3d21dfa9f199f495aa956ac9dab889a5e95db2508dcf65ccc131346037288859

Analysis

max time kernel
135s
max time network
131s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
04/02/2024, 04:54

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

35256345/Appendix/BroadCast/MultiCastChat.html
Size

262B
MD5

419475a05af008a3942d999d95e269c6
SHA1

077f6baf43f929ff3e7205aa9b61fd52c175f4df
SHA256

11c081d37a3b4e343cdbe374af5538a5c4c9482175455c4f90263fc9c2ee4dc7
SHA512

a191120ae64c74792e4c1a7ed5b903c0c486a1dbb26cd6b693b6bb402d0c1bceda8a28316245c3ae78831e04b09b6541db625df43a367cb07613eca8bc178344

Score

1^/10

Malware Config

Signatures

Modifies Internet Explorer settings 1 TTPs 36 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-452311807-3713411997-1028535425-1000\Software\Microsoft\Internet Explorer\InternetRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-452311807-3713411997-1028535425-1000\Software\Microsoft\Internet Explorer\Zoom	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-452311807-3713411997-1028535425-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-452311807-3713411997-1028535425-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "413184320"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-452311807-3713411997-1028535425-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-452311807-3713411997-1028535425-1000\Software\Microsoft\Internet Explorer\Toolbar	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-452311807-3713411997-1028535425-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-452311807-3713411997-1028535425-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-452311807-3713411997-1028535425-1000\Software\Microsoft\Internet Explorer\DomainSuggestion	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-452311807-3713411997-1028535425-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{707B2F41-C319-11EE-AEE7-F2B23B8A8DD7} = "0"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-452311807-3713411997-1028535425-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "2"	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-452311807-3713411997-1028535425-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000429d3af34477a14f8b2dd76917334189000000000200000000001066000000010000200000006b9af7555952abb7eabc71265cce1368ba4da80d0bd9c80881eb35d07d4068ea000000000e800000000200002000000048288411cb4db295bb0b6134f66afc255cb3b3339424bfc61a973c82ae5ede5520000000ade6f3dc105ef694b9bdd0934c92ef99458db723269a4fed1eb642f648894ce2400000008a8c8d7375da4f160e2e621cc2249efd5537443fa2e8cfd2c9b994d1b99355ea7095350da6742133693a61fbeca174d48bdd2e798b49ff673c4fe0042cc50fb3	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-452311807-3713411997-1028535425-1000\Software\Microsoft\Internet Explorer\LowRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-452311807-3713411997-1028535425-1000\Software\Microsoft\Internet Explorer\PageSetup	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-452311807-3713411997-1028535425-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-452311807-3713411997-1028535425-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-452311807-3713411997-1028535425-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-452311807-3713411997-1028535425-1000\Software\Microsoft\Internet Explorer\Main	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-452311807-3713411997-1028535425-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-452311807-3713411997-1028535425-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-452311807-3713411997-1028535425-1000\Software\Microsoft\Internet Explorer\Main	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-452311807-3713411997-1028535425-1000\Software\Microsoft\Internet Explorer\IntelliForms	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-452311807-3713411997-1028535425-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-452311807-3713411997-1028535425-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-452311807-3713411997-1028535425-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-452311807-3713411997-1028535425-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 10d986452657da01	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-452311807-3713411997-1028535425-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-452311807-3713411997-1028535425-1000\Software\Microsoft\Internet Explorer\SearchScopes	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-452311807-3713411997-1028535425-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1"	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-452311807-3713411997-1028535425-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-452311807-3713411997-1028535425-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-452311807-3713411997-1028535425-1000\Software\Microsoft\Internet Explorer\GPU	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-452311807-3713411997-1028535425-1000\Software\Microsoft\Internet Explorer\IETld\LowMic	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-452311807-3713411997-1028535425-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0"	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-452311807-3713411997-1028535425-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-452311807-3713411997-1028535425-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no"	iexplore.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
1228	iexplore.exe

Suspicious use of SetWindowsHookEx 6 IoCs

pid	Process
1228	iexplore.exe
1228	iexplore.exe
2900	IEXPLORE.EXE
2900	IEXPLORE.EXE
2900	IEXPLORE.EXE
2900	IEXPLORE.EXE

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 1228 wrote to memory of 2900	1228	iexplore.exe	28
PID 1228 wrote to memory of 2900	1228	iexplore.exe	28
PID 1228 wrote to memory of 2900	1228	iexplore.exe	28
PID 1228 wrote to memory of 2900	1228	iexplore.exe	28

C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\35256345\Appendix\BroadCast\MultiCastChat.html
1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:1228
- C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
  "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1228 CREDAT:275457 /prefetch:2
  2⤵
  - Modifies Internet Explorer settings
  - Suspicious use of SetWindowsHookEx
  PID:2900

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
ab61c2c77a453bdb77a116ba579279cc

SHA1
48581fcd4fa21b51d5c00aac5401c29547f7018e

SHA256
ebf32ba7338acd50410e9e3dcbc6258efcf2cc45ec817b9c07e5e6cbe5b63a59

SHA512
5ad244af8994483a894cd39df367cc824f5a61215541d71568872994661b1a25858db1663559d7a3afb87d81ddda9676bbcdfef53f2d4e3a6f4a47c3c7ab2d5c

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
8331cff0dd3053f6432e920a587a0e7a

SHA1
5cbe90ad31784bf15342b91635a1faa612bfdad3

SHA256
aa01f7bd56505613af757716ff6910946dfed613fc22ca42081a568e894e356e

SHA512
9c45f63e14ccfd64d3e47fa6bac7926ebef4b6031c51d7cfa49a3f0c881336fd63cfd501b431f0c2fd50b151f26a5ea84ff136a84f73c39f8b98c0bfea53e522

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
c5d00f05b313b2de7ef9606477b9bdd6

SHA1
f8d5fc76c8da323ac8ba6864528147322cb2e081

SHA256
f154ba3393b18a96c1548cc17dc4e9652e032b670b375a0ab8ebb0b424c23416

SHA512
33351fc4a13700f602db20c3d0796a5d0c6c3fe94dc239a2056a0fb2895a073bea32d8281442f703da539f34beb507f458d090c2348a8f7e799d682406bb242e

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
e3ad6fdfe5975bdd62cd8b1903426b2b

SHA1
3385e818a9438e588835a72328cb7a2f0851e662

SHA256
737773ed60f4a485c6ef9369e1bb1a6c01e0afb21007841c93de2cd3f4bd747d

SHA512
de166e02303657fba71573ef18a8d135e44c65a95fdf52a8d938f87eb9c5bac25e7cf86d0e5a5d817203a874aabba94c42de68631e81b9639594d98d58d2eb6c

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
b271bdb3f55429f8affc98a80aacdab8

SHA1
cf6f6df9d1aafe3f2acf59ea0209cd6d852871fe

SHA256
826fa3e75196a4c0cd1fd01573c7618bed3767920f9de6e7b66111f48e25cbf4

SHA512
f0bf4b5925d3c1164ce014251ae2313e8bb1101cee0747c8fc311f147cad66bd6e6b64ffc8a53a46c4cefbf631307185bbd4fd2905eb093d279ee59f99bf9204

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
4664d790f9ca690e8969bdfe1be718ee

SHA1
09060731b4c2d56b4dc7429e1edb0e0e8c43bc6e

SHA256
671b27b7af9a5958d1d5a4cc9642a3cf9572d4fb1e65d62c45c98c9eedab8725

SHA512
609f1628fa87835f6a2ff1691c3b444bd2a30a9ece055aacf3d2eb78c2787183c7275d6c9ae8a2c060df9e2e6fd6c25099c3a6c9e4d762559650ca3afb04dde4

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
7f4e50800a894ec4f1a63893070a65b6

SHA1
a718e3ad126163138ea616629a6b822a64b5e9d8

SHA256
2ac25de604e4bb91d7b247a6a5723c32a3b95e64be3a7aea376d05b48ee0aeca

SHA512
3584b3e665e3851532b545e0dc009459c7f918081b2c96bbf7acb517956183412ee1f3a848a19f70bc963af34a6972bc2bbc28c64c78668d5f1a86076bd538f9

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
f6076553331e93a8974df3aefb633bda

SHA1
15c23165924cdbed1b8a7e6668214d3d8662ad29

SHA256
6f356a20b59b983b152a57bca2c0b7740bd0a95f1cf1e2a42c708e9e0bdf37a5

SHA512
552c262d78104eb80f51d82139920d608c312e9ae0c0a4d8a765611500e2d2c00892fb57d0794c139fef1dfbf7f18b6bea99fd974c3fe281656790fd7ffd3dac

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
7e9a268b2daf02559024c9332b4b88fa

SHA1
c07bc631766ccaa68f843cc674e30044f030a3ab

SHA256
de71388574cdbfd865597b255af35bb161876e9c0e956e0ff3ad4404a43f130e

SHA512
72aa3eab5f778b222b279d3a8f6370427c828b752ecac9e6be0feb5532404f0f45b1dac6a97d3dee656cc7003a37ddaf81f91ce581a0877af8e7629ff6bb8e88

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
5d50f8129a702344e2aa771da5759bd1

SHA1
b2d671df1da17af87a37ad3e54384c9717686dd5

SHA256
ceab3c145fe784e1d1f9ae95e8eaeb31a51ed6c2917d888d0aa45724dc0f4b1f

SHA512
9270c66981360ff2ab1042e59ca2c007fd766ff22f8e27b1d17432707da56df75c66db72d73526821fdaf7944eedc9bf13e60879afbe454bd5598d62de19df90

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
696a00dd8a72e7b03e264af5af836b40

SHA1
d79c8537e72995f2d508a6fa34aa91b8a4f8bc2c

SHA256
826fd47e495176a6e6c76f94aaddafc6726d74a67f2df63ab02706e271e59f66

SHA512
82db9189db9e5598fb7dd0f8ab69dc33ed15abb1e4e7f8fe8d9e9ec7e4241866c259cb19f3d31b455006dbed69810769aecaf61fcc981c3d5e8c81dd51c16381

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
3c4ed51ff6768c1a2190313f1f6edf7a

SHA1
d8bf72ec3a92337207a7a950d74a4c014d703011

SHA256
1df23e921f7df0a28bc36f168752a5e0d289af54fe9718d3e62b1d30404d50ad

SHA512
c48d733e34e767e7271547bdb4f841e08cf57e74c57a6f316390eb121a7738aed8275873cd04a9db849bc90a6c5f3754980099ee32911ce9ac78add48695c59a

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
9763fb9aaead87438757be46934497d4

SHA1
47a201d78ec3a5b6789aaddcd775819a6c99b462

SHA256
2816cc05bb06160af4a69b3aae267ff165a320a0407f4820ad45f0be2b201db4

SHA512
10dad66e02d8a11cc743be5ad04fc9957c7b60d93204657c20d98b4d03885958eae045b6497c774080ee594f24187c7a8fa9143344502ab9a376941b8475e227

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
95bae7284e73ab5acc42d782f0af578b

SHA1
153ce91906df73ee2db734789c1e46cc32714e6d

SHA256
8d11d334f9cf12900805ed817a03040269878ff1300384175fe7ef028d24c193

SHA512
f2417f3183f840c1826691c2376a8fa3dc54179305e73808a9d8115938e669ece08048f466d19ca10dd8bfbdcc6105127d07d4ac6c36c87e649d758dcdbbeaf3

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
b0f2c440f8e749c6d3c21843a87bedc4

SHA1
69077cd106460be04210ee94ddba25ad7142747d

SHA256
82578a0cc7fa5c7c7d0e78ea34e3e0cde7aebd7e57cb9630da943fc4597c443d

SHA512
9a730ece84b0921847763b22e76187998391e04389926c77dc76981c6225eef56b92ad2361bfd2b810ba11b17f2a873b1e9b8c83c2439bc3aeb5e26a4a2be9bd

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
178214b79b3fd5da2ddd4c597362a2aa

SHA1
e2e30fa8b8c12344c015194928c9b48e3d4c45f0

SHA256
ed2f38ac8d5502e3d3958638614e1ee9d6adfe59a98dfb6acd8fdcc1bcc118db

SHA512
c0a218ffed784c754c8c2a07b6bafb26864a89fe9381ac1b694272258238176d1780c5118e1f10e49177604ec331dee60d329cb55f706cd7af0d46f98f90e0e0

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
d4cc2b77f61ac630842dbf6544a46605

SHA1
8403a487d5327094b32fde9df2f44d431749aea6

SHA256
64b65609692305ab9e1540850e9378091314dff05393b883e7bcb7c4534d812a

SHA512
afb3129d476517fada1805cfd8cb0784c9fbf6690f732bd124f2e84a7e4fdb2ace9c406450412dfd7fbce05c971cbe01a147a6b1ac4ade1564fca616dadca530

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
49ddda917f0d9bc47ff9bf9f5a5bb3dd

SHA1
723acd6951f4caf932d4ee01126397385c43a564

SHA256
e7fe232544b901462973a6f41bfd85703f25b724ad87212393460d42e34f104a

SHA512
1f9d2189df52841ca55683b817cb75d554efba4732bc4a0828e76769f63770f7fa4f5d4ad1710384d9fb9e1c579a745930df08cd1d658042c034e410ba599da4

Download Submit
C:\Users\Admin\AppData\Local\Temp\Cab77C0.tmp

Filesize
65KB

MD5
ac05d27423a85adc1622c714f2cb6184

SHA1
b0fe2b1abddb97837ea0195be70ab2ff14d43198

SHA256
c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

SHA512
6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

Download Submit
C:\Users\Admin\AppData\Local\Temp\Tar78CE.tmp

Filesize
171KB

MD5
9c0c641c06238516f27941aa1166d427

SHA1
64cd549fb8cf014fcd9312aa7a5b023847b6c977

SHA256
4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

SHA512
936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06

Download Submit