c1bfd7bae65c6f46a8d512dd23a522d495e9a58a91d43bd1b43251e935a5acd3

Analysis

max time kernel
132s
max time network
225s
platform
windows7_x64
resource
win7-20230831-en
resource tags

arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
submitted
11-10-2023 11:27

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

Panel/Panel/keywords.html
Size

3KB
MD5

813aa77de37da56805679e132a36cfcf
SHA1

712d65746fa6db3e8357bc81042d8001ed5eae54
SHA256

9dbba886be64db65fc82c87f697d20bd028b75a23a37d2aaec346753de1224ad
SHA512

9422adf51d59704bb4e55e1e64033e4b0ee1b203a622ef98168886021fd7ae2fe5970216a531be92421df764a902dc7663ee40bd2c6dbdb06b242cd377954672

Score

1^/10

Malware Config

Signatures

Modifies Internet Explorer settings 1 TTPs 36 IoCs

adware spyware

Modify Registry

T1112

Processes:

iexplore.exeIEXPLORE.EXE

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-3185155662-718608226-894467740-1000\Software\Microsoft\Internet Explorer\DomainSuggestion	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3185155662-718608226-894467740-1000\Software\Microsoft\Internet Explorer\GPU	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3185155662-718608226-894467740-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{31757841-6870-11EE-8F26-EE0B5B730CFF} = "0"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3185155662-718608226-894467740-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1"	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3185155662-718608226-894467740-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3185155662-718608226-894467740-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3185155662-718608226-894467740-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0"	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3185155662-718608226-894467740-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-3185155662-718608226-894467740-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3185155662-718608226-894467740-1000\Software\Microsoft\Internet Explorer\InternetRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3185155662-718608226-894467740-1000\Software\Microsoft\Internet Explorer\PageSetup	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3185155662-718608226-894467740-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0"	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-3185155662-718608226-894467740-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-3185155662-718608226-894467740-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3185155662-718608226-894467740-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-3185155662-718608226-894467740-1000\Software\Microsoft\Internet Explorer\Main	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3185155662-718608226-894467740-1000\Software\Microsoft\Internet Explorer\Toolbar	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3185155662-718608226-894467740-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3185155662-718608226-894467740-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3185155662-718608226-894467740-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3185155662-718608226-894467740-1000\Software\Microsoft\Internet Explorer\SearchScopes	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3185155662-718608226-894467740-1000\Software\Microsoft\Internet Explorer\IETld\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3185155662-718608226-894467740-1000\Software\Microsoft\Internet Explorer\Zoom	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3185155662-718608226-894467740-1000\Software\Microsoft\Internet Explorer\Main	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-3185155662-718608226-894467740-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3185155662-718608226-894467740-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3185155662-718608226-894467740-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "403216029"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3185155662-718608226-894467740-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3185155662-718608226-894467740-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3185155662-718608226-894467740-1000\Software\Microsoft\Internet Explorer\IntelliForms	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3185155662-718608226-894467740-1000\Software\Microsoft\Internet Explorer\LowRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3185155662-718608226-894467740-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3185155662-718608226-894467740-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3185155662-718608226-894467740-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "3"	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-3185155662-718608226-894467740-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb010000007832999c35766c4bae1b34334b3bf81200000000020000000000106600000001000020000000483213cc5b14628d3c5150b3dd82e83a739459be856311a0246ecc9894e4fe4b000000000e8000000002000020000000b94f520de11edc0ceedb24b29fc5ad56e4fa44b716f09ea6abaa46788f451eaf20000000b3e9e34152bcc2734326f78507e205430efc3c22eceb07ac4208307aa302416f40000000a5d82a9ad0248782ee7045cbac22f7a046b2193ac6e0ab9dee2d6870039f0dfb7cddda058fb65b6e55d174d98617bafdd7a72170bd64ef61424b186503547809	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-3185155662-718608226-894467740-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 407c04267dfcd901	iexplore.exe

Suspicious use of FindShellTrayWindow 1 IoCs

Processes:

iexplore.exe

pid	Process
2684	iexplore.exe

Suspicious use of SetWindowsHookEx 6 IoCs

Processes:

iexplore.exeIEXPLORE.EXE

pid	Process
2684	iexplore.exe
2684	iexplore.exe
2448	IEXPLORE.EXE
2448	IEXPLORE.EXE
2448	IEXPLORE.EXE
2448	IEXPLORE.EXE

Suspicious use of WriteProcessMemory 4 IoCs

Processes:

iexplore.exe

description	pid	Process	procid_target
PID 2684 wrote to memory of 2448	2684	iexplore.exe	29
PID 2684 wrote to memory of 2448	2684	iexplore.exe	29
PID 2684 wrote to memory of 2448	2684	iexplore.exe	29
PID 2684 wrote to memory of 2448	2684	iexplore.exe	29

C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\Panel\Panel\keywords.html
1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2684
- C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
  "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2684 CREDAT:275457 /prefetch:2
  2⤵
  - Modifies Internet Explorer settings
  - Suspicious use of SetWindowsHookEx
  PID:2448

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
d51ca07ea37d6a19e9cfabdecbd3fbc5

SHA1
7ea381764d191d86d97709994cea81f5418519ec

SHA256
8d9674ff2a8cf1273e60a1a2b2cb991621c5d8ff6a017c4146ffba46e69a9e81

SHA512
305ef87d121c1a574706922a71ed3fa947d6f5c9f7058e6699ff33b18d66a14de679d4938c4dfb2de66859abeb478758fffdfbc1bdd1e20e0456e99d37bf5910

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
4293ac502ed76becd3f115c599e6250a

SHA1
22c67aa3315f66ad018d3c0046f59b8f9054ab53

SHA256
060538fdbe05723cb878da652fa59b3d9fe7e28ae73ad54e06aef49c1ed6db04

SHA512
b7dccf184f077f518a964686108b423d5a17d5ca9628b762c1d944b5ec1b683556a2942a4cb947e08e719962f3c80fc1e98a852eff6f2c740899ff4a2ac6b814

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
d96616a27c1a4481fbf8c1df4b83a8e6

SHA1
42043d51b23801d5cc6562540fcf91d182c224bb

SHA256
38ae8a3de2e1e3940e1771700bf66742cd7c1dfe3e23e7ca8a9a78e2265f1ddf

SHA512
bc6ab7e04a70f7e7248cbe8b21262ecafd65390f61b5a84e237f2f2ec565d481639ac6a16bc5ff8a4cfe256a20decb914fb3662438e5a5686c65c7df1c35269a

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
ca196ad6a95021fd06642932ecc2334b

SHA1
b7d1835437d55938ca2799a9557db380477d43cb

SHA256
e233b08a029cf6972fe918d00773db9f386caccb66bb17d182b81b825343d603

SHA512
7a279bb1574ef2c4872d3200b1055d023200d884d497640ae2ac38964286f0400fbab0a33128c02d6621a7a0b9518843854a4fe48880616278e5ed8a9fd8999f

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
c0a5a361dd9b897696901ed8ca7d687d

SHA1
f30e45cff460ddcb89928c926c55e37371c45844

SHA256
4e372964a0d39dd79071759e232ad8d74e1767bc8d0e64e996ff6be6b9ed1dd2

SHA512
19030ff5adfb67bef1dc024ae4976e1c515f5657f7cae3a3b9f91eface5c3bff2dc6871a75b48ca0f31d6a19f5850cfb78c34d48c2e46ced0dd4a052853c3a2a

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
c8c04c98fe5b1381a8db402e89fc62d3

SHA1
872cf499cb12305b9c2d062963eed15107920b70

SHA256
e9de7af37c16db34fef348556d31f5b91092ee14a99f4ef8154f931e5eb876f9

SHA512
12a4b08649b4409a1a8147d2435a4c5206ba3d2a00466d7f942f41a8d65897e8553db96ecf530b6e13fd068abdb0e3f0c1560548943fcecfcc078c00c45f4d39

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
fe2774947ef75b24cb64507b5a2c875c

SHA1
fbf2d72141013f127628b01e1af9d8a0aa7c77da

SHA256
be63692f596c08625f6741509bf68e5f72e65d7159b64fe5ece6647fb1c3a3c7

SHA512
170d0e6ba645d1dda445625d87cfa47ac9945fb45600a99e1e11d1e3c0fb6ca316d96bbd4b22a9c427e75b3bac90204e76bea489d05e6dc712395c79e4bf3e61

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
7bda090c1ba30146693d58eba1547e44

SHA1
d4df0d530ea510666adf4ac8db61d4b06d595b53

SHA256
5199285bfc5dea34e048d8f5c84a1a3cd3b7e8fc05677bf5b92293e3144ee874

SHA512
2e8ddddee9e4076fd1e3c0ce9826750ddb214c8e7835626aa2158374ccacd355d3665975a85bf17507ddc3c60b23d15c8c6edd88caf75f7bb5a50e9b858d914d

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
35166da9ef92fea3095a0b1510442099

SHA1
b07c26f328ef08d3387464a881b89758323424c5

SHA256
5437c5c453d6cb31a6e99e6b9e64abf2b1384e00197ef259c59f2a555aa9d002

SHA512
32a6df909d1b445b81c4df845d1c26a2c9906d047a2be56c059b698bbfea5ce8d0485c9d027af6f0580567185959a7360f9ec553a9f0b9f3aaec8e1d678c5dd4

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
ada11b38b2c31019bcbbb59c2c91e85c

SHA1
35ca67f53dc004b0d1fd32200dd18ce0bed0ab75

SHA256
91ee8df13c25e5ad4e68dcad045fa80e09d97676e5977ff38f37a807eb4efd35

SHA512
9e3785c1a3a5ba02af6df3cdbe1743c035e5426679e7fe45ffb438e15e3618cdf4eae4f59ea6d482dd08455070a8b482527d99e9e3a25277bf99fd1783e760b5

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
97822b13cf23f4e98c7e0fb23e70bae6

SHA1
c9e02c294101bf6ea57eac9d326226cee49012c4

SHA256
f8cb3ee42de13c6b0da003db467d3f155254f8fc7d0656f90bed3a855736be4a

SHA512
e85b82f9cdffe36f99424bd0dcff012586868263376189f7cc89102becebb66278415cd87246147a5eb9f141266c3b9530340e7c05b696a55b258adff9313a20

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
ed1f5b018108467c9ad5e2a09484af0b

SHA1
af724478e616ecda51307e56ed70058b4aa64503

SHA256
b53d07b3f203accd119931d6b5033ba5dbaa77d1f2c9086b7d64953d3b74e9b9

SHA512
ff626b586a462114a8eaa2c8730ee1516b2fef431766c791087dd16382bb8c93b3af0810c9927f25a9c2fc2c919e82baa61ca22fe186086c405e679a13444d19

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
9ed534b4748461dc158baf29de5ab673

SHA1
82dbb3ea148448bac4c913b763e9eab94a21d693

SHA256
ccf10d2e25d585e47f7c1f707b4c2ad8ebab30efa9d64ad5d04fb3432e9a651f

SHA512
29862cad192ecab654030daf73d11400a2b3a7b10c04a60240c59bcfc2566d6def8ceaa4074fecbf6aae98dd0203e181085ab0bb20a43f9451bdbedad6f24f06

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
b67441b8ce7c767ca76cb18dc9832f2f

SHA1
e554a143d81a64e920b4f1a2d131351d0fa77af8

SHA256
7909bc912ff02ee512a57f7d9015b0a94628544f5baa51e2f2defb03df39cbee

SHA512
81c233259d479ec3697cd0ae0b7894f0b54f8c0c9646f253ff81db0401c8591efa3ff347bbb9df01784d96bb4a9af066105095717b007757d478e9f81dab3c2f

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
efb31a30edf3eea3ebd51b2c9c4410c0

SHA1
09370ed4ead93b03a94524d182ca9cc8d2246cba

SHA256
d1a1f63364a6018b03e0066b9815dd2e83f65d9ac54898b42cf45ba9ffe05b86

SHA512
2316445f2b2cdaad2045ceca42e97b9c435d2350b0563cc0f3ab8a9ff307c65b911a52b6be5b4354adb43ae2ab75d760bdf389be313d4b033aa58734f41fe7e3

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
41e3994352ab7e4d4125e076ffbe0cbd

SHA1
9e6bb115ea4f83f9792fd5d2e504a6e70c2a9a7b

SHA256
31b864f5cda63b8a8a403b15e902cd720b202dad85fc029c8a246eacf13a44a0

SHA512
b863e8a147ed35346690884015cff345d0609a48f3b9027b8236888e9fee08caf4ee6e175cf852a91c51367529e3dd42dcd4790176970e1c01ba6b51578ad249

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
8f0dc9c76473a36976f8e35acfdfe611

SHA1
f49310ae797a18181ac02c3c29e2b7696d135523

SHA256
f8be462370d473bf54ab5ab6bc84034a0af481ad505fc24777c374cd8043f468

SHA512
5e7006ecda9508911c0732adcfa52add23fd8637e6e771fa6a7a4f69d925dec409dafcd3f81ef1adb747ec43c16155903fe924aa3220e0783baff72729d9d023

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
b67441b8ce7c767ca76cb18dc9832f2f

SHA1
e554a143d81a64e920b4f1a2d131351d0fa77af8

SHA256
7909bc912ff02ee512a57f7d9015b0a94628544f5baa51e2f2defb03df39cbee

SHA512
81c233259d479ec3697cd0ae0b7894f0b54f8c0c9646f253ff81db0401c8591efa3ff347bbb9df01784d96bb4a9af066105095717b007757d478e9f81dab3c2f

Download Submit
C:\Users\Admin\AppData\Local\Temp\CabA98B.tmp

Filesize
61KB

MD5
f3441b8572aae8801c04f3060b550443

SHA1
4ef0a35436125d6821831ef36c28ffaf196cda15

SHA256
6720349e7d82ee0a8e73920d3c2b7cb2912d9fcf2edb6fd98f2f12820158b0bf

SHA512
5ba01ba421b50030e380ae6bbcd2f681f2a91947fe7fedb3c8e6b5f24dce9517abf57b1cf26cc6078d4bb53bde6fcfb2561591337c841f8f2cb121a3d71661b9

Download Submit
C:\Users\Admin\AppData\Local\Temp\TarAB24.tmp

Filesize
163KB

MD5
9441737383d21192400eca82fda910ec

SHA1
725e0d606a4fc9ba44aa8ffde65bed15e65367e4

SHA256
bc3a6e84e41faeb57e7c21aa3b60c2a64777107009727c5b7c0ed8fe658909e5

SHA512
7608dd653a66cd364392a78d4711b48d1707768d36996e4d38871c6843b5714e1d7da4b4cc6db969e6000cfa182bcb74216ef6823d1063f036fc5c3413fb8dcf

Download Submit