4d75644bd7b92d8388c66ff1f0e36debea5d68372f7506f36d6e5e244da94552

Analysis

max time kernel
122s
max time network
136s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
22/12/2023, 16:55

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

f9e53428be4824f18e16542376976e8e.html
Size

1KB
MD5

f9e53428be4824f18e16542376976e8e
SHA1

1711ad418ac79a306ead57ee4ae04eaaff163f99
SHA256

4d75644bd7b92d8388c66ff1f0e36debea5d68372f7506f36d6e5e244da94552
SHA512

be44e8923f3a9f7d2949eeb8e43bcaadd527ed46f602db20dbbf37367593827c8be3606db99eda1e20408db4ecc466a67bceb5cfb31d9b50ad65b03f33160af9

Score

1^/10

Malware Config

Signatures

Modifies Internet Explorer settings 1 TTPs 36 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\Zoom	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\DomainSuggestion	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\PageSetup	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\GPU	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\Toolbar	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no"	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000d80bef292bee784c8e3c940d61fdfeb800000000020000000000106600000001000020000000f4e968e591d9cb173838428c118e790533677899c2e5532bbd451cd069e16c50000000000e80000000020000200000006e2786523eb9ce48c681deba08a49da5fb2dfe2290b7eea6770e840ac8dbbfe320000000bac9e41130e7d553c75298e8dd4a7211c86ae647394345abbf67e918608b6b3840000000bfd5ef2104fe6e8f3930f8486aa61359a310e54e1a3d561fb980b0bc4cbb24d6ac31a2c6bd48f4d828e0c256df8e1883923755e7cc9d8d99c1ab2a8ad540a42b	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\SearchScopes	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "409447898"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\IntelliForms	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	IEXPLORE.EXE
Set value (str)	\REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\InternetRegistry	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{E577A0D1-A11D-11EE-AD08-DED0D00124D2} = "0"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0"	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = d0e4bcac2a35da01	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\LowRegistry	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "2"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\Main	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\IETld\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\Main	IEXPLORE.EXE

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
2184	iexplore.exe

Suspicious use of SetWindowsHookEx 6 IoCs

pid	Process
2184	iexplore.exe
2184	iexplore.exe
1528	IEXPLORE.EXE
1528	IEXPLORE.EXE
1528	IEXPLORE.EXE
1528	IEXPLORE.EXE

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2184 wrote to memory of 1528	2184	iexplore.exe	28
PID 2184 wrote to memory of 1528	2184	iexplore.exe	28
PID 2184 wrote to memory of 1528	2184	iexplore.exe	28
PID 2184 wrote to memory of 1528	2184	iexplore.exe	28

C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\f9e53428be4824f18e16542376976e8e.html
1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2184
- C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
  "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2184 CREDAT:275457 /prefetch:2
  2⤵
  - Modifies Internet Explorer settings
  - Suspicious use of SetWindowsHookEx
  PID:1528

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
5dbbda964777664d3b4d1d15951808dc

SHA1
fe355d37b8e719986f001a098ebd942900db74a9

SHA256
cf45ebcaa683459e1bb7ad4ddb67f323e3bd8aed60a9b8390a4bb63437e4e346

SHA512
6bddf43407c83da246d8c66c2d207064ab3884f1a8432c16fdafdb1bf6757b86d197816cc710d49fdb0c9ab5e930cebc6187eba449a9e5d18be97d5a2f8e419a

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
aec34793fc73378042c01ced8531281c

SHA1
67209c0bf1b8aa9b41483bbb4ffd58c73087019d

SHA256
b96f807a2f23ce187420504dd9d449142711894fdbeaad22aa6d0b43ae27e2e9

SHA512
c7a238e016554724390892d443c33d03f3177d3f4575847de238887c7909e936fccf9cb84f8128aa4a79c3886f445968f3e5af9fae8cb3772a95ba4900bd54f6

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
87a0ce96915d1895ce9fd97525fe01e6

SHA1
49074502666df513bad65cdc6ba3f42434afd604

SHA256
58f3c0cd10825aa01c0d067af9bbc3dc152ba5da1eb2ac177e32749a62c4f7ca

SHA512
02bfa7fb2c388fa3796caa02e531107772381684118c90bd8748169d55c853ebe0f0dd705616987f40a90f50a9395d5f613ac56f3f811d5f8b42f67a09831df8

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
9c0a9b4ce252d29864269e3217515706

SHA1
7162e615a5b68d824017d28d53d975d75a60d78c

SHA256
a1cfcbd712392c7b144391aff4e7527c2821bb45f89b00c1f90c6a51d4c9528d

SHA512
1f7a867be2bc1ac53e2d6beb66847154576bb073e0dcc7b1ff85b068857c22afa406fb7c2ea91dfdb10c1d8794b9a80ed1029703f894fd61f014632f7dcfbff9

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
4b20c416e4ec2a01b9bb405fa3845fa1

SHA1
283faa5c6a2d485622f566c5b1e4997061ffda9c

SHA256
43e08da0e86a1e0e59b1eb0cf6b83ef735e26f2cfa062d7704ca53ea20166ecc

SHA512
4b35fa104a370358ef404e380b8778b81abf19ad11d6bf3985a7549caddab4928cc13af715001e7a2ed1e851cd379da7c25a6ece481fbded50c11929354cda96

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
4be79456c769abbcfa7711190c34fa8e

SHA1
7171a200ea645e119d273268c63f23f707869666

SHA256
58f3ee20c91ae169306980d33af657f9427e8b76efd83e1d1f542f99d5df4a45

SHA512
14c23bf89ed6b5eae5a349b84aef2bacecac50e39b444ce7a8dcaa4fade9a4d47591738b8ba0a3ced79febabd89e5be053755db1f11749f0bf798ef8735097df

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
c03bcfd5f26c37046211c5a4cccf0e56

SHA1
d2f2cc20d0dbf706b77fd22526c19b289c116a04

SHA256
de081dbdf2a99e2386a00ed04bcec6699d0e26eca2186c1027308b95590326d2

SHA512
5606de398341614641b647e7bd97c54d84a846e203e5680cf5891d64d9fd461077837196897c880d844fed7bd34697de87c151c373183e6dbf103c42d0e08b45

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
a8ba9ebd3e20a25d584474bb62814cdf

SHA1
9cae835f73626882cb5d42ee945299922bdcf62f

SHA256
e09810d8cb1eec5bde87128813f2f201d1d8367fb36eb1de325cbb65138f566f

SHA512
ddf71a8b8ed87d3c8b44b34aeb3bc372457145d631d18a922a55993b156dcd6a0a2221b25117a4cfb7a2ecdbe70fb7598ae6d5e0296bfd93b9cf4052450efad7

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
fe8d1bfbff4439864620ae95b21ec9a9

SHA1
d508fb209faed6a0024501e8d2d9d3731e7896ab

SHA256
ff435ae60fcd74177bd9bf4002581b6f7a071b5815fed0e206928fa44faa8113

SHA512
cc61a1443d6bb831ebd6b231f445c71b8d265e54efbef267ff5c4c79854aa49bb77f8d63c89ea5252c8f2c4c36b7e25b3d48db401b16b0188e807780d34c9b45

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
2ccfbdcb6cf96fd19bdb820ebb33116e

SHA1
79aa7a40b09b392f81230c214601546e3aa77876

SHA256
c095c5efae4130a41720298be022169aa41add267882d1a9a7b60ce1a2673ff2

SHA512
d85b672786c57fc1168a271dc3296a677e4654f97f280dac18b7a1cae2e93e371aed36fedfe19cd0d2bc118f852a076aa7d9415d3dcc3ce956c75a4acf543a6e

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
f033c075b25d54f0982a18e4087069b6

SHA1
268c35fca2eb958b0c400dea2890d5ccb71d00ff

SHA256
788f14dbaf8525f7376f68044407d3eff5a9339936f4b24bdd7dcb51defd87af

SHA512
6014601ba1cdb02078615ca426e43b2cf43f813d69517d6b8b8563d4ae7495868bd216133649747965f2a8d5a993cbeff12e8467581c4730456aba10e747f710

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
d2b1908ae0b5254ef1e83e088c494b61

SHA1
cd24eafde5f198da4f86e3616f798664d5348972

SHA256
3835a4a12e49a8506bcc0cb347f5f5d5a016ad31eacd2959fcca46d73a33fa4a

SHA512
97ab488a8aa35868e6f26b266af677ca82d2bc82e20bf81d659513d8f22d2a40ca08c8f6ef6c7ebbc887773329e9cf5b67fceeb9ee09136174404c54ebcb6b3e

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
009c409ff88566c3731749a099a5bdb1

SHA1
d0f561343cc8072f46b98af67735526b997e2af4

SHA256
831928d0da62f65fa14f80077979f66939d86928b62f4ab01d6f4f53782cee3d

SHA512
038e2b8c29a199ead19c85ba217f99c4605befe55ce4c6385ba7d672b5983f6d653abb61443f1d81f6f3c7063abacfe09238f9eb78127325a47358efe0cfe397

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
c4030f3d3ead10a7dfc53bfbba339416

SHA1
c7b786d90ce6112fd779136c7256d2042868ae23

SHA256
f6c31c64819c1fca4a8e1efeebf374569503e637bbaa3e63e52c4874172324a4

SHA512
41ed3bf528233085d79064b78534719ce01bd89553d176d6feee229c0c8c1d03bad337c9f62dd8ef827ffc3bd17deb65c773b312513baee82df093781726aae9

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
12eaa1a61142942808e8c1a8035d5d22

SHA1
caa7ad03bcec14061554377f7030b4bedc6fb5d4

SHA256
954b107f10942ac96427c2c3afa78dee18a836acf0070262061d9bcd0bb09157

SHA512
e36a7798af5547e6870c541960b6846fa5912e7f3e24828d2c05e3cb6a9e472cc50b9d4626b12939d454cfe27219f14a48ddad5faa87564f5277ab86c3027094

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
f1d985953a3c7f090e1311becbbefdca

SHA1
5e79de6bb6777d006108ec1a56006f47af81bbf6

SHA256
615ed0815f58e717df3bb0bbc6a15e40704698feff5781325307e86546f49218

SHA512
580e1586089da11be09667e0bf3a1fc48b1094bd80b15abebb71024effe70254a27779c6cdd1c61814a291babf0c0d07cc18bf4ab8687213f961af9b21cd493d

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
06eb75501ea678dd7a0071bceb990010

SHA1
18bc7dae4759618c153c798bcfd68768e55b238f

SHA256
26b55ded6d216b8015d0c9351a74e98b1c737009eeeae21b43b0ffc16718fa0a

SHA512
19d201b5e3f4f2403d7f5c85b486f924468e54dcd2f1653669c1d1cdaf34d8ea7fc39139cc0eb73147c5e330b80ac1d90c83e77fe7f000e36239fc00dd300787

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
9c848cfd320959af36a4555ed6191787

SHA1
dd0ae4c81958c62d64983f320e57d6d0bf5ee3d8

SHA256
697473af295bebff37f1714a9f81ed0d9fdc51de268c28ca11ecfd10000ed290

SHA512
b50c956ae7bc7cf8a3e886309def78e18dda0a840bd127f1a31cd833821c9e1b00c65559b0ec6ffae5b08ae8f4623dad1512332c4c8420d53d4811ba858f395b

Download Submit
C:\Users\Admin\AppData\Local\Temp\Cab9A4E.tmp

Filesize
65KB

MD5
ac05d27423a85adc1622c714f2cb6184

SHA1
b0fe2b1abddb97837ea0195be70ab2ff14d43198

SHA256
c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

SHA512
6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

Download Submit
C:\Users\Admin\AppData\Local\Temp\Tar9A5E.tmp

Filesize
171KB

MD5
9c0c641c06238516f27941aa1166d427

SHA1
64cd549fb8cf014fcd9312aa7a5b023847b6c977

SHA256
4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

SHA512
936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06

Download Submit