Analysis

  • max time kernel
    117s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    05-10-2024 18:57

General

  • Target

    bin/MonacoEditor.html

  • Size

    6KB

  • MD5

    cff4feef176cef910036d01c653d9287

  • SHA1

    2ec40c7ea8d85a126c39f294d82cd128217c0b6a

  • SHA256

    3e06c186e632d01ebc2ef38fb0c082f26e14132697afe8750173f4a09569147a

  • SHA512

    f1d5707a947d1172cd8b06b8dec8cffd8ae88486c4a7a685ef88b8c619fee84efcf0cf5ec193c1f5b3dfcb3bf5aa74cb5ce89003d092d7414aadf2c2a6e5587d

  • SSDEEP

    192:Q3+OKFLvkJj7ppk32eynKZyt7TJPAqkvKU3LI+QrzZws:Y+OKFK3pi32eynAhs

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\bin\MonacoEditor.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2384
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2384 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2024

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    847c3763965cdde2fbcf100e7bf382ae

    SHA1

    f23629e89cffef14373fe5294deb9e68a4fa5d04

    SHA256

    cc3b5b352998b58bcae36fbd20a71078b010a4ea7b8ee8fd6feb5967044e74e8

    SHA512

    a0d8c53b3f833a171f02d90fd5285a00c148e9ca2f58dbdcb8b52bce0896d72397eb7d2fa4a779cee42866c37c4dab195dc01c5f7b74dcd17082053fc5aa2d16

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a8d6cab085e6a2234954d51873f1d71c

    SHA1

    cd7f4a10dc6ebdcf7e659a4a8ae18b3dc9fa77af

    SHA256

    ac45597ed54b3c72fa8b60bdf4f3af2c91043fdc0ce08256a28bcb8f04f67b50

    SHA512

    d57e522fb4eb92c8d8cace1360318572221eb7eaa8b721f92d4b9806988c0c5936be8d7c730a09906fa44f00f1369c436dd82e03d7ad374f2201f0d3a171f3f9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    146cca49f6f37f041d861460b6c6595f

    SHA1

    ec7a41cf2ae9c8ec9d998c7bd12045bc91760a40

    SHA256

    b806eec6320ce61f830b2c001fa5ea11ab636cc9dc2d523740ccbaf9ecf92f84

    SHA512

    8acf1a45f87e8f37847ee106089d5a5ae5c0171aa77879efa4b0b840a0d07327cd30d8fa4a76df7a4b2b280eee68b10259af472e981332419b9b7ed236947ed2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e571f902cc30450489aaf95b659176a8

    SHA1

    78ba93c41ae9b0833164aecbcdda6b52cd1f681e

    SHA256

    74bf4131782e8b5ba116f1d4cbb1b39621532b63d6f0564a35409c59b090c685

    SHA512

    a54e0055b717ae162ae84a3b3177cbf28380763ce599f70057174f7c63a193c9b0f89e84b6bb25877667cb73d0e4d8918eb8c6ea9dfb93716e05473fba0b8f20

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c2b386f47df7b1e237106089325f881e

    SHA1

    bae2e1dc82b33fc5b423bf89d20391eb57e044eb

    SHA256

    328640a8061f539af3b6190d57dd87055e102b0432a773c978af23762f5b40a4

    SHA512

    b879f466a31fd6646fc8b4ec2e856793792c20e99fba50d00f86fb6d8c9ea13ad518a236a679a0d7bf48310e28a85cbc64ca925921aec6d2044bd72d48ccf445

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3a860651930f42b0d44121982e84e1a3

    SHA1

    f718d1203b570175d74cb752de5f59d78dad7373

    SHA256

    e03ded734443b8e554a00a34767f45aa428efd117c6e73db1ca1935dd681232a

    SHA512

    0797d40fb4942bc40b74492ec67cb84264f5e98f68cfa7c076d415187bfffcd7f0f8ad8d41c5a8d8b88dc2dfa68978328749f76557ac41a6cd895be105867aa5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2fb9a428260d1956d023de9133f04b88

    SHA1

    84463f65810a0c3355959c288766545f94d3ae60

    SHA256

    38e55dfc6177c0c7f0313f5cea464bc8d50404ecd8760ce50038969d977a7c00

    SHA512

    6c682a5a658a7dd549c7274f4a1a6439354f228bdb2c5ea7ec7dd6a5689811a18195bd038bc637ce17dc87c4934ddf0900d1f790e7b850ed3766790cead639e4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c0174152dbbfa2fe5a9278241af2c1a2

    SHA1

    be78225a7d5a436082180cd772693d83d002d8ac

    SHA256

    156db99685650bc2e76821b2da60343368611ea85a8b42c44625cfe6aee9abce

    SHA512

    1fb11b70b5d0f6a91e39139e6c2cf58d51172648d7022ef6667d8b06b38580765ff721d20ed309c61965cc22c45cbada90b306328c7ba6f5ae13bcf3e83dee76

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8e82474f6fc542be04f984df40b93b80

    SHA1

    f3596d13ab9c58ec8994d5e39047fd013cdf747c

    SHA256

    ee4e4510a38698be5535f1634661e3f068fe7bb778895be01b1558dc8c920043

    SHA512

    7bf82b9b61362419b315e8c5de87b59bf9d41185429109170a2e267d36239f474a6cf2f9eaa2ac28c0e55a478943713be5b772c4f9ddd1271a6d8058ff6c9cb9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f2eaaf1e11e70b27531b0d68d6b815e1

    SHA1

    d555eb430cea27a4d5bd4e60579302132cc99592

    SHA256

    50db1eedc9cccbddfc43b7e7cdd7527578bab3a8d392b411bf73f36729c869f8

    SHA512

    51a3c3194d8cc8c90a8e9ad9d233019ca5887c40d56f76c46cacfbc3265a79ff38e0dd7c3f35d48b0a73a08124de50f406bfa3f85e7c31f1d0265173078b560c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    acde1f5a7a25f72075f58905ab18a032

    SHA1

    a634a2c223887e3f6432117fad2de37e47e0d594

    SHA256

    3b496f3da8bdbb341d7428a6ca991ed3e6a95276543a9328f5257875845f3235

    SHA512

    fa6b64df512c8e5b95c9b453387870eb9cca6c8a989fa5e022abeff470bc295abfc52b1045fbb7264021bcd3e430a28fdcb3d0331f3c2f38d9113f34fa6c1422

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    52a1c5a5a6d25ee2c408fdaab8a164e3

    SHA1

    89635af85efe772957272a30fbbdab21d69f0aa3

    SHA256

    d6ec8ca9e0b1c021ef318e04853ec91ab92f0d3517c1c02b31e735af0e77b6e7

    SHA512

    f5c817e42878fe561668e6582f2d3e5a4382a33aecc983f93482b242f26dfe02818c93cffa4f462d57c1a574b419e2bef519604427147cd52980736fd9189651

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ee68abdd2cd6ac9f25f712fe3dda06e9

    SHA1

    7cc9d4f0f9192d84111b9730700a63fbee7b41fe

    SHA256

    d4a929d3ef32b2fe22064dc44214d7908f1ccc1547b6497225f3dd230454eadb

    SHA512

    0d039ff999ad709d5501150ac532dd7aa38567b20942f2dd13ef06253898b41df32c7cabdfa561eebc623fc7759ecf5c3c0f7a5d02465bff1edb64383f9c1558

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d236b7a6ee522cab75f81649ffc4e6f5

    SHA1

    e86f2b1ca88b6ac513cce6bb60690eb1097ed0b0

    SHA256

    7542c50a2eda51ce3bc121a005d49a4ea45e8aea8fa0529034e9b46df36a1ee4

    SHA512

    b5e6762942d4132b6133d0241551c0e3a37c2437595ec723268e92fb51d2c804e3c661b7620a43bd82822848a86be0d79e372955d6cde722da5ab9d2fb6a58b3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f475920ed0f68af5bcac7d288b4a1fab

    SHA1

    cf4382fd45c1f9050c2ccd4ac5165d00827c73eb

    SHA256

    040530a564e8580484d5a6eff10fa8cdcf6984ea4d301f42f9ac8d9b4f32cc97

    SHA512

    7130a7b2c38895f93a8e612ebb1e354934bcd15f89d284e0ff04e9269d740894681a7ea740c0f67cbb226eb6cec2f61570d35e30df63ce168ba9ca85ab2c16d5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    44e9f8dec97fbefa921bdf1d5c719f2a

    SHA1

    6eb07f858464063f2d4ea1b72b1019f08e83a2d2

    SHA256

    1d8f9aa915f761aabd4292bb8860233b1ee9eab553b66907966ee8e4afe8a5b2

    SHA512

    1e4d9aab548c4f2ad19dcee35cc2c3c20f7dabc3674eb3a4f876ef7ffbca27804a91273ed8302f20f01b245a22f12613f0ec5d0fa09eb6f71f521161ee0c04bb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6ed2e79f51e7330b05afffcdcaa1e89c

    SHA1

    56b9afa88bf10cf7d2d7dbfdadb219a77f08121a

    SHA256

    63443201aff60fff9faf4f63513e51279821ab5086cd6a39d0a021fb468b9f2c

    SHA512

    b81ca887330db2b8daeea984c0edd1132fc0764a1c00d14b20f2250769af4ef8eb4dd3a16adc2ecd8e49679b51d95b98b30608d317c8ffd3cac7591e6710a347

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    44fa8b18d81544165dc50f0ae8e4c968

    SHA1

    67fc0fbc305e23061a0a78363059f220ddfe42a7

    SHA256

    7e540a35bee345a446762288ce4acdc1c7421393cd84d7049922337d18f21286

    SHA512

    afcd2c4e0c224e94ef7208b02dae057cc676cae943ea5cea0fffd8fd911d600f2e94d1186025f9a332335b47ad903881b21a2c2ced36cd1ebbe62e69036d091b

  • C:\Users\Admin\AppData\Local\Temp\CabE11D.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarE19E.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b