Analysis
-
max time kernel
121s -
max time network
132s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system -
submitted
13-02-2024 12:15
Static task
static1
Behavioral task
behavioral1
Sample
996747ccd5c609b47bb180b4464ef6c3.html
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
996747ccd5c609b47bb180b4464ef6c3.html
Resource
win10v2004-20231215-en
General
-
Target
996747ccd5c609b47bb180b4464ef6c3.html
-
Size
350KB
-
MD5
996747ccd5c609b47bb180b4464ef6c3
-
SHA1
82c2014401f7b1810634bf3dbb00aeb6a42865a6
-
SHA256
cb8edca0a49603f7351a277c5daf59ee26fb17de38fa2000e71012389dd866da
-
SHA512
ad44d337ae6a8a9e148bd747f33d2650c77ea134554dfb56a203f098ddc6f2e21777ef03f0a72d7f5673bcefe7621f4bb1d42a1313a72046908f5f3136c3612e
-
SSDEEP
1536:8KlHH0Gn2yMtLyMOs2pvuipvrcr/yMgV2CyM9MQyMGTHHtXyLi+rffMxqNisaQxx:/eyfkMY+BES09JXAnyrZalI+YQ
Malware Config
Signatures
-
description ioc Process Key created \REGISTRY\USER\S-1-5-21-1603059206-2004189698-4139800220-1000\Software\Microsoft\Internet Explorer\GPU iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1603059206-2004189698-4139800220-1000\Software\Microsoft\Internet Explorer\LowRegistry iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-1603059206-2004189698-4139800220-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb010000002213d23592f6d648a137f9bf65c22cfa00000000020000000000106600000001000020000000e3a8b549735b355ea602e6801c0d921921f03028b536936825ab80e901273252000000000e8000000002000020000000a59a76f91969e004ae053d68e0df27bc75433d0e6184520802702425c36e6d2020000000dd72069702acf9c743934d7e59aa59f173ac7f836a20455cb7e8fbb19241d20c40000000c6d2054cd14b292cf69935d7db08783757111328600d6647d84b8d4d70166802546bd5a83f16dbc3f09d6a9be04da24d3d01ebcf35d94761b07e4e4d2827cc1c iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-1603059206-2004189698-4139800220-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Enable = "1" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-1603059206-2004189698-4139800220-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch IEXPLORE.EXE Set value (str) \REGISTRY\USER\S-1-5-21-1603059206-2004189698-4139800220-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-1603059206-2004189698-4139800220-1000\Software\Microsoft\Internet Explorer\DomainSuggestion iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1603059206-2004189698-4139800220-1000\Software\Microsoft\Internet Explorer\Zoom iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-1603059206-2004189698-4139800220-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{A289F8C1-CA69-11EE-A628-46FAA8558A22} = "0" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-1603059206-2004189698-4139800220-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1603059206-2004189698-4139800220-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1603059206-2004189698-4139800220-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1603059206-2004189698-4139800220-1000\Software\Microsoft\Internet Explorer\International\CpMRU IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-1603059206-2004189698-4139800220-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Factor = "20" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-1603059206-2004189698-4139800220-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-1603059206-2004189698-4139800220-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-1603059206-2004189698-4139800220-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Size = "10" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-1603059206-2004189698-4139800220-1000\Software\Microsoft\Internet Explorer\IETld\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1603059206-2004189698-4139800220-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1603059206-2004189698-4139800220-1000\Software\Microsoft\Internet Explorer\PageSetup iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-1603059206-2004189698-4139800220-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-1603059206-2004189698-4139800220-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = d04ea490765eda01 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1603059206-2004189698-4139800220-1000\Software\Microsoft\Internet Explorer\Main iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1603059206-2004189698-4139800220-1000\Software\Microsoft\Internet Explorer\IntelliForms iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1603059206-2004189698-4139800220-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1603059206-2004189698-4139800220-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-1603059206-2004189698-4139800220-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1603059206-2004189698-4139800220-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1603059206-2004189698-4139800220-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-1603059206-2004189698-4139800220-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1603059206-2004189698-4139800220-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-1603059206-2004189698-4139800220-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-1603059206-2004189698-4139800220-1000\Software\Microsoft\Internet Explorer\International\CpMRU\InitHits = "100" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-1603059206-2004189698-4139800220-1000\Software\Microsoft\Internet Explorer\SearchScopes iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-1603059206-2004189698-4139800220-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "413988423" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-1603059206-2004189698-4139800220-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "3" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-1603059206-2004189698-4139800220-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1603059206-2004189698-4139800220-1000\Software\Microsoft\Internet Explorer\InternetRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1603059206-2004189698-4139800220-1000\Software\Microsoft\Internet Explorer\Toolbar iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1603059206-2004189698-4139800220-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1603059206-2004189698-4139800220-1000\Software\Microsoft\Internet Explorer\Main IEXPLORE.EXE -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 1208 iexplore.exe -
Suspicious use of SetWindowsHookEx 6 IoCs
pid Process 1208 iexplore.exe 1208 iexplore.exe 2408 IEXPLORE.EXE 2408 IEXPLORE.EXE 2408 IEXPLORE.EXE 2408 IEXPLORE.EXE -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 1208 wrote to memory of 2408 1208 iexplore.exe 28 PID 1208 wrote to memory of 2408 1208 iexplore.exe 28 PID 1208 wrote to memory of 2408 1208 iexplore.exe 28 PID 1208 wrote to memory of 2408 1208 iexplore.exe 28
Processes
-
C:\Program Files\Internet Explorer\iexplore.exe"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\996747ccd5c609b47bb180b4464ef6c3.html1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:1208 -
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1208 CREDAT:275457 /prefetch:22⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:2408
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5c2770dac08c9364b1da9ce0174d44479
SHA120afbb82e488eabb48bc8e8027abaf38341dac3e
SHA2562132ae0823288eb96e0da18d815e08021edb5fca29eb95ac5551c767b524da16
SHA5125acd8236dec38ce283b3e3509c06589cdcf519e56d4ae9932654ab2670a1240d6e49b5c4013c122e96395c21bc6b499a7c504db0b1bb73670dedd128548fcfe1
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD502b29e67ad2ddd10830d22bf69a9c62d
SHA1bd3ba935fe22aa9811aac02cbc4e38465590e223
SHA256a9ef73cc6434e22be077816dc25c2be8a588e3f872bcf31f077be4b6d5755e65
SHA51286380b4ffd49aaded08c18107ccf80e3147b77189c9e0a7420debf95e33d7284afbccddd51b266bae4b0560cf01c5dcce0d8f4d327fd70c70b8fe5cfae504c9a
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD567a0093c1e93e9b40c090a6fe31f249b
SHA125fda9061315327d1e8aa17ea686de3ddd7b13e4
SHA256b0936fdbf50fa2dfb9e87136a429e7925bbdd9bf18b883a1832c42039960619e
SHA5120736bd4422f9ea9d728e814944fa1660eedd3b01e7a025385eca0026126bbf3eea1fb2b02be94900f1a6d69001987259c4200a36d95df70653c7ef98c7c06516
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5eaceee1604f6ab5c39789ce594568001
SHA1bf0a852ad1a4be939aaaa1aebd2331346e8d238e
SHA25605ef2f9f5b64a3f3b474d938f99ac55f8585ff64fb4f1837cedb14ebcd74c6e8
SHA512fc69b34d2a8cdb8f66eea50e855b063dff27e8406305c73d8df17907cf2809525900183a8343e8274704d46fc5f2c74e6e873af69c0609e841772f5d95c0297d
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5cc83176450b32bba6f617b3e79d4e6bd
SHA116f855e17e6a4c5a7a715cf12a22b5934ff59b39
SHA2561409a2b4a40eac023c524c6affccb8e364b6b88cebb446bbb21c378e14f24ebf
SHA5122eef88bb75c1526b525b897f376a5e552f2f1c0edd06a32d794dd6a571b64e475b58a8f811443c9f26d17201b3136e82f4b036d6ac7cde7f4b75fc2d0a725dd1
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD58839bec52e406cb52c263aa94d038502
SHA167c43fd6ef91453df86b8acf37c30050f699d840
SHA256b01fc26d4ba0ed03b900e5c0bd11627259e034919b22bf490735dca7103387b0
SHA51284731352b4b777d52b7c0698ebebc3b688abcc0523d095e2d6463cfb16630f33a54dc21d1bd53ad7f494cd7336141c77fd039b4070f1b0fe0314f323bb8f1a08
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5c3bed776c42eac9067fed1b2de7ebc49
SHA1d3147d415bddaaa661605569c9a675e9009774db
SHA256788f1417574ee2559b44a0306c6ac0b58312f8c1e5ce2da5f76fa8e1adbffbc9
SHA51227eb87d5dbbb3c166fa5c656423dd3e87663b6304e1e10cd9c8abce9cb472d35eda50d6244e8760f2cb5bd491197c2d2537295cbc97a9293e4e78f2e9e7cf63a
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5344aeb450eea5511604aa2e481426bf1
SHA11853d43b88e174da3dd9b84be38bf02858b7f8f2
SHA2560f1c13de83844e52be0a0fc1538923a7f21bbab20aa31b98c9b6b48900121b17
SHA5127b4069edbd5025f508b4dbccd9e2b22058a6e7b871dd109cd8b4d997bbdedfb98dfbe2d62791809063a85426928e54b418c8fa9348d53eb2bde8663e9f11caaa
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5ee215fcce35f925852d1c069ac26c0b3
SHA1f8fa1112495077b55c9db9f9ef88f964de2473e6
SHA2564b08d1bade90e3cf6db4257b9df094eb35a411d485270784dac054068d79140e
SHA51253e833093d5bf1de808d56a4beddebb74068e462a7fe7744bf88f4b82e33b3416a54c940c6e44d835b666d392047721ba541308043baf0d8b39134e850fa318f
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD51067887799b1384baf8b59f9d079b65a
SHA15aa221374ebd50081a225d9be0b5b75182454aea
SHA256cf17473d8c6b971f5e67ca2df90fb022fc7d90b75b643b8ce9a44d6935ec2e6b
SHA512c194fa792eafa7883a36585e9edbf46df6e8e6146f6709be20c759b704c10192869bbbcb5a1b19a4235f5bc564bec98af0afc719d7a31d7eb57673395d5b79b0
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD56ec29989aa570354ce15a38a8c1eef14
SHA11f5d53b7caf03c88a294b36fff53f19c5c99e664
SHA2569f3b9864a555f049d2d32e494493bd1f91ad73794d3102155f84b3a8eaaee42f
SHA51282aa49893148e3f3ed6409f80da755f1ee04996b421a0d7f66bac81759d2733f40e62dc663c21d6e030c59c82eaf71f2acc4af5f375a0ceafdebdbee76dc1fa0
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD52464890b53bb9ce27df50125b69dd3a3
SHA14e16320d53c421f285763ced90fdfdda52810151
SHA2560879897955e7e8c7c878e2722cd252f9faafa75b2ec8c82b171d0eae04ebe25e
SHA512f98649869a7a66b9f64c075bf5e9e5c81c278af6284ec54a502f0773efb5546205febae5aa24a2871736cda83e90ba9e75fe326bacc18e99f1208764a80e3ef4
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5529e71880ebbb97364a06b9de7859012
SHA1ad43bffb1dbc9036f91750579644c1ad8eda8d61
SHA25600a312302853bf018a5b8c05ff43407d76c100ed034c4ca2123af19ca3717891
SHA512f958fefc82a07c603628498ec615fe92628c0b378191e8e3242eabc32bb029d910229939402ed2d1207c812ee839c35a4c722f2a53acd67386ebb23978bc6cec
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD59b7a2c945578db6e7ad4d8f75332d097
SHA12df68a5778f2ae2abcb4e530396ba1c3e293acf6
SHA25610eb0ac1ac3727dffe18e6d29807790ae3534c7d96f44527699dc88b83cca9ef
SHA512cb078c8b62b224557bd771725f50e376bcebae504eccfc698ee645efa134677b69cfaaad13a1a8fd35e3503b21d71d6e0388b7d68c882bc8e867d9058d9fe3ae
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD59cef090dd4ed85144455514a9c560206
SHA1905add53cde06b3fe4df4f82f498f01411be9cef
SHA256f27f2153867a3ebb7700272e8b03e808af71b2f548843e5564b64daeb87b98af
SHA51296e28ecefd312aaac2a29608ba991b882cd38c0ac3fba1f69f270ac21cf3edf7ab74e2a3ff8d38293b5dee7f147e0d9ede5137ee6a02316d6f3e074a1d86cee5
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5ed2e6fdd4b8cf420f50ed28992beea39
SHA1b0ae636b07087ded96f476f36e3f377cba30355a
SHA25655a3dabda465de2753f1cf716d18f386eda1697e13722831c15b9dcbea037d8b
SHA51284f77e1e2b4cdebe2735942b37473d891e81ce4c312ee72b9aacb6c720d7368a8d65051a9ce3a29765ce2e97fe46ee1d6e85c898a30a5fbde1fe7c2c66c0b898
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD570724f1cd32dfc0f6787dfdff091828f
SHA1cb484fe85acfd27a449337039af9bd3a13895fec
SHA256d55a4ec44aee2898f319fc8c66eb5ef8c229a600a2328e6c9be52caa13361e66
SHA5129e02dfd41d8fa5460c1c5199ecf9e71147120a4b90b615a50a2fd03c8507a0213fd19270b5a73bb774fc1467d696c29ca810a8ab8dd70d08426c26816c92b531
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5e4598068fc7fc36a177786c3307ddb5c
SHA13668a223c8e8fb5c1b76cf067ec5490a5eca82e3
SHA2563b409b8dfaf77fd66c5759a53d129e8a0cc4e044c10deba13bd1686aabd63d34
SHA5125e7f19a59e61a3ee2acdc0e6a667327834fa0446bdb7f11bbcd8b9665b115d6cc80fbbd53447b3211a2d7e6d3de21944bb931b0e9d71755db2b5f37e6581743a
-
Filesize
65KB
MD5ac05d27423a85adc1622c714f2cb6184
SHA1b0fe2b1abddb97837ea0195be70ab2ff14d43198
SHA256c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d
SHA5126d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d
-
Filesize
171KB
MD59c0c641c06238516f27941aa1166d427
SHA164cd549fb8cf014fcd9312aa7a5b023847b6c977
SHA2564276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f
SHA512936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06