b7614fae9bd8bf491c01a78d8bb3c22932cfe3b2e7e7e5d8acca1d069380679c

Analysis

max time kernel
121s
max time network
129s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
26-12-2023 10:17

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

66a78b89cc5c130c1ce456c2691853ab.html
Size

44KB
MD5

66a78b89cc5c130c1ce456c2691853ab
SHA1

4f733d0f003a5f21d71feaf6d9952eabd97546d7
SHA256

b7614fae9bd8bf491c01a78d8bb3c22932cfe3b2e7e7e5d8acca1d069380679c
SHA512

c551f6e43c2f1fca0e0ffd9e8c10f3d11b7be5b2c0c2d9ae48837896ecbf865a0f9aadced96f8ede92a45fc157bebad7ca7f2c4b4aabe5e8f28f2d8b7838bb62
SSDEEP

768:mwS0l/sGVLsk8ejW4mTNn2oxXelgXt3p44/vk:mZJtjXelgXy

Score

1^/10

Malware Config

Signatures

Modifies Internet Explorer settings 1 TTPs 38 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\InternetRegistry	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "2"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\PageSetup	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "409860741"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\Main	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\Toolbar	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\Zoom	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0"	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\GPU	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\IntelliForms	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\LowRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\Main	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb0100000033b2baa7c38bc34eb000abaaaac06d780000000002000000000010660000000100002000000023180c481a15dbb605d0622caddd91e4fe961a672e899c3fd46daff149dbfcd0000000000e80000000020000200000003f6ce0b6a344668828fd74a8a179ddc2c2dae109340545b50e6c84e7f372d7fd20000000c3d5b31d52536d53c279747c38803e643f47e1cdc7dd5e34ea3e76b8e1d7fe894000000062bb76d55e30a8bcc63554a587eea863dfe7cf103355bb3987f685449f7fb2c8b93ec607ca4d2e3f6937861a44e42e312ef25ceb57cb6de53a77a198ddb4a580	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = e0c56822ec38da01	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0"	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\FaviconPath = "C:\\Users\\Admin\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\Services\\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico"	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\SearchScopes	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\IETld\LowMic	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{1B9620F1-A4DF-11EE-BF0E-72CCAFC2F3F6} = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\DomainSuggestion	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	IEXPLORE.EXE

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
2184	iexplore.exe

Suspicious use of SetWindowsHookEx 6 IoCs

pid	Process
2184	iexplore.exe
2184	iexplore.exe
2996	IEXPLORE.EXE
2996	IEXPLORE.EXE
2996	IEXPLORE.EXE
2996	IEXPLORE.EXE

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2184 wrote to memory of 2996	2184	iexplore.exe	28
PID 2184 wrote to memory of 2996	2184	iexplore.exe	28
PID 2184 wrote to memory of 2996	2184	iexplore.exe	28
PID 2184 wrote to memory of 2996	2184	iexplore.exe	28

C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\66a78b89cc5c130c1ce456c2691853ab.html
1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2184
- C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
  "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2184 CREDAT:275457 /prefetch:2
  2⤵
  - Modifies Internet Explorer settings
  - Suspicious use of SetWindowsHookEx
  PID:2996

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

Filesize
914B

MD5
e4a68ac854ac5242460afd72481b2a44

SHA1
df3c24f9bfd666761b268073fe06d1cc8d4f82a4

SHA256
cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

SHA512
5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

Filesize
65KB

MD5
ac05d27423a85adc1622c714f2cb6184

SHA1
b0fe2b1abddb97837ea0195be70ab2ff14d43198

SHA256
c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

SHA512
6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

Filesize
1KB

MD5
a266bb7dcc38a562631361bbf61dd11b

SHA1
3b1efd3a66ea28b16697394703a72ca340a05bd5

SHA256
df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

SHA512
0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

Filesize
252B

MD5
6178c059146e18018ba983b8a1daed5d

SHA1
7eb357eef7a2236d634116f23165ec124cae322e

SHA256
9daa028c6ada18fd933683211dc76349dff254283f6ff8cc44514d200c248a53

SHA512
04a1271c0ed707a4a63f364dd0de608daf54286622ca9c55fb6c88d823f2bb13efe01d82c7857beac96632e6dbca2a6f904d4f5f02ba37cb2acc0a6a4d6975c2

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
c37343a1a86b23518ea95abdb72ba515

SHA1
8840cdd8574e4a2a2e6bb89415b2aa88f828c392

SHA256
7abf07ec8539d49a73a6d809bf3c9be838a0de1f8a15532e3781bd3b8dc71f12

SHA512
cf3c4b2309d67ba40dc0e146621bc4062e3950166b4527656197827590c93198b0e613f606879e6524397596cb4f362910442f396d8c5985acd420f96eaeda74

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
3fb8343c291fbb1eb7e0d223b4f5451a

SHA1
4d8e8f4c5f0f26429920fb06c106b08c240daaa5

SHA256
91f1ceb3a5bbd61614c2f18476dc423ab050ed914bca106daf1cff46f3b8dd2b

SHA512
b0155d19d3809b0c2051f9b07bfcfb0f64e9d6deb4580b5e0da396a67d17f30605b7a1dcb9b83db375e77fba8257604144c466a3fbd63f17d48b2b7d66ac9da6

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
fc4a4d7115dd15c04da34239a049f83e

SHA1
6084594241c26ab0de6ffacb21a92969065f5ee7

SHA256
44778655de269b7d990d869d4fae413b84763b10f00cdcd763bad9ff509a74b0

SHA512
b5df64b653e0410e0acebe216f9eaab5e3897b888ae15da1b43d23a6b454a96a0fdc0c09d8738843f8f9bad8e20448dd4e73c60571534b83e28dace3cacee279

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
1f004b1010a7901e4acb213638d1081e

SHA1
8d4543f1709783646abcc4b3712e799851bc552e

SHA256
de754b4c22d7891bf02b66a5a52e6fbfd4564cbbf0e460c0e681d40716f0a25e

SHA512
9278aef60d728463def8b23223374a4a212938f56e1743e6cc1e6269c0d2b8db74dc1850be99a8a46dd6227c3008554502c527d7fb8d1e9dc37493982c51c261

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
f0121d71e9d36bf5bc5de4ca2d62644e

SHA1
dd4f689fdfb29faed1560d72ec2aaeed6a181c85

SHA256
6ba91bcead0958493bb12423fc57d1934e65b696292d210d03a5dc19fdb471b2

SHA512
e5c490ba36b268487b6785846e120e8d4b7e3b34db24af8610e01e54e8fd40d6c540bebac7468cb6ccc44622aee7fde7322c077394bd42a3f890bfe6623be9e9

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
d4a81a84bb659e43b6ea86ebb8efc52e

SHA1
1a0ccc43c48e143f63fdabbdaaab15b0128a0a5e

SHA256
8822b873670e7f9355e6c88d4fa70be229fd7c4f674d61de4a1355c7cbc047a0

SHA512
bfa182e7e65ad2b82cfbfa19c40b3443c70a7fc6d133bd521e2c52a16fe20fc712e2b501931a17b20b41890da064fe9900dd220d23f133a5fac7a0a357104925

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
ff349d8a8cfbbf99c0d14d347c679f69

SHA1
771adc18fff0ce53d02c885c12ae24b34a69655c

SHA256
de3b05c119df472cc6ef58c5f476ac88d97b6cc94b5d761f6525493c30d6cf2a

SHA512
f53308e77e4e21136ef151c0d2a35139e7d5b67b16b74804f0c4c2a45d54071b4812ad529b35e420406541fda025b48f13f1da1db60beec46c150e299e893c03

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
efd17766d9e258ac9df5bfa6c09abeb1

SHA1
15dacfa3a9ae4a3de11ad4995518954d97e9a43d

SHA256
47b9eddc1d411589d28b409c595a4cac82f61eeb829e4a96d1a5b6d46fdfd734

SHA512
71c9d6d86b6bc5a25f0eab1961b3a9566c09ffbd815c8cdea128bbff1d2e1b3ea904a9cc061b0a3817ed73192a3092777dfaf01ce084773799c0bbd0ec6c4f57

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
ad4f039fd1cad1cb6cfc8496b3a9f2fd

SHA1
630f5652767cc5427372efe6954d0e34631eeeca

SHA256
2a7df3d0bb0e670747d68f6469d940535edb5491d1682db5dabd05383f511fb2

SHA512
b935f2b043bf8c6645a41e857db538d1a4bf8318dd4ef2442b2a99c39a6b30ef0fefdd10f882a65aee0e541d3c07cde62c55d39625fd069096514a3f9f798638

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
758fb46387b7cc9fa7f0c06358f422f9

SHA1
0c218bce0add378ff1a76269e546114ad08274f9

SHA256
b5424d8bcb49f258a089d1ea214d4db2f0917b5128bfaf176d2e79fbe6db8fb1

SHA512
9a48eefc9ebbde95e6c115860c3216120a0185e0ddf547872e62220b3f8f55516137b211d62e93c6599b2aadab90b32a94ab52392572bffb7cd0b146e10d3ae0

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
98db565e748d4d3758b0040a50c9770c

SHA1
a2a4c9f51dbac49824664e6b798c991adac9902c

SHA256
6d32b9285208559103a343e5dd6acf28a821739b74a4803df0f2d353e9b1c8c2

SHA512
a2d782e2ad134d7d8fdec2525aaf781a4112eb47838f6fabf822a8d8d805b9a49367d39dfc1281a94d9fa7083e43897baf04286434d7e0f29a6ee5a3b9270f7f

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

Filesize
242B

MD5
9439bdbfe1569b2d0886bb4c2731f06f

SHA1
24a7262846b0921a28fccb1346ba43a07f6c4037

SHA256
2639430491b90c6dd313256353283209c3e4098a5e451ec5e048fdbb58a8ac33

SHA512
f8a25f0187785504cd0f454a3de15d3216575667983ef85dbb76e37b4ee2593290ce4d2315e3d778a988c1aa9741fa518090632ba7e01bc57d53dd6d988520fe

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\Internet Explorer\Services\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico

Filesize
4KB

MD5
da597791be3b6e732f0bc8b20e38ee62

SHA1
1125c45d285c360542027d7554a5c442288974de

SHA256
5b2c34b3c4e8dd898b664dba6c3786e2ff9869eff55d673aa48361f11325ed07

SHA512
d8dc8358727590a1ed74dc70356aedc0499552c2dc0cd4f7a01853dd85ceb3aead5fbdc7c75d7da36db6af2448ce5abdff64cebdca3533ecad953c061a9b338e

Download Submit
C:\Users\Admin\AppData\Local\Temp\Tar2CEF.tmp

Filesize
171KB

MD5
9c0c641c06238516f27941aa1166d427

SHA1
64cd549fb8cf014fcd9312aa7a5b023847b6c977

SHA256
4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

SHA512
936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06

Download Submit