504dc3217ba27d084d4bd9614b9426be123d6b228b25450ccfc9b4aa97ae7198

Analysis

max time kernel
120s
max time network
157s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
06/01/2024, 09:00

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

45d3bcdf3bce9372c4c180feba990b64.html
Size

895B
MD5

45d3bcdf3bce9372c4c180feba990b64
SHA1

c0704d29660dce474c4f0d8cb047aba4b57feba4
SHA256

504dc3217ba27d084d4bd9614b9426be123d6b228b25450ccfc9b4aa97ae7198
SHA512

413af38741280df9e97fd1027036ef2d1282b749bf876c5c8afd743f3e1ff81559e118d99be91bd29c65d5d568050145b63070f5d8fd45e3d3b6818a62b98926

Score

1^/10

Malware Config

Signatures

Modifies Internet Explorer settings 1 TTPs 36 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2444714103-3190537498-3629098939-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2444714103-3190537498-3629098939-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2444714103-3190537498-3629098939-1000\Software\Microsoft\Internet Explorer\Zoom	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2444714103-3190537498-3629098939-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2444714103-3190537498-3629098939-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2444714103-3190537498-3629098939-1000\Software\Microsoft\Internet Explorer\GPU	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2444714103-3190537498-3629098939-1000\Software\Microsoft\Internet Explorer\LowRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2444714103-3190537498-3629098939-1000\Software\Microsoft\Internet Explorer\Toolbar	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2444714103-3190537498-3629098939-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2444714103-3190537498-3629098939-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2444714103-3190537498-3629098939-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2444714103-3190537498-3629098939-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "410693512"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2444714103-3190537498-3629098939-1000\Software\Microsoft\Internet Explorer\InternetRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2444714103-3190537498-3629098939-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2444714103-3190537498-3629098939-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 500fc3d87e40da01	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2444714103-3190537498-3629098939-1000\Software\Microsoft\Internet Explorer\IETld\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2444714103-3190537498-3629098939-1000\Software\Microsoft\Internet Explorer\Main	IEXPLORE.EXE
Set value (data)	\REGISTRY\USER\S-1-5-21-2444714103-3190537498-3629098939-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2444714103-3190537498-3629098939-1000\Software\Microsoft\Internet Explorer\Main	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2444714103-3190537498-3629098939-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2444714103-3190537498-3629098939-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2444714103-3190537498-3629098939-1000\Software\Microsoft\Internet Explorer\DomainSuggestion	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2444714103-3190537498-3629098939-1000\Software\Microsoft\Internet Explorer\PageSetup	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2444714103-3190537498-3629098939-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2444714103-3190537498-3629098939-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2444714103-3190537498-3629098939-1000\Software\Microsoft\Internet Explorer\IntelliForms	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2444714103-3190537498-3629098939-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2444714103-3190537498-3629098939-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{0B11EF31-AC72-11EE-A675-6E556AB52A45} = "0"	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2444714103-3190537498-3629098939-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-2444714103-3190537498-3629098939-1000\Software\Microsoft\Internet Explorer\SearchScopes	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2444714103-3190537498-3629098939-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "2"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2444714103-3190537498-3629098939-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2444714103-3190537498-3629098939-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2444714103-3190537498-3629098939-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-2444714103-3190537498-3629098939-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1"	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2444714103-3190537498-3629098939-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000b0720b1d8642c344adb870a2e9178664000000000200000000001066000000010000200000008164738564c74c282052353f05ea108016b019958729d251c12db21fba174ff7000000000e80000000020000200000009a173d197f44db253d56a9188fc9c03b2441957af6e04d81035743470efa1918200000001ddc05ff058636dbdcdfce9154ca9a31c2e8f595d274701136a1131fc51c21f740000000de65cb3ab4449c8f508a643c2a6cc5251c424adea73435ea421fdf13fc5930b7548bf90b7a4e121a6c097212b22f0e3b7e05c4bba4e13e4180301e1bcd562886	iexplore.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
2240	iexplore.exe

Suspicious use of SetWindowsHookEx 6 IoCs

pid	Process
2240	iexplore.exe
2240	iexplore.exe
2200	IEXPLORE.EXE
2200	IEXPLORE.EXE
2200	IEXPLORE.EXE
2200	IEXPLORE.EXE

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2240 wrote to memory of 2200	2240	iexplore.exe	28
PID 2240 wrote to memory of 2200	2240	iexplore.exe	28
PID 2240 wrote to memory of 2200	2240	iexplore.exe	28
PID 2240 wrote to memory of 2200	2240	iexplore.exe	28

C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\45d3bcdf3bce9372c4c180feba990b64.html
1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2240
- C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
  "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2240 CREDAT:275457 /prefetch:2
  2⤵
  - Modifies Internet Explorer settings
  - Suspicious use of SetWindowsHookEx
  PID:2200

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
2e330b533fdead9ad266f5b74b8eeb94

SHA1
068f55964524883c3f961839585b35e2ad9c09cf

SHA256
70b4affb9ae6cf078057ee4dac6db56c6f7d92da5a205843200d4b9f5b81311b

SHA512
091f8cbf36b07c1f85a8ee529d9493e54fcc59f0c1bf9623cf39f83e110252699dc5c22aa64e72969a245f6d6d0adf990573b88706abb25f2d317b24ffbd5f1b

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
8992acf2046c2fae4aa4b9cd8351cc37

SHA1
b6820af76ce807c1d50f0342363e7342e6b502b4

SHA256
04bb4ced188ee2c57a391887aee4064dc75c70b24f6b34a121744536e0541e2d

SHA512
d2f638242e0d5795aa336a359d9984113b739aa8694ac2254c1c190b54aadc2d39a8ce3d0fdef4860276748fb635136666c66bee806e2d22703808be69a30dce

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
493983fd404ddd775d5e784f914f574d

SHA1
9365328ff02f15f09e1a27dc44cf7f32488dae5f

SHA256
cc99336413447ad2e17d6370039a1a7e181d22698ac493a5226c15ab84b99fe2

SHA512
d8bef256b9ab2bdebd505ab74ef0dc7f4cf19fb777dd030eb9b6addc7cdf29b1c24a2f2f5e3e72f3c2808fc9de60cee96220456e909cfadfa6abc8836dcfd82a

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
dd5968778db99069940328b3d64c2974

SHA1
e072218cf9a3098bad5beea092d200f3118a8553

SHA256
adf689733923024f6f59436cf838b59030d7b05fb5f548b9a218bb7de5796842

SHA512
a20b429f9848b892500be397deea964e5997c142c233bb52dc623d3e54b21fb2f9de728a9d0f00fff111586b45f626da318a77e00dd7f553d368e1a96a742ec3

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
a80bba8b3019191729e22beeae124928

SHA1
52ab77c955228a01db5a06c8704e3cd46642c456

SHA256
7b6f5a878055acbd53b57e4a50994baff59debdd4808aa11db9fd96dea9569dc

SHA512
655c46678234061833a55f9e06ebd46622ed78c91ea9147f2d53ba1721a7ca672e54bc1554d94318240583ed5036ea8fd532f3043a5577d12ab035971fa2406c

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
0a8d01cde6b6d5dcf7726eaf10e23567

SHA1
fdb52ed0a183e902bfc2be6a6120d1b82373654c

SHA256
49580f6dd1ca9b979b38308f24d6c8179793e9618a59269aa3d4dcd0244aa743

SHA512
990180a279e905306faf5693d7a81bb175d4e98127f7b110a2b4df19ec6d895140bc9179824e6561046f6b16ea03cd2cabb3716fa876a9e355a6e94a0cbf8022

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
220c4d2ee3bec578f0ec42acdaae2b13

SHA1
fda1aa7f68c684e6f1f2305c4953f930bf8b5ec1

SHA256
5351bb795acb5f6f8e5d3fe9d357e8062308b89ec82b627eec93d6a2463bfdf1

SHA512
ccc2791557aeeb11462c730bbd38732ba873fd31e5946454ed48c9b5ef38745d7564419aeec75b6c36ff444cec5ff0ec4d632b7fcc3962e3a1be622799cc00e0

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
e421d18f975690a85a8246c433107333

SHA1
6b2d646e53916436f78fa0dc7f9d6be11cf9cbdd

SHA256
de78add923199dfaf0da247002b8448ed37b53383f7d18ee5ce71b89581c901d

SHA512
80f9ba61d6a26534f6e6b35cb4b333dfcd77c8a5504d3f39c5b6ad5345ac73d3584d380e95d6ded9d4d24764b37703dc735d4bf763f074b86ef47b3ca0cb9d39

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
9015930bd61d21503d627185c7233e8f

SHA1
93d1acea37ef328abd9f0a9a70a552cd19b4ca15

SHA256
a87a1937067eb331a70b5f823bb4b495e953bfc86e7b9119822f2b4466c6edc5

SHA512
97c1a8a11203df4b519b17d21a3795ec0db0327ba6cfc312a5db438db0e621384ef3c12d43f2d0b726dcb21edf33f6265bf46a26cfe8c462717b4f0c8d5af36d

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
6a42093a3eb9819f03b541b7356af264

SHA1
268e395a63cae27f0284617b19b3c7fb51fb900c

SHA256
e91b7227d3ec9712ce9ff74383f545815cd4137be49311c62adebf3a857f4746

SHA512
700f865bf75b32b88359ba6dbda6e7e052d70a0b0b1c8a375f1d2641aeee168cf8c07eaa8bcaf8207980ecf2c9337dc3e75c08d5ee80d233d180763d379a856b

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
6300cb48dd9c87c00a4a3163cac1fc2d

SHA1
46cc1d26712c2d9e30efbe8f76353e9d0e0f2b63

SHA256
ed96b65ca8b5de1fe7fefb301cf678581a66a370a4f1c99eeb7e9939c9f9d476

SHA512
27c7606156729af1b6ca2bc8a3316ebb9935b7dcdbaec5fb30ae92769c7d4dc82bbe3b4fd6bc73977bf09223e58335fabf62acd675ef3f0f44ab28842607deb3

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
74293073f209c3cfa350d5ba1a7902b2

SHA1
75861f640760298edeedfc6e36053f538780ff54

SHA256
2ccee524cf29cea1f20f181c15ba887e05bfb4fd98b40996ca22d25660de57ff

SHA512
15d8c899cebeac96e26b0dc898dc4679804ecd3fe642767f4b72c1c87dca8e08695cfebc272d8422087ce5fde18213980b95d70726f4e6e98d8803f3bdce78e4

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
b2b3316ed96f48737d2037503f1a6163

SHA1
c3759093bd2ac685ba323e08dd320c202844be54

SHA256
f83692af2b5c546bdd8e1e2d0f58c5534f1ccb88ba2386d8692a9edad1140a43

SHA512
3448c89753a5ea982d4896f9c01bbd465d391b173c2cda5da4f62c128cefcaf752755c7c80b090e5cc78bf93321593105a4289042ca9d595746cf539262295b9

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
2f9033bab7653ace478017f94e50abc5

SHA1
a88cc3f447a04a0e12809df237e267f08aadd0d3

SHA256
c683fbdb835c0b29d3a979c27ab6afa0c8765f7a997ada91457876a1c25ad2b1

SHA512
afb462f89757140b50bdb00f52c4f48c3330ec1623de1e3e9a0ed7fb30d9270b6e06dfb0c2273fdcf0be4e30ed5329a79c9f4ef09f39bdad39b996ca6f41a8f1

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
3a1066e95ad9cc9de66b49653b51b32d

SHA1
f727f5e8911262100fc1f3a57bedda45ae3a650c

SHA256
9ddd9cbcc9c09f29897f27a0f9194a461facd99307ed96b503a91057478b7d49

SHA512
2efbc0eacdb716fbfd4ee2b58209ba5ae4ea70b6beded7861f99d1a87d312627c208c5abf1b1f43c70ad6d4b724ee591767ef97e145e0b66d79104274554f938

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
fc675fd1b40fc72cbd1e4f7423e1424f

SHA1
40e8819c4395defebba17f1001444a2f5fc330f2

SHA256
7e180dc2d9aa358811193c028f929af9c324a970dcdf656346e6f96b40343a13

SHA512
32975d1fa56234d6120393ecb10e80ff9e639742d9d9a44a53163257fada78586eeb7f5525c155fc30d4ff76d7f572e53f0c6d6aee538780347bac7475d08147

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\imagestore\f9yyw0t\imagestore.dat

Filesize
1KB

MD5
d20c637d0b9cb0cf458212dbaf9f5695

SHA1
f32dbcd72a34b7d8516f2acf305b4bba9d50dff1

SHA256
e76aa204d425939694fa513e69a6ef75d5cb4e07fc99df82e96de4a657635d54

SHA512
73102d588c76be9c715443fb422b41ad57ed6133c7686c8f4d8947ee18dfdc6a1eb65caac68606a92f62fa2a9b0b034e61f5ff0da66732d56343da2e6b5cd250

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\YV6H14B0\favicon[1].ico

Filesize
1KB

MD5
91abe01116ab422c598e9c8af72cf4da

SHA1
0f2815fe8e067d48537ad168225ab4674271fa27

SHA256
b1d7aef06456fe7431124129a28f0138bb5fccfa4f4161e3087de23c005e5edc

SHA512
a4d5b20c3014153b6b382c43404917bd2cb5bd2a59bb1e981f5a19eb7dbdec185ace288e9700428d24e5ac623e45d04905e706f0c45a1642b1aa6c091213c23c

Download Submit
C:\Users\Admin\AppData\Local\Temp\CabA343.tmp

Filesize
65KB

MD5
ac05d27423a85adc1622c714f2cb6184

SHA1
b0fe2b1abddb97837ea0195be70ab2ff14d43198

SHA256
c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

SHA512
6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

Download Submit
C:\Users\Admin\AppData\Local\Temp\TarA568.tmp

Filesize
171KB

MD5
9c0c641c06238516f27941aa1166d427

SHA1
64cd549fb8cf014fcd9312aa7a5b023847b6c977

SHA256
4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

SHA512
936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06

Download Submit