0b8ece4628aff0c4ea539524385ed3055030f458b28cb0bf98d320ca7a81e820

Analysis

max time kernel
146s
max time network
147s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
31/12/2023, 07:03

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

2ca43a41fab7b6665fbec3a92c2da671.html
Size

123KB
MD5

2ca43a41fab7b6665fbec3a92c2da671
SHA1

d844bbeac8048d729f34a67b3d2ad90b8bb5c144
SHA256

0b8ece4628aff0c4ea539524385ed3055030f458b28cb0bf98d320ca7a81e820
SHA512

38e29e1521f98deda3ee9ecad319935f921d1d055f057bda4d8ae7264a7a527d3011f6c3005223fedb71586d76d58bbeecb8cf5c59fc1552197e36e34a4b35f7
SSDEEP

3072:Zl/bJVq5R5MqQke5SJ/Tnh5LUDm1jlrcnsVX:K5R5MqQke5+

Score

1^/10

Malware Config

Signatures

Modifies Internet Explorer settings 1 TTPs 36 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-3818056530-936619650-3554021955-1000\Software\Microsoft\Internet Explorer\IETld\LowMic	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3818056530-936619650-3554021955-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3818056530-936619650-3554021955-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3818056530-936619650-3554021955-1000\Software\Microsoft\Internet Explorer\SearchScopes	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3818056530-936619650-3554021955-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3818056530-936619650-3554021955-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3818056530-936619650-3554021955-1000\Software\Microsoft\Internet Explorer\PageSetup	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-3818056530-936619650-3554021955-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000969d72c3e5a03a40a0257479feadc03a00000000020000000000106600000001000020000000d5de5a7b81dfad8c549f571724b1a16d7ec7ae14fce381bfb884ccaab576a368000000000e80000000020000200000008d70bff24446486a8d4ba8feda75997146bb2968a4f2dc8714a2b1f63c923076200000006c47de1afa7f71322b5f8a7768dce16e883a810430ca974875703d9b93b3b767400000003904736f757c61c2c98806841ba67bc2b0605cb78e08a47fb064d793832a9945e3360e011e8c88edaacee4248475eba872086c09abd261b0ecf9bbda4b2287a0	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3818056530-936619650-3554021955-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "410650416"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3818056530-936619650-3554021955-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3818056530-936619650-3554021955-1000\Software\Microsoft\Internet Explorer\InternetRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3818056530-936619650-3554021955-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3818056530-936619650-3554021955-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{BA2CF1A1-AC0D-11EE-AB70-EED0D7A1BF98} = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3818056530-936619650-3554021955-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-3818056530-936619650-3554021955-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3818056530-936619650-3554021955-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3818056530-936619650-3554021955-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0"	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-3818056530-936619650-3554021955-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3818056530-936619650-3554021955-1000\Software\Microsoft\Internet Explorer\DomainSuggestion	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3818056530-936619650-3554021955-1000\Software\Microsoft\Internet Explorer\Main	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3818056530-936619650-3554021955-1000\Software\Microsoft\Internet Explorer\GPU	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3818056530-936619650-3554021955-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3818056530-936619650-3554021955-1000\Software\Microsoft\Internet Explorer\Main	IEXPLORE.EXE
Set value (data)	\REGISTRY\USER\S-1-5-21-3818056530-936619650-3554021955-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 309536a01a40da01	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3818056530-936619650-3554021955-1000\Software\Microsoft\Internet Explorer\IntelliForms	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3818056530-936619650-3554021955-1000\Software\Microsoft\Internet Explorer\Zoom	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3818056530-936619650-3554021955-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3818056530-936619650-3554021955-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3818056530-936619650-3554021955-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3818056530-936619650-3554021955-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3818056530-936619650-3554021955-1000\Software\Microsoft\Internet Explorer\LowRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3818056530-936619650-3554021955-1000\Software\Microsoft\Internet Explorer\Toolbar	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3818056530-936619650-3554021955-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-3818056530-936619650-3554021955-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3818056530-936619650-3554021955-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-3818056530-936619650-3554021955-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "2"	iexplore.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
2516	iexplore.exe

Suspicious use of SetWindowsHookEx 6 IoCs

pid	Process
2516	iexplore.exe
2516	iexplore.exe
2820	IEXPLORE.EXE
2820	IEXPLORE.EXE
2820	IEXPLORE.EXE
2820	IEXPLORE.EXE

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2516 wrote to memory of 2820	2516	iexplore.exe	28
PID 2516 wrote to memory of 2820	2516	iexplore.exe	28
PID 2516 wrote to memory of 2820	2516	iexplore.exe	28
PID 2516 wrote to memory of 2820	2516	iexplore.exe	28

C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\2ca43a41fab7b6665fbec3a92c2da671.html
1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2516
- C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
  "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2516 CREDAT:275457 /prefetch:2
  2⤵
  - Modifies Internet Explorer settings
  - Suspicious use of SetWindowsHookEx
  PID:2820

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
bffbe5a4efc7021fb067be4265e9eca5

SHA1
1f2a830a0d2e6a5160eddb34607c800e621f81c0

SHA256
cb3334af67e61b28dcc9b48bf9d1f666b034026fd98d846062e30483326a9bef

SHA512
af3bec724c075a90f9d121c6104ebbb4799e887cdd7029c973a05057baffd469a555f916cc15ca3be152f07d7250dad87bdbabd43e74c24b4de8a652f7b2f1a2

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
c5da5ec62e6e03f8466ea0c71fc434d1

SHA1
a9e8d53cc3dc5632887b0d806e566a295e2cfc10

SHA256
23b46ce03bd2dce3e1c29d828b0be0e02f7fbe44d824becb6e906201121e375d

SHA512
c9eddc7f9bf57ba6ab017a3c22b6d706928d1f721b08055f0345b565e61edde143bdfa6c8ae6f9ee6009ea59375e17337cccdb8245e1fb0ed536c668469ae442

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
263b0c3fa5b2c2c893bbe2d30c4a7f16

SHA1
4df6efc82cb79a664978b67057be4e3598bc9965

SHA256
1ab2289fefd807c867fee705132b8da56fc929a80e501eece0ee12b453bb923b

SHA512
2750cfa8642455629012dba376f3a0b9899e62682c0fa654cd47b14bd9e31f30fc54ef8b4f1c8165b79445fc1e66268fb906e3cb157b8dd6390a43e87f981241

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
b99434f0426d193088246b4cadbc6888

SHA1
03995c2535811ce426ec78778bb98f45524b2d50

SHA256
5f7160d1c53a00018321a545d5d4b3e70c7c4b011bfcb7fede9e8c4ada18a038

SHA512
d1b244622685ba26650bf778aa682a151ac620c40e58b990f8240e51067ca604699e7dddc2facbc12a5f01c9f8ef9ada64b6ff17739c79b7bb4e861715701266

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
aea58292ca54f930a88e77bb2759e9c7

SHA1
cfc8462fe99831e88a240f80fb164850947fa125

SHA256
698fac4cc85580aec4ce28e630039b7606b5aa27b62d5dcf9b005b40d646340c

SHA512
4d3e370c5de8183df739d3db8eaec2f9263ce0b57348e28d11f69158946a090f95827dea70ea1d6d8a88a426e416329290b3dc6a6295ba63aa8eeb75bb6b3907

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
dc15938dfd2bbd9e633360895d9f25d5

SHA1
c45421e08194e094911ffeff04678cc2b56ab154

SHA256
6e4fe13452edd51f99f50aa3033d2cce5f60f56b82835556af7f118a064b5b1a

SHA512
c96296b2c64bce17dd475ab0ac01196be9e650d19283ab6e7617f2b7da5cd47a45d7d1454216a51cd6448c6c814f4cdbb4cb97d0eae60303c68c2d4197138614

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
9e31850185825966fb57dd01e9dc75d6

SHA1
958a5d36e4ca67e358715d9b13161c9bfee92db6

SHA256
af20ae135943d1202376fbde6421b0fb533e216dd2145d740cb6fb1b264c84ae

SHA512
d06fe6d19f589b64fd72518b6bda521d3c6e17401174df398287113a9726b880b15f3ebb8f9b2dab902436121a0d1cbfe7828103c7328939d72622b47573d12b

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
5e3be5414fc1275d0bd7ea1fdfd1697b

SHA1
2ab3855ae8a67f5fdfaebf54124520271af9e107

SHA256
f9d3ec8200c0222f65393fc18d09b6ac7a4160fbf259d2acc3107ab106be6247

SHA512
8a94251745f31c449933c355dc50604530faa5713f69c544ba2e635ca88d664b8fe15504eb986b93b9eb23782de6ab456738ab566f3dc011572dc479869ab131

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
33895d05878dce4eb74654da0a33ee1a

SHA1
81e53d2552d827fdd706a0a2c8551df4c3aef90d

SHA256
3b155d2353ca758508e48a5b252a2b0905df1dbe3f7c984824ffd0715a2f3280

SHA512
3c6578581fcb74ee99eb070c14b924cbcc484c6a52ddf0aa50a3b1e6630c7f6107c609e116d1e05dc3ca9041d4a8c5cfc02b86fb0fea74173847e41f8bc68433

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
3e90ef66a34adebed50cf524e95f6c8f

SHA1
65154c7c76f6f485d2d9d6d256e28345ebbfbe99

SHA256
729c71e12575f8a42c431a1eda09345126f044ec3b5a3a64e6bd3792d0121255

SHA512
dbf14e7c268f3080b0306648ea22067adf4d1cc56db1e20bd33694f5bd70542d977585f671ab52a7f7b8edc12f95f5541c538c89ac4cf7e3715864206b67ce42

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
edd6110e6dd181c279e2e00238c82645

SHA1
98d220023d5a2d919af021f0a595451de1fb89f1

SHA256
36b303ae616245c2efceb1a135c981b4752f2843c9311408da46c3c2e252bd68

SHA512
f4bbbe73f0346dc4aca9b7e100aac8e13b63e969719a7500a41483024d157852976ac23fb81a8281a7cd1fef71b3a6f1294114eee68dc5cecbaecaf6720ea386

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
c0525ad1061154151acf43527db2cd3a

SHA1
568cf2cd1d7bec0c6ac37b9c809ab0bdeb558da3

SHA256
75121c8752b9005b8c952b2f4ea08bd502fbf2b1997fb5ee04bf18f7f46e358b

SHA512
c4dc47499782f91db74384881a2f030c6d8c63c89043b1aa63e8030bf63336bb5ec97c5fd94c404c6ea76d271d9ce30b297d099bdcad08b19d66836345a0021e

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
58dc72156073a73086b6e753738406f2

SHA1
5243f5b44985911333673cbafc5ecaceab65f9b0

SHA256
370fa14e5f87a3b4b7c0386c384461806550fab569bbec7362c83e002ce5cbf5

SHA512
a64b160b3cd48d29dd176fdafff0377c78055dd1f87920bf1aa47e3de3eeb08572138305036ab9514ecd7b9ea3c8c04939e1c1c51af2b2012454f238782a6414

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
079d963c590ed2a3ac90eba9f174f3c2

SHA1
c2897c956cb65ff650d61d7d4f6c456a25376d7b

SHA256
bf25c24e4a4243ee39891aee6fc4cb350d73174b46ffb20ca64badd3c8aeabd7

SHA512
c333a944d88fac8c291ffefafe285fea6cebfdd426d5065f02e5274fa9711804348bf87d7758cfd87406311eed96f2dab7d909068b34a04e97443962acb17e63

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
3865acde312140d82a9b64056510a73b

SHA1
94510af428408288fe17b73de0c20c4c2be14a70

SHA256
412eddcb134fbe838074d2ec1b01b01fdbcb124b22b81a881fd06f79dbb21d31

SHA512
f2665dffb29ec114a6be8a132a9a4a64948fed7ec116c8f005a5197015eec3242a6a267be11a8727cc184c99e4890606db376a1b02b4963d23c1c13073c09eda

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
c989ba94e94df524a850b8d87e1cc2db

SHA1
89a6b380dd4e0e3e6629376014db52805a4a4aa9

SHA256
dcebcf3be0da7f229a1ba52cb7876cae8980934c6f5f2d38bd0ff0f228d873a8

SHA512
438d04beeaf9c5527a688115d0b4fb9d5a56ee45963c81eb805e712b5ab782ff00e23d27e519792590bf0b3a9d06d0437b41686dc26141f2f9dfaf7aa4c50b27

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
b108cc6061c66439b4f3cd7c50a86fb3

SHA1
aefb3fbc326d7bd1b70185666ee6966cdaa05645

SHA256
3515a861ba7bb1921769ec710db819385438aadfd78de749766a0c6ab1159fe9

SHA512
44ee736f8b9cb2d228466d0d59f840dbf06ff4fb5d5e1f5d7ec9835ba3ab58f8b65c945eccafdfba50b09e8be78e47baf06c13db7a4ea1b79e8c2bf7c3041950

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
1c87120d1185608f1d148c892b53b27d

SHA1
bb700ae510942ab3341b26805d954fefb067430c

SHA256
4d6ad89eb342dced07cefcc94be6202554b8cbbd1cbba98faf5818f9f150dca3

SHA512
a10b99d27747c8fc6c2607013bfd6222ecbce050ee2bf6c0b759c416c7399e0db34346c4271c527fd61a1e0c417377862fc80249e6366bf8faef13e3a672b4cd

Download Submit
C:\Users\Admin\AppData\Local\Temp\Cab1EC9.tmp

Filesize
65KB

MD5
ac05d27423a85adc1622c714f2cb6184

SHA1
b0fe2b1abddb97837ea0195be70ab2ff14d43198

SHA256
c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

SHA512
6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

Download Submit
C:\Users\Admin\AppData\Local\Temp\Tar1FA6.tmp

Filesize
171KB

MD5
9c0c641c06238516f27941aa1166d427

SHA1
64cd549fb8cf014fcd9312aa7a5b023847b6c977

SHA256
4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

SHA512
936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06

Download Submit