Analysis

  • max time kernel
    17s
  • max time network
    16s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    07/11/2024, 22:38

General

  • Target

    synllc.github.io/synapse-x-documentation/development/supervisor_programming.html

  • Size

    29KB

  • MD5

    5a409e0e513c1b49b1dcda6f87772e72

  • SHA1

    cd895e353b3b26b2e6042a852aa69a5f235477aa

  • SHA256

    ea9725e1f451938131edb43cb067c0d49a7dfc30b49e97b1171479159567982e

  • SHA512

    b403e7aa95b0577c35c1a87a938e9cd3e592be8342a5a1327fabdac38aa49ab0884a15790e220f59335a06ec2e7fc6204e13331b4542ed4d200740e802bf7d0e

  • SSDEEP

    384:BJnxfrhu8SDfJsM0Il6Pof/oaADEcvVOjdjkOApO/nf4DaAbFtf0fXUCqZXYjoUP:BJJTRHTfnblKaa

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 28 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\synllc.github.io\synapse-x-documentation\development\supervisor_programming.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2516
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2516 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2992

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          c8db2711f841b2fa8eb9c8d02a9736b5

          SHA1

          e0977df643eaf020fa2d238650b541203060011a

          SHA256

          9792d75c1cb5f6563d34b3a5ac60bbf9003d704a5629831eb49af7717c0bb5c3

          SHA512

          5ae9cd56811f9df605b26f49458cfc757dc633f8312a78754aa7822eb5f8f9b5551beed7a467e3e6d19cdc101abc496b6d607253719f5b2342d8e781486e2a6f

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          22c89a27c7f54fff2dc703e9bc221f41

          SHA1

          a7bf2a8db1223e40d8e882a37bc45d03a0332f7d

          SHA256

          5a9bea5803fc6b1b65c7230b8a7b99dd90fa4f203093be219019b02d5be06d73

          SHA512

          48c6b94a3c5401033bc2b571a5a1a53e4ebd1caa8e53cfb965f2589fff506b2b7d57db43c5b2414c2fd5170a918ed18a707bab7eef44502172dcd552e343b38b

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          d45b3e6d7811765c692902a97ac4bdf5

          SHA1

          40e1adaf093d0cbf2028ca30672b1e3a70d3745f

          SHA256

          d95d20cc43a54aeec6c04fbf5b37088b7c0bf295f20438668a6dbf4021d10f6b

          SHA512

          bf19b09811b658793e632d47560fc18134b697bba5aacc5a0e0605c1da705d0727f128763df2b9d803ff0a39032b6fa04fcb5c927fd054743fef639d5d0b5b25

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          00efaa53b301862505e48e4f63d13665

          SHA1

          82603504cff3cf77c4683f19df1208399cb88d83

          SHA256

          39c8238a374307465eb6e3acebea3244a7b05a104f047a4fbda3e40683948493

          SHA512

          c5e2da9118a1611b2cb598c764312e04af222e188734b826e3873a2f2aaf058da3d33cdae3a5ea0ad5bd3dacd17bf513b3aa5b1043ec70d3fee3b263143dcf91

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          345b825c8baf58fead6f4abf3074110e

          SHA1

          55c7d7bac7ad13ab192bc6a44298373224e6712d

          SHA256

          4dad62c34eafc476284c065361e87e691728b24aaf7923b46b43d77c3a7f9525

          SHA512

          f33e96a6aad3d3934195f32662415c7ea046fd16a21a50a649d00934038d45ec20a4985d4cf05552982f296b68fa733e14fa8b3743ddc3e1b30b5651cdbe8f13

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          5046e85071964d1b27c8f2bbfac2145a

          SHA1

          6ed08983600dc53d038aa1f7d24646ff4b213e40

          SHA256

          ba586c66c3c80d05012826ca017dba450cc97b20350b7eed83baf13f98aa7d82

          SHA512

          d2666fb50038b18cf4b986511ae909d1d468b60c78ea3417b7b219ae65265e2eabb86a69d57d86a90768e1d44cb48c9f22e4eb721ae3abaa9929444e9951f841

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          32c156d4f73378cbad89d1fb2cc36d96

          SHA1

          dbf045f892a3fd1a58afe39bc17a2a9bd14b56fb

          SHA256

          607628ee399029cdc3cd5546631f7fd2cd31110373e0d87dcdcf823431efbc88

          SHA512

          78e1714a0d6d7a9dc32b77fdbd13be324a37322655dbed4b3980bfbe231158d7b04f9b53d4e230447b8908ebe1595fa0defa9559964027a83d0f2e6663053164

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          31fad2c22eb29410dd2e6351e9fbbc11

          SHA1

          bc8a0219ae0f24c0ff7c4946bf6d745453a10167

          SHA256

          ea73be6f503914885d1a0a20788ff53adc84e3f32d81827487d35e7e12e5513a

          SHA512

          67116292b7c12538198846720f34c49b84d536a6f4a65478237dabcbf3e4d634815bf92e77f020e485a30f9ff83283526725183846be5823c88285ec3ed05c47

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          59b1687154208bd292b237cf33d0e8c6

          SHA1

          3ac4b960e52d6bf80b66da66f8392e40c2256afc

          SHA256

          6742fdb6210585fa6f190a7aff17cb284cd53564e11476e68c88dbb9d5faf320

          SHA512

          67fbd78cc030e35f27f0ee924e4986b18e018a0071c3d65e697122acabe028a8fa74541ff0d907ac4c360efc3182c8953d74c471c4ab1e1f9dfc00429c7388f9

        • C:\Users\Admin\AppData\Local\Temp\CabA7A7.tmp

          Filesize

          70KB

          MD5

          49aebf8cbd62d92ac215b2923fb1b9f5

          SHA1

          1723be06719828dda65ad804298d0431f6aff976

          SHA256

          b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

          SHA512

          bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

        • C:\Users\Admin\AppData\Local\Temp\TarA818.tmp

          Filesize

          181KB

          MD5

          4ea6026cf93ec6338144661bf1202cd1

          SHA1

          a1dec9044f750ad887935a01430bf49322fbdcb7

          SHA256

          8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

          SHA512

          6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b