Resubmissions

02-12-2024 01:25

241202-bszhkaxlfj 7

21-09-2024 21:03

240921-zwgnxstdke 10

21-09-2024 20:29

240921-y9lz5asajd 10

Analysis

  • max time kernel
    1562s
  • max time network
    1573s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    02-12-2024 01:25

General

  • Target

    LICENSES.chromium.html

  • Size

    8.7MB

  • MD5

    bd0ced1bc275f592b03bafac4b301a93

  • SHA1

    68776b7d9139588c71fbc51fe15243c9835acb67

  • SHA256

    ad35e72893910d6f6ed20f4916457417af05b94ab5204c435c35f66a058d156b

  • SHA512

    5052ae32dae0705cc29ea170bcc5210b48e4af91d4ecec380cb4a57ce1c56bc1d834fc2d96e2a0f5f640fcac8cafe4a4fdd0542f26ca430d76aa8b9212ba77aa

  • SSDEEP

    24576:KPQQ/6MP6P5d1n+wRcXe1Lmfpm6k626D6b6+eGnkywBIpv:Cy8OeG8k

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\LICENSES.chromium.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2396
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2396 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2012

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7d3ec2dbd16f74550645eb142b9c26cb

    SHA1

    5fb81ff3c645f2566f00637e33d2883369a1f922

    SHA256

    98b5c048604e560a3821fc495658cbce26fbb1fcf2647e49fade3e795417fb71

    SHA512

    2aaf016d26cbe7a40e56479042bf8fbaf50aab12ad0611f45cfc61e518073df3091681c6f43dabcaba048c233b44a76f9c874d4deec2b3251511a4d074d54f15

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a583fd807112d379be86a3c517a13af2

    SHA1

    09b423398c9eaf26c3303b27e33e382b09977f1d

    SHA256

    c25fb9ae7dad5ade307966f92e7309c6cc11c67d138670050a30151748e88318

    SHA512

    8ded7e93f4c62fe60434d73e8096edb5d06fb1fcaab57427eb70f4da8380724a5603e7bd67a702a7f7537887f2a7d2beda8905b1e7ccdaa9280bb31ed36283d3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    020d099fb941af9f497ed28e77a3e311

    SHA1

    937c7df2b0fa9ad58a3af88a2ad927850cacfa73

    SHA256

    65c549df4b4c0b08bc4536a04371096b62ddcf3059cb1124af5dbb4ec2067288

    SHA512

    1e0ea700959568866711ce6b06cd2ba05bc107813f838170353baa9d39dde9c92e115723242d283b9435391302f95d9c1397b1f1388d1fe75f1da8f4faedb7a4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f276daa94f2e00af3a12c5c54af02166

    SHA1

    05eea27d6034434b625798b7336c1d2206adecbf

    SHA256

    7eb03daeb2511d1f3fbb25b42399b92b41640cd2f4d8c63c67e9832ca1ebdba7

    SHA512

    9688c072efdcc44cd9084a7457dd8d4634e0cd453d704ba9fc28e488eb78c62f5f32708542d7d82462b6dc36995419ff47c92f1da6a7f20f11114e5164cdf67e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    14dda952b2c52e876bdcb9b0cdcb8938

    SHA1

    b8b5cb0b2a57af6104b40dd78e916c7e972dbb92

    SHA256

    13259eb845364d9e8d4a5053b548947acd3e5927dc401d899fbd5e46a4fa1d22

    SHA512

    b1bfb6795681893c8d831448aa001796f6953c9b41fc1cb05c7f2689fdd158d83dedbc78500639cbb4531da947c127bc85374303a46110821ae7345128d47051

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    cb493c5670425ca49739c85f1b05f5c8

    SHA1

    7a5626b2a9cfca7683bd32731456c7d6116e7ffa

    SHA256

    31012a6d7a24dd56a6f6e3c49af1f631b7d12ffbea6a187a90b6764c1bd8cf30

    SHA512

    01ad12e10d9f6ec9dde44c7b00a18068413313f02945314797bfd75ba1b195279d41a71a4794d943057e6ef53711d32c005de4c29f03b147d8647675d07cea0e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4c13dbeab54f201a96acf343fef9783c

    SHA1

    92050a7faaa350fab2e577cbcda30089c329af44

    SHA256

    8d4fb0ebe62078d12b988c358d72a5c55282e6f8ba94cd520ba3bfdf5160224e

    SHA512

    0895c8dcdbc4040b06cc6c14bc429159f31fd3509b4495c84bcaf58cd1cdae0128531bf4b94fe363f3543ec52efc54f7edaeab5fbafa7d39b9ddfc52638769b0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ffd0fbb26cd20059fdf52151b981cf4b

    SHA1

    31aae667b48cfd67744f237e99aa8b0478864146

    SHA256

    6a16ef529ea884253f601f68ce39b7cbd0dbe7cf903b48f5ec522a72d9c14f65

    SHA512

    4db2b2261cf18f4528914e1d5ceb492352701f75acef198d4936b4b5e90b554bc283d0f674cf40477b7bf3c9181bc5fc23fcbcc9a74f28431e3bd2d05ed0f6e6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    06bf320e5b96117deb729ac499b172fd

    SHA1

    f915c113c44a281cca9f4360f453ebf4f0f3a28e

    SHA256

    0742a3bd8bce61f7ea00ba8024ad1773f2dfb0c558a60d5572071ac82c18be5d

    SHA512

    c4ffabd396154d190efa7361b41fc8aabe7373bdf687196fdccd31ae2b9e232ffa3e96654bda02f66bbca179e5c0c7542fc4ab118ebf9fdd24143c695b938c1f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0a9d3e0364ab4138a5759699b5095aba

    SHA1

    93385525760e7567e651cd86ce9d170db73b95ea

    SHA256

    d4a2f30718c62cd9f85f24ffe1f6017b20c611097cead7573df1e32107231603

    SHA512

    c18daf3f2639da0b9a41884e12450543e3a82792e4fd8de828e648755bf322f29d3625f967926102066d66c61bb10d07703a72656519d415dd2dbb547cd187ca

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fd7ec46ad5d698e0dbfa4fd9d1bbc5c8

    SHA1

    ef1146e74492f154bbb6cfd86960f6d611bff569

    SHA256

    c6864571cc674520df075231305312385156940a8a1a7824b8d8893a8b259c89

    SHA512

    ed9ae81e68b3fa1f91f7d20f0e259e9ffa64874d3b2e2fb5661314c46e88fa0c50920a0096ea3abfe33fc780873f562500181427d1fd15338069691c2abbe813

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2ab0bb465054daded751f1b1f9a40b78

    SHA1

    c933bc7df9824317fed5710cd91b85f2e83bc3b1

    SHA256

    f4c0664e1cb80e5633fde4bafa4d7168dcf46498b37f8fba7c5098a874d484a0

    SHA512

    1205cd0ecff13bf798b7eb73268d288aab24fec9d537c34c0ceaf8eabfc60ad720a1ca3b9784cd92bea79ad5aaaca56f11b2480e2d8e3efc52441d90c5a90bd9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2aa6a0e9318a69b8f8a6a71f24b3303d

    SHA1

    6db6b6f5b9b710858af00d980796ff65fc7a0de0

    SHA256

    ec97d230200be38e45534f8d0314aded49f85e65eee0e647ace2898a41448753

    SHA512

    3f983f4e7503afaa0e063fc63abe6e6a81dec51021c81fd778d57562598cde6d44a7718d3ddf3ae10abfc31e9b280d2699211445d7096f55b64e2f723345795b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3234dd1e4fcdd86c18f11a1987ff99a3

    SHA1

    f2cd7206810a9bc2c29575ffb8fe1605fa7e4884

    SHA256

    4154a3d49c0cac1f04030a9b2517d6e0c6fa7e79890cf51cac36b39289b3d01d

    SHA512

    f3e4e43ae40ced4dc172c571f006abb45abaccf339e1e17eb5622ec9c8b89b94bfb64c3bf43487dc5e0ab9c4692d0d82c315ccf66d097599d747860b70779629

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6b5293643f44d9534852c69d96154341

    SHA1

    c00eb0147f05b493ccc4f88af50296f8e0fc3509

    SHA256

    6971a8f410d6d50ff854413863fd10eb62e273282df7a6b8c631217648329b26

    SHA512

    9e5158b53f59686b430c8d95def0e0c4c458e3decd24590cbdff054e4a690f2f972a70df2e723e74b5e3abcc4941a930c631379420ab5b2e4cc312745b0cadbb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    615f75d7c2be6c9b46971ed440158ff4

    SHA1

    0b6269d7293a2f97716669a434515389481cac8b

    SHA256

    426bc5a22242c42f0edea2ffb8dc40c89af420e0e769055ab06eda99cfa8ae32

    SHA512

    9617649817ef5b238090dddd44107e51acf72a22a852bda61f6be93abce4180fc54fa6c91d86725cfe35e59c4714a3f1a499a2e876d63c82a6eba9093e25a486

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2b82c6ed9438cc33e77db01c352ce1c1

    SHA1

    bde11167c668e501f914665d9d87acfbb1006eb1

    SHA256

    82d0e886d1630b6524a65a0ce22a8c47398f5db20e9897b723b1f0cce16dc3a1

    SHA512

    4dfc72273531042a4002d3e9359dcd4778bdd330cb1a91baf2db91471a7a83403a035365c5c5095aeaae5efda5146b15b7713a7761392ef8bb39f225fcdb2276

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    059b37bbe86506cf1bf8d1d52e5b4f5a

    SHA1

    884e33a3f44240eab4910997d70e32511cbeb8bb

    SHA256

    34ad04b63b73cc27129a4561b53a72e4a7953cc711374d8df34bbd7014902a68

    SHA512

    7ce873a605eb3d6a5207ae24477d69e5061ec4eccb44c1c2c51f6be1e46b33ffb063df16c637b9afbae0912a98eca614419071c70af5d862d8cc159110551102

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a6eda32d60405e72dcba57e1fafe262f

    SHA1

    3cb5e5a610d0f6566dbd73e2d0c25bca75a52245

    SHA256

    7776c0029ae3496016695ed09339c2876bc4f2c6f03c1e419e8e8af21ca20eeb

    SHA512

    bb98c4d96594b733a1f66c3a201188098ede330843ebda43acf5484720484f832527cfeb0ba0b24b4d5665f0e8b0bcb4f89c458452997f0464d90eea6ab7a3b4

  • C:\Users\Admin\AppData\Local\Temp\Cab81D.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar8CD.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b