b81019d16d83197a22c34667c770345df756242aa5f17cca00f418a5d0360ea0

Analysis

max time kernel
119s
max time network
163s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
29/12/2023, 18:11

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

akcms3.9.6/fore/index.htm
Size

1B
MD5

7215ee9c7d9dc229d2921a40e899ec5f
SHA1

b858cb282617fb0956d960215c8e84d1ccf909c6
SHA256

36a9e7f1c95b82ffb99743e0c5c4ce95d83c9a430aac59f84ef3cbfab6145068
SHA512

f90ddd77e400dfe6a3fcf479b00b1ee29e7015c5bb8cd70f5f15b4886cc339275ff553fc8a053f8ddc7324f45168cffaf81f8c3ac93996f6536eef38e5e40768

Score

1^/10

Malware Config

Signatures

Modifies Internet Explorer settings 1 TTPs 36 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-928733405-3780110381-2966456290-1000\Software\Microsoft\Internet Explorer\Toolbar	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-928733405-3780110381-2966456290-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-928733405-3780110381-2966456290-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "2"	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-928733405-3780110381-2966456290-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-928733405-3780110381-2966456290-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "410037703"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-928733405-3780110381-2966456290-1000\Software\Microsoft\Internet Explorer\Main	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-928733405-3780110381-2966456290-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-928733405-3780110381-2966456290-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-928733405-3780110381-2966456290-1000\Software\Microsoft\Internet Explorer\LowRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-928733405-3780110381-2966456290-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-928733405-3780110381-2966456290-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{24E60A61-A67B-11EE-AB16-D6882E0F4692} = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-928733405-3780110381-2966456290-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-928733405-3780110381-2966456290-1000\Software\Microsoft\Internet Explorer\Main	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-928733405-3780110381-2966456290-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-928733405-3780110381-2966456290-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-928733405-3780110381-2966456290-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-928733405-3780110381-2966456290-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-928733405-3780110381-2966456290-1000\Software\Microsoft\Internet Explorer\PageSetup	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-928733405-3780110381-2966456290-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-928733405-3780110381-2966456290-1000\Software\Microsoft\Internet Explorer\Zoom	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-928733405-3780110381-2966456290-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-928733405-3780110381-2966456290-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-928733405-3780110381-2966456290-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1"	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-928733405-3780110381-2966456290-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-928733405-3780110381-2966456290-1000\Software\Microsoft\Internet Explorer\SearchScopes	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-928733405-3780110381-2966456290-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-928733405-3780110381-2966456290-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000580e1c8c6faee54b80ab28599b83677c000000000200000000001066000000010000200000006712b2dbad746737707b3dae8631998e830566cbdeff5e22a3242eff5f4c3f86000000000e80000000020000200000009e58cae0a0c0a5aff010a206131bc735d23198a01486d6da7b5d945706e47aac20000000a72ecf7c50909458e7113094f79322e33260adae2ecc2f383541ec26161df16f4000000030001a80ced9ff1b7266782fa9a738d9732d4d761114708e58e8287f15ef83d97110a5254b9882332f6ed9413a8486c053f07341b8fc2312ac71618d00ba985c	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-928733405-3780110381-2966456290-1000\Software\Microsoft\Internet Explorer\IntelliForms	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-928733405-3780110381-2966456290-1000\Software\Microsoft\Internet Explorer\InternetRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-928733405-3780110381-2966456290-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-928733405-3780110381-2966456290-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1"	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-928733405-3780110381-2966456290-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = d0c785fd873ada01	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-928733405-3780110381-2966456290-1000\Software\Microsoft\Internet Explorer\DomainSuggestion	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-928733405-3780110381-2966456290-1000\Software\Microsoft\Internet Explorer\GPU	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-928733405-3780110381-2966456290-1000\Software\Microsoft\Internet Explorer\IETld\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-928733405-3780110381-2966456290-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing	iexplore.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
2092	iexplore.exe

Suspicious use of SetWindowsHookEx 6 IoCs

pid	Process
2092	iexplore.exe
2092	iexplore.exe
2136	IEXPLORE.EXE
2136	IEXPLORE.EXE
2136	IEXPLORE.EXE
2136	IEXPLORE.EXE

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2092 wrote to memory of 2136	2092	iexplore.exe	28
PID 2092 wrote to memory of 2136	2092	iexplore.exe	28
PID 2092 wrote to memory of 2136	2092	iexplore.exe	28
PID 2092 wrote to memory of 2136	2092	iexplore.exe	28

C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\akcms3.9.6\fore\index.htm
1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2092
- C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
  "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2092 CREDAT:275457 /prefetch:2
  2⤵
  - Modifies Internet Explorer settings
  - Suspicious use of SetWindowsHookEx
  PID:2136

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
4d60039dc371a0e78d8667cdddadb828

SHA1
8a2d1b738f0508f56238e0f130588fe09e46ed1c

SHA256
f8169a0e01e8eaa09916cf11677fb41592eac59621959cb3087e9f6e9d5b394c

SHA512
85c6fad0f1c723559f44088e6d9b4793d00bdc9f3985daf3e2afbb02b5ba4cf25bfbc42a18127511a2e70d3b93e42da744b31a30c42cd70e6127c9154caca0e1

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
b421a6543ed77593efb94f99cce9e2b3

SHA1
aff8cc610607e60a3c40e517b8c608a8c520768f

SHA256
550317e3b6911b65b4e2ea270f2f2054135594228c498e1dd9c5a9b7c4c487d2

SHA512
2ea4e8eade4c06596f79d00c7adca32b06df83a444ffb2897ed8d02c68e704ea27c383bbdee7a4f2649ea69d55fdea7f2abc5ff32388dd015359719a3aa72198

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
703463ba2ea82628f7eabb177bd3bfb6

SHA1
df112c13fd07d7b3cfcd528d5a5f12066c4397e8

SHA256
79a6a396549f443d08578c4f57cebef50e558e056270e4f80367ad51289fc1fd

SHA512
d572375b61364217729feb7b7cee63a0b8bf3587f968c05ca791797aad69961aceb93f41d2390900bc668dd53b088217fba8cd581fd57437cea0ccfb7d99da85

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
cf3e1d075ceff9fa863fea1e4ef3a084

SHA1
520f11376fff26c5b23a287ac960368b14bf6535

SHA256
aff96f1aaf90136e22048e763a52673ac52d1cc07379c93d7a5253838588d174

SHA512
1649e512049d95e17ac269ba31ff5a5368347e646f315fa1d66018735874ccd8073984ab9c902fc24068ff6d89d47f9a686c5da4885c4003a38ca936843f19e6

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
adfc8ec26c796cb0b4c282fdc5458090

SHA1
e94752dcfbbabd582b6db8935e638c3b4eb0a808

SHA256
a98213b1b45224c1c68e9cd21845081b9b6e7b649f3c1b53a84e983f27d7248f

SHA512
93f4675257056a4aa6313a3df1e98108715896321fd314b9a09e498f9ab4e33c6c20e909d2113cd1e107aa236f1d4c6d623d110e62c20634f961f9f7305359b8

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
ddc7dce49d1152212b111b0881956db4

SHA1
1e3047cf2d8edf0c51c1b76efbb69f7dba75cf2f

SHA256
ffa9467410c7738225d9d211a3e914cc8b403f2058448bcfd6ccc98e3328d72a

SHA512
5a94ca5500f0b59a1a76968b92de02a3f5a40023a5ed7db3e8948a29992ff3d28c4047a2e7c96b475b501eb378006da6f3ec422a37838cb0ca4ed5b129609f19

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
484bea538062953098ff7f49746b93ae

SHA1
596a50dc2abefb1d5dec779a9c2f84b4778dda40

SHA256
ac4321ca0322a1b9ff9e74a82a4097fbb4276434d331fce5d15c95d520af48fe

SHA512
ec6f8142aa549a795712c94c92a0567849b8f369274468ecf2b8b3b4be6da0f1a05ffa95e64de4c9b4cd983461bb84ac4e806c6b977692874443d058f547d148

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
de5d8c293fe680ec58b80a6e0fc141fa

SHA1
f48b94c007ffbb96a6776066cc6d3609a21e5bb3

SHA256
211f22b67f181a609b4fdb50141874dc820e9a181372e007a6bac2c1fd59b643

SHA512
4aa03c26204d772ec94c8fbc9adfd2b954453c32d1b94f598a77b38c9134768a34bb9896c7e67ef847f9aad9e28b56e26abae5133cc3fbda0a2303abb2b348bd

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
a3a3e1c9a9ef9c446ca5233f8055506f

SHA1
4978f5f7b24e22b8b74c0757e59a1847e9ac8766

SHA256
2dec23deb3da58627dd6c1727365d1d2a985ec125fc08de9c837b1c9ce5215d9

SHA512
d55b074ab148740cb7ca8b0f62480b64c7951146d882b04460716ac7ba1f06ca6aa793b06bc94f9cfbb1ae01b353528d8cb77c661f4259230e635a605536089e

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
b6d885bef201dcb4b98e87b44f2c3563

SHA1
136ed8a081b75861b7104f6dc866d28a068af851

SHA256
45dd0845e952a1d3cd57a4f82e5378df54af0a1b1c998a4125c938242a6c81b2

SHA512
1c51215edfc9e3ded7e1eefc4cd817a0f4d2ca404a5d1140614d314edabcc4bc335a3c2c3503167e5ded2c269d11a0456c64a963826ff725d60633269e8ad4da

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
ac51fda6113774db9818f8aece8aa8f9

SHA1
4c986a37e5666c8c51bd004a8e1dc7e6f29b534f

SHA256
ac675abe06de2fcb408195857e4a375eb97ac3e3217de9df278e3c4975e59211

SHA512
d834ab245040ee0eb137059876f32cda38f7359a6343bf1510850f3e6da122b6f114bd12c65a9765d4e4ee94ccdeccd1c9bd047b734e8d09341cf8a8b1e78fbe

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
a727ccbe07bd57bf318d0bf82fc4ee22

SHA1
a6567382b7fa5cf363f17bf2f19e2bce08ae2984

SHA256
1da12a49a5b6f10147917f709c97a5ebbd29c8ac67ae961b448918e289cff7d4

SHA512
91123d3865c0dd0f46a332851be8dfa9ba5c55b2398b201cc1ef4956dbbeca00b750ba937cdf8dc84a45c93cc27844aeecd10d5d0d47c992eb91c9b43876fb34

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
aede1dd40c6120a27db09f155eea8913

SHA1
5af4c4184ea441adb506040384cd25ce7cd7f452

SHA256
5b3e7e1e344fb5f1ed4651f9bbcbeff290cc633fd32d95d2fbb2796ccda6ec31

SHA512
23b1c073f636611f4653740c04d4c703100d93d9f5fa751deeb4f542929da6d69254cf27b7b1a4704f19ea3944b00c5f3a9f867079fe89a86522824e95902ba0

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
6184fda46a00d381187a612f2b30baf5

SHA1
629fc5f9fce20deab1003201528d5c4a88b1412f

SHA256
db3fc5b7eac7b910c79c5ad28771e3df4bcbacdfa0c7141e1e05be4ab4fa8d8f

SHA512
a64adb16f30fa7d98ce600218fce9c68922d79d67638df551eb8c60f3e350f2759b2dbc14391086cccbada0a53458f96b4810bf04eefbd9386bafd368b487b69

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
df0f9261f21cbd5266f600ae8bb09e44

SHA1
02b96c98f67623eda66f82a0ca24dbcab83a7f56

SHA256
08a7772bad01059d645132722c67076a9c403257bb1dc22a015940a07c78e3d6

SHA512
98cfaa956a2e78af884a4da193a9380276374dc8b5ec181d50f013f62376429fcc969701d8977f3e01f5393747a77438ba65aa65ff2c5dddc1066ad3f06e48f6

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
9b015b2c6684c9f85074c49b5aba9aa0

SHA1
58fe02447a04a04e264aad8270a92d7c66444ce0

SHA256
15ad99ade4eaf4552546e051223579d1e58609094ee9e333112dc7da915d43ae

SHA512
9865b0e42366724a33b521b921eb493653dd34d40002bf7c95fb3f47131c9df5c2fa500cff4ade6bcc72223d861fa983a932c9fe68fc8418d6de297818982a56

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
31b5bc79efd788711b5347d882f13f14

SHA1
f47c6eb4d1cd80bc145825c5497ca27b2f1b8edd

SHA256
e1619535e96381c543a610fcc81e3f18ff155d89d00183dd8ccac7d2f02ec1a7

SHA512
1bcbc1eee62bc39454bde65d6ac521a06df81c30c4c8e1a3e469331aa4a80eaec6d115991b3cb0d155da5c5f78b55d3c919c561dc774e888bef24bba1142d141

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
5785e0aab4b499532b01d6ddb35896c8

SHA1
9b91805af00ec484bc9bcad6d9498bf1c7c84460

SHA256
8d803d96ce58c2014730ca7c7bb9c1dc00373690690e4c53dab50e2f5bbdaed7

SHA512
fdee67f4fc9618136fc9583e08a2e08cbe095dee3e1e3de1e4e237547b965bcd1fa4a6f72b5284d23164540674ab1f9444876cea01eaf2acccc259897e7c2dd2

Download Submit
C:\Users\Admin\AppData\Local\Temp\CabD09A.tmp

Filesize
65KB

MD5
ac05d27423a85adc1622c714f2cb6184

SHA1
b0fe2b1abddb97837ea0195be70ab2ff14d43198

SHA256
c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

SHA512
6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

Download Submit
C:\Users\Admin\AppData\Local\Temp\TarD159.tmp

Filesize
171KB

MD5
9c0c641c06238516f27941aa1166d427

SHA1
64cd549fb8cf014fcd9312aa7a5b023847b6c977

SHA256
4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

SHA512
936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06

Download Submit