2fa5a5e28cf8526028d17376f114058dcc8c47bf7618695a515662001b5c5c08

Analysis

max time kernel
174s
max time network
214s
platform
windows7_x64
resource
win7-20230831-en
resource tags

arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
submitted
11/10/2023, 11:04

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

fyb_static_endcard_tmpl.html
Size

3KB
MD5

d18fb1787ce0e84567496b8564e452aa
SHA1

007033d0824685600611af6992060577e127dd23
SHA256

2ae5e0576febb1a1cd63b10bf71644f99fcfd0fe7fb1f2d19525594165294e51
SHA512

ba5225a80941e3ee4ff18401b910968a6cab47634914ecb68213599b96fd4b39c8722e82bf2883faf355d9416a6f2acaa36151a5d8969079cfcd4c6795f6003b

Score

1^/10

Malware Config

Signatures

Modifies Internet Explorer settings 1 TTPs 36 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-3513876443-2771975297-1923446376-1000\Software\Microsoft\Internet Explorer\Main	IEXPLORE.EXE
Set value (data)	\REGISTRY\USER\S-1-5-21-3513876443-2771975297-1923446376-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3513876443-2771975297-1923446376-1000\Software\Microsoft\Internet Explorer\IntelliForms	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3513876443-2771975297-1923446376-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3513876443-2771975297-1923446376-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3513876443-2771975297-1923446376-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3513876443-2771975297-1923446376-1000\Software\Microsoft\Internet Explorer\GPU	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3513876443-2771975297-1923446376-1000\Software\Microsoft\Internet Explorer\IETld\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3513876443-2771975297-1923446376-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3513876443-2771975297-1923446376-1000\Software\Microsoft\Internet Explorer\PageSetup	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3513876443-2771975297-1923446376-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3513876443-2771975297-1923446376-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3513876443-2771975297-1923446376-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3513876443-2771975297-1923446376-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-3513876443-2771975297-1923446376-1000\Software\Microsoft\Internet Explorer\Main	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3513876443-2771975297-1923446376-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3513876443-2771975297-1923446376-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "3"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3513876443-2771975297-1923446376-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3513876443-2771975297-1923446376-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "403211047"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3513876443-2771975297-1923446376-1000\Software\Microsoft\Internet Explorer\DomainSuggestion	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3513876443-2771975297-1923446376-1000\Software\Microsoft\Internet Explorer\LowRegistry	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-3513876443-2771975297-1923446376-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3513876443-2771975297-1923446376-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3513876443-2771975297-1923446376-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3513876443-2771975297-1923446376-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1"	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-3513876443-2771975297-1923446376-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = f092c77f71fcd901	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3513876443-2771975297-1923446376-1000\Software\Microsoft\Internet Explorer\SearchScopes	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-3513876443-2771975297-1923446376-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb010000008c66dacf3255794896cbcb5ac20a714000000000020000000000106600000001000020000000c4e99277f2eda4c832d63a09c52b089bdf362dcc134d78d78d2d4c72d1b9b9c8000000000e8000000002000020000000c3389cd966ddb3f38244ef887f799f66a215075610852981067f11f29252aa3720000000e4742f8673002c0c7dfcfbbe960912481d7ddd62eba35d22044bbc9b9ddffffa400000009c40c40c7ae1edf3aace67173d2e7f981b8de321e13eac7ade32230418921d9805ace73c80fa53501238e4fa0b5b60207d06a649ef3239820a101665c6213f95	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3513876443-2771975297-1923446376-1000\Software\Microsoft\Internet Explorer\InternetRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3513876443-2771975297-1923446376-1000\Software\Microsoft\Internet Explorer\Toolbar	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3513876443-2771975297-1923446376-1000\Software\Microsoft\Internet Explorer\Zoom	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3513876443-2771975297-1923446376-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3513876443-2771975297-1923446376-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3513876443-2771975297-1923446376-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-3513876443-2771975297-1923446376-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{99D45D91-6864-11EE-ACCA-EE0B5B730CFF} = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3513876443-2771975297-1923446376-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	iexplore.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
2668	iexplore.exe

Suspicious use of SetWindowsHookEx 6 IoCs

pid	Process
2668	iexplore.exe
2668	iexplore.exe
2684	IEXPLORE.EXE
2684	IEXPLORE.EXE
2684	IEXPLORE.EXE
2684	IEXPLORE.EXE

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2668 wrote to memory of 2684	2668	iexplore.exe	30
PID 2668 wrote to memory of 2684	2668	iexplore.exe	30
PID 2668 wrote to memory of 2684	2668	iexplore.exe	30
PID 2668 wrote to memory of 2684	2668	iexplore.exe	30

C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\fyb_static_endcard_tmpl.html
1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2668
- C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
  "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2668 CREDAT:275457 /prefetch:2
  2⤵
  - Modifies Internet Explorer settings
  - Suspicious use of SetWindowsHookEx
  PID:2684

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
e7272841ea16788c88b05764473e222c

SHA1
bd6c5cdbae5d8b392372fdfbfdea41bd8ca07610

SHA256
26c3d5aad3731722015b5d8100d27359ab93f030c841ebee8bdd77158c675233

SHA512
a5fa4a8ac48c4ce9fd762874185973e83ecdf1dc412a9b20a32c6f5b19f6c5d93a84b647b25b4175acf935cdf14c03758fbc5e05f63beaf0de874fc6bbd53d13

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
effe9e90b28cce21b7319441382b5142

SHA1
5154c5341dd7886bd8971c5ff7edcf5c92f8d78d

SHA256
e8c54dfdcf3a0898dd7b4b74cc888b55747f23026985bdf9efac0b2a25299f2f

SHA512
d8688bd30c87cf6eee92b5034c929acf7c5af7a0f72048c11c1c30859ce54a9ea6cbdf53741820601ea1cd5a411331fc05e99b488234bd388c624264607d59dd

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
10c7ba17b6a6e4b5915b2a664e49b6dc

SHA1
9538ae6753f06eb01ce1ed213bd8147592d40399

SHA256
9d792f26270f1ddb20f39076cb4d9aab7ce397f74706128cc9cd4d69bdf53080

SHA512
b77e485c712586a4b9c6a7c7b2ad221c66e06dd8dd3a72a27fc32a59892e0a7482e4b7117e0f7788df484f4228a5a78c19fa3d7f4212d081421c91c631b28d81

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
16fff17eb736d8210a0b6dfbe8b3bc65

SHA1
74fc8c46dcc312f1488dad32a441496476d1a74c

SHA256
0cff061d979070bf4b8bfc13bebfc42e9789be81b9d88bb69da38edb734d5870

SHA512
4fe549c7d79524e9d9d7e9d04fe7761fbef7871b01520eb0d25373b8909653a25a0455a4060d261bf28ed4164de2b0b6f5da02114f3793e89946c43f511d1b86

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
9749e0b12b27af9f03787b1a4fb06514

SHA1
101fc6852d982b1e302ceb2b306ed4f2b16d19cc

SHA256
897039ac4928cb710add08a07ddf3712c1f43ab6495dd3f060ffff7bbdc2571b

SHA512
e4f2690197ba866b9b09899b064ed7dd0e2ae5c3ec505e4a201e3f4e26d01821594b0696ad1bd5b3ab31fdb5f6c32708fb16804c6cfa7a37aa30b21d52da5a8e

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
639e7ab6a6ebecd34da5b089e485069e

SHA1
cb416562de21dd92c0960c273dfb0e17dd3a90ae

SHA256
05225befbf5afd4e7b57b7df0b4c2ea56b918cd6cf4cf4efbd13c357320a9a4f

SHA512
fa8e1231f15ff41fcc0b8e37b11e43f4446d6df9d283864a31d874768b1e446a4dafe7138cd5c8d05a8649f78b104fdb30a24763e13d95e27f57a42b39682c7e

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
377aa4787285c1ce4b21f6d42fb1b7be

SHA1
e8312fd99fd0454c01845cf501f60ff626b35a48

SHA256
ff6cd114e03f663a30b539363f227cc12c3648703275144bf32f9fb1febbe8c1

SHA512
834ed6197da77bed994487cd0fcc8a41aa234b1c5a9acd407e2b467d8b0bf81b05465ca7273a15af5ead25d28611c1c872b60104b245c707b4b304a3c30e53eb

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
2d1e676ef8d44a4ef8c6b092c92f471e

SHA1
4d9cfa32e2fd2a717ee25768be68c0c4fac9150c

SHA256
991dd5cc1e98a41c7575d84faa42a5403ef7f8c2f8f2c9733267e739fcebde24

SHA512
3e05669e657ac27a7aef9afd577a4feaea2629599fd084bbd2b3f4f8bc6ae9386723bba969ffa3f7dc59edef2d950b920f01e4e75e5297cf3aa9f9495b7cf03d

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
786fd1baefe0cee3e56f35f409abbcd1

SHA1
8b48a175c075b1322446b6e86336b4f939b6bf7d

SHA256
b906a8319578fe5028d27caf5f9ec86168ce25a8d629904d20ef753ef4ff338a

SHA512
e3d8a51a8e6f53d41b9dc42de20543c3e63f046d9c299ea860156298a5ab848e2303a498644ec771809697e07f75d255a68d9cb3da077809ae37752c89b08dd5

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
419f13c84688872097d17f1a29f777b5

SHA1
b3404b8fee946758398b5d7aaa4fd3215b800188

SHA256
9fecc62932f624a4d3ee9148819797c9875854a3c535b69f2c3b958eea10d234

SHA512
db6608029d2e8a94d7064fe7342e9a05f7154bce003021ff1e823822c6fa585ee08287333fc195cb7d2573739cd7ec6cbe74467820c07c02e0d9722e3c8d5f34

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
f4e32c372f9434faf342fab085cafda5

SHA1
f5be95fc3826a170a16afef251549a86b2e430af

SHA256
12fdf72f8fb1e1be6f80975d20dee3e5215cdbe547e1e49720e7d3012c9afa95

SHA512
4e27816650c8cb8052d15fcc4d673cb9fea7fd469d57cde7a60d9137bb1a917fc4032e084f1373c86f8cead6e8f0d1d12a231914574ed322c64dc0e308ce7166

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
cebba8a40699439186717109e733092f

SHA1
1ed08e9121d59e8a9730082cdd570f2e9467b7f0

SHA256
e62be207da95dc3b4e8318aa038d5b8601478290d0f5e6bef092c1f48e18ec91

SHA512
2f13af6425a4fb67375aebf89595abe388c998a740aa3fa1dafe8090a1d67fb7b7ba1deacbfb70bc9f723df0bfe5970d17dda6f84b74bfbe70fbc5adb5ebc0c3

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
17ddb12688aadba63b7448367247fa40

SHA1
968aaf6325dc72e024914ec0c1dcfe7480141d1c

SHA256
ae1f14c7a4338a38fdd7a6ffcbb82b9e40b7795a41f3acba829c3dc54bf276e1

SHA512
8092ca2764d24991ee8edc13196a032dbd80b2ebe9eb2f9325f7cbf3ea0c55ebf09d95b2d07a5ccb023b8a88d11c29267f606e191679216ab22355c5466b2475

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
e339bcface7d01a9a90668bb374b076b

SHA1
16100bd6ca8482ab62158a0c98e0724ec4d03afc

SHA256
318a76aa167b572819c0bd88d53dea6343dc0e8e86cad5fba27b40b957214ba9

SHA512
564f31f10e717735c3290de7a427ea2140f774891a119000d701107262decb5254c1b231264bb4f42029f95ed13263274bd163b11158993822f84c500d603097

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
802744c161f7bdbd026756c86a0effd9

SHA1
396b94675f9f3c3caed50bc7acc703870e8fe013

SHA256
a1457c6d97f6fd013754b69dce32b9b8f967bba9b00c1fe28392935ace84ddba

SHA512
362fed35c6423bca3c28060329b78ef610297751de73a44424dad5ef3907bf86117b92a114f6b1ddd9782ff79168db4595fdcaa37181bb78528cde7c5ba884af

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
83ba968b2a97b4bcc165bec8ccc38253

SHA1
ee42a359c1026048365692ad278f1a3474842016

SHA256
2ca02a82a80f7d06543e36b569023d2d883d6f4f0d32f0b53d46205c6644ecad

SHA512
99d515b848c199be0767f6b2164e1de30086d1d0dc9365e6a146d018382cd7cd6fabd24671974933179c7f55122c0c65fbca03d812a1adbfb2dd01ea2253224b

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
2feb0e31c1fc311e3606ffc4872d5430

SHA1
4652eb5dbd8e06ada184dc74ef2c79c474c44530

SHA256
6e28405657c94b67f1eb3d706d1b75d3bc455f50893f6c5a69cb83f71a0b2d46

SHA512
73841771b55146f79282e75ca87e442a2968462e7e40abb37b476ab1dcaa1cc5667d891af7d21aa5818bc3c5603134489ed954e32c4bda33aac557562078f8c7

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
34e8c95f87f35abe4cafea503d03bfe9

SHA1
1acc958fb14ff34ec0fe460ce40b1837170543bb

SHA256
c60956f9a3eb9656a655f0955ade88965290dc9240fff1f0a69012a73934abdf

SHA512
e14efde87c18da77de3670dea5a2eec7ab14cd6328544d11037572a3d3090dfeb9ac841e06ef1588dfa64688c599ef93a118c9bf7b4ceb54867fc96b389a0e94

Download Submit
C:\Users\Admin\AppData\Local\Temp\CabA7E.tmp

Filesize
61KB

MD5
f3441b8572aae8801c04f3060b550443

SHA1
4ef0a35436125d6821831ef36c28ffaf196cda15

SHA256
6720349e7d82ee0a8e73920d3c2b7cb2912d9fcf2edb6fd98f2f12820158b0bf

SHA512
5ba01ba421b50030e380ae6bbcd2f681f2a91947fe7fedb3c8e6b5f24dce9517abf57b1cf26cc6078d4bb53bde6fcfb2561591337c841f8f2cb121a3d71661b9

Download Submit
C:\Users\Admin\AppData\Local\Temp\Tar2CC1.tmp

Filesize
163KB

MD5
9441737383d21192400eca82fda910ec

SHA1
725e0d606a4fc9ba44aa8ffde65bed15e65367e4

SHA256
bc3a6e84e41faeb57e7c21aa3b60c2a64777107009727c5b7c0ed8fe658909e5

SHA512
7608dd653a66cd364392a78d4711b48d1707768d36996e4d38871c6843b5714e1d7da4b4cc6db969e6000cfa182bcb74216ef6823d1063f036fc5c3413fb8dcf

Download Submit