5a1318a382bf87464f4e3a2a49931c3e67483ccf6b2990f7002631da5fd56588

Analysis

max time kernel
143s
max time network
159s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
29/12/2023, 22:20

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

057a50fd6ac2b499a7f00cea32aa7fca.html
Size

92KB
MD5

057a50fd6ac2b499a7f00cea32aa7fca
SHA1

5dea94655ee35dd695ed334dec63cc5ac857da64
SHA256

5a1318a382bf87464f4e3a2a49931c3e67483ccf6b2990f7002631da5fd56588
SHA512

57b100e7cb2b2d255c9c99b493957537c9ee29d4c26549bf81f37e51cab5af6bad83667f118f622022fb96f1d7391b15806b75fc0281a5369a71931927db8068
SSDEEP

1536:/w4CwM53nRUU6TwtrAwo41XVDJ15ae3Yj0grfccKrx:YAGRUU6qrA6Tanj0grfccKrx

Score

1^/10

Malware Config

Signatures

Modifies Internet Explorer settings 1 TTPs 36 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1603059206-2004189698-4139800220-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1603059206-2004189698-4139800220-1000\Software\Microsoft\Internet Explorer\GPU	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1603059206-2004189698-4139800220-1000\Software\Microsoft\Internet Explorer\LowRegistry	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1603059206-2004189698-4139800220-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-1603059206-2004189698-4139800220-1000\Software\Microsoft\Internet Explorer\SearchScopes	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-1603059206-2004189698-4139800220-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = a0d7d547d63ada01	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1603059206-2004189698-4139800220-1000\Software\Microsoft\Internet Explorer\DomainSuggestion	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1603059206-2004189698-4139800220-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "410071298"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1603059206-2004189698-4139800220-1000\Software\Microsoft\Internet Explorer\Main	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1603059206-2004189698-4139800220-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1603059206-2004189698-4139800220-1000\Software\Microsoft\Internet Explorer\Zoom	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1603059206-2004189698-4139800220-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-1603059206-2004189698-4139800220-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb010000002213d23592f6d648a137f9bf65c22cfa0000000002000000000010660000000100002000000027ff6cbb292e0f2171ce1fc640c387f8fcac545b5e324ef44350702dd8eea1bf000000000e8000000002000020000000f5134de9526fe6d3ea37ef9c74696143802096ffd0d7485316f653b76fcf6b8320000000152d661af431a164d45b377c1e040ca8c2dffd6805e5ef165f2d4afaa9593b2f400000001d7aa049b097cef3e02e2b7d122484c854dcc1a41e19050c0899a9c7c48ac11a0b4c4222409d917cc6d7d4ea0df33bff2d1fd1c2d27f1e96538df2cd390a1576	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1603059206-2004189698-4139800220-1000\Software\Microsoft\Internet Explorer\IETld\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1603059206-2004189698-4139800220-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1603059206-2004189698-4139800220-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-1603059206-2004189698-4139800220-1000\Software\Microsoft\Internet Explorer\InternetRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1603059206-2004189698-4139800220-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1603059206-2004189698-4139800220-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-1603059206-2004189698-4139800220-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1603059206-2004189698-4139800220-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1603059206-2004189698-4139800220-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1603059206-2004189698-4139800220-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-1603059206-2004189698-4139800220-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1603059206-2004189698-4139800220-1000\Software\Microsoft\Internet Explorer\PageSetup	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1603059206-2004189698-4139800220-1000\Software\Microsoft\Internet Explorer\Toolbar	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1603059206-2004189698-4139800220-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1603059206-2004189698-4139800220-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{590214D1-A6C9-11EE-8452-CE9B5D0C5DE4} = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1603059206-2004189698-4139800220-1000\Software\Microsoft\Internet Explorer\Main	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-1603059206-2004189698-4139800220-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1603059206-2004189698-4139800220-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "3"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1603059206-2004189698-4139800220-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1603059206-2004189698-4139800220-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1603059206-2004189698-4139800220-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1603059206-2004189698-4139800220-1000\Software\Microsoft\Internet Explorer\IntelliForms	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1603059206-2004189698-4139800220-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no"	iexplore.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
1368	iexplore.exe

Suspicious use of SetWindowsHookEx 6 IoCs

pid	Process
1368	iexplore.exe
1368	iexplore.exe
2108	IEXPLORE.EXE
2108	IEXPLORE.EXE
2108	IEXPLORE.EXE
2108	IEXPLORE.EXE

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 1368 wrote to memory of 2108	1368	iexplore.exe	28
PID 1368 wrote to memory of 2108	1368	iexplore.exe	28
PID 1368 wrote to memory of 2108	1368	iexplore.exe	28
PID 1368 wrote to memory of 2108	1368	iexplore.exe	28

C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\057a50fd6ac2b499a7f00cea32aa7fca.html
1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:1368
- C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
  "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1368 CREDAT:275457 /prefetch:2
  2⤵
  - Modifies Internet Explorer settings
  - Suspicious use of SetWindowsHookEx
  PID:2108

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
25dc487237c6bf4de9668ecc785ea1e2

SHA1
76999604419bf21291e03295638b35bbf7bc26b9

SHA256
ed26f6e21a3167ecd4447f03ca0c2c8cdfb6ec140529ef496f6b24e3d1eaf494

SHA512
695b38fc32b2cf72c5909b1bf68a2767630a1d6ac57654c81611ef244d933d8709319631e428e1c3c8db018003d0acc1a006aa1695454d1ef592609477f1848d

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
81bfb8d5d508900c3fb18ec9fc33d17b

SHA1
1d201ae80e8d9c38a82c6dfcf31ecbacc848cb43

SHA256
f89a7d6ed51b506dd727b5e07cb8f4575079cac2bbea6982c1e68f9b01f1c29a

SHA512
49a8855d68101bb75789fe701fb3319b766b5b88c5a302d7e1bcc231c4cab044d732bb5297ed0ee3afcc7d53a4da49c56b2ca7283995c4511922862db392acc5

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
5af4d040bbe60b5ab0d35748dd298bc1

SHA1
94de213685d1acc86811953ec41cc185076fb1b6

SHA256
34a24f2e98fbc5729e37858f436845968464d6e4293d4a83ef7b70b871a8a0a1

SHA512
afb75fc1de3d057d93bcda6736893ed3462c781d6cff16b3da9480bf2d9856ef4ede95e7360d93c17c2af336e8a5eee03633967d4bb6fc10f1b0103c21264837

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
911f1ba4c971eb70176e95bbd77feb60

SHA1
8f4d9a7bdc6c59231a08cb2f6ffd19b542497045

SHA256
523776668d5186a4309a17751deabc299f1ec68e9624d6ba05d0d3b33712e38f

SHA512
c4ec6fa93d09e7c0b8af3667060d221c7ade3d5161b51b4a779f48b58764360de57ba0374553e1b62bca8f03793a479213dee68f42479661ecd4f633c8356fdb

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
0338fc6a7cea6ab81db9f0d9ff67e19d

SHA1
c3421e20f4201b67aa0b09e643788648e16c97aa

SHA256
dd9647c8adc4b56713bdbcc976a31b8757230c0d0b736c3ba6a0c1c93ef1a10b

SHA512
16f0ef085c3eb8703db051b424a901c2ac2db89bd2537c66ad932285eac37d3463d02d0df585e4b7d591a3795ffb75c426389e6a71430d18461b0c3a2a3fe464

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
9d8ccf43ebd5732fdf2b901bd10877ba

SHA1
2bd0d923d4ee57fb51549782dc831fdf350ae50b

SHA256
c48c80952f3d16817f2a5888329dec00c5660e8f76e6b5f588074ae4792735b3

SHA512
8faa1f3bb72659234b0b9b06cc6c7f41523546b476f358a59fa2bb71a80efc3f8a541385ebc05a62386db8bb238305c50f2deb22edac378dd9c79786e20e2eff

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
b49a535d2998db99de028b9d182cca4b

SHA1
de158567de4e624645e9db19403dbb264b181a1a

SHA256
c4d9ef75adf5725ab71e6c87bf8cc4c3435d67c1076b2d659a188c595ee12543

SHA512
f96f7699af3d8a8a8b9a80baee1d1a0266a70addb5502f08efa48178335d5202e842bd0a46309f206fefa994d12ba597b58b18bfa71958c66cd36301e43f689a

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
eb1c0663bec2ce2d9f2346a9a2afa1a5

SHA1
a8f99efe67e59a8090e7db32666d2f5a952622db

SHA256
33d8bda3ccf728116e4b143ee48efe8dfe58b0c86b151560353b39cc7b8f73f3

SHA512
5b49139f4ca01d8eec5708532a2ca5be1efb0d8bfd3b64e606027e43540c60e98a0ca49e518639adc4187f35283edf8969d9f23972f50ddc21bc91a7b35c9caa

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
65558ff8eee2c8265edc7a2fd3a77cb7

SHA1
ae84eba8c098a0c33b06d058a75004a64f797184

SHA256
7997b7a75af7ebfad12cb4e835e45072129f5b1b7900a4cb3108eaaeb1ce75a7

SHA512
fc6ae2f7387a6e37d82307905c8dd72e13d049059c99c05d316f2e639f2e296210fb78d7693be271c018cc3fd16cd40ec2d3bd082c2720d903d999fe8aa8700d

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
fc9a56b5cefb353fc655f02bea117b61

SHA1
363033744f1bf3854a30cb6db6837c59304cc638

SHA256
1bb6066dfbbf26fce44aa543b2f2f707e304b05529eab117a0b100c562edf40c

SHA512
ef4f4d28b30d4c1996db4271593feafbfabd6e3031d661f3b24935e87db3e278464bb4bf59074a9ce5b08ee74a9ad785e7d5ad0c64a9b477d117b5f8bd5942bd

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
252599115008904901d6550b15b252b7

SHA1
8f208bb7b00ced7112f08dffbb86810e0e792152

SHA256
d1347ae42f4c2aa05d3ed9246c545ba4308791d4579367f34cb1f26db6de707d

SHA512
e2b1e463d836f8400bb54955dcde62c26b98cb1219de51ac587d99277e8e3f4c0c318b753de6d8948ebde67966828f649e00d4501882dd7ce8b3dccfcc5729a2

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
e898b9b19c334bc056863057b8c5fb88

SHA1
7528e01142fb4c63c4fe44b004257c31ac45be1d

SHA256
1cdc7317450e693742909175ca12e3d00086e7e67a1b04c1bc5de8b4612ac3a2

SHA512
d25be79793445f5f3bbee590fe04f2999c781f2a583f876bf23955ad4a701dac107de06ec577596fb6bb2014effa3d9194b157131476a2c56ffd5c1a280ca827

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
8440704d276da9e613d3f92dea9afb96

SHA1
a181e7f8210b203049a029a8163edda0d64e5e40

SHA256
cae9621ade8eb08016e81a6be9af841687b34faee2474cacfb05ced4e926c862

SHA512
2ca0a8bb9a9737c977f25ccfe7862a89d0863fbff20a58e97ca63f1f6566b9298a5b9d4624b8374a4d23f21e074531a8c494f399be09c5978a67baf351db432e

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
9c75ce0032b75dcba70bca09213cd836

SHA1
fe86a8e446ca134586b4fda0f9799e764a1439d8

SHA256
8c05409b272834a0e53abaa6170f960d3d4b4d3f450494f20f3cb2fe6628d1ac

SHA512
fc086df70bf08ab0fee92b21a7331767c3cafa8d20e01c5816efbec8caf64cb63692ece4867682171845cbad7454d42aada9cb27f1c3fb26e3b8f54db25c6396

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
8f379a88cec1597b73e7e65050ddc528

SHA1
a47eb8af869ab9fd085746d0e9e8175d51472af2

SHA256
d525636e45126ec89a3ff8ad8602066f11b2d9a59a7887589d8da13957ac439d

SHA512
343f1faeb4d1adf048aa9cb3d19ae99bc9ecf3f6c0a971465ed539b0a188a89092815af7492d253dbb2de5902c5c5094ae81f675d4901b2cefad1c34758fe14b

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
61ccf123ccae36970581150bc06c0ad4

SHA1
64d38b6ac87e627873abab2594a66cb2db08a2a9

SHA256
cce102aff305e1ff030a5e273b990ddbcc1c633eb6461dc543e59a02a5134877

SHA512
9e216e82df63e59980f3c30ffc49f8e522ad4e327a96c491e7a0fa50e8e1267d6f9377a2710d1d0a034d1cae8c056a963bde01056417a4d07a39e97e98e95672

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
af91f37892e0f0580a4f7ae779c8f126

SHA1
3fcfdd48e9972cdea5386aa4f962b36a4e77c58b

SHA256
646589ed76532c7923a9442da09f1810b229ef996616cb8ecd3445b52815a779

SHA512
8cac50ce1452f1a096a78c4243f91941dcde8bb5de2d47b34ae61ee7e44223c865e1373e334b0b85fc9541afc28af510e605dfa782a0a682278f6b546f80598d

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
cbc2b0fe45ab6dbf07acbeb36eaed57e

SHA1
863ec48c7f3f59094d6755e9c59995bd03c430a6

SHA256
e3d89dd70f578d6e59e3dafd4ac244d86c86c9c8291105061e4fb355f551766a

SHA512
cd302084bf2dc59173f0aee0db5742d0c01557141d45ff6dcffa90aa14d175f23ab662e2382962f3be2e0b9ba2578da220ab42081c52ea777205430db662ec00

Download Submit
C:\Users\Admin\AppData\Local\Temp\Cab9687.tmp

Filesize
65KB

MD5
ac05d27423a85adc1622c714f2cb6184

SHA1
b0fe2b1abddb97837ea0195be70ab2ff14d43198

SHA256
c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

SHA512
6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

Download Submit
C:\Users\Admin\AppData\Local\Temp\Tar9707.tmp

Filesize
171KB

MD5
9c0c641c06238516f27941aa1166d427

SHA1
64cd549fb8cf014fcd9312aa7a5b023847b6c977

SHA256
4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

SHA512
936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06

Download Submit