9c09b94e0a3583701ec516f57c268c663012e3d73e2b30b859c605aee820611f

Analysis

max time kernel
133s
max time network
142s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
30/12/2023, 10:32

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

16011ed9f7c17acc378b6f8d8f8fd78d.html
Size

44KB
MD5

16011ed9f7c17acc378b6f8d8f8fd78d
SHA1

c36c1ae1831ece64b82732b1ecd49473169f9828
SHA256

9c09b94e0a3583701ec516f57c268c663012e3d73e2b30b859c605aee820611f
SHA512

7e5594e84383d5907261f9d2f73498059cf6ce5c8cd9997bcf84c71b624e3fc1d032bfc1abac078a32112d2e3432fec4ac2f142e84c434ee0964fc706b56ef26
SSDEEP

768:mwS0l/sGVLsk8ejW4mTNn2oDIelgefgk07AtQ:mZJtlIelge0

Score

1^/10

Malware Config

Signatures

Modifies Internet Explorer settings 1 TTPs 36 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Set value (str)	\REGISTRY\USER\S-1-5-21-2444714103-3190537498-3629098939-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2444714103-3190537498-3629098939-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2444714103-3190537498-3629098939-1000\Software\Microsoft\Internet Explorer\Toolbar	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2444714103-3190537498-3629098939-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2444714103-3190537498-3629098939-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2444714103-3190537498-3629098939-1000\Software\Microsoft\Internet Explorer\DomainSuggestion	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2444714103-3190537498-3629098939-1000\Software\Microsoft\Internet Explorer\Main	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2444714103-3190537498-3629098939-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{BD83E721-A91D-11EE-A62B-FA7D6BB1EAA3} = "0"	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2444714103-3190537498-3629098939-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2444714103-3190537498-3629098939-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2444714103-3190537498-3629098939-1000\Software\Microsoft\Internet Explorer\LowRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2444714103-3190537498-3629098939-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2444714103-3190537498-3629098939-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2444714103-3190537498-3629098939-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = e0fa2ac52a3dda01	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2444714103-3190537498-3629098939-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-2444714103-3190537498-3629098939-1000\Software\Microsoft\Internet Explorer\SearchScopes	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2444714103-3190537498-3629098939-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "3"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2444714103-3190537498-3629098939-1000\Software\Microsoft\Internet Explorer\IETld\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2444714103-3190537498-3629098939-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2444714103-3190537498-3629098939-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2444714103-3190537498-3629098939-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2444714103-3190537498-3629098939-1000\Software\Microsoft\Internet Explorer\Main	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-2444714103-3190537498-3629098939-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-2444714103-3190537498-3629098939-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1"	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2444714103-3190537498-3629098939-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000b0720b1d8642c344adb870a2e91786640000000002000000000010660000000100002000000082eadb839040be1bd68783a0177b966d8a1002365bc527d8c0682d7dd58a8f6b000000000e80000000020000200000002fb0ebc63cb57f5f224765a92cea034dbebc3491980a8cbcd03a184d9905362420000000b30f2775c3833a7f4955f9b1cd7ce50d7d0183080e83a324118882664cedddba40000000d6aec11e6f58b1a8d805342c75e579c0866fdf7ad9f94721c36a3f5ea7ee5545c456c1eec07167c60a662e3559b17cbc6108fad4b2c0304dab448532e036e0c3	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2444714103-3190537498-3629098939-1000\Software\Microsoft\Internet Explorer\GPU	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2444714103-3190537498-3629098939-1000\Software\Microsoft\Internet Explorer\IntelliForms	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2444714103-3190537498-3629098939-1000\Software\Microsoft\Internet Explorer\InternetRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2444714103-3190537498-3629098939-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2444714103-3190537498-3629098939-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2444714103-3190537498-3629098939-1000\Software\Microsoft\Internet Explorer\Zoom	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2444714103-3190537498-3629098939-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "410327441"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2444714103-3190537498-3629098939-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2444714103-3190537498-3629098939-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2444714103-3190537498-3629098939-1000\Software\Microsoft\Internet Explorer\PageSetup	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2444714103-3190537498-3629098939-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1"	iexplore.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
2448	iexplore.exe

Suspicious use of SetWindowsHookEx 6 IoCs

pid	Process
2448	iexplore.exe
2448	iexplore.exe
2820	IEXPLORE.EXE
2820	IEXPLORE.EXE
2820	IEXPLORE.EXE
2820	IEXPLORE.EXE

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2448 wrote to memory of 2820	2448	iexplore.exe	28
PID 2448 wrote to memory of 2820	2448	iexplore.exe	28
PID 2448 wrote to memory of 2820	2448	iexplore.exe	28
PID 2448 wrote to memory of 2820	2448	iexplore.exe	28

C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\16011ed9f7c17acc378b6f8d8f8fd78d.html
1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2448
- C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
  "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2448 CREDAT:275457 /prefetch:2
  2⤵
  - Modifies Internet Explorer settings
  - Suspicious use of SetWindowsHookEx
  PID:2820

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
f1dadd8b50b4d398ea45fd77dfef94c3

SHA1
15d1c56fb50df8370143687aba2ca925573a3d5d

SHA256
2ae0deabfbf46b0b484943f21c8cf43822124f3c82ad98bef0bc91517aac4ef4

SHA512
a5c81864918e4457093b56591bc862eb2a067fcc1ad00090e9e84337d2210051d0f4fac86924e4626b31058deb02abe7057b2b28c28bcca630ff56d08f769d2d

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
d52fa01ab4ea0b892521539655517462

SHA1
2194b7fa04e4cf94f6caecc43cfc008e953afe6b

SHA256
d31406ed35ac2a554ebd9cfc7f99fbcbf2056fd36b9a94ecaee64bb5617be6b5

SHA512
2b59589c513c0260c71e16580c7c675aa47644648575e34f6d15e794d059684e2c61365f589ad4a30d4de19a4fe73e6e423888dcb4f0d6dffa6aa00f74375d1a

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
2a5c890858fb7c321e642afbb7434e03

SHA1
420fa692f338a1fdb7820ce130fa187c0b50de7f

SHA256
766dcaeba3f794379081f458127a4a7d40613377ca541287c92ce4d04b46dcc2

SHA512
615e8619234ea412fb74caf9938e89557354b44bd47d690d2022540252dd96c61f95d6b7ae862e89fb190aaa9e4f3641287c5371d6591b84aaf68c236f6c3d0a

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
21f442d17bc0b8d8efa57ef25536a892

SHA1
ab68fa3e91349793f89c74302eaa3909b835b652

SHA256
2534509e26aa44124f2f77d7ad525a255aed8be3086cd70f06cf3c1ffe1ede02

SHA512
9855a9225096fc227638ca65161eaecf127564d3dbafaba92aa755d6e50933760ff2dda970397cc89ac885d1a7d9d4258a381c97723ad125f39e42500b667bdc

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
53e51506a10afa1cbb27617dbe86eec3

SHA1
c45926c22e32e25f889a4810dac766d77039a9b3

SHA256
54db748d998e848feac7c8a6609fa2e653cc9d26161345d32fd2c0ea5da2c277

SHA512
f875343a68a5688f3ea5ca0fe9b3585442e591bf03dccc32820af4867cebd15d2c65c201e69803d539c1257e16fc4f321fcb7c5fd7b27893d482b18923a67a54

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
7776674a786711253b83e552b4ae78af

SHA1
ddc21cbce76ea45fcc48972ae270c39c7c2a986e

SHA256
3f942c872e4781cc455cb486e0ef971494cf5b74b206940f75cdf12717f7ca0e

SHA512
451521957218171d3340f87a996db5b993bf0b842ba6205ed7e396a52a27c92e1341e14389c6e0d6c9e9253b9df487d1068c116ef3ac99ad6cbf712f892a226e

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
846e579d3352788ad3cd1eac3709f441

SHA1
d3327229f107c60a3d6da0e3bd97bb4a2c853737

SHA256
3423419c98cb0d58e7b11dbfe9691ed28416295131bbb0b1d7945e70479592d7

SHA512
b4be2739aedacd068456420bb3325e4173f2044d63f106bdec8b74119b7fe6d81b0e209bccf5af777938390d99b6794cc315820f289ac0ce4259a246af8bee64

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
7c69bd4732ee88028c7b2b668111a4d8

SHA1
af7f529f3682b3941e5e3b0f859158ca6c37edfc

SHA256
c58ccd1e01cd168f3425d9d73188a4d3511e795885ed7dd996757d8ddc0c8986

SHA512
2a4708b45f5c8884a4ec5a9dd2d3082f26948fd3e71a306fc6631a79e80f70e2f9d91c1d89773443c48fa581f6ab510b13773e8514d4f784838273e0bf3e0339

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
8ba5a4e90eda770e46bb8a660aa12df0

SHA1
3227a037900b6c382ddda83a5a23f94d332da9a2

SHA256
fe41f626ee4394a688d944538a4852c57aed9cfa6bd57cc5e0716bf0d26e7737

SHA512
b7ee392b4ccaffac6f14d2dfb3229a6ed7da99f662e92d6e8678b0ecd52e67f30b5aa783007bc541a0bddb3791138a4b9c7f28d79f0f4f94a815ee2992c121b6

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
70a2c89776ce5b164ec5914513f6a770

SHA1
e8e57d83753b096b0bfbd0692fe05a347278442c

SHA256
6e879228fac3288b20a098fb12818c7527c5cf3f3aff4346a20a22b66b303dea

SHA512
ebad3f756b8145441e63f9a3e61410fbcade094709f35334a05dd5eb54cddf76023de05249321081b9d141ddaba5377b72af86681eeb76333457f8b76de7221c

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
aa8ee2dee06a54679dbab61371fde3db

SHA1
fe4280eecb372fde5f4a1abea1b7ffa1316b8ec8

SHA256
b2588af6a67a704384aad29895693ee1e9b005d63b6ef13e8171ad374c9f2c36

SHA512
5ecab9b4f246232e4939789ce86d29b154812887a97e20a8b2d2deffd968330daa9f345b00211632e8d552c9d2cdcbbf0f31673d11138054672e501850e87ca4

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
b938ea96b2c81c48965b460b0d2165dd

SHA1
8ad795bf7711004d81624c4fe71226ba5a2cc648

SHA256
caa83f7a94bdb3f7609c70ece63a81a17dbfb19c33589aa2813433cdd7302465

SHA512
eff0c16d760315802a3d739c6cbb8cb0da77bbd7de4cf44eb03c6f36c76960dfa41a57ff3d3ce947c121841a4f4f057baf22d3f02d60797f53d74c67b8bc6e9b

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
753b996448c1bb843f960a3d2d5514dd

SHA1
d5245e9edd05602a544c1d74271a7b5f0b48160e

SHA256
4eb9f8ba445d662ac5934551f93ea02829d5161fca81f732933ee1d9d00f07f1

SHA512
b5c54b0df9fb9d35fd5fdcf0d452987bbb4955ca226a2eaa1f54a42dcca83e7340807de94efa0e9398b9fca0ea178ca29648d2b76595b9fbf3e2d547717f6648

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
afe9cacf2c030900af6f1ff62679846d

SHA1
0fefd908561622ccc9ed1c243c56ab96aacb4f4e

SHA256
b4059aeab4227dc481cfdc159e2d2b7f17e003b0ca670f64c4425136ec1a7a29

SHA512
75e57287ebc9de1a4cb7cc9855e58cb662a36ff025e8e7e58513e841a56b690fff76c34a7174ce905767aed3afbe67bcc7fefd1e8decd6985ece49536aeef731

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
872539aa6e1d0bf346b408676ff10b07

SHA1
398ac643fb5a5e1c494c1587ebbdba7bd8a3693e

SHA256
66a0a1330bc2f31619226213d33544ac49f84ecd62980806144f5b4e83f31332

SHA512
d304163544c44ec9e8fcd34f0efbecf453fb3c8227efc42b88970eb9cb1de10c4fb9b04168587a9bbe13f4c682de60a7aff8481f77c2961218f11c903b372c62

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
a9c5ef6c299b6db3d02ec57ec0dc6bce

SHA1
0cf9a1aa6bfaebb543229369cf26928e3138253b

SHA256
4196a5c3d6954111a69976298711389775bb426894e6bb108ad8cef7a0e0d878

SHA512
21d4691106135110355ecedd8474670791f2d2a6dc7dbbd3196d3f0af6cdf128684819a04ef6348272b929239dc8e2d21c046cacefbc30a4880e217c46248309

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
6be8cd0bdf9dff4330fb14510d6f6722

SHA1
0e0b21d262e6c6131fe051f523ec5f04845b7091

SHA256
7f52926f129e9600b1e7eeea65ccb29dbacd6fd527dfcaa9b629b7337cbaad2e

SHA512
86ac644ceec314b963ecb7733834b274e57a9db116d33159cf0b256b54712445f1b126c74862933aa2e836ab87ed16ebf1914d023b6bde111077bceb1662f9f1

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
299c966876712836337d01436938ebb4

SHA1
63f21af5557cf7a9cb67643b63f0030e08fcbc36

SHA256
dd5dd15420ba4ecb640be17361867038d6686eb7e896cfb2a349b353e0a805e4

SHA512
b61870855c39e4a86dde975a07887b31e35afe43290575cb04ca2e655b4d8a1d7a7702ed2d2873b11b5f6010ebda9d09bfc4db98b67e31be0b88a6faa3d72c5c

Download Submit
C:\Users\Admin\AppData\Local\Temp\CabC801.tmp

Filesize
65KB

MD5
ac05d27423a85adc1622c714f2cb6184

SHA1
b0fe2b1abddb97837ea0195be70ab2ff14d43198

SHA256
c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

SHA512
6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

Download Submit
C:\Users\Admin\AppData\Local\Temp\TarCD91.tmp

Filesize
171KB

MD5
9c0c641c06238516f27941aa1166d427

SHA1
64cd549fb8cf014fcd9312aa7a5b023847b6c977

SHA256
4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

SHA512
936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06

Download Submit