00cd0fcb237d1a793da29b123bc4ccea169532f5b04a376f087a0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    207a8c28cc0275e0c418ebc65fa3180e

    SHA1

    90ce6f652d4f05b287eceb172eef2fa5c4b200db

    SHA256

    5f68fcb6aae0552eb6b853bb3a991be6b6c0908b25a1275287bbfe2c3f355427

    SHA512

    de25e25acd4102377a2175b7fbcdce7cb58d3d2aabda7d7e2c95af883680f586ed73a434aa9829835929f6dd63b6d0873420ab4dd7645d8443cdd65842394acd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8f2588babb22571baf5be7390af6a31c

    SHA1

    78467a946973828566b341e7ee6c6f715ea6bc7b

    SHA256

    122bbe93789b12e970248810ebbe1cade8f3f8869c4f558aa7c64386e3ec3856

    SHA512

    7680374b0d96bc28d1400b8e1b82e730fef6e08a13bf2d6a77e1affc2afb21a05f2795add14066d14b3a9e81dc3f6fc4a2b1d73a3c9a1c6992a4a079db5ed225

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    754824dd1c712b9af50429b4d124c772

    SHA1

    e5bdf294f087f39df93fb997ca744e4adc6ee4c1

    SHA256

    b281bf26163b1c9907de41c098e3eda1ecbc8ec8331b0258a94be52d4f50923d

    SHA512

    ebb91b54dfeb99b3fab2a7d3079ab8c75973b369186ebb63fb9ff5d95af26d4cc055389af1414c777ce6f4213b422cb0afcc294e494efd5e9b4a6ca7c68cc50c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    737384c9f65ff0dc38ed6a4701b40141

    SHA1

    aaeab0f1386406d0afcae09963e8588dfff4fb03

    SHA256

    79542291f98c458a51d621e31c48cd09fae8c7fef2cea979769d5056b99274e3

    SHA512

    e5db461d53b25f300a5dece40cf55233bc3f85bc62293ea3802c7cc6debf5d54a6b9e5da1d4089c06f504c429e52e7134b2643b788944e469f4d04c7112c9bf3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    852ef7745a181263bacb7dff440b9375

    SHA1

    a4d7a99627e0e82605a721cbef0889b7436d1b0b

    SHA256

    8376d4e96d167d7f1d0eb8dcbfcb81d0a1cca487f5364b8555fa0c5e928d472c

    SHA512

    d2faa20dfa66cc4a56e90b6c473621e80d174a88cf4756815212190390084d19728c73313de14d83aef4e4453256d16bf4bfb0aae75e91e303073029828b54a2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0695f03de9b60cedd38ac41d20c2a978

    SHA1

    9afcea08c0914190245f1cc69421afff774d2516

    SHA256

    572f9a2d4c586d6927e9854f21a49aa043c1cbe20566fc9961326d0bbf59a9f4

    SHA512

    0cdc685cc0b940be61bf61973603a6b5ad17a55ea59d1424861720df4794dc62ef0bbb5854afd932fbb0f37df03a8ae9cdea3834d304d5e363fbced0a6de7025

  • C:\Users\Admin\AppData\Local\Temp\Cab5850.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar58B1.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b