3a2ef8545fe31706f4830d337aaed107ab8c286992d21cf8af843174bcd7e21a

Analysis

max time kernel
120s
max time network
179s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
30/12/2023, 01:50

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

0aaf5e6058498cc07b535caf4637f35f.html
Size

75KB
MD5

0aaf5e6058498cc07b535caf4637f35f
SHA1

b303f24ef285b158be0fdc5ecf1505215e3605b4
SHA256

3a2ef8545fe31706f4830d337aaed107ab8c286992d21cf8af843174bcd7e21a
SHA512

eb44d1dafdbdc4bac8d6f9005717d318ea1e17137d6e8526240455992969df6eb8100d52b9134edc4b1c56912d83da8e3cb25b58b465be9da5c75caa080e351d
SSDEEP

768:FeyPmnRFm4pYTBQOUtqKnOiWiywErYE/nT:F2nRFm4pYTBQOUt9nOiWiywErYE/nT

Score

1^/10

Malware Config

Signatures

Modifies Internet Explorer settings 1 TTPs 41 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1268429524-3929314613-1992311491-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	IEXPLORE.EXE
Set value (str)	\REGISTRY\USER\S-1-5-21-1268429524-3929314613-1992311491-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-1268429524-3929314613-1992311491-1000\Software\Microsoft\Internet Explorer\SearchScopes	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-1268429524-3929314613-1992311491-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 30d0c8ecaf3bda01	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1268429524-3929314613-1992311491-1000\Software\Microsoft\Internet Explorer\IntelliForms	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1268429524-3929314613-1992311491-1000\Software\Microsoft\Internet Explorer\InternetRegistry	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1268429524-3929314613-1992311491-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1268429524-3929314613-1992311491-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{13346221-A7A3-11EE-9776-EE9A2FAC8CC3} = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1268429524-3929314613-1992311491-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1268429524-3929314613-1992311491-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1268429524-3929314613-1992311491-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Size = "10"	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-1268429524-3929314613-1992311491-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1268429524-3929314613-1992311491-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1268429524-3929314613-1992311491-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1268429524-3929314613-1992311491-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1268429524-3929314613-1992311491-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Enable = "1"	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-1268429524-3929314613-1992311491-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1268429524-3929314613-1992311491-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "410164808"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1268429524-3929314613-1992311491-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1268429524-3929314613-1992311491-1000\Software\Microsoft\Internet Explorer\Toolbar	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1268429524-3929314613-1992311491-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1268429524-3929314613-1992311491-1000\Software\Microsoft\Internet Explorer\Main	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-1268429524-3929314613-1992311491-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1268429524-3929314613-1992311491-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1268429524-3929314613-1992311491-1000\Software\Microsoft\Internet Explorer\DomainSuggestion	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1268429524-3929314613-1992311491-1000\Software\Microsoft\Internet Explorer\LowRegistry	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1268429524-3929314613-1992311491-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1268429524-3929314613-1992311491-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1268429524-3929314613-1992311491-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Factor = "20"	IEXPLORE.EXE
Set value (data)	\REGISTRY\USER\S-1-5-21-1268429524-3929314613-1992311491-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1268429524-3929314613-1992311491-1000\Software\Microsoft\Internet Explorer\IETld\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1268429524-3929314613-1992311491-1000\Software\Microsoft\Internet Explorer\Zoom	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1268429524-3929314613-1992311491-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1268429524-3929314613-1992311491-1000\Software\Microsoft\Internet Explorer\Main	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1268429524-3929314613-1992311491-1000\Software\Microsoft\Internet Explorer\GPU	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1268429524-3929314613-1992311491-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "2"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1268429524-3929314613-1992311491-1000\Software\Microsoft\Internet Explorer\International\CpMRU\InitHits = "100"	IEXPLORE.EXE
Set value (data)	\REGISTRY\USER\S-1-5-21-1268429524-3929314613-1992311491-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb010000008dcd4c448ce8fb42a8f577f49cde6d30000000000200000000001066000000010000200000002b57ee7b6bcd3d2e175ff81d43ef3d4978f64826e5cbee50180730f82011c7e0000000000e80000000020000200000008f16d63558d310844717fa389eeef696c8edc4116c32fdf753b0c1518d12adfb2000000085d5e145062d3f32919db46673d60de99235ea7a8dbf31289a990532b158c7ae4000000048e8e950608dd6a0887f579c20dfc93282e268303c09f2747fdf14ca419775b9493534ec235a2d9cf2d83701ce52264e52a3992eb521efade0a63ad9543ca4ed	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1268429524-3929314613-1992311491-1000\Software\Microsoft\Internet Explorer\PageSetup	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-1268429524-3929314613-1992311491-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1268429524-3929314613-1992311491-1000\Software\Microsoft\Internet Explorer\International\CpMRU	IEXPLORE.EXE

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
844	iexplore.exe

Suspicious use of SetWindowsHookEx 6 IoCs

pid	Process
844	iexplore.exe
844	iexplore.exe
2436	IEXPLORE.EXE
2436	IEXPLORE.EXE
2436	IEXPLORE.EXE
2436	IEXPLORE.EXE

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 844 wrote to memory of 2436	844	iexplore.exe	28
PID 844 wrote to memory of 2436	844	iexplore.exe	28
PID 844 wrote to memory of 2436	844	iexplore.exe	28
PID 844 wrote to memory of 2436	844	iexplore.exe	28

C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\0aaf5e6058498cc07b535caf4637f35f.html
1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:844
- C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
  "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:844 CREDAT:275457 /prefetch:2
  2⤵
  - Modifies Internet Explorer settings
  - Suspicious use of SetWindowsHookEx
  PID:2436

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
c5c91e0c00446f33b7409f8966ba1ae6

SHA1
abf2dd4876ebd5e9031d04d06eb566a89f06933e

SHA256
9212f0a23c6d3d694eb9ae3371e63bee8c2a9d6066a722f8338fa040ef0ae9e7

SHA512
998ef5870c369685f759e2ac1d9e87dcd175a4f1920eddbc823e41e1f03bcee80829f0865a91069e3f042ed1e2e50634b193b1180cc13adbd660cea703af32bf

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
360be726a597ca30f572b0b68fbe5e1c

SHA1
f0292bdf70a3461c904608b9f8cca43b29fcbda6

SHA256
483659ed8a4d58bcf5c1bde6042b4623ea697490e67327bbb1338811fe2d056e

SHA512
2f1077bef2cdc656ed839c42f5ef59cab4e59d16f65284213068a2635a213ce8a68bb87e1d3fe6b92f3c443c3d171dacfd5cb31852497d4a546dbad2993dc2d5

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
e13f9168f90721caf1d5af935ad49f6b

SHA1
dcc926dace2f5771d3356a10630ab3557372d9b7

SHA256
e09390d33aea858de049a50d0634ac5dccf181ea66bf2a6b4d3d9ea55c66239a

SHA512
8ccb339612b20feedc0819eac5589c9acd39095bf8ddb4b7fc528bc2e15a3bb46b9b15c45a3c41f2c663a4a62914e2b8f1271a112b527b0388b751c65fbd65eb

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
6f0e48b7e9b85c057e8dd2542860c952

SHA1
8df4b9e1a1722601dd3071064d1b1ed374183766

SHA256
74285d4a1bb4050fc8823b2d781c813e05001c640c7d9c04cb9668f3a40ebcb0

SHA512
5047be424e5ceb863ef6efca16729974022bb4d144f06cd1db0964ae5f177a5948291f74a0be5336400123d7d48b4e60622e662aa830c4f78b6feae1e4952281

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
906739d07fff90e428fd060aa997010f

SHA1
3198a72f50d44ce959a96d92bf00f550b4f5974b

SHA256
97d37d5ca92c83a161b0f2e829c0e0a276f0eae046387032d9f44624e0a87fde

SHA512
d3c0fd9b7f61f312e4c69153137d29f21c4b1265b812dad23b9b980c1a519bd5dcb439b6174cbf5c046930f3c440b3d3001ec78c9ffe09beb9ded0bbce7ce77a

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
a17310f514ea36586c8214905d0a28c0

SHA1
77ea2526763ca985aa9f797201487b1260bca572

SHA256
60ab89628a23625aca0f3caf1eb0fe2bc348f3de63fd879b07fb84f0a79f2044

SHA512
58968d51c62f5c008469edbd3da85bd16220ddeed173c30824da4ca7995fbff893e774719c0a64f61289e24bdec92ec62ab7520380ccb5836e37d3b80c85875b

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
fad5cd242845302349aa2261d9882359

SHA1
df696a47660a39de94dbced1419c3cf32535eb7a

SHA256
9d129324e674ff8100d178086be2555ea1d7aac57bd676001ca036db3538b8b7

SHA512
468c5e6ea25203a252b493535ea4cd29b70f99badd25bc9c83917c708fcfcaf120780ef9c07e7274bc303e177313dc85cdd97485739292da6dce9f618e24a2c6

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
53ba762f571749a346f97e077ec44faa

SHA1
9b44ea0a6e27ff5892a2ce82b4bea8543e2741d1

SHA256
954540ecae3bc134f847de26b520d56deae4c5d8ea14d7fb49cc8fc0145b398f

SHA512
b8b2d884e3ffda6d280068da7ecd5f880a00414f0c14c2fff4beb68d35bf235ad5fa671626e38d7caefc9866a63fe8b6db5b087867bb4442d389a5f1b45e09a0

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
09bc9e3689108ef0c96d0ad79c04d689

SHA1
49a90fd008c7460c60dbb190a4b1999048609799

SHA256
91115f9c916bb543aacba3eb3b2c5d37ee852e64cd6eb4e16192d261dae7274f

SHA512
c25eae19bc78e92a623b8ea9c9d2247c7d73a5d186c98146d9b35ff98a67b42ebb53ef870ca145359b9fdfd0a3cbf43b4e80128fc0b8a57d1cc2bb3d061c3f79

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
0bf1be4bdac458d4f8bc011d9845b9d8

SHA1
34a7da0f44f1cef702775966329d5ba3a16c2ea9

SHA256
112d96510b8744e00b78ba9e111192a1e8be5dc334379734f54e5172c3fe37de

SHA512
e9c9c2bdc171b5b4db7f944821d565fb1747a55589a48869e2764dc2e4e7d3708cf07088c5d264a16ff18ace5e8ef826c8dbbcace6069897f752a605097ec58b

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
2af7812ff8fab7d61a68aabdd9ad250b

SHA1
9794b3d89e68840736a0593104d2848d42f7a1be

SHA256
382fae99690d59c2ffa60a42cc835b57a4ce5c002d8f027cb8b9f8826c6147f8

SHA512
2b672db76addd5cb9f9bbe9722a031a1879b06109d8eee00cfba0cec4ac8ebf054fef2825f8adb8818092b7239f70ca537fbff198686a7a000f845d35f2e41f0

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
5d8cb4af716eaab0d785b5fd9e073718

SHA1
a116877bac9071b226e4ef24a47f3a78a33a1a18

SHA256
58d4523368f9e29df8cef7975c3ee25efcb6a40d8ad0f34667ec3cf152c26925

SHA512
29f23fd30dbd88e375535d8c7e92631905a734aa6d659ce42dd02dcba578b32df064bdeb2fdc21e7f19246fee0cd4730d702d6228eab9e2c4966753dac4108c1

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
b481f23f62cf065237a8e4a1501fd03d

SHA1
2693253769fff4c72375dc50430733d6f2235202

SHA256
a45e8c03e5b79b6d3a9de1ed0fba5e6bd8689b6687924be3fd0ae998668419ad

SHA512
fb7efd3df738a5ce3984b346d0284ab0151fa87431cb0de4a7e6ac7c3725144ef268cc942592a8dccff10c8a439bd52f7b4955a1b705d3f432951b62888a7829

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
05640b874ea1f7d1a2517114f07d98e0

SHA1
c78665be5d16af318a9ca4f165be7fae50927d8f

SHA256
f180040a9e122013d5cc39e082b997e3545743bccfb3e62d2006c6d078615742

SHA512
51043ed2b68bd3e69a9baaef63755d47b27cb05515b81fecdee19b8211370e4b93c30932f13e9dabc4c0bfdbb32b25fdb382ac6c11c84281d0778bc7039c525c

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
6b098fcd442bdae4b0a32013f4c92744

SHA1
12fd3afd36c5c5fd90316a8399441989152dd332

SHA256
5e3a7c497ade52aa2ced2173c74de5703010ec50dbcb250a3adedb959d0cf33f

SHA512
2c7d5d48776fd2d115339c0caf62f19884480544868e78764c165006b22f23c1e4e19025cd0928c52e19bd7b98df483e8a752e75377dad5bb0ac6b935347e5bd

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
62cd519df8733c792d2c89b692d2394a

SHA1
011a2e3154a4d40af0b69ba20b514995794aa2c6

SHA256
0da5dd1144dcc6e5f1b039939383ddcebb5b8c3228e67d155720ef76c47316f1

SHA512
0abf8a1540ef5ad2ab934892af568c8d137659e30e2fe0ed2f12762c9872d409b358d29cb76560d78024f6caeb2a499e4dac851671ac1af957953e5c21922ffc

Download Submit
C:\Users\Admin\AppData\Local\Temp\CabEEB4.tmp

Filesize
65KB

MD5
ac05d27423a85adc1622c714f2cb6184

SHA1
b0fe2b1abddb97837ea0195be70ab2ff14d43198

SHA256
c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

SHA512
6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

Download Submit
C:\Users\Admin\AppData\Local\Temp\TarEF84.tmp

Filesize
171KB

MD5
9c0c641c06238516f27941aa1166d427

SHA1
64cd549fb8cf014fcd9312aa7a5b023847b6c977

SHA256
4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

SHA512
936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06

Download Submit