f1640f952fc6f69d4c3eeeb447b8bea5d71855d1a1c175e396e47924a1ae37e4

Analysis

max time kernel
120s
max time network
126s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
29-12-2023 22:21

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

057dfe6491a66ac4722d913f9120e5e3.html
Size

1KB
MD5

057dfe6491a66ac4722d913f9120e5e3
SHA1

9f991032c7ac5acc0bad1de6216595ec85057362
SHA256

f1640f952fc6f69d4c3eeeb447b8bea5d71855d1a1c175e396e47924a1ae37e4
SHA512

ac5c3790029844c3e5edfec81b9961a7dd2c462b3334245c486cec3b92ef0780337d8d9f7eb5976b17f080f3b0a92f0482574cb634a67969cb2951b583af45f0

Score

1^/10

Malware Config

Signatures

Modifies Internet Explorer settings 1 TTPs 36 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-452311807-3713411997-1028535425-1000\Software\Microsoft\Internet Explorer\Main	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-452311807-3713411997-1028535425-1000\Software\Microsoft\Internet Explorer\PageSetup	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-452311807-3713411997-1028535425-1000\Software\Microsoft\Internet Explorer\GPU	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-452311807-3713411997-1028535425-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-452311807-3713411997-1028535425-1000\Software\Microsoft\Internet Explorer\SearchScopes	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-452311807-3713411997-1028535425-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-452311807-3713411997-1028535425-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0"	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-452311807-3713411997-1028535425-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	IEXPLORE.EXE
Set value (data)	\REGISTRY\USER\S-1-5-21-452311807-3713411997-1028535425-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 40d4a553d63ada01	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-452311807-3713411997-1028535425-1000\Software\Microsoft\Internet Explorer\IntelliForms	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-452311807-3713411997-1028535425-1000\Software\Microsoft\Internet Explorer\Toolbar	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-452311807-3713411997-1028535425-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-452311807-3713411997-1028535425-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-452311807-3713411997-1028535425-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-452311807-3713411997-1028535425-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-452311807-3713411997-1028535425-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-452311807-3713411997-1028535425-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-452311807-3713411997-1028535425-1000\Software\Microsoft\Internet Explorer\DomainSuggestion	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-452311807-3713411997-1028535425-1000\Software\Microsoft\Internet Explorer\IETld\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-452311807-3713411997-1028535425-1000\Software\Microsoft\Internet Explorer\LowRegistry	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-452311807-3713411997-1028535425-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{8C330031-A6C9-11EE-99C0-56B3956C75C7} = "0"	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-452311807-3713411997-1028535425-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no"	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-452311807-3713411997-1028535425-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000429d3af34477a14f8b2dd7691733418900000000020000000000106600000001000020000000326ea65cd39411bff4bf5b15f90ad45ff21f1252c7f36ebe3a1dcf634caf6fa6000000000e8000000002000020000000670faa13ecb7d79d4254cd39a53a6b91e74574982a3eb8a839eb023edc88029d20000000e61c35f7d2cda0ff1073e9ac3ad999905368d79e7dbb0dda445c27c39130f4ca40000000925b596c8922fe26a0caef93691f8cfd8a39d47569cd979b525ec57de56edacdacf01a4890ba8775c7398ffca3cffab8585c51d5c9dc765d88c6d07052b3bcd9	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-452311807-3713411997-1028535425-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "3"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-452311807-3713411997-1028535425-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-452311807-3713411997-1028535425-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-452311807-3713411997-1028535425-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-452311807-3713411997-1028535425-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-452311807-3713411997-1028535425-1000\Software\Microsoft\Internet Explorer\Zoom	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-452311807-3713411997-1028535425-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-452311807-3713411997-1028535425-1000\Software\Microsoft\Internet Explorer\Main	IEXPLORE.EXE
Set value (data)	\REGISTRY\USER\S-1-5-21-452311807-3713411997-1028535425-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-452311807-3713411997-1028535425-1000\Software\Microsoft\Internet Explorer\InternetRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-452311807-3713411997-1028535425-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-452311807-3713411997-1028535425-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-452311807-3713411997-1028535425-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "410071408"	iexplore.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
1888	iexplore.exe

Suspicious use of SetWindowsHookEx 6 IoCs

pid	Process
1888	iexplore.exe
1888	iexplore.exe
2724	IEXPLORE.EXE
2724	IEXPLORE.EXE
2724	IEXPLORE.EXE
2724	IEXPLORE.EXE

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 1888 wrote to memory of 2724	1888	iexplore.exe	28
PID 1888 wrote to memory of 2724	1888	iexplore.exe	28
PID 1888 wrote to memory of 2724	1888	iexplore.exe	28
PID 1888 wrote to memory of 2724	1888	iexplore.exe	28

C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\057dfe6491a66ac4722d913f9120e5e3.html
1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:1888
- C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
  "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1888 CREDAT:275457 /prefetch:2
  2⤵
  - Modifies Internet Explorer settings
  - Suspicious use of SetWindowsHookEx
  PID:2724

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
5a472037f462f000c9c46e6dc7928792

SHA1
b8b8d33c0e53c213206bb90cb4ab4013bafb5c84

SHA256
ef6bc7bad2cdf06b633173a5093901dbda10954b59b832b362c63dfc926988a6

SHA512
24ca15c4ccf59da12782515ff79f8892f0aa430044f77583c6a35486340e7f96b26428825572baa33e253e26c46f44f073414abd7bbeef548997eb598e211ecf

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
2d33f1c4635ccd0d8a2a94f588d7f559

SHA1
d4559de791ad2b903bc0135b6cd641c018b9458a

SHA256
51bca0f9f741db28eec1069530d8dc9ffaf0d77a1ece1add9167ddde24e60516

SHA512
63d447aedf75aaedabfa00fcb441c7aca0965780c91ade0e2525e92e27c7c10a1d9538271abeb30b89ccb7cff49f25b032e2bc1cd040047ed391b37bbd5bd78e

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
3359c17b586a86fadcd13ad237ae740e

SHA1
30a316755296d50724675d4e0c30bd6cc9a8ec80

SHA256
9276b9c5a3382b7ef95fde7f2a2e33b25ad08cfc7bbab3aebb681ff7b580e68e

SHA512
8eed181449b277e2b2861f02b25a3f6b3aaf2d8cab80ccfd7bfa5274569c43a53cdc0847ed765ae9813e05c787e1b964dacf7e4eaaca0eebe7bf396d4c12bd33

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
5126e29a70ff85929099ae1f4bc12249

SHA1
37356c5a2b21a1c5b25b654b5079cd26cbd6ea7d

SHA256
1e102320522ba02da4b420a1d8015a5bce48c1b57f154b79efb42e22df5f98d5

SHA512
95c61035bc441e4cc141277159f172f91bde65a4b306b17465e87eb15d8ccec6c31ab2d5333d842d9f118ca1bea9ce3dee77ba32dc15e08538b6faf806d7c025

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
da3c3a40844d6070186bbcd6e78eba58

SHA1
62c31691576d5375021b727ecd28c73a59a6a49b

SHA256
420ad16eec56e26a85da90cffa2a56d3a062e0e67c84836b2542fada3dd23a7e

SHA512
b4a80f037351af3f9adee2e4061589277f7958afa51df019e032665ecc48b92c032c4c718c43d8fbbb14e8c142aa646d7413be8e8320654bff73af7d0a494913

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
1e58c7383e9db4f8180190049c7ed21c

SHA1
358995a3ea06a477f08da2e55bea6955ad43a37c

SHA256
2e8c77cb762f71670bf7d4a36a6a36c4244a9f5214512925b700eba98085a9fd

SHA512
807d7bd31e58698ab0b35e85da237fc3daaa7ea90f8dfa9173f6c9989bc6bb66bd0f6ef69ddb283fefe1180a578159ffd35b36b1a284dc5b44f06164f07a3832

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
fd8a046cf12e222009c669a3aafe1988

SHA1
ab35d73ef5e35934a7a114c8210cebd38b279c2b

SHA256
3fa30c3c494794a183548a3d7469e637d67c02b043e8ab81fbc2021224c01c6e

SHA512
b8bce5f554a0692e2e887a11fbb38544a7d3b2b9b36528c08779dbc29f60e8332f2a46b98b8fe43c853251f03df51cb895122cf9775dce0d0f9000bc555a90ab

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
6c4f09767aa77d05c013d01ec601ea1e

SHA1
72373b7fbc38cca23648b073b348d62aea15197e

SHA256
bd82b15176b02c52c8022c3368ecc97bfc0497aa080317b960e0607d3c85dd32

SHA512
3c9d9394aa7b93c44eb8e5c9d858b65e1e3f3f445d2bbca3fe7355d115dacb97d3aa4b5e3055a537135213689eaddf20a13573c1287480e69952f4b8e6c8f369

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
f03f72c7aeee95f31dee9645630152dc

SHA1
704e36b770d59aff609b97193ffd221fb912d44a

SHA256
36743b60d3c8fff7cd38bd9e3706be95e876d96e4d90713a8b7e66eb0b0df504

SHA512
7321993601d30818ebcde50080b6a26ed14f631d828dc7400790551fd019dee834cf62c31d1a0c0082593cd69068ff4057a194f3723e7dcae83faceae20b1ba1

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
0c3b35e603d0a590fe608384266aa52d

SHA1
3204d111833d7762e6036437966d1c4c67fe3a67

SHA256
2852029583c6382a5cf39434c650bebeae073de7ff8ec6883455f57fa5fd420f

SHA512
5c1da39b1c95a1d2b0e2488ea9cbc5b73c7c562824bd222c3fbe1d798092138bb987f28be49ba9189489191e091f60665dedbf902384896680334b2a5200ae55

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
f68754588f3bdd28dd6c21ea59f856cc

SHA1
d31115f76a10517c95b4991e92425fa3dd804ec0

SHA256
2e5e0e4bd7a672f2250c8096e52e91824332b699677296096c1c9021ef1cc3bb

SHA512
7edf908f938b92ad778fdda98c46a980f6625b1793ed778fec65732d4debdd7bb831765b8f25e7e8a260e05700dce474d6970ced0070ede2260c48731d6411ed

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
22e38f549f06026774716d580db0ebda

SHA1
2fa415e459ca2d066a7552d67db6ff638eb16f14

SHA256
433e4b6f4bf1d50ff6f7648b23d94309bad681c069c2ccc757607b145b3d3253

SHA512
e79dbe3cefb130c2456bfe7df02abb481b01a641ec9b226d9b62a6ecbcb98c37d56c8085938a358c185a7acbd66c7119ff2e7a8fb367372defb4db3df8a8a057

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
6f72be2fc6b54cd95bdc6ff0eafab31f

SHA1
2cfe4fbdbac2d0cafdae29e9d5e8ae830617c60d

SHA256
3ddf893f42f74a8cd2c5b4d1e2f39d9499ea0080132af2ff298dbfb5ee0d16ff

SHA512
9743572ad418d41dafefb1d6c78bdb47c30d21b88a5bf37f3608601842b7c6031782ba7267cae4c6ca6f5f75ba2b131b42eced3094e91e5ac0c8a474def1af4d

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
3eb81dc31505f3ba2427fdb999b0192f

SHA1
797ce7c42811ccc4a518f198d5c81fa26c61910d

SHA256
b4e28695cbe9a14fd97f2261a453bbc2efbf96c0d252d3e007a7938bb3b9c698

SHA512
0f3cd9e31033c039cd9b6cee5d01a2e102b36defe463c4e9a70126958c74df266e710e8478dd5bb88fc31d76c280b2a7c2cd04d1062dbb6a2aa4056cfcf5e1e6

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
524ac9840bf93100e422f65030995038

SHA1
fa93a1658690f64a8f51de5dcc03ad6be65dbffc

SHA256
cac7aa39d709e0a2f0689569c469093498525e5a087675f639575d7180f4d312

SHA512
6347c0763c1b4e88c14cee8703255e63fb180f36fd9b5949a735cdb47e18e650a67f1ebb83b7c09a5177c0ebea72ca5dac81b1335af8b89b0282106af59d9fe1

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
69c7428d8e4e1e2c397035d89a624ad0

SHA1
224622a74ae2bd44af938e35b4bd9978130b6ef0

SHA256
494691893a6479791ccb3849c0c6331d04e2aed990de85c302a5753249b07614

SHA512
748b93bfa59f07de97786146204469e9c82753123f80f79eb802ae737ab96aa0fa526ddc61b7436c674bdfd40d5cd0852e530e8e4df31ff1358937dab1330c04

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
a0d54c326619e6c0b9b607a7eecd591a

SHA1
c99297d72920c2ab5760d9fab8e599095d30adbf

SHA256
84d363d9e29a767425e00f586d79c6f7ec9ffc3e358d298d1f06a6e65af68be5

SHA512
e22a68b614e7cba6eaedc99d777bfec6c8c149eabcbf7788d0dfcc4d8763e4f2d4ae617fd27ae9f74c814cf3c8a16c05926e23f43f41ea976fafd568067c15f0

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
c7e273f5c4d500a4e8c66d955526526b

SHA1
2a8d53eb2c1e9d4256bee5edeed9fb21a7767a7d

SHA256
56c37f04c0da7316d6cc1773e1e02d18888dfb50dd4710abb8993b15e3d8a264

SHA512
8e644fd06d91ba846a536e828c9747b8b96f8b8ee57a669c46f4729639876c0da029bb5c2f957d99804cfdee4c4b20fafc182b94be04521e0e863bd0bc40ede5

Download Submit
C:\Users\Admin\AppData\Local\Temp\Cab563D.tmp

Filesize
65KB

MD5
ac05d27423a85adc1622c714f2cb6184

SHA1
b0fe2b1abddb97837ea0195be70ab2ff14d43198

SHA256
c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

SHA512
6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

Download Submit
C:\Users\Admin\AppData\Local\Temp\Tar56AD.tmp

Filesize
171KB

MD5
9c0c641c06238516f27941aa1166d427

SHA1
64cd549fb8cf014fcd9312aa7a5b023847b6c977

SHA256
4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

SHA512
936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06

Download Submit