Analysis
-
max time kernel
122s -
max time network
134s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system -
submitted
22/12/2023, 04:02
Static task
static1
Behavioral task
behavioral1
Sample
5faeea7ea148c274ae9d3447418cfed8.html
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
5faeea7ea148c274ae9d3447418cfed8.html
Resource
win10v2004-20231215-en
General
-
Target
5faeea7ea148c274ae9d3447418cfed8.html
-
Size
601B
-
MD5
5faeea7ea148c274ae9d3447418cfed8
-
SHA1
b4148b8ee491327b1164b6722340de8dd4ec761d
-
SHA256
1f650b23c6dec0ebbeb16bff80e1d530f0b7ec9eff9b348a466b81d9b4d4860d
-
SHA512
02aecbe4a1def41038ef9599924c8382dba20b45abd0e8cf2064fe6da22335feaac8e0e64f44feb419f597f34968f5fb139c035199c5463259d5f344f57a371c
Malware Config
Signatures
-
description ioc Process Key created \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\GPU iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\SearchScopes iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0" iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 703c4383a934da01 iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\PageSetup iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\Toolbar iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\DomainSuggestion iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "409392427" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\IETld\LowMic iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{BF1886B1-A09C-11EE-995E-62DD1C0ECF51} = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\Main IEXPLORE.EXE Set value (str) \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\Zoom iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1" iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "2" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\Main iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000d80bef292bee784c8e3c940d61fdfeb800000000020000000000106600000001000020000000bb5c482c76160e9d8e51cc06592c25241626d20b31a480cfe1f8544c200cd7af000000000e8000000002000020000000a0496de86b7538ae2cc58657b954dfc8e3ab3642030a541b5e6a701dd81f8b1a2000000014f59240af58e7dec605b0e1c9f279f0114b70c3fe0c28eaf0b294d127b1ef56400000007b64a074b7e54cb11e054b96f737a60749772ea88d6179867eca6cd5f00ac090b86110eb9d94ab37f01b2b5bc7edf54befe9bf5ea0fb9d0736fc84d7ada2e309 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\IntelliForms iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\InternetRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\LowRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage iexplore.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2108 iexplore.exe -
Suspicious use of SetWindowsHookEx 6 IoCs
pid Process 2108 iexplore.exe 2108 iexplore.exe 1768 IEXPLORE.EXE 1768 IEXPLORE.EXE 1768 IEXPLORE.EXE 1768 IEXPLORE.EXE -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 2108 wrote to memory of 1768 2108 iexplore.exe 28 PID 2108 wrote to memory of 1768 2108 iexplore.exe 28 PID 2108 wrote to memory of 1768 2108 iexplore.exe 28 PID 2108 wrote to memory of 1768 2108 iexplore.exe 28
Processes
-
C:\Program Files\Internet Explorer\iexplore.exe"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\5faeea7ea148c274ae9d3447418cfed8.html1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2108 -
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2108 CREDAT:275457 /prefetch:22⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:1768
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD58769fb7d0ddb283d9dce8312f68cd1b4
SHA1b390b78ad62c7f8f4879ab3ed661a9459f1f092a
SHA2568f0df1035c38ad1a45f67d5127ba199c704565abf2de576a2fd45492a2b9694d
SHA5129a768d87bb052db774d860b91fe07009baa5008f975cd9ec01f547222762b3aa16faf54451603b2e3f8949144c2071b68f10a71559d399a8bb5b135955420da3
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5e238754120765920a44d8a151e352662
SHA1be0a1e374583b81f8304f6821944326e5d4a5a6a
SHA2562bc4c9f9aa749e30bf19b6e06d4b2d4f9a217a699606868194f8aaa07ed2428b
SHA5129675d833e3f0219e2d15435118f93933a7dad3ee9c71d14d462c03e927390818e3de559e28e93f208451fe730ce0e6c0854001046b354639483b2a31d970571c
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD50d452e658aac4feb77763bbf2bee514d
SHA1bd47ae533e971e936efdb229d4505e91814bee7f
SHA2565b30857b8b697baffc7fadc329389a311a19e63d8e75be6ab6b50c7ad9021601
SHA512c9f1f44268c4cc4b82165b91edb9c20e701c193f3513812bd28b6b15e03b8ce2b54a5361f3c2d8b7d8b07aa03841091cbe497a5bb923009b9dc120907ce0205e
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD57e7e9b59cd6e2f5fd1301653e64f65cb
SHA124c6cf68c6df3d78c030dea756d128bf0f0cf034
SHA256a1ac415b90f81e87e5c8ea353e5e0e277c3e4e57a2d6c5b0771ff6b67eb42f84
SHA512f88d7979020bc55ab269f5dba8f59d6b662b1144910a10bc312d2e812a8ec973a357842228fea3e99d0b11a337fab8cf1fc1c1ac007ccd89b5e824b6c3dbe858
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD59ad47338a4f3cc28ff311454a106d987
SHA1d1686866d12a2f86aeb74cbda88f461e5f180ca2
SHA25625665e1e09fe85852706179a2c07acdff1599633a3441507ed6f7862943bdaec
SHA512525bab761ea65f00ac3a60e296c84c0ed00230ea455bd4ad77dce48265d578350881343284c461ea1d76ae3c2e4b2738c3707bf690d4d31068b896e7029b4948
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD517c4ae823a7fbc79801aed1741668c75
SHA151ef80715d4ea89d642551704a7b8234932bcea7
SHA256d1c515ce95dd01af2e3eef6edf2b74568b603030380852f727e3f3b13bc51cc5
SHA51274a2b113106617abe06c8b21ffb2b85928150c0ac17433bb5dec3381a1769c3dee0a6ac2255e6656b352ee16010a4de699a177a09cfa696eb3938bc32f29ca5c
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD54ee70113a868fdd0056001cc7f7cfdb4
SHA1b6184e3b104d0bd446718431f351edea2d225520
SHA256eee6920ae05a4981e0044172734e47c90d71b09c7f49e5a26b0f3bbf44a9a6ff
SHA512308e79fa5997c36e489cbd8dde79b686fc8ad46fc19bf01f8e2dd77a576a21edc7ac95007479374c03bc48872ac818388d42ba1841459e0642246ed76821f05d
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5fc83ddbc5dcbb7e6ed2888f6d6653537
SHA175532914a4b9828ba6833934e2fb4fe3014d0cfc
SHA256e7969695ce06552eb7bd8e668d1e9617080f7b1bc02c8b96c18b71a82230b61b
SHA5122987dd1ea5b09c1830197c16a45cacdeef86b95a0b3393abdde07a138b416c90a80d5a3c5ac11e41dc07d91b5a53bcb2dd9325fae0c166c06d359363e6ebd836
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD55d3c22f1181a5fd5ca4aaad0988e883e
SHA12afed367ff937a6a4fd77c4486a9a96a8db13c12
SHA2561fdb54c8d7c472e318d831a148826808c0999316a641bd4d8f58a80a7f922d72
SHA5128179131c5d2d66359db77758960f8a0dbfdd3893e77fbe6c6cfea881381a901921d94b2a1bcaf27de18d2da0f79368bb2e7e7baedf1476c2967b174af5d7790f
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD53b7b82d22ffa8f94ae035b2d92a8813a
SHA1538769a9aff3481b4965143bcbe71dcbfdf73150
SHA256cf73e5d486f15ba583ab24b1e279d891f91f48fa52a9d854575acb9b183ce4e8
SHA5126cc24ac3d4915e3d11385b34e7ec5d8e59c5792420dbfec0dd377d0ed462febb0ee08f18a14e04395d85e4fd2cac4e5a24e2729d21e6b34958caad681009405e
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD51d2c785c05a4f33028a7ee99a6c4f496
SHA175d9b45bf73d917ab487deb1262590b3444e7d50
SHA256bbf818e77387aaaeaa230d5bf4ee95ad537a4fc10fe519eaea72c9add4cda67f
SHA512263441746887ccc2d64d4bfc361ab739480653c3ead3756822c19d4fea09b26729e4393324b42c5dc2af3c0610a88e3c7525e659b1edc2c04aee8e412dd82e39
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5d5f644fb36b7551742888cfb49662690
SHA1684af17d5818d9c0e936b445ea74b0e4288b02a1
SHA25604a9b6cab48af0ca2f3ea2acaffeab1a0ab50a9751da3ba730d222c56c76754c
SHA51254c741bd8d11efa3d96d8084ded07c569d760bc2414e148c3a43b09270cd7fb3c6103f03b0d479ffccec4e6e95fb5a33b8a9eb9255b2d94ca974da55c3469029
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5de6b0eb4e623e4dade8cb1af77956259
SHA134c28bff95219b2f341f93288f58451c63d26f88
SHA2564a0d564e5f9fdd9ebf85635de8e6d33a8a1c058928c27b198ef1b14deb3dbb0b
SHA5127bdfd34d214aab94c54f20a22c75fe01b781a3bec350f4be0e2ad353db8722cf5f5f3e099b615bdd82dc89d4c8cecdf6d19d5b35ee3a9883c7cad99e165339a1
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5f3cc2193a53535e4d2ae4284b849d5c8
SHA1114d2c11e986606b49f6922d86330510c67b5db5
SHA256e5582cedf65fb5452961c110a9c4f6b273b2d01b088ac997b482fe95bcf8a16d
SHA512930724b94c7db2de576b206cc120efd0a542026875eabf04fbc3f6386978b482ab1859327b123f575b33010ac0d512aa17a16242f6d72f494e16d9366b5e93d7
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD53f44564ad07699b5101be8deea707014
SHA1146c330fc512a8247a3eb87a2856e87b6c456298
SHA256f3a44005b3551b17acb6dae1b33faae035299277492203b266e72b8bcd65cdc0
SHA512e083331ce49972b21d926180a8a65798f4347b02b4b8e197baada181b469a66567f95f2b21f5fd82c6a24613d126ab07d5cf17891ddbad3f32b3d4bd58ac3640
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD52dc5fffff642e3f235fa66d793408153
SHA1e170dd641f358a167d77d5f68e5e49a7b340938d
SHA25661d36a342a5417ca156854d91b23c7389e10865074e49871d261fd636d67c717
SHA512390200b085fd174d20b10189e0f4db131b5a26209956e8b4cfaae4423850668c43168e78db0cb5fd2ee78b4cee24cd3bf6152ae59d5ea5e6a0a8cc86bd3defb7
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5a6edba05aa5acfa008b360be59279db3
SHA1c58b636f904c27336bd0d8e13a20beeaa83234ff
SHA256489134ce759b23fa76f19f0a3b20f8d038baf21bd19add82c3d4e90573be042e
SHA5120eda9b4a4719be15b3daef958327486e4ab8b1ebcced5829b30e58cf70f13162d9d33edb7a5cecde07b62d6c5aab902e15711466169771ca0e378bad526aae9c
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5d435db0742d33591f99f3ac89fbf8fde
SHA183dd2cb1ef1bb64016139aa30d7a4dc210815154
SHA25683884774dee1b2195c21ef6a602c95be14cc86532d53e6025d5b90d146c4f84d
SHA512352909d2b2dd93d413b988869e4caf7e96e2e665bb8b151a8f127a2d1462bd5d7e4f054293740206821b4b13362118ef11a1b1243dac0b2c7f7e4b310c0672ee
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5376ea22a347b3481eefdb4a19842b515
SHA1b9e085bc52d742a18f00d05f2dafbb8ed01d1837
SHA256106621fc80b123b69f7c8b1b142269b4ceed11f6691fadbd2a506a928d574db6
SHA512b7d73792190ba4b11b1941665569a45a28bb5b08a1648f85858a909cf9bf0e4a9f1d9f9d6d31670e0a5d4df8a1b4243929fb29f203a3638b40ea1123f120c545
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD52cdda5e7fa10178b47739d287af1e5b3
SHA18fe8cfdb32e413a3ceed4b2d5ba090234c9c1667
SHA25682850ba19806b2ca6eb491157c5e77520b797f5f41933a46e44d9479215aa742
SHA5127d339761f91f4085b0d5f19aa99c1a35340fdd9538da07a0d50460d2aaeb9938db75f61f37469ca3a461255d135120b271e789bda94b3a96b00a76c9e51e821a
-
Filesize
65KB
MD5ac05d27423a85adc1622c714f2cb6184
SHA1b0fe2b1abddb97837ea0195be70ab2ff14d43198
SHA256c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d
SHA5126d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d
-
Filesize
171KB
MD59c0c641c06238516f27941aa1166d427
SHA164cd549fb8cf014fcd9312aa7a5b023847b6c977
SHA2564276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f
SHA512936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06