Analysis
-
max time kernel
122s -
max time network
131s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system -
submitted
18/01/2024, 10:20
Static task
static1
Behavioral task
behavioral1
Sample
652533d86cc3aeb93c2e22706e056e73.html
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
652533d86cc3aeb93c2e22706e056e73.html
Resource
win10v2004-20231215-en
General
-
Target
652533d86cc3aeb93c2e22706e056e73.html
-
Size
35KB
-
MD5
652533d86cc3aeb93c2e22706e056e73
-
SHA1
53d15b6196c28a433efb7a5b72935a9082656ed8
-
SHA256
70a112588dcfb161661b341db0a6c806bb77a9941b91e71f8bd294ceb7a4f5cc
-
SHA512
aa609a11d58d3972328c877ca5c7d0e7160840bc66988b1e4709f657ce3d04063d5f13b85bf26b794b036921e637f26de1b3d51546870c86a337845f68f789b2
-
SSDEEP
384:SIckAKZBtE7jw/hltvrtytZ0CdObkPDvD16s94g2YsRkk2RLERm:SEQzD+YbP
Malware Config
Signatures
-
description ioc Process Set value (int) \REGISTRY\USER\S-1-5-21-1603059206-2004189698-4139800220-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1603059206-2004189698-4139800220-1000\Software\Microsoft\Internet Explorer\IETld\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1603059206-2004189698-4139800220-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-1603059206-2004189698-4139800220-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-1603059206-2004189698-4139800220-1000\Software\Microsoft\Internet Explorer\International\CpMRU\InitHits = "100" IEXPLORE.EXE Set value (data) \REGISTRY\USER\S-1-5-21-1603059206-2004189698-4139800220-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb010000002213d23592f6d648a137f9bf65c22cfa00000000020000000000106600000001000020000000add4bc802f5d20ee8fad2809d216cce6bb90378552c3af8f299b8b89ba268b36000000000e800000000200002000000029dc29881e1b59ee84d21b2066f641a4c37ccb2bdff4e859cf9b919c936b730d200000008fa3e39d5cda1d235b7ac15de6260c02bcf3c6cd45b347de685c3152ff8e9d424000000058a7f78fd86c06aee615399f978b911710494d892f40685b2da8c67271ec1b19448a056d4da5d0717a7f89d2926a29b71fb44b0ebdb06e338c6071ef0151c2d8 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1603059206-2004189698-4139800220-1000\Software\Microsoft\Internet Explorer\LowRegistry iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-1603059206-2004189698-4139800220-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-1603059206-2004189698-4139800220-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1603059206-2004189698-4139800220-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1603059206-2004189698-4139800220-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1603059206-2004189698-4139800220-1000\Software\Microsoft\Internet Explorer\SearchScopes iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-1603059206-2004189698-4139800220-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "2" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1603059206-2004189698-4139800220-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-1603059206-2004189698-4139800220-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1603059206-2004189698-4139800220-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-1603059206-2004189698-4139800220-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{2FDB2891-B5EB-11EE-BA54-D2016227024C} = "0" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-1603059206-2004189698-4139800220-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Size = "10" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-1603059206-2004189698-4139800220-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-1603059206-2004189698-4139800220-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1603059206-2004189698-4139800220-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1603059206-2004189698-4139800220-1000\Software\Microsoft\Internet Explorer\Toolbar iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1603059206-2004189698-4139800220-1000\Software\Microsoft\Internet Explorer\Zoom iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1603059206-2004189698-4139800220-1000\Software\Microsoft\Internet Explorer\Main IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-1603059206-2004189698-4139800220-1000\Software\Microsoft\Internet Explorer\International\CpMRU IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-1603059206-2004189698-4139800220-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Enable = "1" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-1603059206-2004189698-4139800220-1000\Software\Microsoft\Internet Explorer\DomainSuggestion iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-1603059206-2004189698-4139800220-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "411735090" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1603059206-2004189698-4139800220-1000\Software\Microsoft\Internet Explorer\Main iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1603059206-2004189698-4139800220-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-1603059206-2004189698-4139800220-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-1603059206-2004189698-4139800220-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1" iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-1603059206-2004189698-4139800220-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-1603059206-2004189698-4139800220-1000\Software\Microsoft\Internet Explorer\PageSetup iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1603059206-2004189698-4139800220-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-1603059206-2004189698-4139800220-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Factor = "20" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-1603059206-2004189698-4139800220-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-1603059206-2004189698-4139800220-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = a054731ff849da01 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1603059206-2004189698-4139800220-1000\Software\Microsoft\Internet Explorer\GPU iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1603059206-2004189698-4139800220-1000\Software\Microsoft\Internet Explorer\IntelliForms iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1603059206-2004189698-4139800220-1000\Software\Microsoft\Internet Explorer\InternetRegistry iexplore.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2536 iexplore.exe -
Suspicious use of SetWindowsHookEx 6 IoCs
pid Process 2536 iexplore.exe 2536 iexplore.exe 2248 IEXPLORE.EXE 2248 IEXPLORE.EXE 2248 IEXPLORE.EXE 2248 IEXPLORE.EXE -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 2536 wrote to memory of 2248 2536 iexplore.exe 28 PID 2536 wrote to memory of 2248 2536 iexplore.exe 28 PID 2536 wrote to memory of 2248 2536 iexplore.exe 28 PID 2536 wrote to memory of 2248 2536 iexplore.exe 28
Processes
-
C:\Program Files\Internet Explorer\iexplore.exe"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\652533d86cc3aeb93c2e22706e056e73.html1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2536 -
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2536 CREDAT:275457 /prefetch:22⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:2248
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5680829c880e29dfc0d498ec3c246c166
SHA1aeed39dd0988ff93e3f97b1398f2ff8123db327e
SHA256b05ddf621fcb9e920723d7e38477ca4f14284fe1d4ab6ba293813a4f0586d210
SHA5124f6aaef9a7d0784e269c4ffd88bdc4884a226c8720d9364a63ed3b45719dbdd743c83891c11a8cf54c8113deab62e07452f65871722ac8e77c281ad951143a04
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD50301436ff6b5c9427726cbb6935cd1da
SHA1be0ae0c307dd3953f06ffa2df4ea2693d0c37696
SHA256ab0770e9b7f5cdb2e4fee4f1da55849c44c9d235347631b755caeafbfe322568
SHA512a4eefd91dcc96174825f7e71ca043f310e7d84323307d8a62c2108cf42384e9bd91a50065713ead9cfde44f41c862d759e950d3450dfcf98373816c3ad163a2e
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5659bf0987f551735d5d747369582efba
SHA10db5c441d5411c4cb41854bb108772ebe034f395
SHA256d011d40c555eae073442763afb0f923b203e959540a3e7cb926260ecf37438f6
SHA5122bf2af1026423b09aec626219855a60a7661f083f1dde4467ef77599cbf1b7fc8ab6d20681c095ee24e2ee9d67f341e583c631de279091171e3a2e321dc304d6
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5af86a78240fbf7ea39e0a47c2ae5c305
SHA10c3f6bf9e0ed044c58fa9cbc5c3efc3b582e1790
SHA2561ae220483e54310102a24fe8cc1ef7ed565967e1fadc9381802451943da1dda6
SHA5122a806271f924e3d357a681c2976f202df67e4c285bfe0872939f055fd7aca16133f16612c8dc3ac08484d57fa6a7eda703862cadaae50f0ff8c2cdf8878c041b
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5dabeaff9c61764dd0a7ba23e6794c331
SHA1fdaf7f8960e7228b30cdfd6b3e0df1fbb07c9821
SHA256d90a235df72b398cd8caaec2e6207c76daad7623e83a3b0f1d1c9847677ad852
SHA51233a39086db78e3842977a2662097bc9f65f63444f12bfe58b37479e5da085abd0763b39b55f4edadf63bb991265a9a679cace8cee88066176c833922e60eea29
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD53a2b141cbbf85cff7dc82969dd354ccc
SHA1d76b315be7721f53c3650f43e19334e498cc0322
SHA256ef0b4b12bda7de82385a0230508e03df3b3e60fbe449020bfe6c33862921edcd
SHA512768f756ceb8bc9b1b151e289f78d570cbcba4070a093ed8294badda295add6e8d26e8ba0a11891054bfcb97207cb535862c67e97fc1c68cfe6ad26a8d726d0d7
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5378bde5da6b2158f94926c17c388006f
SHA18c0fca0b23eaa46080b2b812b221df9432a7c882
SHA256626e0e3dfa0a47d176cbc92ab63f6c794a0d3bf66d8229e65bd88066b16d3d68
SHA51260699ab1b0ae6426c9b172e5fa79877b3efa373372970d1caadc7f9252271359e2a31241a3f86da55006eaa7de05679544fa50bc9f10be2f9ce77cacdbb36d63
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5fd68243c4e78e51f63120d9adae56192
SHA16e4b3b7a59a397956899c9030803577bee8173fe
SHA25659166c3db4aa7c017aabbbea8e3885896aef9f362f7d4b1adb8938396c2e570d
SHA512f861033f9b705f8e1f5653675a1c032a09de3fdd85c94de6f9ebcb157af4532d2b61cdf0120ebf3053bf9aa61c6b844c882b58386553fbd7949564a5901606ef
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD52c7914ba584d2b1e5c09dbc59834d2f6
SHA1a40275583b9c36f1c083e6d311f3e436c52008e2
SHA25695915023791da0df7bcd29db1bd8d6933e9eaeb6ee8c74619bb5065881a43201
SHA512374ae711f3fc6843fdaf3b147e1d0391f557c11e127ae52cf0fa0313fb9094355112dd0ab90a88f935811e4058cb2cd269565921623b298f9f265fc1cb070e9b
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5383ab181fb0aa008f292afb4cdd84432
SHA18637817ee87f7da4ad5c7534768ca42b5158da7f
SHA2567f28d18f2934a5900cd0899ee5192638bfbf303dddd7230715be0720b7dd9992
SHA512b0eaa02cb3b7f7da2c44f582e29e1079bdaddc2737143aeba23753c69a756e15c9bc8cae2c30815f53b49c854e17660052be90303b5352267ead9d586fa513c1
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD58da76d7f57b6e8715158347f5a3ae24e
SHA1d9e876f9f2c57a35b32c0aa8d63ca751cf00b80a
SHA256d68fbe5034f1431c032423e77af9731e5d2aefb74093c8a0613a22c9dcc476ba
SHA5121fd74c178a8ff2b89ad1d6804e7f6e448439a79b71a8d53479a666dad6cb02ada4c8a509ca1ca8af20175d2b0de1d87f58dbaffcb49cabd19efa009dff1f42d5
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5dbffbb137816044c81a9614244b8b25f
SHA1d2289ca4e588d1a859b75fb52b2674adf59714ff
SHA2569c31fc76a9cbeee0cd248a37e65c81bc2c629f852f4373563f939b246aaad05e
SHA5122efa82b7f5be67e336b76c79933dc8a32da484c4b5cfb2667ddbec8403a829fdef7cbd10ef7f7c5dec8429c7fe803f5872ba28b15f876c6a14c9c4506d45c0bb
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5f52aa6bf9d611f052e236cad2c491a5a
SHA124560ae54fbe93f7afa088a2c6dfaa1f3cfb8f84
SHA2569507c6ac29790a602d46363ae80f3038a1f8df5217ed5a70c2e95286405a319d
SHA512814e48a5b9507f1df83d77b77a0ba780f32d52d84fed49f20c3cecc97b7d6dbdb2cf5ae7f0e787fea141ef33202ee75e0d1f0a405b1f389a35e03381ee531b55
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD54caeb5392396bc4b24e9ce4199ec854a
SHA1a7808938d9c7d0ad87b2891a3722a048616d5694
SHA256595ee95a070d34125096c4ae0a01a7234c82fc15fa6b6d1f1f38612b89ea56df
SHA51299b72b4a031405204b3bd72dc74113df596e0c96e737e8c32e77375fe8594f2a84a01340216ac6e1a6cad82cf96f2105adfbbcf4dc01dbdcbf7755caa98654c1
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD52a49cc7c216eb9c0fa7e825afad69f53
SHA1ebcd418b28d375a9d71c3242455bcf0f613c2f1d
SHA2567218ac5267fb5e1b2ce5713b0db6ae25aa5bdd261310f88e955c8add549021eb
SHA5124854410aacf0b4d485238938539bf5e71e7a0cdf8a20fc91d296c68386a0287980259747b164522dac5805d580e576a714b2023dcae742534e7bbcace79031ce
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5e04ebdb724bc3ebcf67c68a6486ef441
SHA1279a5e93f960428406e83f29c421d6d44d37cd2c
SHA2566e8792dadab7eecdef626f4de21bdc0d1b60d8525a8368e67f9c98339c3773de
SHA512cd547e52b11ed8c30ffe4402430d54ef1b5f8987d3bb7a0504290e4ef441d6a5d9d46fc9c5fad17b6c89913de38a6cf7f0ec6ec0cf0b6ec75ba56e563834f3bc
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD59c89870c976a28fa35f559a2adfbda21
SHA1eb595c9ca5d7eb2d40038113bdc7b64969ae5afc
SHA256383b01f1da08c88f91b0f73ffbea69cc753bca32c95bfac0b510d846ba271bdf
SHA512547664ceab5ca342a04a64af3c82c71092a85bcc367a3a3c9f7fa05f8899a867aad4beef82a5216def550741c1fe1425dd05e8b6ad6f4bb17694f4f85bf1198f
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD55baecddd669e28567a7bb6f11bc2b628
SHA13c1f02df09d896b3d554654bb41b109aee7614b9
SHA2561ff0885c52db6e75c332ac1acaaaab6fb66bf410a5c23eed90144bc635fa00df
SHA5123bfe9fa7e259125973f37c3744320cd54e9e1bb7d59dc58c35da789bd32a8457f4aac6138f44f9701fdac1e925f662a30ab803c592a18b39df39ec8a833bd75a
-
Filesize
65KB
MD5ac05d27423a85adc1622c714f2cb6184
SHA1b0fe2b1abddb97837ea0195be70ab2ff14d43198
SHA256c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d
SHA5126d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d
-
Filesize
171KB
MD59c0c641c06238516f27941aa1166d427
SHA164cd549fb8cf014fcd9312aa7a5b023847b6c977
SHA2564276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f
SHA512936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06