Analysis

  • max time kernel
    67s
  • max time network
    68s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    09/11/2024, 20:36

General

  • Target

    6985cff3361574de9a919a8748d16d537cc8a7020cb04772004926937c7e7a06N.html

  • Size

    51KB

  • MD5

    b35baf7e127a15ae8564a55a3b9bbe40

  • SHA1

    83f22ced766890d04546d22697cb5097065132b3

  • SHA256

    6985cff3361574de9a919a8748d16d537cc8a7020cb04772004926937c7e7a06

  • SHA512

    72b4f6adf0ddd738092e0207302df08eed9e70b582edba2f16b88ca7d4accad4c6d0e92dd6ab74131fa910f55170436755a2290a5c79d4388706053862691938

  • SSDEEP

    1536:HIRIOITIwIgIiKZgNDfIwIGI5I7J7SwIRIOITIwIgI/KZgNDfIwIGI5ISJ7S11nb:o1ncaSbrS

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\6985cff3361574de9a919a8748d16d537cc8a7020cb04772004926937c7e7a06N.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2200
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2200 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2760

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    f9cb018277c148e7bfec7e520472b8dd

    SHA1

    40e85b79971fdf9a1346de791431f476eea74869

    SHA256

    50e059205e757f7927fe9b5c5fe197dcaf48ae03dad3e9c2ae7e61b6e909ddac

    SHA512

    981274bf300e5cee138f6977194a1288d2fbdeaf09d836c2f579bff62968298d857cb889430e51beb8b59e8b8db78d13a1846182a79bb4ffe8f7762583931372

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    28535b515a99ae86bcc8e35ec5cb2d89

    SHA1

    a2dd8f0b45335363b8c6797908834af3ddad853a

    SHA256

    da6cb37976f2caafc66e05fdcbaceb380d313c40343ba9760e5e9e94ab088087

    SHA512

    a512ab3e9b4f83c87e6fb8a0c29e5dc263a85cca88a7cd3272ba5a5faede436fae60e7c2a18f725c842b05c6c899b095fe32cc4af6a23959e45228bfaa945c97

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9ab3de112c8b12cc5498e42ae162be40

    SHA1

    f3bba16a747ba0ed572291ce1bef54e179cfebd5

    SHA256

    d0bf0a6cf52ead0e594140eec79d224433cd0f092475ecf4448b99c462c7c828

    SHA512

    249ed738d58108eb76549d83c30b62b3d837330731a2dbf9009509b01516f7e6a28361022a9c431cd8d55fb3406052c5a9de5509d350230cde36d5a9778a4ffa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9139a7196d0b0743495ecfc816f5fdca

    SHA1

    f6d0c3e0f4e403254fbe1524893b18ec016c2f14

    SHA256

    6c9d6b910870e27f4c10c5b4c2651dec56727b5ba19526493557e95300a981a6

    SHA512

    db69799b76bc9632aeb929372d30db8c7ec1d072758ac159762b66de8078c2f5c4c28f95497502fbb113190ff6414afe56a2bcaa9501dffc75c04a38668fa858

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    52254cb7e58a2c77b3012902478a853e

    SHA1

    0afdd488103787d596e869879f69fafa2cfe12f1

    SHA256

    09bee11ccf8f4ef32793ccdcb7d6a38384dfd2be564edae9b0ff850e64d0cc99

    SHA512

    e230c68dc575759ddb3a098c24ee61f7e3349da81519ff1b5acaa5814da5db3f284a186803c23b0654111819a3aa46e78a2e74caffd1b9a343e37c7480a2be1b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e4881f80dbf3f942d50feb641f226f04

    SHA1

    7048471f5ee3036671baf1abb50b39d7ec54e636

    SHA256

    f23b05c6cbf8c30a97e3776af9873a466530d1a02025cc5823a709160e800a65

    SHA512

    fe0cdc2311d5d8d9f7aa3dd0e58976b73350e9cbdb8c35abdeea80a585e44bf6d589982d1e21e081143cc735eaf3a3eef4e7e1674829e1801f841fab8c013ffd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    15fdf15dab74aced420fe151b1851b02

    SHA1

    2f7f5926f92c3ce984e55dfcd4904775dfcb844e

    SHA256

    d2eab35fbba3b70584575d04187542795deb626d35e650327959e9021a44c9fe

    SHA512

    e31776df04751e80bd1878db402b5cc319f202761dd696faf304bb4d05238b3b78fdafb2eb87c3beceb016f3296b6a2e9fd826b60ea1aed177e828b04b07ab1e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    be279851df88017bbf93d7032be9ce56

    SHA1

    add2204f6656d5a1116f39925012989dce3717a8

    SHA256

    7e586cc8bd9e2c2158d0dc9afe062eb47052e568fcc7cff296fa4421372a28eb

    SHA512

    8a1aa153bddef5e47855ed50a60acd68eb580380164cf02e91c5b24ea4e476225b2a9db261dbb571c96b0c49624eac741e9775fe5cd73f5f5c3ecabfc8b0879c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    14f82af1b9ccc32ffbb41a8f0dcde8a8

    SHA1

    8e340548b9b3e0ec0b035c3a6afebc10be02d0dc

    SHA256

    e2ba788f9e1910797b72872d9caac8645ebf10babee197278e1b3a6418d37e25

    SHA512

    12f60594b6b4d1f1b222253f82b1e643053a5817ef5f0e4c5d5364b2b8ac14fb4e6e98adf20adac6fc16aeda6c0061eb1d8f222a3abcb5a7ee8c1e0406982c68

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8e6446e0748305001f81447d641acaf8

    SHA1

    cf10b9d8f14f35780c602d9a6b9587562b35ecf9

    SHA256

    30b03ccc80aea4a51eda2d1f2d912d40c648501a07d5bbc987ca9a96f517670c

    SHA512

    92ec4bcda33f88795c581ca15b88f08880eb4948def5f70cf0a12b27cf300edc9f708c9c29e825aea1cdcee0f57553adebf33835c08e1c16e58f646fe7de2205

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3ac37fe24be85d21c8f562b8d3c56f9d

    SHA1

    030c8bb2709a039c8b1e8d6d9df736c61b135b6f

    SHA256

    e739bc45e824d18c242f1a89dbc7435241841da1200506ae358bf05b4b9c02a7

    SHA512

    e4d346207ac61f572b91d00e4604af69e48305cd1d35d4683ad40ebb5642908b17463d6b17606b0d702d03e38ac126e531f5bcd4ccf79973958cda2e33fa7977

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    55c4f3ad36bf2a6b44fd95c4d6e04465

    SHA1

    474998d6dca29aea27ae8e06b48685767876931b

    SHA256

    de9dd5da88c3e49c589795900278c259ffd410c8d1cbee1c4e83798711ed23e3

    SHA512

    71a04e77671a868bff83dd28c2aa3d084482aaa5327bf863944af05ed532fe485d5d68d102ae16f0b79bd6f7e5f672397eec6cc1404af5785278fae0f089448a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    12a0d4e20874426c04cfd1d8cd258f68

    SHA1

    41144110bef95c2a8bcd7452b88440217a74fc3d

    SHA256

    e0061710571f626bb99357312912a289002dc3cb440b0c47ec3f8decf00f01cb

    SHA512

    d637e3c8a011aef71a7325798d0f42c60397e7699f80e1c3f7ebb5d25054f8669f61334f5221f8c2cf84c631a3251c5d579b78532fccb17a037129389e3531a6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a27d06045d0bb7584f3cb93788439409

    SHA1

    f89209aeaa32d6e0f9f3a8b50a222d9749bfca21

    SHA256

    44d68de1a35242c316502db4c1fbe536e45bead83c8de9bd8c1e55cd0e09b498

    SHA512

    ade606e32273f01a033aa7e5ebddabfe6e5d38e33977a15a3fec4d5a0da103197993851bf4d72cee86145194246ad22658ed0e0b8a81b228339f45dc5e3a2a68

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    68a88a0c8b25c4e7424015c6af774d69

    SHA1

    8452f0649d857e55f069d742e2bcf91508080daf

    SHA256

    03b1d59f49ef4aa533c70a097b26a0d553e3ae156f5e5d58669a6167f702db82

    SHA512

    2702f7a02d4acf37654962e4732dba938b934376ec96b174f40355e8e95ecdcc303c8e5c1e9371d489537a9ced2775908db5fba13c3236760b5b5e9c3e27fb0f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6c7b254781a6509ccab83838b2015ac3

    SHA1

    25275d82d9269c6ffbe829b0f3f9a7cb225284ea

    SHA256

    41f06d6fcd27ee911a80fab8b6d5a0604da2f15e19d17f193b652aed6bb627fd

    SHA512

    ab8ba0aaf9bb13dd9001aa5ec79c5e92bd85fa596f5c5bdae33c02f26b8be82fd6286676fc9fcd7bb67d6bd3c4272337439809c36831910f4a87be45d5abd17a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2d0867cf7d3356588bd5b08e6e5dd69d

    SHA1

    602c7395e22ef8a76a9bf4939fe1b0b9a67dada0

    SHA256

    2c1bbb950fa08b2fd881c0dc388ce162729f01cca31ef419e701bf7df488e1a0

    SHA512

    28a81eca4a39318d8f89fb02779f24b3a1d7ab23831ff68e562656ffbf35d5850978726b7bb552f18073672c438ef813e75c02ae9c4431b24b9175b92cc34577

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b8573eb11bc114f74356502dc1510007

    SHA1

    69de8678f326e06d44cb59d20a5a1616e5814434

    SHA256

    055b32c3aa430dc95def5939302eba53e0be8de379482a264641c74f684002af

    SHA512

    a1f173c65afc6d087c31ca8291fdd13199be93554e87db3b81cb1123e8cafccf6cb0e2342c55e6d4785e8aabbe11fad565a3d43ff8ad150531d8ced8c40f2bd1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9826b1f49271cd89923ca473d7e68650

    SHA1

    75f1267f767850a4b093c7f26e0227c1309eaf2c

    SHA256

    06cdf76896bab8e155850f2d317bc2a6b9626e1d21078f50004a100e725e57b0

    SHA512

    a60e45a4f0717204ad1ab91fda4f45d076c7031b6cf084c10435ee6856d62db69d691a40882169f0de989c81a44d60453241f3a74ac530e35646e7f86ae38655

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e3cac67976eb511aa73fc59a8c87681f

    SHA1

    812bc410692c67e88370302cb7b3c97bde5f2619

    SHA256

    7d3182b13b7b701f32cda375451ac3aee486861a84f0aa2ee794d2b98da0cf7f

    SHA512

    4819a8c3c4f4969a30492df1fbaeb870af20bed8cc3dc23a3329481de252ac63ee63f15213d45f89b2fd2058f976b30c2083e814d9fd5ce2207aad7a67b13b1e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    3382973ff910fd956507976bb8955255

    SHA1

    9d015b5cb4a0b858cb3aa980b2181bbd011f02e7

    SHA256

    c6f325b97a5c439c3446c13664845194d3795e09f4922a50aaf5ed2d3117ee55

    SHA512

    dcfdce906883ef2e656c151963ce275c0c3319f04ed21286f981e79def1450b814211ab9b1af53f9ae481e84e039f30cc605c2eeadfe6dddca3fa711b9113405

  • C:\Users\Admin\AppData\Local\Temp\Cab85C5.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar85E7.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b