e11eca2d21b2a597636300e70014f67721b634f29c0679ed6eda5a0417fda306

Analysis

max time kernel
120s
max time network
135s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
26/12/2023, 04:15

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

534467314e999d1c0f92ced5a7a41dd8.html
Size

10KB
MD5

534467314e999d1c0f92ced5a7a41dd8
SHA1

abec9363b7b6ead4e1962d026b60f7536a49635a
SHA256

e11eca2d21b2a597636300e70014f67721b634f29c0679ed6eda5a0417fda306
SHA512

5f51f1ef088c52dfa638cc9dcbd51a83195ef0a080b070f378910064a6d248190c06c3c40edf050efc47f320f95999fa8756d60c5315f8ea0dc225d16bd9aa69
SSDEEP

96:uzVs+ux76TLLY1k9o84d12ef7CSTUVGT/kblmXp+xA0WtqThA0WeA0WH5lVHcEZe:csz76TAYS/cbY5+mteWtxtH5PHb76f

Score

1^/10

Malware Config

Signatures

Modifies Internet Explorer settings 1 TTPs 38 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\IETld\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\LowRegistry	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\IntelliForms	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\PageSetup	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\SearchScopes	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "2"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\Toolbar	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\Zoom	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{7AB3ECD1-A9B6-11EE-B459-56A82BE80DF6} = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\Main	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\Main	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0"	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb0100000033b2baa7c38bc34eb000abaaaac06d7800000000020000000000106600000001000020000000deb9d90bdcbee9df98b76c3700f3a1cf10eb249fba7ed58f6ee89af7326bb9f4000000000e80000000020000200000007ad7b4fbd254afcf0eb4ca58a25703465b1c2800804d267d4d45260012f2c66e20000000237bde36cff5bef413b7ebeaaa573760b2e670e56da1f15ef02c5a0ba906c3d7400000002ce3127f2a30f60a85dae0fb42f5ce59f49ec09a88900c3ecaebd6875c29c409f0917f74b577eb64168cb671643eddbb2f083a8a5b969e3b173b742eb74e1d57	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = e027a750c33dda01	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\DomainSuggestion	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "410393045"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\GPU	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\InternetRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no"	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\FaviconPath = "C:\\Users\\Admin\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\Services\\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico"	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery	iexplore.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
2868	iexplore.exe

Suspicious use of SetWindowsHookEx 6 IoCs

pid	Process
2868	iexplore.exe
2868	iexplore.exe
2592	IEXPLORE.EXE
2592	IEXPLORE.EXE
2592	IEXPLORE.EXE
2592	IEXPLORE.EXE

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2868 wrote to memory of 2592	2868	iexplore.exe	28
PID 2868 wrote to memory of 2592	2868	iexplore.exe	28
PID 2868 wrote to memory of 2592	2868	iexplore.exe	28
PID 2868 wrote to memory of 2592	2868	iexplore.exe	28

C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\534467314e999d1c0f92ced5a7a41dd8.html
1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2868
- C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
  "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2868 CREDAT:275457 /prefetch:2
  2⤵
  - Modifies Internet Explorer settings
  - Suspicious use of SetWindowsHookEx
  PID:2592

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

Filesize
914B

MD5
e4a68ac854ac5242460afd72481b2a44

SHA1
df3c24f9bfd666761b268073fe06d1cc8d4f82a4

SHA256
cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

SHA512
5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

Filesize
65KB

MD5
ac05d27423a85adc1622c714f2cb6184

SHA1
b0fe2b1abddb97837ea0195be70ab2ff14d43198

SHA256
c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

SHA512
6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

Filesize
1KB

MD5
a266bb7dcc38a562631361bbf61dd11b

SHA1
3b1efd3a66ea28b16697394703a72ca340a05bd5

SHA256
df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

SHA512
0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

Filesize
252B

MD5
d704d43dc770ac8da2279ed68c21d1fb

SHA1
a2e5f96afeec1713695fa85f22dd0e023ff5c9ef

SHA256
acf0c5ecc265df6b2dd973ef8fa1953932713055c5663b9cb45ce54df0d716c3

SHA512
975ed5836e2f12d0f5672839c0b9fcb2127561822a1a92f9be5c7d7e54c0276583095df893fcf2db0e2644ef11bacf46c5e846d8101af3353a7e15f23f8b27bf

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
3320053bf52660067e825455135c0c47

SHA1
a602491b3cdec3e4ee8298ab8231afbe5b2b9e2e

SHA256
5092531e24985ecbebe3b3c4302c5485b4350aae9f8784ab7cebf219dbe5a9b0

SHA512
4aa9029883c64f0fc085f7c4a6da8b2dd6ad23c56097536828fd693c1565b6fdebd0cbeb03d78bbae81b648ea05704c746b388d321cfd6a62a5b14d5d382315e

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
84dffc03b60f025e0006af28d678987c

SHA1
a7802168bcbcf8aff7bcc7c8c9169fb5e65374f7

SHA256
b88c29acaf1f403eb6ca6489bf5193dc442f5fbb3e97592198638e3e9bde0f1c

SHA512
a2ff69cbb818b5e8a450b2348cbfee869d29e53245a2377026801aa5296035ac0e5b5f341fe536818ee66bb618547694bc2a73c396cf97d0f95ef537dacf7f05

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
5d6bd8048c627e2cb7d7f0ba0aa7ce23

SHA1
a773812d5c35aa6967acfae9477f01c724cccbe5

SHA256
32c0fa3f8a037f2a45c72dad3d9dadf837932d251e3ba343fb6cf77f4665c86c

SHA512
c1c14fd5b43f565f98d6b5026505379dce79235e587edc405b10e0ef673de5c4df3302c504b1504c28ad49ef6108a8a02a74948c4f43c1c30f2a2879f3e311f1

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
52f6ac37d62ce4267e408c7df97a2ebe

SHA1
f861acf76aa3b08624687aa5b36aa779e301e09b

SHA256
43061cda8bbe80f35052386c25f87d42987f74331c68040e5ea8a52c3843888f

SHA512
ff8dbaec03a4478d2a961ac8928efdc4e24d8c5ef514200eb2410dd37d56cf4920bb2be68d63a3562cf730035a8c4b15e109af15d51a5337f49f430b48f89e2c

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
9701cab1c2cdfbf77c11fb634ff74258

SHA1
061e2e2baca539d6fbfffb1cacea59d047c09e56

SHA256
43de8a3d99baa2bf80bc43aff91e15661a36ea70ef6471b07508f8c5b93e97da

SHA512
ed3286f9f8cb40a530e9af5b230096fa7a06479f163c4cf84aae6e9c77d09213e9d9d3faa8cf286f8a08a882b4570d97debc89cd253e63d04e56c0ee19e87a11

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
37897c66c9b8964d86448010e73a5eff

SHA1
1f160b7e764ce90fd4312285c19a418992c9fb58

SHA256
7d49f2e25574b1b52707ac22cde2b36a5686c5ffd11c212d3c6a327188b1824d

SHA512
c3b2c721ea842c6952629e597d14c17b178e72724cd1e4b5b9b0f9529d053bef5ad80cb45a86f6366f58faa18db291dd83818a10bd8dc6e0c78cd562a441d453

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
8a446bf303c7020944f2aa14747feb9a

SHA1
062628e1b8aaecda575e044f1610b803b563911a

SHA256
13f3fe5f285a84e196174dbdd9573442fb21c380892fa05d7a851b6c94c5cc51

SHA512
1ec6f56e4bb17dd973d5e2bb7dba1893be1ad592bfd337bbe98e1d03f579d75e2f6ae1970c3e778b4341937baa4c2d1635412057d4a4c985724547f87f4864b1

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
34d1da08694329ee0dd228162bcf89e0

SHA1
7caf462d3c3a65f30115b05420cf802eca42305a

SHA256
e48f3ca1f05b3a0acd155272c73ec14a23bbf6daa6b65685fc4cb1a5ddc3f164

SHA512
620a6cc3456a66b16403386ee392a5158594059f5448bdd14e0deaf111c5dc4a3e641c1028c288d4feb5f75469b928b7b594f695b2a6230493ba5a0c5d85faab

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
89ade51af38028e066649a230c931618

SHA1
9f826d12bf2635f9f037ce4933828a1c17eb12d2

SHA256
9cbc653494ef67260e10cf130ab6ade0f1d9d51e782214f7cfd383b3ccc33087

SHA512
230e446cc7592c0efe65a1cd8298a7786ea215188b277d588bcfa7a836c218c149c4ad07383e05b251f39e5704616bb8b3b8c8350004f2c3d5c453cfd39a3f1e

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
ea8d7331670623f52945167cb84bfc70

SHA1
c17da624c51fa19fadc21216f013236347f2c9fa

SHA256
01f7a8dd6bbae851effbdc52bb7c6fb84db81db4befb637a01a291fd5f434a19

SHA512
bbd383b70dce12dd4b33548862cc694b0441a8817455d609d442de494f0ab2ba00d9a8f877ef080883594c24b4f224ff3f3ce29268b8af0f75b94bb5c893c490

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
087e7cca201a76d153b6e2fd1f3dc233

SHA1
776f0b3174f3ce3c739ec5ca53a41e34aba808f2

SHA256
69891416dc149dea6114633b15c4ea1a1639492265bb5ce3cd1d1c95b090e4ae

SHA512
5ec77ea73995ae4aba5f9df76d6cad3ae2400dc4dfefdd626b6656e710f44e3727f0f709e7fe94d3911621f46bda315cf3bbc963a1c3e93146bf69cd51fd289c

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

Filesize
242B

MD5
ea4e77ad6052c43b404e5f60c598b7af

SHA1
db741268aefa086725e4b697f1abc0d5430e4221

SHA256
b92d1381963bd2ef81dc779cc80f5d0da745f649fef7a2897dd3f04986be4db7

SHA512
a499d328b0021c79764733b5723d8838fbe446676dfee3271e8175284a79158316a8472ecf630cb3109893478efd1c1c3b4e3de7531bcbf1b898d3493a8e0470

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\Internet Explorer\Services\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico

Filesize
4KB

MD5
da597791be3b6e732f0bc8b20e38ee62

SHA1
1125c45d285c360542027d7554a5c442288974de

SHA256
5b2c34b3c4e8dd898b664dba6c3786e2ff9869eff55d673aa48361f11325ed07

SHA512
d8dc8358727590a1ed74dc70356aedc0499552c2dc0cd4f7a01853dd85ceb3aead5fbdc7c75d7da36db6af2448ce5abdff64cebdca3533ecad953c061a9b338e

Download Submit
C:\Users\Admin\AppData\Local\Temp\Tar3FE4.tmp

Filesize
171KB

MD5
9c0c641c06238516f27941aa1166d427

SHA1
64cd549fb8cf014fcd9312aa7a5b023847b6c977

SHA256
4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

SHA512
936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06

Download Submit