54b02e68895860f3c9a19b4821599e71eba919529bc662b791118a41238f10e2

Analysis

max time kernel
158s
max time network
230s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
26-12-2023 00:06

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

452957244e939ab91c57f4cf46655e1e.html
Size

10KB
MD5

452957244e939ab91c57f4cf46655e1e
SHA1

90d01fc80bdd4ec0b2a6eaa091f2519d6c44aa8d
SHA256

54b02e68895860f3c9a19b4821599e71eba919529bc662b791118a41238f10e2
SHA512

cf0663677bc8b0638c668e9b0298d04a49210f6ed1f4f81c63782adcce5790ad6b6dd0747ab1252a368ff672cacee36418cd77bbf3f1045f7eff96c871f2537f
SSDEEP

192:zFu78mIKq9i+8dMNcVXH+adcVhrJJC241kweDP5jc/c+OLX8o3xyQXItSnSlya6G:zFIVVe2XH+ad2hVE241xe75jn+UX8o38

Score

1^/10

Malware Config

Signatures

Modifies Internet Explorer settings 1 TTPs 36 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-3308111660-3636268597-2291490419-1000\Software\Microsoft\Internet Explorer\IETld\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3308111660-3636268597-2291490419-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3308111660-3636268597-2291490419-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3308111660-3636268597-2291490419-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3308111660-3636268597-2291490419-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{36826431-A932-11EE-9F40-4A7F2EE8F0A9} = "0"	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3308111660-3636268597-2291490419-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3308111660-3636268597-2291490419-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3308111660-3636268597-2291490419-1000\Software\Microsoft\Internet Explorer\Toolbar	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3308111660-3636268597-2291490419-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-3308111660-3636268597-2291490419-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3308111660-3636268597-2291490419-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3308111660-3636268597-2291490419-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3308111660-3636268597-2291490419-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1"	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-3308111660-3636268597-2291490419-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000a883829c536588438b4279b7bc6c193000000000020000000000106600000001000020000000b8e1435c79c583cd1f60dba563c94d6a4a7eec5c8a1eb9ab81a61828849e6abd000000000e80000000020000200000005297f10a60f6005c1e7b7f4aef3ce46d1244a3ede28f1b3a743baf8422d668fe20000000360a351c08ece175ffcdf48172832e75b5dfef62b852d930f49b14091b52f02040000000c372d8052f3d969cd50c34c2c5bd3553d860414439c4dc4256f500597f2532e40fa1529bd591c6b1f1d911321dffb293cdeb299b70cae3fe465eae5628982bfb	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-3308111660-3636268597-2291490419-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3308111660-3636268597-2291490419-1000\Software\Microsoft\Internet Explorer\GPU	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3308111660-3636268597-2291490419-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3308111660-3636268597-2291490419-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3308111660-3636268597-2291490419-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3308111660-3636268597-2291490419-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3308111660-3636268597-2291490419-1000\Software\Microsoft\Internet Explorer\Zoom	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3308111660-3636268597-2291490419-1000\Software\Microsoft\Internet Explorer\SearchScopes	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3308111660-3636268597-2291490419-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "3"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3308111660-3636268597-2291490419-1000\Software\Microsoft\Internet Explorer\DomainSuggestion	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3308111660-3636268597-2291490419-1000\Software\Microsoft\Internet Explorer\Main	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3308111660-3636268597-2291490419-1000\Software\Microsoft\Internet Explorer\IntelliForms	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3308111660-3636268597-2291490419-1000\Software\Microsoft\Internet Explorer\InternetRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3308111660-3636268597-2291490419-1000\Software\Microsoft\Internet Explorer\Main	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-3308111660-3636268597-2291490419-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	IEXPLORE.EXE
Set value (str)	\REGISTRY\USER\S-1-5-21-3308111660-3636268597-2291490419-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-3308111660-3636268597-2291490419-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "410336248"	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-3308111660-3636268597-2291490419-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 509701323f3dda01	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3308111660-3636268597-2291490419-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3308111660-3636268597-2291490419-1000\Software\Microsoft\Internet Explorer\LowRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3308111660-3636268597-2291490419-1000\Software\Microsoft\Internet Explorer\PageSetup	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3308111660-3636268597-2291490419-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	iexplore.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
2680	iexplore.exe

Suspicious use of SetWindowsHookEx 6 IoCs

pid	Process
2680	iexplore.exe
2680	iexplore.exe
2828	IEXPLORE.EXE
2828	IEXPLORE.EXE
2828	IEXPLORE.EXE
2828	IEXPLORE.EXE

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2680 wrote to memory of 2828	2680	iexplore.exe	30
PID 2680 wrote to memory of 2828	2680	iexplore.exe	30
PID 2680 wrote to memory of 2828	2680	iexplore.exe	30
PID 2680 wrote to memory of 2828	2680	iexplore.exe	30

C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\452957244e939ab91c57f4cf46655e1e.html
1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2680
- C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
  "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2680 CREDAT:275457 /prefetch:2
  2⤵
  - Modifies Internet Explorer settings
  - Suspicious use of SetWindowsHookEx
  PID:2828

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
30f928504db1685c134f5a8fec8bcb80

SHA1
1a247dd1711b912680c665004053547bd9ab8d2f

SHA256
29c54d4d7b4eedfbd234d45ec7f005fefc1e4b942fa67ab49e0e5c359d774d8b

SHA512
079396a41a546f653d205a24cbed36add57461c237e074765ffad767ba9ce1b016234e561273b6b99a79e845fa1bad5ac96005a6b44b62e6316377790092a5d3

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
95c69bdd5a0dcfe87f74c7e600fa7d62

SHA1
4881124bce95e6bab9c20c1af29afc447a75f581

SHA256
0c5bba121e4a9b4c442ff7f86b1f72b188aa1c2a728183c4c91ad8ff9e72e5a3

SHA512
4e171c2b019f1e84957f58ff7c862984e31b8e1c8b26638178fd5f0758ce3701579165b2c5f6fcb0417896f21aba9daa13a94fe07792e4ad7ceebe6e43cf328c

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
4dc5d51ebde37d2525fa5004542e9472

SHA1
623155617b818272e848f728c385fb268cd1825d

SHA256
7396d8e58156f66ab4ac58f00174a6b5f359124d5cadf6638b693f4942a61fa0

SHA512
847800e5012532ad87336b16e5facfe4b63a595de1c751ca3f6e6a4b0a52e34d78ea4dc48e875e954c7ded36243ee3eb6296c27e4eed7bf4d204c03e6fff18fc

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
cfddeef6831ecc76956990c550c6f60d

SHA1
d2ec4549f55f3e7accce6ac0be5999a5b828a88a

SHA256
f214156bf35dc6867c838514b09c69c465add81a891b207ba4ea98bbe3a1919d

SHA512
8eab648255c1c25c9ba554364a81467ba19e6647e6cb8085bbb3bacd0b1d64807317161f7a8eaa7299c81c0ffa76943aac2d6348289b82d9d48613bb87b367b0

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
6557d0c7e59e78d6b774b8bd5aa6603e

SHA1
8f697651008312ab43528b6946d57e8c7fad239e

SHA256
e541bc740470256aefae4c7f68ade4c097f319ba495763672acc1d9433aac13a

SHA512
e561dc6e98936dd5e1385a89a8a712a8ca617d93d7064672d957f420f6d12832db205754d6b473d9d8218a488050ec7158ed83417e1f2c929674f8adcb5ccab3

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
4a1e6340394cf091c1f675d099cb2b83

SHA1
59658297d024ceb3b0817cb31060dc3d922282d7

SHA256
7f9acd04dd65bdb613f28878d52c009681c8d2a72415c30cc6b2005f47836789

SHA512
4599be20551709cab26846d12678fca4c5bd704c935d03b7f70fd7afcf7fe62ced57088a8cfaa9b76839174eac66375952eaf403801eca4c7579363a49a98258

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
e9829eecb2821d6e122ee491fe5db916

SHA1
9ea974f6798fb2138a4f06c0c7d0487ab03713e8

SHA256
86d539196cce2ee9df99c28c4f216d2b629e85a6da5e5a01e5e702df56d4457f

SHA512
8d9a141bcb84964c99e0933be1d9d6ff5e4bc806b702d83fba4ca3c2ca945ebdc827eed43eb5812fe1ca19d7ce13c8739aa0ba60325d5e257ad84b7c14e2daa7

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
c5a4234967b893ed38ef4bd516e1a016

SHA1
c853e155be8d7ccdc256b32b1c4d21107decf186

SHA256
e5ac64d9435f2f99398b2cea77f1efe6a073a8076653e6fedd59107e5ca3fa77

SHA512
ef3e17e032e06731885baaa265a65bde544b81f16a2aede8bf6a753a040ac119558e3a7127cccfdfa096261eeb8db480939f8269069495d30fc40ad1493628e1

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
b632eecd4bb095df6752d1b864259fe3

SHA1
7f8cec558a74bb5566a0051d23b49a703ecc099e

SHA256
3a1d67da2b0cedec92a4f859e1b63a085fedc17dc4e045e0220c785023787a4d

SHA512
4402b2a29ee6d070ffcbd0a51319c60955246bfb2bf15dd28218d0ba465854b6e7d85802a1821984b1ccf40036904d0f450615fd3e347f255dcb862346232677

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
ccc5444057c38708ae9187ea82d92140

SHA1
9d6945c7007b2e1b0fc9155024a56c82d8ffb2eb

SHA256
331b1e5da2cff8e73f4aa64650953a07bd3600d46c2e043a811d8a52c1b7bd39

SHA512
403010ab5870688faae2fff9916b27934793774753becafe575ac08b0322e87f87b12198628a6c9810c28489804b7551def8c3e87b127f95e1489ffff753f2b6

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
767eb7a11899bd7c3a7be245fa9908c2

SHA1
5182faa0c931d1e57f51d4bf5d028991a04400ce

SHA256
7fc0c303981d615b8ec1b6f64d93183f6f1a3d3122b5f24c7eefd9674e13d1db

SHA512
78bfab10207368db8bdad957883b79719dac12ea67a9c919e549e18c7601c0aebe6c70da560a5732691de15da01b18f1aedf3f2c356fb558250d0e3fb6bb640b

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
67e0fce6a33f5ab57e03b07cd8bdb74b

SHA1
05c97cd6796b74c7eeb1cf44f7b827e66c632e9b

SHA256
d87581fb96e18371e14440cfe0021931fe786b4189edac5ecae9542d867ec92e

SHA512
d51e7cf98edd9bf2437609a1483c39d06a62f6bc108d6fc08ead8d5fd75f32658d8a6a2082dd2983bb294eaa86cd2efc18b10e6874b07f7ed1f1ce7764755a27

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
d9d6edddc25397cb890202bb4efd7838

SHA1
24029b762a18f501d36653f234a5fb15a8247e20

SHA256
a0671de4106815f8e0cb8fbb4649e7dba19696dfbf455310c0dea62672c9416e

SHA512
21821e60a3ead8a107e5a7f5bc74164f6586bbcd274bf73b1dd55cf8975316a981c90c679daa546acc144573285feb7635899d421482d28a636224cda3a822a7

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
7288045722a499cb6aa3320989ed9d23

SHA1
fff480905e5e145c7a96b0b51e28c5cf484a2b76

SHA256
ff84cad63776efe76832b08809a41974c2b74dca3ad735cd69951cd95142554a

SHA512
01a6afe57f7baf9f46e70bb980b9a34f2b4740ec2e0faed7fa00e326dcb5a7d36f08ef8c9c8d58f5cafd581180ea4e482e769d1a85eb13fcca506cf43b02344b

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
5a2093bf1582ed655c0c413525bf073d

SHA1
45671e1af6ecbca53ce9330c363125569920d90d

SHA256
cfb7d52fbbc9c410e1e642d0b77cf11836924185b49759866bf832afe5f388b5

SHA512
7d3f32bc093805c817b6d83f22d461d47891cbc0d02df59cf963fa60337839a3dd2a36113b608aceed153b38a351dc059ab9236107580ea7b97f24611da35201

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
9dfa133368320e62300868dc8bcd97e6

SHA1
94da216a428d884197bd917284d47452459505c9

SHA256
1b8c9fb40aaf81ccb4ce2cdadaa61c0b2688853744be2f86f12df0d39b3b476a

SHA512
37ef0abc078f7d71df775c21feec8937175afec9c06335c10ea489aca1226891929aec34275e767bce05721d58c2f5f1070e97eebb262bd6dd8d7cc7af34b5d0

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
f6efab6c0647a8fb226e5b0a680f4159

SHA1
7fcb4ae2e3048360a019ac6f736612fc3d42b077

SHA256
8d7932506b0d868e1c73b4629c9dc0f23be1d278e28e5989038592ed19440415

SHA512
68ef75bc55c18122838161a44bb2f25f8d1ffc9b95ba5ade281b33593de53ca9d3c228c006a55e9162d3cc0ade742ec3be21822a055d2529dbf4824845053bbc

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
b0b76dd5144496dc986ce3ee873f7f71

SHA1
d2127040acbd247cffc6a7fe069f6a944c6f26cd

SHA256
404f68cdd6bdabd0ae4ac4b298db752817cadc242511471f4b8c8b22e4190637

SHA512
90d4a58570efa939806c74190751b6f5796c1333ab17384abde0121ce1585256a38f1235781f3d672bd0014f435103a90c46ab9ba91e91c525f7042415c30e55

Download Submit
C:\Users\Admin\AppData\Local\Temp\Cab5679.tmp

Filesize
65KB

MD5
ac05d27423a85adc1622c714f2cb6184

SHA1
b0fe2b1abddb97837ea0195be70ab2ff14d43198

SHA256
c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

SHA512
6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

Download Submit
C:\Users\Admin\AppData\Local\Temp\Tar5759.tmp

Filesize
171KB

MD5
9c0c641c06238516f27941aa1166d427

SHA1
64cd549fb8cf014fcd9312aa7a5b023847b6c977

SHA256
4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

SHA512
936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06

Download Submit