43f7de64b8026fa16a4e0b74a9a3d1c879db3098c9780ac202fc2113a5577c48

Resubmissions

09-10-2023 22:34

231009-2hkvjaah72 10

09-10-2023 22:08

231009-12p3xsag76 10

Analysis

max time kernel
134s
max time network
135s
platform
windows7_x64
resource
win7-20230831-en
resource tags

arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
submitted
09-10-2023 22:08

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

flaticon.html
Size

24KB
MD5

28986f591783838f9dfc92bb7084d7d1
SHA1

48998dacad95af1b7e16bcdfb6ee065ada7e5d2b
SHA256

89b0686fef5af6b3ffcccf4b211f50ccd8e8d68d8a563fc9870d3cf0e5663945
SHA512

68b8c0a361812f365ce3f6b42520208a1ff24a8d59635c51b1f12c9724883f2ca476d840970f6ef02bd7f86f8ab0e26c152585c2eee7639c4abbb9b0730fa04e
SSDEEP

384:Ny3RxaFm91p2MGO3PR46UQgznTo9OPgnabpjkZIfIL3vyvp1HXonhPJV8D1tMYlZ:Ny3R0Fm95GOfR1uM06GlG2

Score

1^/10

Malware Config

Signatures

Modifies Internet Explorer settings 1 TTPs 36 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-607259312-1573743425-2763420908-1000\Software\Microsoft\Internet Explorer\IETld\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-607259312-1573743425-2763420908-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-607259312-1573743425-2763420908-1000\Software\Microsoft\Internet Explorer\Zoom	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-607259312-1573743425-2763420908-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1"	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-607259312-1573743425-2763420908-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb010000002bccc567d90a0b479b49b1b2d43318c30000000002000000000010660000000100002000000098937b5116eda2f7f8b4b388c302245ba69a74d4d778bcc98217ddc87526791a000000000e800000000200002000000051c6ed2b4d5a4d5b9afb2ad169267630f3c580f443e5b8d24612cb55a8ab800320000000cec2a85f7ef02ee8b3084add39c67c52644d0f285882273fd2a5a78366623d944000000088c8e51e39a1f5606f972006cbf1ddf7f9fce45c2bcd468f4bf1787b212719322f683380e24e6fa705a36b2bf65fb95ad506c8aa400991794fd83042d0c7b61b	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-607259312-1573743425-2763420908-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-607259312-1573743425-2763420908-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-607259312-1573743425-2763420908-1000\Software\Microsoft\Internet Explorer\Main	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-607259312-1573743425-2763420908-1000\Software\Microsoft\Internet Explorer\InternetRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-607259312-1573743425-2763420908-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-607259312-1573743425-2763420908-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-607259312-1573743425-2763420908-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-607259312-1573743425-2763420908-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-607259312-1573743425-2763420908-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-607259312-1573743425-2763420908-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-607259312-1573743425-2763420908-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-607259312-1573743425-2763420908-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-607259312-1573743425-2763420908-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-607259312-1573743425-2763420908-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "3"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-607259312-1573743425-2763420908-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-607259312-1573743425-2763420908-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{8CDE5FC1-66F0-11EE-8AA1-FAEDD45E79E3} = "0"	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-607259312-1573743425-2763420908-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-607259312-1573743425-2763420908-1000\Software\Microsoft\Internet Explorer\DomainSuggestion	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-607259312-1573743425-2763420908-1000\Software\Microsoft\Internet Explorer\Main	IEXPLORE.EXE
Set value (data)	\REGISTRY\USER\S-1-5-21-607259312-1573743425-2763420908-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-607259312-1573743425-2763420908-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-607259312-1573743425-2763420908-1000\Software\Microsoft\Internet Explorer\SearchScopes	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-607259312-1573743425-2763420908-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "403051252"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-607259312-1573743425-2763420908-1000\Software\Microsoft\Internet Explorer\GPU	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-607259312-1573743425-2763420908-1000\Software\Microsoft\Internet Explorer\Toolbar	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-607259312-1573743425-2763420908-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-607259312-1573743425-2763420908-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = d0492362fdfad901	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-607259312-1573743425-2763420908-1000\Software\Microsoft\Internet Explorer\IntelliForms	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-607259312-1573743425-2763420908-1000\Software\Microsoft\Internet Explorer\LowRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-607259312-1573743425-2763420908-1000\Software\Microsoft\Internet Explorer\PageSetup	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-607259312-1573743425-2763420908-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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	iexplore.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2036	iexplore.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
2036	iexplore.exe

Suspicious use of SetWindowsHookEx 6 IoCs

pid	Process
2036	iexplore.exe
2036	iexplore.exe
2476	IEXPLORE.EXE
2476	IEXPLORE.EXE
2476	IEXPLORE.EXE
2476	IEXPLORE.EXE

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2036 wrote to memory of 2476	2036	iexplore.exe	28
PID 2036 wrote to memory of 2476	2036	iexplore.exe	28
PID 2036 wrote to memory of 2476	2036	iexplore.exe	28
PID 2036 wrote to memory of 2476	2036	iexplore.exe	28

C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\flaticon.html
1⤵
- Modifies Internet Explorer settings
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2036
- C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
  "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2036 CREDAT:275457 /prefetch:2
  2⤵
  - Modifies Internet Explorer settings
  - Suspicious use of SetWindowsHookEx
  PID:2476

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
936c21a25c36ee5b27d1dadab38c21b4

SHA1
4a79526b3ac9678dc827fc2eea7a7a0628430d4f

SHA256
10db10adec218f55ff9a1e6ea20383014289be76c7bb8112eec44ba2c3c3890f

SHA512
2b5b1386a70c1987bfe132177f0dad1cbe61267ad85651b962b8ce2da6270a24bcf96ca66b3952fdcaf26045765204f38d356e24cad708813617e345b9469067

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
3e47289db5516ecde0702b3dc69434c5

SHA1
f49a8df6189f39ce9db4388d850e283d3815e3cf

SHA256
5ce2bf1d3730dc77fd7a9c218ff6be6fde69995b524cb6e256385fde439a1f7d

SHA512
576671ef0a2ac443cb8661f187e1b5da97f6c0e24f80e4fed8bafdca4a6a548d64e9c3cc413c3959e023416f71e97f581b874e96b9397d7abfbbc03086bf7a7c

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
a50860b7c0f333736ec807bec504726f

SHA1
68853ae68c9a2a5880685b06640b4871322be75c

SHA256
05d332450dedd14d09d9ae6b544a4ce06e4af89a62fd1f6d283ce0ef10d6637b

SHA512
ea3d3aad42ec6e69055b3fbfb3409c66773576eb249e0f4f7028ce21a20a69f143ca53b3e893ba129f1b5b00993080266c454617f488f0ca486eeed95d87d1b6

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
23f61efb6bef663e44833bb67b680819

SHA1
e47eb07ebe9ef4d0f1ef52b60b14e81afb06e433

SHA256
91589cc5cf2468af219d414409ed6cacddfe00d4ee50720a9063aec7a7bed5a6

SHA512
0b958b75691752245f0f9485cd4b0586cf44f33da094c2d02480926968da7f9622560c98075d8831ea26a6df7b26dfe17a474d48c46d8671bfa1e126a76c45f7

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
3cb9d89b2aa9d25af41595e62f79ad3a

SHA1
7ede0c2abd441fc2806fc6ebc7e12173a63440e1

SHA256
c08b1d3142d3a31ab19fab69ccfc3439ad80f52f1e7cc69b9d7cb76ddf31a675

SHA512
116a01408b228fe193a71a1ed057253c4d5f7c60d4d1fd5d7a5bd1cd774afb2b563d36e08bf53c0455b248f17bfb05e2d89eb291ea1acc07abda7e90d859e7ec

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
b1879e41d7e8c4c75e8c17a9ef399898

SHA1
1c0866872a82e5b8e094bbc9abfe94e8e02df7ee

SHA256
98bfc9a55be014c91ee8f95444e5fddad739efd02a51e24b992259183aaf443c

SHA512
2275ba7f6eb43bcedb142666cc8afe791d95011275a0291301851b7c4034d4bdcd31f6bd4a1fdb159d377adeac1523294fa9d6a39f682039d74cf96f3eae2038

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
bcb06b12e11a9a1bd8b09ca1bbf443ba

SHA1
176db348fa244418a438c77db045dd8099f24f1d

SHA256
7e28560c2dbf553523654f5eb79dc45099782d44238b3f7874db58cb1f39da71

SHA512
e740cbddba6b65f68d0631a1e2264c08b3a40d71b0b5752fa6bcc3c6094ad11f541491138122ba409a2157b7c536f0372f828e8f2e94d120e0733c6b1a48dce9

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
86770322154aee695049ca29323b5dfa

SHA1
d974b7011190589598f68be7ba5738bccf1666dc

SHA256
ee05365b7faf42f06d7c8214f0556d0aec4edc2363b3e45b17e685e419afcb4b

SHA512
39015423933f1b2c2d176e5684f4fcdce0fb8fc1a6b8fd5981dd2da512d9dbef5ae3956a8f88c043e3825e5bb7365f08cdc133e5013a182fbd3d40e850bbe1a2

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
f16c3f0c6944d58e6eb6dc6e75682282

SHA1
58b12f98fc1d2e6cd60e9d0f85df3a34969e4323

SHA256
566568f15f8b62c4e64285469688b4d20ce05e1c8c6b141dc0b3eb69ca1fcff4

SHA512
afff2378474d676b44f95573c111df36ac431fa4984989b8b0017f6bcaabb067e83088006010fbb2c94fb014ca35f305f5ad7339e1e1b0dc1a524018caba0692

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
1757eb0337f17a1b7e1cc7788b7c3284

SHA1
95f6c80b841ed38617771584b1e728f02edcdfed

SHA256
eb8a534e8ab6ae7ce6da27d34fa353ff8a230a6610db3a06f1dfe63077b1df2f

SHA512
2a3e6591a75200c82178bd0126595f3c08e868165f0cd004db4e875005b67c3755b7e1182a46f291a968f0a1ab73b63443d725437af2738b1c90f2acd7f62c5f

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
a7025d2eacc57dc1aa8db3283b3ef3b1

SHA1
9ecd82ec5daea6fb663234d0d035086506f487f4

SHA256
5abf71924bd897dcd9ba71d1b07e4287a192defa2bda44aa4f96bd5917862417

SHA512
7a8128baa31eac5f3d7bd0a7eee0e282900a60069ce7500eed8b06cbbc70316b559f211329a39afb2f54ffed7cb5e8f13697c6d61dcbf58e18801fb721aa2d20

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
0c0b187eb7dc175945e2a95fe01a496e

SHA1
60367fc4ce2cf659949328fb4fe87f4aaf533d8a

SHA256
e8577b8a87e1ec00db676c84b034cc89094e0c6c23428fbae1fa5f2d9515ff9c

SHA512
fac9d1def556c24baf8ca52c237c8ae1cb34907bcac5b9528e76db0302255e0b872ac803bef0aea64d179063da981c4ce4cd9de2e378ed03dfca6d670210b996

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
b04d0c2594d95d94b9119a6959bbac58

SHA1
7bf7ddf379a456a603acd2a518da1de9b3c80bc7

SHA256
82728097d0b58fe25552a67465553927ed2828987f697ac3bf696ca5f954815e

SHA512
3424ec4c758f4edd60bb7c2db33d8c844b0517922e294e9d368d97a974593dfbf2cf905fc56083d7ee00d885b1deb6f7f8899dec0338a19211db07d7ba7ee65d

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
e4b0c0767f48d58591a82bd36296c995

SHA1
a655a8fff2ff628a749f1583a101e5b20d2d026f

SHA256
99ea3d894b5f689a20ea2d703b1ef1b01e62e148f4d39c9157594f23feb26ea6

SHA512
5c69f0fd3ba8ed2bbb8f8c58d5dc56f597462d5123b29e1347e0f1e6e1cb4658e7aed5b477b927704f6792e6b77fb63bdb1c65c0a03ce8a9099eacd1c42e6b35

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
6191494aab070cca269e328f4a3e6912

SHA1
96110b784a0484441ad38a61347e0ab67586d39d

SHA256
94e32893e0bb4b0634f76769fc6953f89b8726b10f9f8a3633f09cc1132cad9f

SHA512
0f1b8dd411e3cb4082314ca8c5fffc8e9ae3b2ab803fa871a7553375797e8476b2a894b98f3105b118a00b6fc2bb1848b9221bde28b048094f8be4c0ee28e0d8

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
832def70fd0859d7363fdd4ccb294e65

SHA1
aa06c83e2afa9ab05a8e9866640da35f65c2cadc

SHA256
63af1a0c3fce2a27b127393f25e2a5a7878c6430466ee98aeda5ea2b3fa43332

SHA512
05e8c2ab2984706e1ddf44e5d333d8fb9d8634a1387e3a64db5f11e7c024b4267e9df31845d3afba50d5ec60801397c6fa742b317b14c74320b23559a4ba2d08

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
d45b2a2e7897b00738d99043bcaed7e5

SHA1
4fe649eeb30257edd60a335e5aebe196a7f45d42

SHA256
38baa86e934a63ca5dfcdc8bc0ff8c8962abf5bf111e3a0f741b7def15b53fcc

SHA512
aac3a61c862f95142035a3d78536aabafedce4738c89f1519596af342a8c3bb8bdace9df095246c88c837fdb44e04386b8053aa594c630b6748d1989d0df3066

Download Submit
C:\Users\Admin\AppData\Local\Temp\Cab565C.tmp

Filesize
61KB

MD5
f3441b8572aae8801c04f3060b550443

SHA1
4ef0a35436125d6821831ef36c28ffaf196cda15

SHA256
6720349e7d82ee0a8e73920d3c2b7cb2912d9fcf2edb6fd98f2f12820158b0bf

SHA512
5ba01ba421b50030e380ae6bbcd2f681f2a91947fe7fedb3c8e6b5f24dce9517abf57b1cf26cc6078d4bb53bde6fcfb2561591337c841f8f2cb121a3d71661b9

Download Submit
C:\Users\Admin\AppData\Local\Temp\Tar572B.tmp

Filesize
163KB

MD5
9441737383d21192400eca82fda910ec

SHA1
725e0d606a4fc9ba44aa8ffde65bed15e65367e4

SHA256
bc3a6e84e41faeb57e7c21aa3b60c2a64777107009727c5b7c0ed8fe658909e5

SHA512
7608dd653a66cd364392a78d4711b48d1707768d36996e4d38871c6843b5714e1d7da4b4cc6db969e6000cfa182bcb74216ef6823d1063f036fc5c3413fb8dcf

Download Submit