214b77bedc3ce7cd45c5c5df754ed273e1a7fdf959aa264c0903c3127a9804cc

Analysis

max time kernel
121s
max time network
134s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
25/01/2024, 20:07

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

756704d02c719518d4c93606649dd250.html
Size

15KB
MD5

756704d02c719518d4c93606649dd250
SHA1

737a05075e357ed5968b1758a959f9205618860b
SHA256

214b77bedc3ce7cd45c5c5df754ed273e1a7fdf959aa264c0903c3127a9804cc
SHA512

240cbf943bd4e1fc3304c7d24ecc20dd20ab9938a42fe94e116788d33aeb00aa0a54f2afb876995918c8e716c8357a357e20a9144460313bf5319f75308f3498
SSDEEP

384:F0A0TKebpIQ7Pvqsk8Yw6evBlsF0wjP/kLwZsw:idKebpRPvPr3kTkLK9

Score

1^/10

Malware Config

Signatures

Modifies Internet Explorer settings 1 TTPs 36 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-3470981204-343661084-3367201002-1000\Software\Microsoft\Internet Explorer\PageSetup	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3470981204-343661084-3367201002-1000\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-3470981204-343661084-3367201002-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3470981204-343661084-3367201002-1000\Software\Microsoft\Internet Explorer\SearchScopes	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3470981204-343661084-3367201002-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "2"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3470981204-343661084-3367201002-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-3470981204-343661084-3367201002-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb0100000046332ab722508540bf00312f0a24f120000000000200000000001066000000010000200000003e57ccf8ad0eb34f2608f679a872fc31985c0e0d0142d539e3c5a8594d606b87000000000e80000000020000200000002a991143cabe9402e36ca55d9a43d91d94a859e7fcee7e55b68b52cc1adcf3832000000018ef66a3f6cdb24236d6961c7fd33841d1b837dc7b4618990ebd32f922cbc69e4000000050b144b918ecf5ba4958c1615a9a34dec7dc097a495e966e77b3c00fa6935f604f5bf51230a3e9106c450b3b531b38900d4461e05c25c51db5052e250b7ba174	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3470981204-343661084-3367201002-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3470981204-343661084-3367201002-1000\Software\Microsoft\Internet Explorer\Toolbar	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3470981204-343661084-3367201002-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3470981204-343661084-3367201002-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3470981204-343661084-3367201002-1000\Software\Microsoft\Internet Explorer\InternetRegistry	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3470981204-343661084-3367201002-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no"	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-3470981204-343661084-3367201002-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3470981204-343661084-3367201002-1000\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\FaviconPath = "C:\\Users\\Admin\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\Services\\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3470981204-343661084-3367201002-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3470981204-343661084-3367201002-1000\Software\Microsoft\Internet Explorer\IntelliForms	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3470981204-343661084-3367201002-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3470981204-343661084-3367201002-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3470981204-343661084-3367201002-1000\Software\Microsoft\Internet Explorer\GPU	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3470981204-343661084-3367201002-1000\Software\Microsoft\Internet Explorer\IETld\LowMic	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3470981204-343661084-3367201002-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "412375121"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3470981204-343661084-3367201002-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3470981204-343661084-3367201002-1000\Software\Microsoft\Internet Explorer\Main	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3470981204-343661084-3367201002-1000\Software\Microsoft\Internet Explorer\LowRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3470981204-343661084-3367201002-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3470981204-343661084-3367201002-1000\Software\Microsoft\Internet Explorer\Main	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-3470981204-343661084-3367201002-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0"	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-3470981204-343661084-3367201002-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 00a4cd38ca4fda01	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3470981204-343661084-3367201002-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3470981204-343661084-3367201002-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3470981204-343661084-3367201002-1000\Software\Microsoft\Internet Explorer\DomainSuggestion	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3470981204-343661084-3367201002-1000\Software\Microsoft\Internet Explorer\Zoom	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3470981204-343661084-3367201002-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3470981204-343661084-3367201002-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{603D5F81-BBBD-11EE-BFC6-D6E40795ECBF} = "0"	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3470981204-343661084-3367201002-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	iexplore.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
2904	iexplore.exe

Suspicious use of SetWindowsHookEx 6 IoCs

pid	Process
2904	iexplore.exe
2904	iexplore.exe
2348	IEXPLORE.EXE
2348	IEXPLORE.EXE
2348	IEXPLORE.EXE
2348	IEXPLORE.EXE

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2904 wrote to memory of 2348	2904	iexplore.exe	28
PID 2904 wrote to memory of 2348	2904	iexplore.exe	28
PID 2904 wrote to memory of 2348	2904	iexplore.exe	28
PID 2904 wrote to memory of 2348	2904	iexplore.exe	28

C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\756704d02c719518d4c93606649dd250.html
1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2904
- C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
  "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2904 CREDAT:275457 /prefetch:2
  2⤵
  - Modifies Internet Explorer settings
  - Suspicious use of SetWindowsHookEx
  PID:2348

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

Filesize
914B

MD5
e4a68ac854ac5242460afd72481b2a44

SHA1
df3c24f9bfd666761b268073fe06d1cc8d4f82a4

SHA256
cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

SHA512
5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

Filesize
65KB

MD5
ac05d27423a85adc1622c714f2cb6184

SHA1
b0fe2b1abddb97837ea0195be70ab2ff14d43198

SHA256
c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

SHA512
6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

Filesize
1KB

MD5
a266bb7dcc38a562631361bbf61dd11b

SHA1
3b1efd3a66ea28b16697394703a72ca340a05bd5

SHA256
df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

SHA512
0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

Filesize
252B

MD5
559c5c9f12b753304f8961eec54b3366

SHA1
f5be2d0aacddcf861a9f4bf81e4e3fdb1c9add70

SHA256
72490ea5f8ef850fa000e6d7c396bb884bddd1dfdad59cfe0ce99a54be46834d

SHA512
d12f57f8fb64cf3d77a2c3a50aa450c5bed2e30752374ab463b98b7c4bdde7896a4967253dbe600ba62dbac7ee0fcc562f8c43f76453d31c23f5901e82d3c091

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
48f382e7efac46ee3046aab29f30df0d

SHA1
fdde92e80c1b839ef76efa70d178853284371b7b

SHA256
016bc5a8a443e0bc164d11a19685276a81de98de2d89c60e2ab0c580d6fac242

SHA512
fcbbe184ca64f2815e8b2c1271e0f59f0403dc9aab6776263d22583b90850c3a13d43ccd1360a33e1b40d67fa994b02c16e3a5403c1bd407721bb50134b34111

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
c4dc9c37b8bc9d8369f944c7509b7420

SHA1
969309498c74f24a3e778e2694395e31b5c33129

SHA256
36e5b99ae7f6e98c2dc2d6078408e5e04208b69f2d19112d27975f649e6e0dc7

SHA512
10160e8a5b4971fc8653f8dc9817d935d74c38f5278895b753ab41dc9cd599bec6a674afae1b501655f5368fc8743d18350d6fa69a91d89cc6f792b172a8ea68

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
9f49d5153903628d2d2404ddbea1bb38

SHA1
97890f5f1f2e7df6b37ec9ca5a6be985e706336d

SHA256
427572f91ea0bd7da21f72eb6626b28f6b1f30f19058370b48db52dd3b5c7a25

SHA512
a99ea6a188693f03e5d7363105ec053f5f31b29b2fe7c2e40d00f0b0598281c3b5fa04701a628473ffe8f0f6386c4eedf8b7b634496a146821c7cfaa72958013

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
f346e6e8fc2781e46f9230c08d14ea05

SHA1
45cb0b4155a9694efd7065ed9fc21cf8ce018282

SHA256
8fdad4b833daa77dc8891c10d13207ac46fa4695cdd2047ec2374eba946d90cb

SHA512
bc1a0afec0dfa629044ca3432870bb0590cc6205d2465fc38b362fadfe49bbe78d37d5cc94506a889167fe327934144e1e1597c184d635ae9666f21dc8a3c6ab

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
eefb3eab99b307ad4ac8854f1ef5cfb2

SHA1
d8a6f7bb7dc8798700af718666ad4ab7d6f9bdee

SHA256
73445c744aee5d55fb0d9f04ed8301c455cca464172e11ea7bd7a387b8244ae8

SHA512
06a38d2a610eba2e46490d3157b80e815209c2c721e7222aba6c12e10e91bffe9b3ce60fef6db4f1648040bd5f7110aa42f02a462fa5f22e44d068079df60175

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
364b56a19a6f16f5f5f376622cc83e33

SHA1
83d4d0ca1dc51a4a5754e03597a4a01fb968b340

SHA256
9bd6a6bbadc2903a2e345aa64abfef03f27a1d1d5811763afc20380ab97b668f

SHA512
12a7cfd5ce9a70ce48cca18d7ef90d524b7b5ae796f314712f138679ad267accd4640f362377b2fb6c611b8bcfec04a72f1ebd5c8b4d3bdeb9ba0e4dc10e6521

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
c5d5d6b63ab046a8753ac12c96e38f74

SHA1
c5a20a050f584d837f022339c779850071f9c563

SHA256
0614d55377110c4189c5153301b757a143760cd15b4f3d3b41081d9c83fbd905

SHA512
e1e6671ce113671e3d51e9a955c0d32f93eb036be21f20cf5ce261fe8d7ec9cf94d965cc15e633f4e591e2bfb9e33aa93a986c04ad26a38006de4e8f34d16de6

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
4475b717b265c461a82839f8ccdc6d9e

SHA1
46c14f9837a41af889d711bb7c66d5f082e80973

SHA256
1d478c059d0eec15e00f578611a584c6c11d2af4125d18318dd82feb672c12b1

SHA512
eff298fe58dc2f94095a09220c0387111a54768c7e471a5f4cb5975e11d8300cf78dba630b29949567b6de0d4f4bb35746bd334b08bd41ced889262f90b69aef

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
571468e6b42bec55121e2eb9bf4e8e88

SHA1
171bfe5b281ae5e554c708bfe448382017b891e6

SHA256
2d21ae4819ed2a976e6f022d59224acd206735507be54401d5eb751a91de47c0

SHA512
621fab03ed9f5f9a33a7760d1002d81660d4fabfb24286165bbdffa0b3ba9aa8b5066176be03e463bd3f27e7990f04daadf0260162c555ae0727ddae9ccca598

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
610e97a9ceaa5576633cb343e71bfac2

SHA1
4cffd039681a4b715b77b413071e1fd8b1c6ca66

SHA256
b0e1a4b1103181a146b6646361ff0e5dcb1d6685a10dad7b7f607bfc5447cbb2

SHA512
5a145f94f2a378c319c3a6851958a72d45c5ff903b4afe9e60f0c37b2e45077fecda345fd2fb81bc0cd38edf731bb810df79e4151019f891a1cc10f6e1bcebb0

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
d6bbee12d2d3db9a9a58e605b6e88f42

SHA1
dc3e7e296edabc2f4da8e0c31b267e0afd9d6df0

SHA256
5c2675f31cc146f176c10af647d410c2b8fbb96743e0830f51d9589ee8c918bd

SHA512
896195cfc1006f95f5d11f74129c3d480208805928992ec97d58a08cb73c6f7c695e242868d41d335a2317e99cb150469485929382c3c4850980e93aef189193

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
504e7e3304f86c80462e0fb6cf8c9490

SHA1
a91ad6b61e97b60a431e2e742bbacd836c591e96

SHA256
26357246e43d987737d43679193c19e8394b1d8da3cf4ccca13194c3721008b3

SHA512
0edb9ee5e036d69f65823654b0709cfed296bfde836d8e0ffdd270cbc94b939e65d952b14193a1c31918c5f9a3b8a8d1a7417a3170aca2e6216cb083d1075c99

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

Filesize
242B

MD5
cae7adaaf03c2eea615d0d40a1cd58b7

SHA1
35a7b09e0ba36812061b96b1160ade38f408005b

SHA256
fb954fb4fa67a8b8d7ce30793ebb7e4e59a486d211dae0d9882a1ea46e67cb78

SHA512
d06ea8e4cfdd8c279ba57c72256622c9be86357347c71b404d28dc99f5c831fcc08f3caf7048c2a83be357ed41fbc3e54d259392c1ef41a47f64058955ac7adb

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\Internet Explorer\Services\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico

Filesize
4KB

MD5
da597791be3b6e732f0bc8b20e38ee62

SHA1
1125c45d285c360542027d7554a5c442288974de

SHA256
5b2c34b3c4e8dd898b664dba6c3786e2ff9869eff55d673aa48361f11325ed07

SHA512
d8dc8358727590a1ed74dc70356aedc0499552c2dc0cd4f7a01853dd85ceb3aead5fbdc7c75d7da36db6af2448ce5abdff64cebdca3533ecad953c061a9b338e

Download Submit
C:\Users\Admin\AppData\Local\Temp\Tar4080.tmp

Filesize
171KB

MD5
9c0c641c06238516f27941aa1166d427

SHA1
64cd549fb8cf014fcd9312aa7a5b023847b6c977

SHA256
4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

SHA512
936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06

Download Submit