68732fa180ef05e653e8efb02cb4998565fbc64e960deffea3dd69ee163bad64

Analysis

max time kernel
118s
max time network
136s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
25/12/2023, 14:46

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

26bac1c066227a5eedc8bf116374fc77.html
Size

25KB
MD5

26bac1c066227a5eedc8bf116374fc77
SHA1

ec1f4dfa1afbf4a7806ffb80a74aee4a5f4b8977
SHA256

68732fa180ef05e653e8efb02cb4998565fbc64e960deffea3dd69ee163bad64
SHA512

bb00140c6f4377c90de41e270c75b5ee0cf83b96c7240feb7dd4ab3c8add827324a27ac58e3cf5e9336d7edf4aabac2f74d879fc5a56004db4b6e4d7f66b55d0
SSDEEP

384:6VhBqdFE1glBN1pYnT5/7gzR+qfA2Kq9/lqWSgxCcfoi7h7jeWO0IXEgHskFkLkq:6Bx15wochHeB8Wc3F

Score

1^/10

Malware Config

Signatures

Modifies Internet Explorer settings 1 TTPs 41 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{55053D41-A59C-11EE-9853-CA8D9A91D956} = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\Main	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\LowRegistry	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "2"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 506e412da939da01	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\InternetRegistry	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Size = "10"	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\SearchScopes	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\GPU	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Enable = "1"	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\International\CpMRU\InitHits = "100"	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\Toolbar	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000d80bef292bee784c8e3c940d61fdfeb80000000002000000000010660000000100002000000040191d02a05a8f1f15d505857b8c2619c332816ffbeee7911e5ddea812e96b2d000000000e8000000002000020000000f970f4b3b84ec0d2c1e2bc189d4eb57c9294b01356a948c4e518e3e695d14c16200000005a49fde1de62b1addaaba7e2abf120505612859df81b5c6cb6a618ff929c957c40000000514cbc2adbb0bb9a2269b305a6cef229c75ac333d7524b794bf18cc643b6d6613ed18f4cf0320cd638c1137422936e31d69c8486cc9facf32b84899c44f08404	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no"	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\Zoom	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Factor = "20"	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\DomainSuggestion	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\Main	IEXPLORE.EXE
Set value (str)	\REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\IETld\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\International\CpMRU	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "409942007"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\IntelliForms	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\PageSetup	iexplore.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
1880	iexplore.exe

Suspicious use of SetWindowsHookEx 6 IoCs

pid	Process
1880	iexplore.exe
1880	iexplore.exe
2756	IEXPLORE.EXE
2756	IEXPLORE.EXE
2756	IEXPLORE.EXE
2756	IEXPLORE.EXE

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 1880 wrote to memory of 2756	1880	iexplore.exe	28
PID 1880 wrote to memory of 2756	1880	iexplore.exe	28
PID 1880 wrote to memory of 2756	1880	iexplore.exe	28
PID 1880 wrote to memory of 2756	1880	iexplore.exe	28

C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\26bac1c066227a5eedc8bf116374fc77.html
1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:1880
- C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
  "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1880 CREDAT:275457 /prefetch:2
  2⤵
  - Modifies Internet Explorer settings
  - Suspicious use of SetWindowsHookEx
  PID:2756

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
a4eddf8c607d90e9de999a246632d839

SHA1
2408dc7489b2b4809f5d7bec611026a5fe2cfa66

SHA256
4d9ede3335993ccfc13b5a1f346fed0880076fb9b63dbf94ec90e46976a5250b

SHA512
b3627175756d3bf08c89d5f664dcd0879d98ea55475c37570ce94b1317f9d87be56f8d26628e1356dd972674c7bc5ab18c44eaac07e7769152fdb2229e226509

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
0090a42b9e44d716afd0a0400fa6fd48

SHA1
f941cbf2bda4eb223fd0cad1f8fa81d30677ca56

SHA256
fc0739dbf77888eb369e17f56239e3c673c29c5988a1982c3742df531065f7cc

SHA512
d9baa3f825b7ebecd0858c3b2a6655318d9f9d111631df522da0b5b50e9dace8e73bf112c639d7673e7b99305cda3995532a80402e8508138f9bc7a58f7177c5

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
bb08b69f4dc94acf5bb0aeb6c2fe33ed

SHA1
514f9a932003d9fbc62460b605e7cf8e3097c587

SHA256
3c7ba1bf3331ab594145fe9884ef1bddd5744a808483ab31d204e417585460c1

SHA512
dd9d8bfcb3cfa52a5331b9a892c9e044152cff3bc0cc173f649e57badc3a9d8fcee57a6600b4ecdc0d5a557a8518c47b64516bbff06e12893a4437526a2d87b7

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
9b7ac9d106bb8d3d67cca0bfbad1e6c0

SHA1
4e99d8cb3a0ff785959f7fe93cc83495a0ee50b6

SHA256
7e36868dcd75b1ac4a9b525ab5097870b7c9cd1ec365a49127e6c3c54c36df54

SHA512
5e380b15a1dfac647eff54a1ea50fd42145fa21f73836f1cee017a13db8b5f09f9289f9592db8cb4523c94da4f65e9ad1b52f9961278a3d50b91167ca16b0293

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
afc9c5c378aa463cd089a99421967209

SHA1
3dcb4b37677983b28dba1fdf8f3fcd146f5c7af1

SHA256
27e4b56c47a8a14d5cb9747b402440ed154aedb501ff1970ede6fb24448c23f0

SHA512
6f074934d719a9d090be9d41324c9b33fb61ed08dec7e43416d0a5135888cb2300f545e0fab2ac3057489087b21cf0515fc9c975c8291b8b915387c2e6337a14

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
d2f5474a4fb0648c0d446ca679e345e4

SHA1
241482eb47a5ac72f4e42fa82b6ddca2da90f376

SHA256
84516c623923bb12accb055deff38b29f6c55b61590c22a4c3a269d074d961cd

SHA512
3cd9fb29498173de47e73920000b9f01fd1bdc798237c6ec35cc666e5bb0659ddd5ffb72a0796aed2e7180ab8fa10a34c427462c94eb7ceab69219f3c570e5ac

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
97482230fcdefce0752a2089df38ef4a

SHA1
b5f3e28564f70292594c47520a0269236aa9dbf8

SHA256
41360c326c09159a7306e0dfabb2ada67c06775b27eefd1a7a4d1c80acb27711

SHA512
4438a29785dfd33276c0292570b33781c9f444e5a0ee9fb7efe4e071e4d481373fe8fe0fb1269c376793ebebf7d12568e7a45a1e944de128afe01850853a6e94

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
f0f07c789c83f11fbc1e3e7f580da370

SHA1
c6afabbc686cca49b9524713d1c2450d542ce131

SHA256
8750aeb2abd3161aa052586e9ba1c39bff29635ed201e9b440ccb66c396274e5

SHA512
675186079a8e6d9b9d1192d96d8d64a4c43580c301e3e31f0bbdab3fcd6fdc133ea265b7d2573f386f34113dd858eb5ba418936c073936607e6adc48a3eaf91c

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
71ad07f37597ce0780bdab52eac803f5

SHA1
cf5174de6a383f9fae4f2e1dbc2b6dde3be8334b

SHA256
1f737a51a491d7c645a9763f867248e1f883959a6d9340bc4b6c66fa70be1013

SHA512
01e86350b06cdbbaaeaa55ac39d54aa8b9458bdde69311b44a9feb02db4cf7265c0dfd9cda2ba60c1c0f382cb838aef286ffe9c92cc465542f041c6a767c2eee

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
15927b98d7f0e537857e0ffa70f7d287

SHA1
acd825081aa10fbe3d7d375fd3a4bef97dad7c0a

SHA256
f796c87ecb16e8bbbb38afac0e363069c94a90352374d87fb1d592eae982fcb7

SHA512
1df585412d5b9394112994fd527546b29653b79da945b618739ed1e574bfb1ea5687f32d258f474c4de818bfe81e97adf69b42e3dc8762b7a635816b1adce08a

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
1b5fcec584dd7479ce13befc5aa818de

SHA1
ea816198e3ad4ad162000db305721f321d9c6bb8

SHA256
82809920542771cc57c34dfc00d3dff2648665e8c2589ef629a3d6295f7921a7

SHA512
31951108e7a1ea3c482b5cccc213a3a38098fdc18fe2aa6036b95361f6d64d4f7804c7f91de9b19c908e70a46eaa1e9417c560d3b71ebac658a2923fabeadeac

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
a60ff6f677ac5010d9bb4c6a2804edeb

SHA1
882f98cc8bd899d874010ae25182a9341a0fbf57

SHA256
197e519a1cd5526332f50fae98714778fe13bd276c1b25b7f831888b33ec7c32

SHA512
021a561b160e3dac810be1d695b7abe6acc263465207921529568e1f0fb57fe855a16f907e2595a21f94ebe2ca2292c18c7f0d521e1187e91fc739495d9a79a3

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
d60345b131b8e17352e80f3d22e61828

SHA1
cb4d49d2c00cad2d8b78bd7ca375e1be2dc5c21b

SHA256
a2b4565988a8ffd489f8d245160cbf7c414487779d6d19d7581a0f8c616a5714

SHA512
b17087dfcf98ef2f88c7e96435a6e38063e9f7e5cdbceb2d22199371831a1cc7ce0478498c59a298cedc862c690396747b15b826efdca525c1a3718af570e12b

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
86056cc7ac3dd030ed07ff7c69eb3c97

SHA1
eb2d6d9ec203ef5a21f8ae1cb55c63a1d1e398b8

SHA256
50dae647b81e8564f574a49f2eba42ffb9a9829c05a2234dd23702602bf7a27d

SHA512
6b2f7f3dcbb30d843549a647f976a1626917d4463b1db9196e81c399f6cfdbbad598db0457439267372ac9a161cb92fedb8b4ceb23119802acdbbddf67dc8395

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
085c5caf2d6cc076d08adb1029cbf7f5

SHA1
13e6ddb88c474163165214777aed2f9b25f5fa87

SHA256
3e550de9ed8781f74a5e895fbdaf68d357cd70269ad1fde9d89b026eb02a949e

SHA512
a18733cd9e248c9038716db4b440eb07e3b550d487d209b42f81fb1bee8cd0b70a5dc5bbfa566e25a1bbf09996bca368a2d7dbe5a2cb0a1d5ffb9cf03e4b7929

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
28906da9ef3b29b95dfe5c3a99d507c6

SHA1
4c16f3f8cd3d6a0320a388bb1933f345ad077ebe

SHA256
c36da243d771d66e273035d18de14518abd6c47d331a1e2281cd081c18a1a194

SHA512
2432c48497ce17ba16f5307070545a4c1e9bb4bcf0f7d4f4839c68d4ae31678278a9e284e0e2800e775dfff87ca70af13994508ddf6ac859932efb9bd8cbb6aa

Download Submit
C:\Users\Admin\AppData\Local\Temp\CabC47A.tmp

Filesize
65KB

MD5
ac05d27423a85adc1622c714f2cb6184

SHA1
b0fe2b1abddb97837ea0195be70ab2ff14d43198

SHA256
c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

SHA512
6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

Download Submit
C:\Users\Admin\AppData\Local\Temp\TarC577.tmp

Filesize
171KB

MD5
9c0c641c06238516f27941aa1166d427

SHA1
64cd549fb8cf014fcd9312aa7a5b023847b6c977

SHA256
4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

SHA512
936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06

Download Submit