Analysis
-
max time kernel
142s -
max time network
152s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system -
submitted
25-01-2024 17:28
Static task
static1
Behavioral task
behavioral1
Sample
75180d8a4ebd1ee0c420f98ce51fbb66.html
Resource
win7-20231215-en
General
-
Target
75180d8a4ebd1ee0c420f98ce51fbb66.html
-
Size
57KB
-
MD5
75180d8a4ebd1ee0c420f98ce51fbb66
-
SHA1
12a8695510541924f58f9bbe535bdcf16021810b
-
SHA256
dcb7c2babf04ccfd767278fb6dd64958093c6660b0a288397a01a14b4ab46550
-
SHA512
ee08fd4f5e83d3c725c05887a888b10af1b92b0aa10d41e1dd390de0bce8d10436cf0bcfe40324c563309e93aeca5ec38c90a9a780c12e4e88a2141f86f994dd
-
SSDEEP
1536:gQZBCCOdm0IxCKfoXfLfc8fqfufhfsf58f7f+fQfHfjfff/fMfwfZfcflf2fDfmJ:gk2k0IxUjbymJESTmo/7nHkYhkd+rejF
Malware Config
Signatures
-
description ioc Process Key created \REGISTRY\USER\S-1-5-21-452311807-3713411997-1028535425-1000\Software\Microsoft\Internet Explorer\Zoom iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-452311807-3713411997-1028535425-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "412365583" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-452311807-3713411997-1028535425-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-452311807-3713411997-1028535425-1000\Software\Microsoft\Internet Explorer\IETld\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-452311807-3713411997-1028535425-1000\Software\Microsoft\Internet Explorer\InternetRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-452311807-3713411997-1028535425-1000\Software\Microsoft\Internet Explorer\Main IEXPLORE.EXE Set value (str) \REGISTRY\USER\S-1-5-21-452311807-3713411997-1028535425-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" IEXPLORE.EXE Set value (data) \REGISTRY\USER\S-1-5-21-452311807-3713411997-1028535425-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-452311807-3713411997-1028535425-1000\Software\Microsoft\Internet Explorer\PageSetup iexplore.exe Key created \REGISTRY\USER\S-1-5-21-452311807-3713411997-1028535425-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-452311807-3713411997-1028535425-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "3" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-452311807-3713411997-1028535425-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-452311807-3713411997-1028535425-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 70d75f19b44fda01 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-452311807-3713411997-1028535425-1000\Software\Microsoft\Internet Explorer\IntelliForms iexplore.exe Key created \REGISTRY\USER\S-1-5-21-452311807-3713411997-1028535425-1000\Software\Microsoft\Internet Explorer\LowRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-452311807-3713411997-1028535425-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch iexplore.exe Key created \REGISTRY\USER\S-1-5-21-452311807-3713411997-1028535425-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-452311807-3713411997-1028535425-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-452311807-3713411997-1028535425-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-452311807-3713411997-1028535425-1000\Software\Microsoft\Internet Explorer\DomainSuggestion iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-452311807-3713411997-1028535425-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0" iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-452311807-3713411997-1028535425-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-452311807-3713411997-1028535425-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-452311807-3713411997-1028535425-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery iexplore.exe Key created \REGISTRY\USER\S-1-5-21-452311807-3713411997-1028535425-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing iexplore.exe Key created \REGISTRY\USER\S-1-5-21-452311807-3713411997-1028535425-1000\Software\Microsoft\Internet Explorer\Main iexplore.exe Key created \REGISTRY\USER\S-1-5-21-452311807-3713411997-1028535425-1000\Software\Microsoft\Internet Explorer\Toolbar iexplore.exe Key created \REGISTRY\USER\S-1-5-21-452311807-3713411997-1028535425-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-452311807-3713411997-1028535425-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{2B87CA21-BBA7-11EE-8CF2-CEEF1DCBEAFA} = "0" iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-452311807-3713411997-1028535425-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-452311807-3713411997-1028535425-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-452311807-3713411997-1028535425-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-452311807-3713411997-1028535425-1000\Software\Microsoft\Internet Explorer\SearchScopes iexplore.exe Key created \REGISTRY\USER\S-1-5-21-452311807-3713411997-1028535425-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-452311807-3713411997-1028535425-1000\Software\Microsoft\Internet Explorer\GPU iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-452311807-3713411997-1028535425-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000429d3af34477a14f8b2dd76917334189000000000200000000001066000000010000200000007f15ece8fa3a7ae6e7af540af5bb8aef21d94690cd01cd25b36c43d0c67e829d000000000e800000000200002000000022e3d98fd537bc17b0f9463de9c4e35bdf903640803bdcf6a4effe784be5b8df2000000081d131f88450d0836939e31ed61131fc293c75881072a07273c344bf6dd35f05400000000e1a131fe944809eaefd54523ce1dec7484436c56677fdeb682e69a8cebfde6f93338637ba6b247e7bef5de20a5e10d194f90ae22440ca3bf913ce281b53ee9d iexplore.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 1512 iexplore.exe -
Suspicious use of SetWindowsHookEx 6 IoCs
pid Process 1512 iexplore.exe 1512 iexplore.exe 2724 IEXPLORE.EXE 2724 IEXPLORE.EXE 2724 IEXPLORE.EXE 2724 IEXPLORE.EXE -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 1512 wrote to memory of 2724 1512 iexplore.exe 28 PID 1512 wrote to memory of 2724 1512 iexplore.exe 28 PID 1512 wrote to memory of 2724 1512 iexplore.exe 28 PID 1512 wrote to memory of 2724 1512 iexplore.exe 28
Processes
-
C:\Program Files\Internet Explorer\iexplore.exe"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\75180d8a4ebd1ee0c420f98ce51fbb66.html1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:1512 -
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1512 CREDAT:275457 /prefetch:22⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:2724
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD59b7db73340fef5209aaf046121693f55
SHA1f4d191da041540bf2dbf72765e8365e61151d672
SHA256bef23bdccc9e1c7bbf0eba49babac5c75d733f706107dd7360ab4514d9f80b7e
SHA51221eaaa4672db17a5de2bdd77515be505a7fd8cc5102ec8331c3a21f864abc1d12cc1025260ea7725d546bf2e14cac134b5260d1fa2e469cf82c960cd9e8433a4
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD502a5b07c2944f99f54d73488077f697c
SHA113050cd0f1c95ed974b8d5f797018dce6b85cd80
SHA2567897b4ef479fe92fd3ce7d6f9a71223b6ad2594d065470f03c18950daea1fb97
SHA5122515a049498f8dca9c167bee5794a438061f8cb39bdd5b09206cebac5215f365d3b0b21bf7b402b006c922c0c3aee7a7acc78f4a41edbeaa1eb8c045ce27d910
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD59bc8d2968ed4969d3b496586f661e92d
SHA187f64d35ba58f6f9cec2eea554b201631273ae1d
SHA256a8caf476d1ea4e83f842da4e8d50b92f851fc2911aa27b4a80dd04ac567c3efe
SHA512d390862e107944d942f59bebcab265971bc88b5ade79f48ebf68ed0742b0f4298cd13e287dae6c9c67a6132b9bcccdfe7754ac6a667afba509cd7fdeaea814ab
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5cc7ca684f92b0c5128cb9e1fb65836ac
SHA1fb1baa34071ddb582546f08de05b0e883e860c95
SHA2560aa0044ff05832d723b6718e82caaedc7faa2ecede738dab29f1da568c723182
SHA51286dd6c8b9e80b578c685042eca66049a1a12861daa1f7b6c6c6bee95a67da2bff4f2c2850cdadc4475d326d110c6d75b34d4aa54b3ff05c47524724176d94b20
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD552ccc14f1f1ad0bbc237e6b2a9635901
SHA11ca3cb539400e31e8f524639350d01cab5cee179
SHA256e8ae072a9d6fc7e4f36b7491e6b7ed7b85bf4d8d393b5f9257275a02d650656a
SHA512439c1dab559319a9371d8dd3d6d837ae7211f1261bbc6c5c56c2a19d181104f38c182362eddea857561a62dc1cf4f0cccc925b1d0b66542bb6994a702bd0a4d6
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5658a4e620d10e37d4958ff5ffbc7a3ba
SHA1ff196f52fe7a48a5b029eb2e1545c0fb69a309f3
SHA25680cac14de1da4d6a927626fb9708bceb0331d5055f8824466958e99dfeefa215
SHA512432aa4075309a74ebd54f0954a5482631a5d23eb979379c50cd2d5b639a3c08faf668648f1e70a10d996eabc23728a59bd74e06a5618086779c9df22c4358e7b
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5b2c865f61e39d103e8d6c8a024be707e
SHA1de9558667ea966fbbcb6866921f4e295b5d28859
SHA256c07326d1624a3413eb4e4bc8467e0dafbe70a80338b59c6dfd88b2f53030db97
SHA512e8644b33a192daccdac406e484b62f182503967c4193f2dedd0fc8c150d674c6ab1b51096f5e89747a6acaa4d0bddeb2a2da14fe8fcb05617f5074024927af65
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5b151bbb033eb495c206198deef3cb5f6
SHA1dc2ebe5891aad58dbf54dded3b548bfe82bb6b61
SHA256e50a76975412752ea811d755adae1c620ba6c13dfeddc5c6b24ddba825d2b8b8
SHA512f4e123a0b5e5f025c0af755230f357506ec7d6ec394549a946fec22225e817538aefd79c070bc6914491dd806f92aceda458f8ce8b66a2288e65eadf52bd4a81
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD530e123439edcf2d28126fa75e26bd021
SHA12758084ebc151e6f4db39fd9e8db6af0c865d93b
SHA2561601e8d7bdf207e7201da36e2585bc1b95fec434561cb1f8e99e58971e27e75e
SHA512c5b27fe0a42993db15cef41ec84b0f12ef96278c6a5545f9b08639faf704ba99e58164f19b3057b2b20fd147205c08487ee2f15f3960cacea275c3ebcfa36a9a
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD518a3702c02a82d38e5829ada8629c0fe
SHA185929ad579264348f525088dbf09597cf0240f61
SHA256d08d9d73a551a5e41d0214f8893bc62856479370a0315975d902dca639864081
SHA512b6958e2701d6c4ae02ef901f34cd2451e350d1787dc941decf3d229296a9be61acd4cfc8db4da7b77151df2b4915548a6b5f61b86c73f296983e1d0f616ba13d
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5a217ce8bcfee8ff38a448a6eda810739
SHA158770b4d3190edc60a2db26e9c56a580b327db71
SHA2564d304038e35abcca223e2fd8118e92167eec0d4241f83ac6117040a9a30f4e9a
SHA51299e4a4f202219799acd7b6cd6e62b84ac80eebd46eb8d4be18a14c170ed740bcd2ce90b3890184d33be98d5f315f23071d63bfbe23da4e31c5c293dde422ea68
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5a30f5cd48fa99940c2dfc60b615bd321
SHA13b8fb2f6e333ab5283aeef1eae3d8eb6f426a7b4
SHA25692c00e11597ae6c9b03c173781ce791a63db644d79ad63e69ac65c14ebeff873
SHA512552640e8e8b55987cfbc5bfe075009f0d606a648d6ad0dd5e0633e7366d996188b040a3cbe9994abb9492a98525cdaf5694c9bf6ff90c4eb4d4d95622cee6d9e
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD54242481c298b3d800c80a65195ededca
SHA147c487fb2b59eeb28e0862ef93bd6cccf3d03a81
SHA2568ae5021580db1b539c061ca556098ad4710f14386f45c5f32b584e0c839c6242
SHA5127643a88e01f0f36c7dab8c5d4821fdb2764022e611d0e820f99a93bf5de593a60964ac1e9506012b99afe0e669dc36adb8385ee410ed5cd819a72cb02f2ea4da
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5538fdae694174b888aaf6bd159db78ca
SHA15d7a0b5bd3e797e0c76f657ef085e3b70df9dca9
SHA2567cbb8027830e44ff4015f2062e2294408db46a20cdb670cd30fdb64f3d0bb771
SHA512ff1963c75a2a597aafabc1806973fec3da82b96fe793250b4f66917f1fa1aecba0ad07ecc7bd23dac9c787b75d97fddf8a23056cb9d388d673987649960cf224
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD54e59f8d3b058a7338e2cfbb806bd2289
SHA1f05aabdd408db58fec03c81ed7f08afac3554cd2
SHA2569b31c1e00e264d5105ca17a6e376f0b14230f5ed19f9ca9fcc5b41c0e686e020
SHA5124ae5b122cc267199541984bca5d68c34d686413f545a9e3450ad4ccc68d559a3455a093043e79cf3ea8da5673f781ee636642843ae1621031f33cd6a5217c42b
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD560aa4a601d09b2b7a277268bcf0afb03
SHA131ce6c467aad795bccd57d97d2119b2f78e762a1
SHA256fa22814b57159709805bfc690fab0a27ae9e38db34720a7b03111b6b2229e558
SHA5122bc2bb32f7cf29b28a98300495ea1694554ce0e87f12d8ba35ce51028a5213d977cd36f4e10b2c5cda446b5faa46f564ebb9114aa86a8862e02307e7ca2eb88b
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD54bfd353dd5fa6d638602578556a83683
SHA1c40090bc20099f0decfbf1150e6f3815be956697
SHA2565a977c5df793f1f04b68c9fa9d070722f87be20c71ace245d5383a80c500b4ca
SHA51281c7bb2b5b0d9134416dd506caca788cad794ab8bf739fac2827d861d9fbbdd0342e4fb958f68bb04ca9f6079c657a85d156b4d70b130b93b0571849ab8b079c
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD524003551ea26ef6e6c07e53891e36d5e
SHA108feb90cef159b0bc9fec32909b6145be7fce7cd
SHA25620182d68250b03fc3f39f1c777b654e7ec0235cfb1edc16a968bcd83ce91e402
SHA512c2074388254df0b4864180b6e545722c79cf4e4eb010682a3d96636b9973a2c677eccc5f00b5e676f9f4df0da56899aaa321b24a461e365b350cffee15cb066a
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5b56cb4ecf434ed2783587de12c5a5bef
SHA1dbfe54a8db874129b1c30d39ff4aa431cddbf73b
SHA256afbf66be14afc3e70ab9649e9ef933e76bb063f058a62019ba6b92a89e49985f
SHA51230958bed0da2eba3442c789f4f30b065bf700e00fb98f3237c62736713256268add68786b3b23a7533be9a0772ca143d5514e94df69ea6d165f9c8ddae42eef7
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5be135ee83fe20a0add5bf70a5cdc0d47
SHA1e8d582d8fffab043c6821783c8133077eb20055c
SHA2568d37a477adc45d6dd9ea6e9b96088d9b6cf2582eb6252012483cb294ecead13a
SHA512383cfc5764523e3bc4d457738806d07e26e360cf9084562ba7eb0b13fdedb0cf58e3fa07ca6a3892114e820fe536b009da849d5628a291821d828116a1a83918
-
Filesize
65KB
MD5ac05d27423a85adc1622c714f2cb6184
SHA1b0fe2b1abddb97837ea0195be70ab2ff14d43198
SHA256c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d
SHA5126d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d
-
Filesize
171KB
MD59c0c641c06238516f27941aa1166d427
SHA164cd549fb8cf014fcd9312aa7a5b023847b6c977
SHA2564276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f
SHA512936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06