08183acf5e5d92249e6eecf130f123ec34487222b8cf780deb55ab218da91207

Analysis

max time kernel
118s
max time network
139s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
31/12/2023, 06:01

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

2b01091441be9ab5db3c44f50f488502.html
Size

432B
MD5

2b01091441be9ab5db3c44f50f488502
SHA1

ba25b54aac6770122b7089cead0dbcab4fde633a
SHA256

08183acf5e5d92249e6eecf130f123ec34487222b8cf780deb55ab218da91207
SHA512

2070b4327aac64a920687a7851a56f85a09e574e7af2c423a470fcc95b9c34925ba5266b65a04b56a9b40f0d9952fd912cf62408833d26117c9b589a3b637160

Score

1^/10

Malware Config

Signatures

Modifies Internet Explorer settings 1 TTPs 36 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1268429524-3929314613-1992311491-1000\Software\Microsoft\Internet Explorer\Main	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1268429524-3929314613-1992311491-1000\Software\Microsoft\Internet Explorer\LowRegistry	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1268429524-3929314613-1992311491-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1"	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-1268429524-3929314613-1992311491-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = d0e6cb4b0140da01	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1268429524-3929314613-1992311491-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0"	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-1268429524-3929314613-1992311491-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb010000008dcd4c448ce8fb42a8f577f49cde6d3000000000020000000000106600000001000020000000eb2ea7c1036b472a386942c870f613b5334112c3a94db074625f8c1aa6ec2a2b000000000e8000000002000020000000e72562c8da9d2a846662b2f9d51902279cf95831440287411223b6a3c74ee58520000000591afa79cfa468993145fcd4e21194b938c9d9e7e41cbd9fa7f63e6b7614f84b40000000a6ffc52bf8773b6a15af6dc07b3eef4bb3a0cf80995e746d19290d59124afff9462c172d9c68b2f8cdc7aeb80056208af60dc5beb07a7b275421f884e3fe7e38	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1268429524-3929314613-1992311491-1000\Software\Microsoft\Internet Explorer\IETld\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1268429524-3929314613-1992311491-1000\Software\Microsoft\Internet Explorer\Toolbar	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1268429524-3929314613-1992311491-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{84BD52D1-ABF4-11EE-A031-F6BE0C79E4FA} = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1268429524-3929314613-1992311491-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1268429524-3929314613-1992311491-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1268429524-3929314613-1992311491-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1268429524-3929314613-1992311491-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1268429524-3929314613-1992311491-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1268429524-3929314613-1992311491-1000\Software\Microsoft\Internet Explorer\GPU	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1268429524-3929314613-1992311491-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-1268429524-3929314613-1992311491-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1268429524-3929314613-1992311491-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-1268429524-3929314613-1992311491-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1268429524-3929314613-1992311491-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1268429524-3929314613-1992311491-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	IEXPLORE.EXE
Set value (str)	\REGISTRY\USER\S-1-5-21-1268429524-3929314613-1992311491-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-1268429524-3929314613-1992311491-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1268429524-3929314613-1992311491-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1268429524-3929314613-1992311491-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1268429524-3929314613-1992311491-1000\Software\Microsoft\Internet Explorer\Zoom	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1268429524-3929314613-1992311491-1000\Software\Microsoft\Internet Explorer\SearchScopes	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1268429524-3929314613-1992311491-1000\Software\Microsoft\Internet Explorer\DomainSuggestion	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1268429524-3929314613-1992311491-1000\Software\Microsoft\Internet Explorer\IntelliForms	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1268429524-3929314613-1992311491-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1268429524-3929314613-1992311491-1000\Software\Microsoft\Internet Explorer\Main	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-1268429524-3929314613-1992311491-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1268429524-3929314613-1992311491-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "410639589"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1268429524-3929314613-1992311491-1000\Software\Microsoft\Internet Explorer\InternetRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1268429524-3929314613-1992311491-1000\Software\Microsoft\Internet Explorer\PageSetup	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1268429524-3929314613-1992311491-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "2"	iexplore.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
2408	iexplore.exe

Suspicious use of SetWindowsHookEx 6 IoCs

pid	Process
2408	iexplore.exe
2408	iexplore.exe
1884	IEXPLORE.EXE
1884	IEXPLORE.EXE
1884	IEXPLORE.EXE
1884	IEXPLORE.EXE

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2408 wrote to memory of 1884	2408	iexplore.exe	28
PID 2408 wrote to memory of 1884	2408	iexplore.exe	28
PID 2408 wrote to memory of 1884	2408	iexplore.exe	28
PID 2408 wrote to memory of 1884	2408	iexplore.exe	28

C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\2b01091441be9ab5db3c44f50f488502.html
1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2408
- C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
  "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2408 CREDAT:275457 /prefetch:2
  2⤵
  - Modifies Internet Explorer settings
  - Suspicious use of SetWindowsHookEx
  PID:1884

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
4f0f4d515bdcfc7f4d99350ac09dece4

SHA1
d7a66622f1580560a65b1e522e27c91a477c4b58

SHA256
e313417bdee63932c3f0c2f033e3aeb6e82cb2b170ca2db98251532a240342e2

SHA512
3b03b6c064486748533ed050238306a5eb876f006c5613d1b49afb64b4d9c00d77993dd11af2b90c14d99919d5cf69af8457e08630863ba2ede3165df8e37d24

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
4c16f11fe2c88ab5e758bb17525c5e30

SHA1
eb074aedad4c55b0f9fc75323df4d59fb0671dae

SHA256
6bdf4b162d8b60bc55427b5573d8ea5015c15bcd6310be2a2ddaba2ef7608f0b

SHA512
1b63ddf93ee5062281bf4d38e8b8e92dbc4bdc94742e695655cba0cdfb7272667a582f2b60697b37b56d17a2eb946e502c50c80aca3c4213d7dfdb996c991426

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
24fd736bac6dfc03831b8c290b00c8bb

SHA1
7b7d4650be94ba90539c4044f4ed5f0ac9102ab2

SHA256
8ed2ed71978576f7b62b1eea9b84c929abd12613dc324f012226cbf4668a91e8

SHA512
82ec90774c75d6fd3a456f0211655788e49b61a26648c6609fda48c52fc746f1a03d7ed4305344149761a031618cba965d3ca82950121c62714dd2a6d267e4e9

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
987a5efa00a0266b2178e1e846a1d6b8

SHA1
c57ffce1920e031f36092ddc053bac2e38217ce5

SHA256
fbc59016d629543a5aea8e5c3eafefc7cb9adde32d7dedb189773d7899679924

SHA512
7d93c0d0e95f49a2663fcdc7222dba0efc16888056d90c4a56c10c7242bc4e9c48c84b094725d45e59de366a977479211978fea9e012f09ebd817c491c8e0066

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
d3ce783c8bca4e95aaf04b7ca7ea8b19

SHA1
5b6da22f63f670680e57bc629ac2751f14361682

SHA256
e492af6058792fa4673ee2bd347d8c0c0c2b9cecf84e53e26c39a1e8ed00774e

SHA512
c1a5aff5f5c8cfbded9061a72e9ba004d6d59d7417b7c83520b23312bda1e0c6e895f959aab21f80386ca3b26bcdf84104bcc34647177a9d4ce9d01138b449b4

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
58ebacd4f3f819804408d64b6595d604

SHA1
358d118c35de3900e2a17d7f827e3dc9b61277a6

SHA256
2f7ad28266336a515beba2168d1c75a1509b86a136151f11f0a66992750f1e9a

SHA512
7d843af62163800926db1ea1b7182185e34e1f14d2c57be09346f7f13d3044de4192ba9381bc356fa42a796fd170a17d149181f9b333583307cc2f64fea89426

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
9f40a18b165259c65355c9dab9eef7ab

SHA1
18618492dfba7d284c24f93897056c6f97d868d8

SHA256
430575530de5b41338b95cf21210f28aa2b255c62b595f329365bdae8f8afb8b

SHA512
7e9cd7ecfa63dd576a82c8334ba4f9dd7976603be00ee8e9a3b75790b2bf10a2e5e4a6251505f36b8a9e14e92874c730b050c41ede4bc447c07872f5646cca18

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
e982cadc75835bc02a7445e8fb3b44dc

SHA1
ff6e8d0a3c0793676bc5c6ba2b009177a1eefab8

SHA256
6efda57f0b3f5334cb096e03ee996aff5a4bcef30091158b4cd0bf4a9ecffe9a

SHA512
5a4a2b966013db740f3d72d2c63a93662279cf7affd6138ed2e4183949adb9981499dcb45cb882ca0759f7bc03ec4cc41ffda45cfd1f028382c54e74373dfec7

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
44be7a8332d60efc570497ebe65d22a6

SHA1
f1cf74de906b5bafd266ba6a8627d33005c02ddb

SHA256
5c35750c4b359785cace6fb2a55f30f687f7733b85a00424e227850e0c406397

SHA512
8ac540eef7589da5a56c2c6b53d718746c8652707b42248e406fb10373797618107a8fd815222e61b0c5a6a826a8c49bbe9d69b4ddd64763ec052e80cc86ea85

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
beb4aad398cc98362a8ff60efe7e3a75

SHA1
5e9cc863ba18ecc5644fdd3c2d5c6048e66c801a

SHA256
162fcd3698b18ccce4e7358f2267f2c9468be867969c7ad0bda6fdceb90d2048

SHA512
3d8ac0643c82a8dd4910dfbfb939c36c059d799de4bf71b5e517f0ec8ac32f64a0aee0dfabb57c41309c9b36f78799a9d4cdcf49f5d492d86614cdfe05d58b58

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
93d150ab53d54b8b062013a0292b40d8

SHA1
1ec92cc4a86ddd80d77a4d68081c4117c4eb804b

SHA256
5419a10deeb21bf9fed11591dbdcca37a493412e73a8d978ee768dd70ad5c6ed

SHA512
c546cb2f67ca62d8c2d5b1b88d707d48285552398935825cb5a9d0face5d8f6ccfb917de9f4bde58f5d17429505115379fcfd2421344a9d80830b51229461be8

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
a367d71c28611639e02cf30401b1a833

SHA1
4c9fe8bc5cc706ace6c2839de64f3ac0e1d48e84

SHA256
6784c7f3545096f1914def9c79bf0543bcb3d5d283295c2b1daa5e9cee28a6b5

SHA512
05156656f09c3f8eb8e509a5b9f6af0b44b016a7c63f38424d3cb88b301126aafc13c0ff72765fdf048680f24d4b37832314ee937d71753701a4070b009e6a04

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
f09734cd2dad6267c42873b2cf65bfc4

SHA1
2d7edb78a255512178e91c52a0c86d405bc2ce6a

SHA256
13e4b18430058b230f664a1256c944b84068fb5354b50d35d64e03f1b9d5f37e

SHA512
a7771fc0b1f7cafad44122b0d3683152209d4e153b93347230ea3b83e52a0518202597e7f6e3c4c7ff3120b99d8c476ac3599a6ded9d648cd158e347e1e1418a

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
8b229bb5702341b44e05e6ddac287bab

SHA1
081a50299137d69374af06252632a05975d9b818

SHA256
e84fb0661eca914529e0b9ad039135fae479aa9de2fb950281e960af899231f2

SHA512
c88768befe8befa93126339499b32cc00527f5c83f2747080a8e9affc0738a017d7fd44f1bd1f08da8df4f393c5fa2b07ef21b810db47143497c5d458a8fc3f7

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
484078a75045dae596109c63501ba651

SHA1
6a54825a212089579b470a85634a37020fff6695

SHA256
b98046658e32c1c721ac4b8418620051b11d227372fb6ac780beb36462ed55b0

SHA512
cd002797b163b5974b1c31318b117749b21644b438be608b60f05db4d9a507ff0a8d0b5a5a2f67e4391df7f30571410ed35fc1e887a96957dca916a8b6d68b32

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
0e3530bb8bfdc27630d62dca56fa1762

SHA1
8feeb0609e582b79762d3dcec077a94a09a78ef9

SHA256
1280924d2b9d3c36d6e9031f35ae5c35262cdf3e4174282a6b31eee665436dc2

SHA512
5d2424d20fe15d370f0ea81a86a651e8ce4bff35a4d963f1f04bf7768a2413f4ad334e12e78ebd87c6d6c3fb62a9393e38e5c996020b7a19ab424c5dd4c84441

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\imagestore\wz5r4lq\imagestore.dat

Filesize
1KB

MD5
4deed903d513ab531955daecda5611af

SHA1
4747d187cb5595f08db41ada79ab20882f93fa41

SHA256
1be6ea64e287aeb1b30eb86a2b3f4583a3bf3b8f0862e25c052853f9655e7cb5

SHA512
383790cb1d5ebe34f70958bec4043a04498a04a8fbe6fed7d5017d1847256099e2d85b06ea31a8dd826e01a17bcd6b15bd0d3e87774f3d4590e3a5a992d794d9

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\4K0WM73A\favicon[1].ico

Filesize
1KB

MD5
91abe01116ab422c598e9c8af72cf4da

SHA1
0f2815fe8e067d48537ad168225ab4674271fa27

SHA256
b1d7aef06456fe7431124129a28f0138bb5fccfa4f4161e3087de23c005e5edc

SHA512
a4d5b20c3014153b6b382c43404917bd2cb5bd2a59bb1e981f5a19eb7dbdec185ace288e9700428d24e5ac623e45d04905e706f0c45a1642b1aa6c091213c23c

Download Submit
C:\Users\Admin\AppData\Local\Temp\Cab4F1C.tmp

Filesize
65KB

MD5
ac05d27423a85adc1622c714f2cb6184

SHA1
b0fe2b1abddb97837ea0195be70ab2ff14d43198

SHA256
c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

SHA512
6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

Download Submit
C:\Users\Admin\AppData\Local\Temp\Tar4FDA.tmp

Filesize
171KB

MD5
9c0c641c06238516f27941aa1166d427

SHA1
64cd549fb8cf014fcd9312aa7a5b023847b6c977

SHA256
4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

SHA512
936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06

Download Submit