Analysis
-
max time kernel
119s -
max time network
133s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system -
submitted
11/01/2024, 03:06
Static task
static1
Behavioral task
behavioral1
Sample
525deadcd8126637ea308762c955762d.html
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
525deadcd8126637ea308762c955762d.html
Resource
win10v2004-20231222-en
General
-
Target
525deadcd8126637ea308762c955762d.html
-
Size
11KB
-
MD5
525deadcd8126637ea308762c955762d
-
SHA1
52d087778f32ec1871d938c0422c26a5f4d60b6e
-
SHA256
be5de8abf4c93d20151884a1a88011fe28d162e489a2ef5dad8bf21ff029cf14
-
SHA512
a8c8a100c17a583ad345015c093ac110b71334d3d0069efd5cabe6d61c3f0d504822a9093c098eb26915fd0aac4ea5267cca753d5fe957001d95c7a6f6fc8f18
-
SSDEEP
192:Hy4sMRsMq5K5tPPg/b4p7B7T7kKs7kKa27T7kK+B75Kx7RKJ7sKZLn7VKL1h7MKh:S4T85Kwo7B7T7kKs7kKh7T7kKo75Kx7f
Malware Config
Signatures
-
description ioc Process Key created \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\Main IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\International\CpMRU IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "2" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\InternetRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\LowRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 90e5366b3b44da01 iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "411104290" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0" iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Enable = "1" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Size = "10" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\IntelliForms iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\Toolbar iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\Zoom iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Factor = "20" IEXPLORE.EXE Set value (str) \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\DomainSuggestion iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\Main iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{7D256151-B02E-11EE-971F-6E556AB52A45} = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\SearchScopes iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\GPU iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\PageSetup iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000d80bef292bee784c8e3c940d61fdfeb8000000000200000000001066000000010000200000003d90c5a9be6a1b4e438a338092bf84903b8fd989dc26cfc43435d975b2f5dd18000000000e80000000020000200000002d26505b88c6d5e6f2737caa79711e8fec79347f24ce8e86a62a629ef2b15026200000000ae0c3cd35366dbd3c6c2803518cd89f843cf5708e47d5ce1df2b3025b452d1440000000cc05b1d4e08ec1111d4a1fd67c6c4d60bd449bd3adbbb88cfbaf63d8efdbaa5a9c4e99421f39ea48f11ead132ebefaec1d416d0e1bf09b55e0fc477faefdef87 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\International\CpMRU\InitHits = "100" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000 iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\IETld\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser iexplore.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2004 iexplore.exe -
Suspicious use of SetWindowsHookEx 6 IoCs
pid Process 2004 iexplore.exe 2004 iexplore.exe 2436 IEXPLORE.EXE 2436 IEXPLORE.EXE 2436 IEXPLORE.EXE 2436 IEXPLORE.EXE -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 2004 wrote to memory of 2436 2004 iexplore.exe 28 PID 2004 wrote to memory of 2436 2004 iexplore.exe 28 PID 2004 wrote to memory of 2436 2004 iexplore.exe 28 PID 2004 wrote to memory of 2436 2004 iexplore.exe 28
Processes
-
C:\Program Files\Internet Explorer\iexplore.exe"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\525deadcd8126637ea308762c955762d.html1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2004 -
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2004 CREDAT:275457 /prefetch:22⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:2436
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD544c72e21fb14b464fb68ebdac3ebe7ae
SHA1129293d4a61fa68013f51d97022b17ec66a3321e
SHA25631eb6e82ad5ee71713024df3bf6c2d7971fbc39686f13d24b74f84daeb542612
SHA512be940bf50b7dc828287ff47a57904be7a5d4a940e985c4f8556fbc572c37db436238f7e78a055457afa3b27e636e76f7099eaef6ed0241f953198614fda865f8
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5d88ad4288ea8de0c1b43cd8d058d5d50
SHA195041d2c2c66473386bf44d8f112caee96de4f9b
SHA25634e82f4e2e0738cb0fc89d9cfd67d78ad82462e592caab6717951c48e8862a5e
SHA51278c7855cf8adefbb2de1af27a14ba0e1c25a87bcf77907fc683caf251d86781c1072946919cb18d60f8b7937900ad0d946ea25b88c849cd565aa470cc6ea9a70
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5ee9cfe1a0bab0f306feeedc843d1faad
SHA1445e629ef65ce561c230776b6c58f094f38011fc
SHA256021f8dc6851ad25044193f10981abd3f5eeb34cdbf487e336cee7f64f33da02d
SHA512f52d4a590817f30035a8c8abd0d4b83190daadf13cd19e4d100c6b0cf02b3fd8864042fbec5a5db8beb8713571e09c0e4c7129a00b44fde7e1d44061f75afdeb
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD57e9d755c3f20624448a469275f41b2cd
SHA192c18427ffc69e24e5c09b0eadbc3d31407f272e
SHA256b13bc289b3bc21704138d45bb3b6d46548bd3c39aa139596000843f437c7bc95
SHA51234af94df7ba08453ea3cffacb47c17c9b7cb1a8f574aa8e291be7633bd9dd90d9cad56f0fdbe4e22ebdaf1c39c5979d56857d2414259b9d75749e7dcfd38a5a1
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5cd446c32e0edfab2f90322758169daa4
SHA1de8218e483bd7c34329ec1a0b5900614f20de684
SHA256528cc521ea05edd11a3f310e0796b33b37490304a50218c2e974dbf2f408120a
SHA5127f0cacb8e4c6c9ba73fbf20b73c495201cb94d62712f2c0169d0ec39c32be742d4fe9fbd3b778ecc24b57a2e0b61b9b687fe3e9a649ce4360191ba24187b72a8
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD55a28e7dcf95443d2e0604c7afb4be211
SHA1f5b07bb6886fc702945c5f64c0a4e60676cc2fbe
SHA256d468fe62d2b2cb54dd96b22cb2e26ae9a1b2e84bc7ac71d71b935468d04a7f37
SHA512ea17968c8614460592ed833455caf2f340145ed51804423b97d7b736b3894d9caa21f85defca6f079d0a21a4fddb225d0d6478e09273a030214395a74f7a9a7c
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5babd2f2c0e86c99d2d6f238873fddd09
SHA107412ce508fe339a2f8ee952ef79ed1103bf3192
SHA256715bf4e5cad9b650e5bcda6e841c6c77659c428bd10624813ca9e685a75578f9
SHA5128fb75df1afb6a0c75baebfb5e13e3cec4ef61449134a8cbc6c1f1dd4462634e14bfa4efca0f21795a2e9e046584fb3a2053ba470b99b62ad7c6222bfa9547583
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5fa4858b67136e37524ddb43e458b81b2
SHA1b970a5bb170bd685cc2cc28679bb318212b95066
SHA2567cfc874b6f1cd6891ee5f4294671cee9028962307f9f51898c017cf9a5e5a49d
SHA512c2a59c15b3b0c8e7041cb844d024a64293d643a2135a4eabe444be2d198a64326644e3f04af9139b4c9159a5c0c85c7963b1e2980d578f4d621190003cbafb2b
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD506430cc2cb4f53c629fdaa300de44fb8
SHA1a2adb73214fe3c1fa18dccde35d6c383e71903ef
SHA256fbc68850716bbe71bb515d7031b31010d94c557f4b4432108fa21aab61eda9a8
SHA5126306cf7e80cb147da52671e31706399eccc964f1c2a6a58b151961d84503261e705d8b591013d2b88341d7dced752fe4527c7cfa8d34958ead164bb2a6280cfb
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD515a8e7c59a557fc5fe642ca77803a6f6
SHA129e1d469ddd343589f3e234cdeb26310b756356f
SHA256ed01838de807d37aa2463ed8577b29cc72fa0da1d2957ab3642d25e3a84e9960
SHA512ffb68b8275ddc3944234a3d84cbbd9ab89449b9d56cf9594693932ac1c96f0fabb6007a5b8798e9160f639d76e9c02ca465f5947c46825a8292657f099fdea86
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD57a94cc9c93c9ae38852690274ad4fb9d
SHA132d2084061290794704e9fc0423994771641e872
SHA2569f45c1ea6d00c6da10ffb812374d21e4e007d11a07186e41abd4b5ae2539a054
SHA51231e7899faa327f523de6bf38cec0cfba253bbe13f898939539505ea9f5d29caecd50e4975ab74db199c57991185c9625d6ad5eed5ae3898d0b674efe13c9af87
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5ec98c318f7e947d1e0b257fdd679ba7d
SHA1d420c80133dd0821f5ee6f9d14fec1c923d4084c
SHA256c9b724075a0386a13d39e1e1412fde719d3373baf8284b9a6eb7ccee9730cc34
SHA51268f7e7326ada434e11da085f24e0297cc64a1f87bebdb9bdfaf9e59926967b40f3f4fac6b471ff18d914dab8e3f1ad31355eacdd12aab28f5c76de594607208a
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD561172d951b680d34c1ec1b2b45678153
SHA1a84fb04ed30a1e43765f0839e1af35f8d54e9025
SHA256b86a5783a4605d7d8a606b7f79cf6162be30053ef37b97cd0d256616d094638e
SHA5125dd886427740475dc1c3772310e21ce164a1932e49cef429f1b07f794fe9609ac4edee69a6c1f0ac761c4278870cb437f4b7e7ab3bcedc7e6cbd121cec8922f7
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD588c1455e5c2864c157a2372131b7bcdb
SHA14b536b8a97243c8c44cff7d251f9d69b5ef18fa5
SHA2561924c9f44a23c616cd0c7761dcfe8401f575891c21b2fe9cfb0be85bd4f8aa60
SHA5122389122d8028908edbf886a326058c6613b60caf5d5ca5f7e861aeebdcde374649108cbb464316df17866c8814fec76208b410ebf1ad1ef1cc1bedd3d1ee7f14
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD557ea258eccfd0ab45955d616fdccccaf
SHA15fb27b2bc041c62aca9aead0767a7c3ba6579ff4
SHA256d49418edcfe76227839bc03d060974db655f90db9f950e0fee2cfb091ff0626f
SHA512bb255570eca0849bebe8322ca847b7a3be8867a301da214be5eff39a6be89dbfa8b6e9203463a89d7a9d648e85ad4a11d86cc39b1de22fa2be2c63f86089200e
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5ccdf3ef6de3f025cc03ca16493e8a47c
SHA18e4240cc63c65739f9b75cc04722d028bf2b1e54
SHA256ee3ea7f6c867fdc8b832d08d431a86f3bff914e9ef5b9ae9cb0500e0dfc66214
SHA51287af6c812d51a3b5b6329076c0c69eb947b0b3eddff812f1c5d1f516c02e9d0eb2b756bbaa220b9201b63892fa2c5313817a163505b641fe9935efd84ccc3c2b
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5103776101e37d3643ae610e55eabc456
SHA1455ce5d113f3024a75934e0eefd09807c245c810
SHA256da0546241f140cd54996eb3701238568b6c7c49c9db888425b0dad3fc508513e
SHA5121a2cd0ccdae5e0095eb999af385553cdcef0d1e08645ed2ea430d017d4975fe400cbaf2461c8bad1678baadd94fa85b27f90b087dff319248aa1dcbbd8c16f92
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD50d383314908e0f538dd6d1f2d3ee70f9
SHA1d3f332e44f9ba29cb83b3ac2227156e993560622
SHA256fa023bb0e13504f367f2bdeb974d254d03ef0704c42f8dcac9dd3f9690d3fa3d
SHA5123318b0191a1866b07f2455266d4a1c6eabbc1ea7e7ac9fd719cc8166b9d80ce27c2c520c1de1dc1b134855c8b3315b43db3e9abb54007eb7cffeee0e14a1f5ea
-
Filesize
65KB
MD5ac05d27423a85adc1622c714f2cb6184
SHA1b0fe2b1abddb97837ea0195be70ab2ff14d43198
SHA256c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d
SHA5126d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d
-
Filesize
171KB
MD59c0c641c06238516f27941aa1166d427
SHA164cd549fb8cf014fcd9312aa7a5b023847b6c977
SHA2564276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f
SHA512936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06