Analysis
-
max time kernel
117s -
max time network
138s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
25-02-2024 04:13
Static task
static1
Behavioral task
behavioral1
Sample
a2e178cad83b2a5e8c6641e96653e3e0.html
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
a2e178cad83b2a5e8c6641e96653e3e0.html
Resource
win10v2004-20240221-en
General
-
Target
a2e178cad83b2a5e8c6641e96653e3e0.html
-
Size
6KB
-
MD5
a2e178cad83b2a5e8c6641e96653e3e0
-
SHA1
7c5c97d219c65d7822b57e7b48056c354a0d03ff
-
SHA256
7e85300741fc68b580a96570b134d283ee4990d231d26294fdd1272be910315b
-
SHA512
77ee8cd46e7f4258a13d9868b3cb7141033f66c602f91ca8c65d0abd994004e915894057df271d5f0620b3cb6cfd780b2dccd743b509157c90a2deb6aaa67312
-
SSDEEP
192:Zy/O8yw4RlDEvHLgszgA7DydXDChxiqEuf:8/O8yXRiLgszgA7D9iqEuf
Malware Config
Signatures
-
description ioc Process Set value (int) \REGISTRY\USER\S-1-5-21-1658372521-4246568289-2509113762-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{37CD6BF1-D394-11EE-B499-56D57A935C49} = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1658372521-4246568289-2509113762-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1658372521-4246568289-2509113762-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-1658372521-4246568289-2509113762-1000\Software\Microsoft\Internet Explorer\Zoom iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1658372521-4246568289-2509113762-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1658372521-4246568289-2509113762-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-1658372521-4246568289-2509113762-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1658372521-4246568289-2509113762-1000\Software\Microsoft\Internet Explorer\SearchScopes iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-1658372521-4246568289-2509113762-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "2" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-1658372521-4246568289-2509113762-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "414996273" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1658372521-4246568289-2509113762-1000\Software\Microsoft\Internet Explorer\Toolbar iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-1658372521-4246568289-2509113762-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000 iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-1658372521-4246568289-2509113762-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-1658372521-4246568289-2509113762-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1658372521-4246568289-2509113762-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1658372521-4246568289-2509113762-1000\Software\Microsoft\Internet Explorer\PageSetup iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1658372521-4246568289-2509113762-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1658372521-4246568289-2509113762-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-1658372521-4246568289-2509113762-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb010000007823eddbcee3e149bc4db86b21295af6000000000200000000001066000000010000200000009353812b311be1ec1d484954e5c31263dc2b260db641da89e70c392cff60c6b8000000000e80000000020000200000004314eccf50aed122c4e43c67cff5cb85a29ea6a159ef287d3f95fdeeaabb8c1c2000000078afb120186c20e65c3be352e0ce853657fdbd558079f96b2937dc5104dd0d5a40000000575193742b5b077c13b5b917e807004977510c4b6bc4a02dd839149b48668aa5bd113768bd22730b6ec6cf663e21d9fc04a2ef4199cbfd5d9f62418b9c307a01 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1658372521-4246568289-2509113762-1000\Software\Microsoft\Internet Explorer\DomainSuggestion iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1658372521-4246568289-2509113762-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1658372521-4246568289-2509113762-1000\Software\Microsoft\Internet Explorer\LowRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1658372521-4246568289-2509113762-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-1658372521-4246568289-2509113762-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-1658372521-4246568289-2509113762-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1658372521-4246568289-2509113762-1000\Software\Microsoft\Internet Explorer\IntelliForms iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1658372521-4246568289-2509113762-1000\Software\Microsoft\Internet Explorer\GPU iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1658372521-4246568289-2509113762-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-1658372521-4246568289-2509113762-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-1658372521-4246568289-2509113762-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 3067760da167da01 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1658372521-4246568289-2509113762-1000\Software\Microsoft\Internet Explorer\Main iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1658372521-4246568289-2509113762-1000\Software\Microsoft\Internet Explorer\InternetRegistry iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-1658372521-4246568289-2509113762-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1658372521-4246568289-2509113762-1000\Software\Microsoft\Internet Explorer\Main IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-1658372521-4246568289-2509113762-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1658372521-4246568289-2509113762-1000\Software\Microsoft\Internet Explorer\IETld\LowMic iexplore.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 3032 iexplore.exe -
Suspicious use of SetWindowsHookEx 6 IoCs
pid Process 3032 iexplore.exe 3032 iexplore.exe 2988 IEXPLORE.EXE 2988 IEXPLORE.EXE 2988 IEXPLORE.EXE 2988 IEXPLORE.EXE -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 3032 wrote to memory of 2988 3032 iexplore.exe 28 PID 3032 wrote to memory of 2988 3032 iexplore.exe 28 PID 3032 wrote to memory of 2988 3032 iexplore.exe 28 PID 3032 wrote to memory of 2988 3032 iexplore.exe 28
Processes
-
C:\Program Files\Internet Explorer\iexplore.exe"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\a2e178cad83b2a5e8c6641e96653e3e0.html1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:3032 -
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:3032 CREDAT:275457 /prefetch:22⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:2988
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5b429c6801c76f1091f844cdb04244f17
SHA1512cccbdc111de33e4c2d6bfd2882b0f66cea217
SHA256eac11557d494da096b538a694db8ce2754be929e58aaad219fc56d597a26ac8d
SHA512ffc99089f764724c7a8c65a9d6af43c01c041eeadadf91a0fe68e98a07c634a17776d5f657ffeb36d67a6fd817682fdbf173f6af673d569846e18677dc77845a
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5c8471a519211434b588ec5cbb188faf7
SHA124c94ebda2ff2e191b6baa92bcec349e1a7853d6
SHA256290d4388dcfe22e601f3c73bf9c07dc15f6af41a385d8bdd52421537b97bfc58
SHA512e1b7bd0dc4cceaff36406c10cdc7bd099d0022e3214c7ef08f673568b85775c4232e64a2675666162f5ac21822103a40915062a819b002e39d80895921271119
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5d492a5d1548334b6b6d112a0c522f8b0
SHA128a78d4826e3aa82ea50e3e88eb0888ba317f87b
SHA25664483b44b4f0f91ca3f0a839705113691917076b97d00bdff6573a5ff3c80cd7
SHA512f5927e923f047ec15f6c8de472db17da1f907f73c2f735b19af4e614899c429d87ddcefd41c68404c2c6cd77891659a208e2120e8a9b974f8fbe8f0166776c81
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD51f8879641ad19ae99eccdd8098230b8a
SHA1a3d87d4b43a1a947c10a04040e900799ea16e29d
SHA256937a858ede849a76eecb91bb30f6ed2165f1b7d24801e73c40ddde64878006bb
SHA5123a7f4ae9a2550e87ff52dd6ee81d65398c4475050005acdbc50a8d9af8daec9638576912e5fe5329f78ab9c2b3145624a8a63533fbff7dd897cfa25e2c685cf9
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5c14daac8a37f976747fb155012f2657b
SHA1e9dfe95fb0226baa345d3d3583ec25804a639c2b
SHA2565ccaa0ba32dd8e5f636f3d52c023d33f7ebdcb59718be9f18ca9252fdd06b7ea
SHA51255fd6bfeb69ce68133a068aa66756af1748116e6ea114f6d5f24bbd76686d1045bc3c30ff7ca6cde8f09ad7c39b1a403db358596cb8886f73f62d3716fea6f1b
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD55c04124570d874a65a2e91f142299f7b
SHA1bc10075d23cc72852135a13ee8ae0aa8a7b96871
SHA256c870db0b91b98e9adf22451ffce3c245b3f9020fb558302a370966a9b1de5a40
SHA512ef199efd0cd1f6eb61615742b4c66c4f8961d1210d0ce670965bcd7877872540030dbc2acca8f11be1109c7f291571d65e47319dbc526c909754e22b34faf5ae
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5594aee385168cd13295cd5608eb8d4df
SHA1d92ce6782930cf07ca7265f8b206beb6cde471a2
SHA2565a1e6e15d0c5764dc729003ce6eac92ab6d9691a5df1d6c00b64eff86f6da39d
SHA512984c3e5b911725fcb3a0a158c48124c30e1c6a8d94bc163e6d437b0679a79fccdc0651ee0c6048747cbeb1f70639a143b1790b6940f6845c2fc19ab1aea878e1
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD552f6c34cf1e8590cf7916253cb0147d0
SHA15cc2b7e2ad68a5c8968353ef15beb1a65e3ef249
SHA256a7c121eea351d0fc35e7828e84ed82cf4c4785d01c711529d0bbd755db313f3b
SHA512da36a8880cee8b992bb9f03bec7f29a908bc76c967f46c37ebb4440528ff5e03a06aaf62c4f2df37fce5ea9ca39b020a29e484512aa16b32ae2e42e2fab28c06
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5aef237093b4851f996d7fa97534a713d
SHA1601336aba1f5a3dd49b1fd64e2fbc2c14115be95
SHA256d4033abb8a02e4d5d7b4057a1d7750931e05a360fbcccde748c617d5e5fefc50
SHA5127039caf2521387743b61c8f6d301f7545e85ccb3b7bcecec111b441b7525746e77cb67abd84648547aaa7fa1a43dc74983d9d5cd80252b186ce0ac21cbfc0eee
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5c3db75c3371261c340bc8ed6cf4884e6
SHA1d45398674289e1b32f236524d351d88648604bc2
SHA2566a8d8853148803632bf18eca8364c733cb0c075f86da083809d1f05dc269e6a9
SHA512d257064f7aa798253dfd4fd9f45b810b121e3f15d8cdfa0c395b14367c897c4f61dda600750f0c28669b19e645464d84bcf1e751472b59d1118c9a07967d8745
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD56dd5911ec94db6224dd3545bf7c79b28
SHA1212b033ded409300c77a60baf98dca30e41dc45b
SHA256549df5d78070ae4a7e7f2e96b8f94e9ef636f1a5e81b20414e44e19b31b160dd
SHA512338f66d27d510708bdc83789075b709b7cd2ee0e27212f6541d175cc9269c783a3d18e57309ce70e15868efc602707e5ad1b29176ab487b66ff216a08ed0c22e
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD59797466952f2257762c035c4bc516d1b
SHA176fa904ee29e43580c830d305c45c60541e57694
SHA256149f3d61ed95e068a33702acdbe8259b41297176e6e371976b8f7859bbe1b595
SHA512a55ff4fb62105a24e8f8cdc3b4f0a7ce86c4145586a2d49e33ff5e3ad568d03e46d5e4d90f7052341fa0f13a77ad80ef38a805238967aab6680ec4f9b15d4719
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD56e2fe7f82c2d0e6dedaa773871cc511c
SHA15c50359f75b3be7c2f4bf8a45358bd1f384641e0
SHA2561425b8aa51c924cb805dcbc62bbf50cbf4d8dae7ad585ff845df0924867db831
SHA512cdc2d65cc8088cbddfc022d3110bbe92d07a741a2b7265c896c6b8e9d8f8add723f771e74cd6337b13b03f21b20b419289c0551733af95005b244d52976835c5
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD593dfd58c4968bb55569c88a655fd6d88
SHA1f52a696cee4d1660ec8c3180612c98036811cbc4
SHA256d1cc67038a757e4c0300b28e44456c1008cebf06238972dd2ea40921716af0a8
SHA51246524d9338061d7a7af1b8df7f07db2c1e1f2d1b1c90d999207416c5aa048e31a93a0470a814c01203c83986e5502495e2395ed2c89208c8b4f6ac54ea6a6b4a
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5a494b45a4a3d3065ec41ee5c7c47c3a7
SHA1d6d66c61e1d0c5bac8da33fa8c7fc00bca8514ec
SHA2565395da8f980d89ce0c1644a9995bfafd581e314dc6a0dd9360b81deb87a71364
SHA5126c433c1f25a026113839eda3534b04f1a3b1f0526d7a569d9447c3950704140b23370fd91ecd71dbeaba955b2a93844f08e48ea70875bbbf8616d9f247875208
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD596412d341f20e53e6b1fb2dbc68c1553
SHA19e462579c0b65944e50896a7b79f1b178c8ca194
SHA256c82208f82ce7efd0d09c5fa35085c369b1d407d07b28cbd203731ce937787dbc
SHA5121ac302cd006491bc6f0c3171681fdc75f0ff913125e1eedbee2ee32760138228acfa477d1a5fce0997014e834f8f9e2c2379119dd4faafa5919844a781169568
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD523a431b85d8bae1a98acdd5105ec5a69
SHA1f69457fa411d8d7a91709fce5278e9f49375b10d
SHA2562f3a72c3fafe79877a61a69ca03f2bcca4a67a6902252f129fe7d267ea2b50e6
SHA51288c618c9a2b085b32a6ae0f7b23bfcd87c61bf657fa826ad7692a997badbf76ce5d699feb9ebe4b2ee3d2b28a6bdc5cf198877aa7306d0c61d529bc5116e33bf
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD50e567e536314d732e9457ff6949b6b72
SHA1b969457bb1a7a439b80f311a805cff348e577504
SHA25628f6d17973a7fbacbebf4412130abe382b528ff5c7fe963886a8fbe9715aa551
SHA5122aad4aab5184af7052594c35288d60f54631af51e3ed24a562fe370898cede33f99c0793bd5deafef3d9caa99839a699bd52e03602df133c05e8a25622c3d05e
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD54b1f9523c5bbf8692f144677345f8770
SHA1451a6cb4bf3733342a9aa599ebfcf48e6c09f6f8
SHA256061ac02cd270d75106c4a36dfb126fba69f324539cad5e10837bbc22853bbdac
SHA512fdb71cdfee6c99d921ae61fe7438ecd6756deaf6985357d45b21daacf6d4cb180fb7a92f622ba32edd0065c4f45224511be36b366837e9579c69921cd543bb78
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD55dd56a4c17c148c5c0fc87f59b460759
SHA1f272c2aaf4d7c984866489c4b7b028af7470c02d
SHA25660d253bd7b390b6f3a964e71d35c6631b88ae803a0c29d5bbc4da9fac90b8388
SHA5121a8bdb3efce069a5a44f33c0b90fcf87ed3236dd23580667284c878a02658b899947414051235a2340aee70736e004cc22ea47598978190069f81cb13d62ea83
-
Filesize
65KB
MD5ac05d27423a85adc1622c714f2cb6184
SHA1b0fe2b1abddb97837ea0195be70ab2ff14d43198
SHA256c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d
SHA5126d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d
-
Filesize
171KB
MD59c0c641c06238516f27941aa1166d427
SHA164cd549fb8cf014fcd9312aa7a5b023847b6c977
SHA2564276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f
SHA512936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06