1f72d27a4cf64cefcc892d85275bc2f699de07c08a681f883dddd11118d63da4

Analysis

max time kernel
138s
max time network
140s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
22/12/2023, 13:02

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

964f180e6ad18f1c6ce8c6f1baeb1a41.html
Size

1KB
MD5

964f180e6ad18f1c6ce8c6f1baeb1a41
SHA1

d345530d27d2d3cc962894a3a36ad84d350c4b9b
SHA256

1f72d27a4cf64cefcc892d85275bc2f699de07c08a681f883dddd11118d63da4
SHA512

8075412ede3f0566852255bcf29d3b99cf2cac41f91a94c04e79de4e7172b611c59ad91d2da96c0368b0578c3398794f7d6fe973a764199450c8ded1c64747b4

Score

1^/10

Malware Config

Signatures

Modifies Internet Explorer settings 1 TTPs 36 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-928733405-3780110381-2966456290-1000\Software\Microsoft\Internet Explorer\LowRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-928733405-3780110381-2966456290-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-928733405-3780110381-2966456290-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-928733405-3780110381-2966456290-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-928733405-3780110381-2966456290-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "2"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-928733405-3780110381-2966456290-1000\Software\Microsoft\Internet Explorer\Main	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-928733405-3780110381-2966456290-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{2B1AF931-A1B3-11EE-ACA7-CA8D9A91D956} = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-928733405-3780110381-2966456290-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-928733405-3780110381-2966456290-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-928733405-3780110381-2966456290-1000\Software\Microsoft\Internet Explorer\IntelliForms	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-928733405-3780110381-2966456290-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-928733405-3780110381-2966456290-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-928733405-3780110381-2966456290-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-928733405-3780110381-2966456290-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-928733405-3780110381-2966456290-1000\Software\Microsoft\Internet Explorer\PageSetup	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-928733405-3780110381-2966456290-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-928733405-3780110381-2966456290-1000\Software\Microsoft\Internet Explorer\Zoom	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-928733405-3780110381-2966456290-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-928733405-3780110381-2966456290-1000\Software\Microsoft\Internet Explorer\GPU	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-928733405-3780110381-2966456290-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-928733405-3780110381-2966456290-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-928733405-3780110381-2966456290-1000\Software\Microsoft\Internet Explorer\Main	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-928733405-3780110381-2966456290-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-928733405-3780110381-2966456290-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-928733405-3780110381-2966456290-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-928733405-3780110381-2966456290-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 308475f0bf35da01	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-928733405-3780110381-2966456290-1000\Software\Microsoft\Internet Explorer\SearchScopes	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-928733405-3780110381-2966456290-1000\Software\Microsoft\Internet Explorer\DomainSuggestion	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-928733405-3780110381-2966456290-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-928733405-3780110381-2966456290-1000\Software\Microsoft\Internet Explorer\InternetRegistry	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-928733405-3780110381-2966456290-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-928733405-3780110381-2966456290-1000\Software\Microsoft\Internet Explorer\IETld\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-928733405-3780110381-2966456290-1000\Software\Microsoft\Internet Explorer\Toolbar	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-928733405-3780110381-2966456290-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	IEXPLORE.EXE
Set value (data)	\REGISTRY\USER\S-1-5-21-928733405-3780110381-2966456290-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000580e1c8c6faee54b80ab28599b83677c00000000020000000000106600000001000020000000ca9ae793a26bc475d0616aee6f7eb75ca7f459f9e21dad854f937795a45191fb000000000e80000000020000200000004b17a8e3364ce11285819ff75f516317a1feebfdf823a178ca4c5bf41cf0248020000000a65952b456ac9af792b5e3a0a93fae4243131e3b211de44584b2fc84d58a1f1f40000000724fdc6ba03f18ab3610c4882fdb33f01dc84e6d32104df529ce76440d881655028dcbf347e54c8910a03af39b130186e7dbdbe4b19f238c59a9cecac8e5a538	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-928733405-3780110381-2966456290-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "409512010"	iexplore.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
2008	iexplore.exe

Suspicious use of SetWindowsHookEx 6 IoCs

pid	Process
2008	iexplore.exe
2008	iexplore.exe
2436	IEXPLORE.EXE
2436	IEXPLORE.EXE
2436	IEXPLORE.EXE
2436	IEXPLORE.EXE

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2008 wrote to memory of 2436	2008	iexplore.exe	28
PID 2008 wrote to memory of 2436	2008	iexplore.exe	28
PID 2008 wrote to memory of 2436	2008	iexplore.exe	28
PID 2008 wrote to memory of 2436	2008	iexplore.exe	28

C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\964f180e6ad18f1c6ce8c6f1baeb1a41.html
1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2008
- C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
  "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2008 CREDAT:275457 /prefetch:2
  2⤵
  - Modifies Internet Explorer settings
  - Suspicious use of SetWindowsHookEx
  PID:2436

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
ed3c6920c0935c617e718d6a3f412a8e

SHA1
cbfc567a168d7e01f441c711831c0e89b6423621

SHA256
27cc35a6f36780fd7cf57db7bc3b84f12f5a817c61b2bd11476d7ec587406e2a

SHA512
ce7d76799e7ccf96447a424e6504f2744747ad5726d7318504ee30b3ab9fa00f06af18153d50906868d66159a5a8ea5656581abef04a566b75849170d3531efd

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
f6e7d8f838da7eaac2e0cd75b752b956

SHA1
9aea47a3346729cfffd6bda962782e97800979de

SHA256
b16a51293455d2dc52158036b8f8d5e10c9f11c66a4b03017dfe8ef4bb09bea5

SHA512
a5562116f55f6239ebc06f5866219bd112a96452401ba0c58a897f97573fd3b176cdc64c7ca2184fff300007ad4530a44925cbbed44939857cea2a288cda9951

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
fa26b067a10f3fc96f1ec6e1508d946d

SHA1
87f7bccaf07f379fc3eb0671b79a07c11566ee1e

SHA256
cae5aab9be2c1b870def6fd0fd604a97f1568296059fc69fac427655c2ee0166

SHA512
c2c85e2f89b77e4489b5fccae8d32bc5bb2940390b1077bbcf4ea1a31ce44441eef08977c0071db28a4abf1cdb0e122d2c010a97d71430dd73d3edc820d98ac3

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
0ca73c9df2ce5685e91ff2d2b88e7e6a

SHA1
7110e746466a13a4a6235b5d5dc211160ac35094

SHA256
2515abfd64c18fd11684725faf0201803b0f599211c3a02c12c85818b1073636

SHA512
b4bfa3da52d1f8940aa22754acdb0e397215872a83965b2c638965b1f1eae89e0149cfd041e2c040ac2ece3ecc95ea0741986bd53eccc1d9d3d3d075a5709ef0

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
7225decf578572a21373d0bb69af5db8

SHA1
2eaa650cc0e9c1a7128b142c7335fa9a588446dc

SHA256
89b09589efc20297e953b255e5c80aad22de8bf67da7d2175ad58c446952233a

SHA512
45a2a89aff3f494b5dbcecc8d7baf36454d8d40477703b05a6b713db2c357d64bb3897803b747d23201eb2741576c177626aacac04d149f79f85ada02dea8686

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
8179dbeebfa87783938d1097d733f819

SHA1
6ad6a98fe4a09dc51ce4066f93d9ab8fc771db05

SHA256
4047f31d943a4c3735e9a28b427f76c6d949dff0b39de6ea7b4c0b3aa35e76ed

SHA512
5a1b94ae402cfc20c451c674e7404135e9582446cd92d77bc40dcec3123aacebbce9b4120234ff863bac5d2051cf78c9d84f31534ab7eac8a01db5c435fb7c78

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
4e27a27153b48c83f1b3061532d6111d

SHA1
5a998bd6bf9ca1f287873fea578b6be1be1f9657

SHA256
0cadc51df365876563202b0b51561285db4f3949920fb99c49093682462cb99d

SHA512
a19ab578cf76a3e2fb0f922fb8724468022b93a66f2b5e7a0e3b6b06bf317aad6a03c3637261f8bce874c02729d66547fa46c7ba00cdc36a84464a117c23e451

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
e72d3de78d5429fe0ee0da70567443f4

SHA1
68ebaeb99c9ed098fa845cffc4da7ce489720e3f

SHA256
5a73d74b8587eb0cdce29ab7bfd8eab3ebeb3d6633a71554f85a7f202cd97df2

SHA512
8790465aaa03602294c100b86bc61a18dbe078246380f5b46c3f80f5ab713c35b4fad198ebd0be98aa1251cee4f18a18ccacb4f2633c916e599d7c6e05d6c654

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
56cfb13e420010099258bd5a4c9caf48

SHA1
d38f97e9e3319106012ad6c218d7caf4cf3126a9

SHA256
43656e8882cd507725d6de16dbde7150583becf039dabeba9ebab6fb106b5e1d

SHA512
2692594bd059c89bcec784eeb1e5414576c1c44b1111349ec2584933e67fcb56c60f969c544c2576701917e3bc8a102ccd35c25d28c8d06070593a4a15bc7cce

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
1c030569bffa20ec3dd54ccafd8b73c8

SHA1
0664c1cd5ab31eb8e913c0a999668ce28d543d6a

SHA256
e1ec045e8606efd82798df23ec3cc4272ac37db60bd18d64ea6f3c30e9eeb784

SHA512
395bc225591436fc3bbe02d6e8b903c120e5039b8fc89e896368938f5e45a364872c8cec44158e7ecee4da6d17e7d7fec2f83a63cc82a22eb0ba660393eade3c

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
a8008105ba3fae60885a1bbc2c3a862f

SHA1
22f08b190cc1d1e118684641551675ce2cd03157

SHA256
5f03e4704db99d37ed8886b90ebae00022aecccb40a22b8e9ffc57f530f194ef

SHA512
f05caf2daef04e0442d156f0197dde23675e63650c54a94ab1a413d2e233d0b9a9fd0590bebf1abf0a7e9cb35a581dc78fa13330eee922eacccc6b34f9604ea9

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
5b2ebf9bb90fee7740bbd0808b74c0f5

SHA1
048ee62b69107c7b4a8e6c7b6a44f0de944e9d5c

SHA256
e55c8d0f37a56d2dd6d7f09cdde70c998d315f695f2ab99380ac74d41aed5d14

SHA512
afcdab94c66f4d9d19fd5a7d536aa97b22aa31a2379fbc8d322b4b2c4d53247d78027393cb916bcbb90c1c6ee0ba615309152cf5745a645499ef27f2eed726e2

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
a16e6976ac25a6665fb2c676311d6bfc

SHA1
f52a571d2101d422856ba32e095ba55e6890cb7a

SHA256
ad3f6a27c36b848f7dd50cf6c84633d12fdf064af9bfa72388a7c42731bc31bb

SHA512
b9d93f6e0758f59b8b7dc760608e13b16baa5c5512f17b59057c81dfafa8b479d7590abea4627eafb698d29ad8c91917fdb725e2f6361daa413ce11998de613d

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
cd10dd849660331809afdb745bf6a66f

SHA1
736df758b61dc94fcfd7eaf430a5836e91e00d53

SHA256
9789568b0b2f6a20a2c305a695d46d7c7f189940fb8cc80c8b170cbb125513e9

SHA512
1ff880f54bcda0eb59d595e949909955596a6595fcb69302fd099c338f34b4d4f278a525fed2a6c95a7ea6346ecf95eadc37568cabe7e7ed7124377d8a5a6dff

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
100d38e2b0c57663acfbbcd2170a1591

SHA1
068cd7c2c2900fbc3b60e44202c446d2a1e7200b

SHA256
d7bebc5ca6894b7928262aed212555e2cbeb6e966eb024ca4192bb726ff559a8

SHA512
9814b4718c593349bf640201d0987efd1b9f04d43e67b83c6e70f29a49c977efd60452ba31c9409155a4f9febcc7990aead01bde26ea39c42897a628b861abb4

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
08449c614ba289d80e1204a55928f203

SHA1
ac932c477213bb5d9059e0d202b02c000433cbe7

SHA256
d6fcdf74ebf0e4292be8e5f6374dfb459a743d291616d352b3a0643d3e10be0a

SHA512
476f485eb0aa458c1e4d46161e0f226d48f1d62e37eac1f1082cbba823146f15272641febfc3a0b567dc8f11978411dd93a552e9a88054549f8cf4755688e509

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
0adf12d8e85b3ec38c527aa250b1c6e5

SHA1
48a447c2f5ff4672ea9a81526a67218661571b4d

SHA256
4ce2d63b17fc0015d392ec3baa50bf2daf20713e4b497f51867ae64957cab408

SHA512
e0dc7c003dbaea679771430a48bb3dab3d10ae4a25d33bf1ea386364a154c91f8d85deb1e38d158f198d9839f0ef3a61e0c4f946b0f21f33ff88246fddb1fead

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
2254821fdb6c08fa4039fb1426ecdddd

SHA1
04735cbd8876116b03f63f97a6cf70e150f111d2

SHA256
3d917fff4cf06de5c1854cece96b26347ecca2e5e4de4542f12d2ad9ad8ecdf4

SHA512
33f3bf457cace5c06487f689931e3d71a5f3f3a1e106d38b15e501bf1872cd4f7ddf5b7319fd13093f8761966979955844cbd8b8bd00722c0726f14e02adbf63

Download Submit
C:\Users\Admin\AppData\Local\Temp\Cab4903.tmp

Filesize
65KB

MD5
ac05d27423a85adc1622c714f2cb6184

SHA1
b0fe2b1abddb97837ea0195be70ab2ff14d43198

SHA256
c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

SHA512
6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

Download Submit
C:\Users\Admin\AppData\Local\Temp\Tar4B29.tmp

Filesize
171KB

MD5
9c0c641c06238516f27941aa1166d427

SHA1
64cd549fb8cf014fcd9312aa7a5b023847b6c977

SHA256
4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

SHA512
936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06

Download Submit