efbfe93bc12e598f835ec3c150000dee1471d9a0ec5e4345eba4b8f43ad5c432

Analysis

max time kernel
118s
max time network
132s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
27/01/2024, 20:54

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

7b41214b4616531fdec8ffa9dbccff6e.html
Size

2KB
MD5

7b41214b4616531fdec8ffa9dbccff6e
SHA1

b77f3340eb43925b2d5ce68f75384e4fc8d73717
SHA256

efbfe93bc12e598f835ec3c150000dee1471d9a0ec5e4345eba4b8f43ad5c432
SHA512

38abdb6aee67ee35b18b0b1836027141599c951cc0d815142cf2b94278ff83b0eb3974f289b16547ed573200b9dc9d99f8689073e54aff2fa3c75013a0643bad

Score

1^/10

Malware Config

Signatures

Modifies Internet Explorer settings 1 TTPs 34 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-928733405-3780110381-2966456290-1000\Software\Microsoft\Internet Explorer\IETld\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-928733405-3780110381-2966456290-1000\Software\Microsoft\Internet Explorer\Toolbar	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-928733405-3780110381-2966456290-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-928733405-3780110381-2966456290-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-928733405-3780110381-2966456290-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-928733405-3780110381-2966456290-1000\Software\Microsoft\Internet Explorer\DomainSuggestion	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-928733405-3780110381-2966456290-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-928733405-3780110381-2966456290-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{3B044221-BD56-11EE-B58D-6A1079A24C90} = "0"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-928733405-3780110381-2966456290-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "412550724"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-928733405-3780110381-2966456290-1000\Software\Microsoft\Internet Explorer\PageSetup	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-928733405-3780110381-2966456290-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-928733405-3780110381-2966456290-1000\Software\Microsoft\Internet Explorer\SearchScopes	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-928733405-3780110381-2966456290-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000580e1c8c6faee54b80ab28599b83677c0000000002000000000010660000000100002000000055e43001e8c5281e4e7643dde2571e18914d638dc60fdc4138fe8e2b9c00f383000000000e8000000002000020000000655d7376a398a44aacb81a0096d171cf38182a9183ed790938ce8fde150139952000000033bf2402ef0b592531658c652de6f69100080f82bf297c35495bb82817acc6bc4000000004e3a5ff7c7a77904c7dead8c9cb3653077b9d372bc4aa2d2ca356fa0571cc880a7109865432febd806f1e6500461483cae7f0c1939948fc0e22732757e3d93f	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-928733405-3780110381-2966456290-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-928733405-3780110381-2966456290-1000\Software\Microsoft\Internet Explorer\InternetRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-928733405-3780110381-2966456290-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-928733405-3780110381-2966456290-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-928733405-3780110381-2966456290-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-928733405-3780110381-2966456290-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 9002f4106351da01	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-928733405-3780110381-2966456290-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-928733405-3780110381-2966456290-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-928733405-3780110381-2966456290-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "2"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-928733405-3780110381-2966456290-1000\Software\Microsoft\Internet Explorer\Main	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-928733405-3780110381-2966456290-1000\Software\Microsoft\Internet Explorer\GPU	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-928733405-3780110381-2966456290-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-928733405-3780110381-2966456290-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-928733405-3780110381-2966456290-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-928733405-3780110381-2966456290-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-928733405-3780110381-2966456290-1000\Software\Microsoft\Internet Explorer\IntelliForms	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-928733405-3780110381-2966456290-1000\Software\Microsoft\Internet Explorer\LowRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-928733405-3780110381-2966456290-1000\Software\Microsoft\Internet Explorer\Zoom	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-928733405-3780110381-2966456290-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-928733405-3780110381-2966456290-1000\Software\Microsoft\Internet Explorer\Main	IEXPLORE.EXE
Set value (data)	\REGISTRY\USER\S-1-5-21-928733405-3780110381-2966456290-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000	iexplore.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
2664	iexplore.exe

Suspicious use of SetWindowsHookEx 6 IoCs

pid	Process
2664	iexplore.exe
2664	iexplore.exe
2344	IEXPLORE.EXE
2344	IEXPLORE.EXE
2344	IEXPLORE.EXE
2344	IEXPLORE.EXE

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2664 wrote to memory of 2344	2664	iexplore.exe	28
PID 2664 wrote to memory of 2344	2664	iexplore.exe	28
PID 2664 wrote to memory of 2344	2664	iexplore.exe	28
PID 2664 wrote to memory of 2344	2664	iexplore.exe	28

C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\7b41214b4616531fdec8ffa9dbccff6e.html
1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2664
- C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
  "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2664 CREDAT:275457 /prefetch:2
  2⤵
  - Modifies Internet Explorer settings
  - Suspicious use of SetWindowsHookEx
  PID:2344

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
06c71a6e0bf0b95ccb4f98089e64ecd8

SHA1
446c0cce0e1f124cd056f08c9b7512cc0064e36f

SHA256
0714bcb2c79c8be4244d3b4b4f97972301e120320f20e0a43ff2f5492f805932

SHA512
d317d4c680a355b19d898f00f008f53368718ffe64ff4fa7758a04567ce3e918baea4b96ca631817bd1a116bf50a1d2aa8ee95bc86186e477ab0771a8bd148f6

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
3dbcd1cfa628386a07e15f8c60a50bab

SHA1
f64bcd3e05e3dae34f145b26dcdfe1659697fbff

SHA256
b0d8052632eaa8b81c292a20a0eabd4baa3faff2b20b8b272f4fee7d50f2fdea

SHA512
cca690b46893fe08c0e81c8bb85936cc1ee46cb5484949a817013fe977c3ff62272694bfe84417a0d2253c41959548896752ae29129d4326d951967a97dca31d

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
6b4ce488770efc7c06f86415e40b8151

SHA1
74547321990321a58bd46515a7e3cfa7e9d5c5e1

SHA256
f37807481573c33725fce340d0e75b5e3a655d8931124d9de4307c637c5d2d1c

SHA512
d1300acdc410a8ccd87015ccbc757cbe138ac23a194b8231c40489806d1b0d02c6e56ccbcc7dccca77285259bd92c7f7f789acb8b7434cb1e8bcc8325541c32e

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
605da8cdea45c530e2b143ab064e94e0

SHA1
69429647bd10f325acd0a10b0ed13bd112783068

SHA256
63d79b2f9522c2d196b0765b61dcaa66ef3af518419a799f83db52b60309ad57

SHA512
3a015c6204055a2389bbd6664cb5033eced44d5c9d2ed3dfe07a6367ff02a902ec19f8708bdc66dba22779d9afef700c2e4b93acdfd3d58f8783d8923b299fdd

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
6ba14150620c032d33c5e95776efa85e

SHA1
ce9bb7ca1542a964a1120bf5094830473ac5b9dc

SHA256
f65a4c438cdaf32225006ddcf64a31d1ef0a6be5845a89d6756a38b26fb2c944

SHA512
271daa6d12c24193f564916baccda5a1ba7b4cd681680ad71d51c3bc91e85fbb3e7e25cddb272404cd7e49c9129d2780468f566bd82e6f5dc49c787eec62a468

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
759c03bda1f3447178f49f34880ef762

SHA1
9b7f37827e264194d059634f7e53e34880f29b3a

SHA256
ec0aa7d629963f300239ebc456344572d089b81bf9554bb940728fe87a84edce

SHA512
40be0d7065be213ba60fc0e6e24a77c6850b9b4eebdb9ec860c940f567c321f262add5837015764a9cd09de26f43b365adc86f13101ee87384554014b0a2bba8

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
3704f4961e782a4f391ee1127f23367e

SHA1
411166559a80f65ded80334244d286f09cb32054

SHA256
5e6a5de31e8da4a110bec4220fed840a182a73a93bd9297860572215c72d58a4

SHA512
70635ebdec2499a5a0d44bdbea212f30ebf2c3fa42b805b069d70274fb0f732b1d838de39fe12ad45d473b67b4b92a9c9de00ce873c81d3693d812ecda36881e

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
d4d5ccddc4774f02e75670346cebebd0

SHA1
d5b7f87c898e517dcc40fd9848d232c039497215

SHA256
f3c512476258e83e83c28d43b408f4aff1417deb2bdc6b160545e39fe08c0794

SHA512
1c13c0dd4e3beee207ee4c1ae36306d5937a673b0fc39367dc4c423b15cac6e09757af7cdf5619ec4b58fc9459ab35711bb7fa59fd9dcfeb96f49f49933ad8a5

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
da9d515e16119d5a1a1ec60975d36d31

SHA1
b0b8a9ac0a8dd2716c703ea2d036a866b921499b

SHA256
74c396939a146f989ecda25a9513a2f2542acdcdb294f4d003b76fad2a8b4765

SHA512
ee37d753d3527a4846798224bec52e96aeb1c08757135f0c6ac26c6488c5452e6f318f4d7ed9baaad5961ad8ab3ea0a6425f1cae70967c7e17634bd442877be9

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
aefb8841b7567fbe929e1ef920c48f1a

SHA1
d308a5f9fce8a0215644261863f801ff1fea9eaa

SHA256
449ed53ee76d098c4a2bc2b40e34c26a1e189006a871478da6715c5c7b05c0aa

SHA512
4c5d1f8efba28992528d8c73d2206776a9c53a3b82b0be609aad9ce87a01a9c24f98094168f14cb529425a56bbd51bc32bf25b1f6a41f45633b30b2350d36487

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
fb07667ba72943cd5cc85997bc33605a

SHA1
6435ac9e49d6fcf2b71af84a62326984c27dd4ba

SHA256
f2c9dbcd63219baf14631238a49158d79f0376d4812d697bb97d42dd84d75915

SHA512
77e87fc43e4d11acccdfa70876752f7a75cf3b4644bd6df3a42c6d0da668a97a4a7e2cd2c3c46b3614879a1582d5d034648873dda1baa234e8627da980654d2c

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
624244ef3e858d202d3a6c6e5df5780d

SHA1
0f67d7fc485bdc5a479cf2f493ffefffe5b60248

SHA256
16223e7107fe417d4913ecc742b3332fb6b55aa45e69a0344d366da37571880c

SHA512
9dc98a0aac342fee18ba738ec7403a45392a87bf242e789b4387ca340b127abdeac65b34725436e43a3ab9521f5fd8bb856ff62163d0f83744ab5da2a203cf1a

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
1ed4ba0e8bbed46c24939c341f4a373e

SHA1
a2e82ed0bda23a5a201e89794412a64a67b2dc8e

SHA256
c5cdd93dc34b42b4412c703ab3b6a9f95157103e2c36abe836cc2c59157346c0

SHA512
cc471c52dbe96ed4ac1a343a4bc4230d75f7bf0a09c98fdb066ffe0b29f9bd51d1f4d50e3bb645470633dd25f37d3ce8ffe5a46d845ddcd94ddb601df0cc3ee7

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
2f293d19527b015961d5115689701a77

SHA1
50b8cc44708d92767391588350962b7897f5dbed

SHA256
4d46fe88a78c198c016524b3d3ccc8258152b9baf4662bfa1e6027494d50731a

SHA512
9822ccc38305f7f12cb514a0ffd03f2dcfc4b0a19d7e182f498b1aa361416daa98107ab70f25e75dd72b85600c0e952e6ba57014524c830301ba5ea5638b8448

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
4c63e1e34346c6bc61fc75b7c416a42e

SHA1
05f46e224f3101f82b70ba496689486e6ee9d1e4

SHA256
b821120e86796aafd50557640e8187de6a72c0877564fa40836309fb49838b57

SHA512
e87575cd20732940ce2604bb0246c4d899812929fbabccd7f3877df35b01c83349c2efd785fe6faa2963236e1dd30997cd5ea4013de67c64e64dc938553f90df

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
2d7d25719b8276ec461f4a1ef081e70c

SHA1
2a9d034cd535593a0b71a40892f63377820efcf8

SHA256
32f36028456d9d79479883916f3e5c8740a09bb7b61758c62174a2e9cd246219

SHA512
b9754c866579f870fd07bd50faf7ba11ff670d9687598c196a66e7f64b3fcf258582dec42dbba993c70557b13d489ce1cfe81ba6d07b9854e153abca12e59851

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
8c807d156ca24475b47ad6e73e11436e

SHA1
9f346d5581a45619fee02a8798c5416671b11a8b

SHA256
3091c43850e8b715945ef41f721838c19be89ad0dd6ab127f58a00f3ed2c9c1e

SHA512
0ef1f66f667d6e9259a70c44277dcff9d5da19852f1dbab7d04097ffe8a6a95a0a123cd9a4277f2ded55beec63704d254a0b3dc4ce327338d9b404325edbad79

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
d59b3aaa7eeec54d72dd00d165ca4eff

SHA1
052205533b86b309215cc0afd90828f0f4f8b98c

SHA256
f7409ae0237d12c9ec85fd9210dbed072991d94c1994cc9b6d11a273047ed8ed

SHA512
65dd827dca14eeb96813c6b7330a96ae82fc0360a928dd25249072876ed15e86a315bc46b15ee0a0ec63da7f46f0dd2c70306b29042da053fa4331f8de7532a8

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
d2f3a8fe9ff27d8c77a40edf46c413ab

SHA1
ec5797565546ce23b048d2007938531590b5954c

SHA256
e62825826d16051e45dbc9d3ad945ab44a712bb35bf5fac2d7b1140c0117d696

SHA512
e7d547c1af9658fe6c370a1a501e80bdc69cf122c919122437547e3030e58ff696fcc93a23e17a5ea74b7ce13b4d630ae858493da9c5090910571b816c6b360c

Download Submit
C:\Users\Admin\AppData\Local\Temp\Cab4E9F.tmp

Filesize
65KB

MD5
ac05d27423a85adc1622c714f2cb6184

SHA1
b0fe2b1abddb97837ea0195be70ab2ff14d43198

SHA256
c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

SHA512
6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

Download Submit
C:\Users\Admin\AppData\Local\Temp\Tar4FAC.tmp

Filesize
171KB

MD5
9c0c641c06238516f27941aa1166d427

SHA1
64cd549fb8cf014fcd9312aa7a5b023847b6c977

SHA256
4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

SHA512
936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06

Download Submit