92c3c266606723ffa32f6f3d0b713ce9c82fa6fd8d40793899e65713cf9e8bf8

Analysis

max time kernel
154s
max time network
168s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
04-01-2024 00:25

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

3f6c407c2804c57c5f5c682a74b8c98d.html
Size

71KB
MD5

3f6c407c2804c57c5f5c682a74b8c98d
SHA1

11d03d53301178e96be3e585b22a06c11f0b0730
SHA256

92c3c266606723ffa32f6f3d0b713ce9c82fa6fd8d40793899e65713cf9e8bf8
SHA512

e827a393c48454b21e718a8207b38c1c5071748e80bbb19861b81890f938e89efabee3e988a2ef352fab19de3098c61c99c3490c906bfff8df6c6d25c1efc8c6
SSDEEP

1536:LPme8fFMwJMw915YAprkF37oL/8Ian3OEvh6MoAZFThCT9yc24OXyU:D8991UIanSgCT9yc21

Score

1^/10

Malware Config

Signatures

Modifies Internet Explorer settings 1 TTPs 44 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-21-452311807-3713411997-1028535425-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{EB16D5F1-AA97-11EE-BD45-D2016227024C} = "0"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-452311807-3713411997-1028535425-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-452311807-3713411997-1028535425-1000\Software\Microsoft\Internet Explorer\DOMStorage	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-452311807-3713411997-1028535425-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "18"	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-452311807-3713411997-1028535425-1000\Software\Microsoft\Internet Explorer\IntelliForms	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-452311807-3713411997-1028535425-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-452311807-3713411997-1028535425-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-452311807-3713411997-1028535425-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-452311807-3713411997-1028535425-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-452311807-3713411997-1028535425-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-452311807-3713411997-1028535425-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-452311807-3713411997-1028535425-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-452311807-3713411997-1028535425-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-452311807-3713411997-1028535425-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000429d3af34477a14f8b2dd769173341890000000002000000000010660000000100002000000075077e4b9da0b7414e67d4cf4e1ba1750e4ab9ba0147ab2f4b6933a8891d040e000000000e8000000002000020000000d19a783ebd6dea5858d8651a933d6c47ea02dc4c22e6cf72444d947804448e16200000009e8329a40a5521946cbf388f80a4fd9aae8e412c145aa8fbb2ee5adf2810791940000000888762bd8a91a69549d2f6125ed396b30bb421a0fb670ea47be4c4619728a4858b3f19fc5277d570eca8cff7786c59679a03207db821854d2ab7f718a300a27f	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-452311807-3713411997-1028535425-1000\Software\Microsoft\Internet Explorer\GPU	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-452311807-3713411997-1028535425-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-452311807-3713411997-1028535425-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-452311807-3713411997-1028535425-1000\Software\Microsoft\Internet Explorer\Main	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-452311807-3713411997-1028535425-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-452311807-3713411997-1028535425-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-452311807-3713411997-1028535425-1000\Software\Microsoft\Internet Explorer\DomainSuggestion	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-452311807-3713411997-1028535425-1000\Software\Microsoft\Internet Explorer\InternetRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-452311807-3713411997-1028535425-1000\Software\Microsoft\Internet Explorer\LowRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-452311807-3713411997-1028535425-1000\Software\Microsoft\Internet Explorer\DOMStorage\google.com	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-452311807-3713411997-1028535425-1000\Software\Microsoft\Internet Explorer\DOMStorage\google.com\NumberOfSubdomains = "1"	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-452311807-3713411997-1028535425-1000\Software\Microsoft\Internet Explorer\SearchScopes	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-452311807-3713411997-1028535425-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-452311807-3713411997-1028535425-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "410489870"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-452311807-3713411997-1028535425-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.google.com	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-452311807-3713411997-1028535425-1000\Software\Microsoft\Internet Explorer\Main	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-452311807-3713411997-1028535425-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-452311807-3713411997-1028535425-1000\Software\Microsoft\Internet Explorer\PageSetup	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-452311807-3713411997-1028535425-1000\Software\Microsoft\Internet Explorer\Toolbar	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-452311807-3713411997-1028535425-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-452311807-3713411997-1028535425-1000\Software\Microsoft\Internet Explorer\Zoom	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-452311807-3713411997-1028535425-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no"	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-452311807-3713411997-1028535425-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = e05856c5a43eda01	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-452311807-3713411997-1028535425-1000\Software\Microsoft\Internet Explorer\IETld\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-452311807-3713411997-1028535425-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-452311807-3713411997-1028535425-1000\Software\Microsoft\Internet Explorer\DOMStorage\google.com\Total = "18"	IEXPLORE.EXE
Set value (str)	\REGISTRY\USER\S-1-5-21-452311807-3713411997-1028535425-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-452311807-3713411997-1028535425-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-452311807-3713411997-1028535425-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.google.com\ = "18"	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-452311807-3713411997-1028535425-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "3"	iexplore.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
2892	iexplore.exe

Suspicious use of SetWindowsHookEx 6 IoCs

pid	Process
2892	iexplore.exe
2892	iexplore.exe
2848	IEXPLORE.EXE
2848	IEXPLORE.EXE
2848	IEXPLORE.EXE
2848	IEXPLORE.EXE

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2892 wrote to memory of 2848	2892	iexplore.exe	28
PID 2892 wrote to memory of 2848	2892	iexplore.exe	28
PID 2892 wrote to memory of 2848	2892	iexplore.exe	28
PID 2892 wrote to memory of 2848	2892	iexplore.exe	28

C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\3f6c407c2804c57c5f5c682a74b8c98d.html
1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2892
- C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
  "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2892 CREDAT:275457 /prefetch:2
  2⤵
  - Modifies Internet Explorer settings
  - Suspicious use of SetWindowsHookEx
  PID:2848

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\103621DE9CD5414CC2538780B4B75751

Filesize
717B

MD5
60fe01df86be2e5331b0cdbe86165686

SHA1
2a79f9713c3f192862ff80508062e64e8e0b29bd

SHA256
c08ccbc876cd5a7cdfa9670f9637da57f6a1282198a9bc71fc7d7247a6e5b7a8

SHA512
ef9f9a4dedcbfe339f4f3d07fb614645596c6f2b15608bdccdad492578b735f7cb075bdaa07178c764582ee345857ec4665f90342694e6a60786bb3d9b3a3d23

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\C7E33B76686E2748B0A4B6A43AAFCC2D

Filesize
503B

MD5
666233b834bef6cf5bf65d5f950ec3f8

SHA1
8b4b69e4f12677abc373973ebb21c633afb16701

SHA256
df50857810a576b91699f95796ac48cf6c48a977420bc249cd08241c74cd5f4a

SHA512
9eb79e95bacb3d6d37a5693b70ba558023bf3f43a3f3477e926d85e3e22564fa82be5294dcbed44600864572767e0dd51103978da020ee6447916bf35a32ae3f

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\E0F5C59F9FA661F6F4C50B87FEF3A15A

Filesize
893B

MD5
d4ae187b4574036c2d76b6df8a8c1a30

SHA1
b06f409fa14bab33cbaf4a37811b8740b624d9e5

SHA256
a2ce3a0fa7d2a833d1801e01ec48e35b70d84f3467cc9f8fab370386e13879c7

SHA512
1f44a360e8bb8ada22bc5bfe001f1babb4e72005a46bc2a94c33c4bd149ff256cce6f35d65ca4f7fc2a5b9e15494155449830d2809c8cf218d0b9196ec646b0c

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
cd1f5f1c61f81716fcae66e9b6b0e68d

SHA1
3a270f7b5d83b1e166242a530b401462f11b63d3

SHA256
f8482a448ad446247d15b10848b2e25aedb097d7cb29b82b341d4da4ca397aea

SHA512
0b8028cb41e8eef2cfa84a221ca5d45a5320387139ebe8ff4641d5dae736410c2c89c38b3c9d8bbe9e35690f48e520ce2829849d02b3efaa33992bd379ed7872

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
b3455a0ca81b8e5b11fef32a91a8f128

SHA1
0ead48be7cb290d4cdb09d3f2dfa5ecb7cba1812

SHA256
318429c8e2254929ee26ca184ab716c77f2b3c3c316e4be8c70e6d7ab8ea85ef

SHA512
9d5d72f66e5a64fca614c4c1df0fa290569805c480ba2b9b74eccf39f8344b294be0f96068b19cb207a8df03801a84f0ba93549527544e3877d4d4530f8d3b85

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
5e7988eca50fdcae1242217b9aece590

SHA1
d57a4609b1280f5fbb9fc0af9cc10b7802391620

SHA256
3bbba1d6d48b17ce42950b96251e1797e8592d50e9b87f6e40e3ac1e45000dae

SHA512
7efa86d1c3c2bad41bab34d88d4dabf32a300d6de35de86bf590f6780aa8072a3100c7f5d23e1bde5d7ea4179c2eea9b4064f50aa55bc4c8878982ded88c9e57

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
5686321e633d5558e910f9cea19b4bd9

SHA1
6cbe04039a7bd5ee90f5903ff1be6ddc9be9efac

SHA256
8673534a566d82a8fd554a762851e5ab138b26563bf449fa6a64ebd0dd705727

SHA512
574f471de684c2f3aa98ed5ad28fc3a28dd2904d47930ab5ca35e347c248effa685c1525e7b8191092cd2604fdb7358bdce99548da1710ae6bc7996a33df0449

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
7420d4c76e2d64235b73320209d84e0b

SHA1
b9be7c8368869bf45dac2d7cba1874eb818df796

SHA256
5ecd146d77d2448481177a416dff81fbd62de06db7aaee62a0afceb511a9af78

SHA512
079d7d9dfd6f8f1a7d38561d5ca304792c96d9a81478f6e1082194f817a86a5836f4180fe94e11a866f0b6db204b11b3a896512b331fbcadf6735a054940df20

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
c7b6c1b0cf72b31e980a7c862d1e8335

SHA1
0de9a9fc375734ac90bae9f75c438cfffaea5bf2

SHA256
10b9f72fe51d55dacf034a2ea01be901d066ef587d3cafc67c8ab5112e43c926

SHA512
48ebae927648b7b4f9be52133b37ef7438e3e86a2ce393c26922d04e08f91f74e65c4c4e7527cbb95c20493c6f72e76e613c90544fd843ec433b16735d968d1c

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
09900ae4d73844070a4fa2cd848b9d64

SHA1
4ee2ec06aac63d17db51ec9cf13f6306106c8baf

SHA256
32f832aa86b2b4b0d674ba8b5d4c74d378f33d685437f3ad55a1a10ad599974c

SHA512
35625afd20a631ecbe33c5cd4ae6038dd9fdef77d1e8e5de4cbf342847053481eb4afaf7aca61b45e86acd811e4c211cbf051d757c16a195f9accb05b4cbb5ec

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
7eb55f4f4281942dd160b40bf5068ad0

SHA1
00e33fe22ed63ed364b6f0b4a453fc8b11b59573

SHA256
2869ad916d7bb0b0a40553645af9ab09ca43e4c83542f489878e3c684b2de6ec

SHA512
0487e44363cbfa86ecd31d31ffb0a4c3fb961a682775afd7e591a31b607eaee74ed178087c2e9859b9ef21d2a37b68b972944ffef42c15462c43a53ae606dcfc

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
aa7cc36a4105a36c3034294494fc7fe9

SHA1
cbe94360a4d30c6efc0b754362b131d4ec24cc48

SHA256
60cce3e598adee4bf7498cd6d66578665f859e8d0c24fe3d95179c2f1cf5e156

SHA512
9623f7c9feee5d519fa975509ce19da82f77c149706e617feecea07accab5c50f5c6496cca90429094df398ec68a31130330cc528a2f3dacaa60bffd100b07da

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
17f2db96c177049fc97c514f429ae4aa

SHA1
83fb2fe4d5ac54d159522dbdd9788917cd4b2991

SHA256
86bd3dea794ea02e08c0f5b52b571772f5c1d5532ce59c4dda31d93de301f025

SHA512
be7120838ace92ac2239df93b2b013a8715278a78008b9e1e914a79070fce972e8f90b0be330ae7cece6c1fbb22ddbd1fb923b0644d9c6ef19e28920b98bfaea

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
40266e01b48a64dcdb83ce5a6616da7c

SHA1
3d20dfc1829d1e02ecd837367f3ae9907e7d5a6d

SHA256
21a81018a265a4f09af823a9c33074b3e3a0227548cd0a99710191c91df0b0a9

SHA512
d3b8b3efffd1c64b4f9ff17e814f0961c709b46f2a50cf88b549fb3d1f1a0da4955a3edc2781ca0059caf16463ea5edc12f49011eec7870efc930cf0eab02ec2

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
77e49fc30471a4df421e846c22eba2aa

SHA1
abc86da6e90e6b70c93f746d791bf4576d29398d

SHA256
94291402b8b4c9f97d51bac2106c98559540c4d86bc538ef63d45525f3d39c23

SHA512
e47ff68531813b0adc92e736f26510e38ae6b7f2683e3d8948f1c10c04de4b41d731d8ddf5c6545f7eed4ede95ebe81b8bd1838bec421a7a8897dd3a4fac8021

Download Submit
C:\Users\Admin\AppData\Local\Temp\CabBC8D.tmp

Filesize
65KB

MD5
ac05d27423a85adc1622c714f2cb6184

SHA1
b0fe2b1abddb97837ea0195be70ab2ff14d43198

SHA256
c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

SHA512
6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

Download Submit
C:\Users\Admin\AppData\Local\Temp\TarBCDE.tmp

Filesize
171KB

MD5
9c0c641c06238516f27941aa1166d427

SHA1
64cd549fb8cf014fcd9312aa7a5b023847b6c977

SHA256
4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

SHA512
936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06

Download Submit