e2a2db51977cd65b1ca027a0461b811a11f85693eb72558beccf23dce0eb481b

Analysis

max time kernel
149s
max time network
149s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
27/02/2024, 16:44

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

a9a79c4846cdd12bfcc1794ab6ffb6c7.html
Size

1KB
MD5

a9a79c4846cdd12bfcc1794ab6ffb6c7
SHA1

a667c25631872e0817ba81128722c3241bf17549
SHA256

e2a2db51977cd65b1ca027a0461b811a11f85693eb72558beccf23dce0eb481b
SHA512

7d583e345c2e6f251599e0c2843725c8251ea3aa8dbf15a5a23952981cded2b3dd0d992091eba23f42dadc24edddd7bb992839765b37fce0a834ded4122e667b

Score

1^/10

Malware Config

Signatures

Modifies Internet Explorer settings 1 TTPs 36 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\IETld\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\PageSetup	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{8C1CF661-D58F-11EE-97AC-52C7B7C5B073} = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = e0e825619c69da01	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\GPU	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "415214167"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Toolbar	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main	IEXPLORE.EXE
Set value (str)	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\InternetRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Zoom	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\SearchScopes	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "3"	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000e861098c19b4244d8627ee4664a960690000000002000000000010660000000100002000000064bf32dce621c686131f3d87a1021ece8eda31a309ec9b97b7da0dc0d4b8874a000000000e8000000002000020000000c0441d0724627705bb293516b27ca75ebb5e8bdaed142692f5a7df6f9766331420000000c054f47d2e74c01f23c715f90f8bfb149821f3ba51d7ae4bbcf6a5ba40e5e3bf4000000078709a4ce093d9eb4825fa7f62fbd825122eca00ad9a41c2626f4638fd1fe3ae2775ed449bcfa3e1f2a8509d2ef4350ef2e8e5c67e274add31622b361162bfd7	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\DomainSuggestion	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\LowRegistry	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\IntelliForms	iexplore.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
856	iexplore.exe

Suspicious use of SetWindowsHookEx 6 IoCs

pid	Process
856	iexplore.exe
856	iexplore.exe
2796	IEXPLORE.EXE
2796	IEXPLORE.EXE
2796	IEXPLORE.EXE
2796	IEXPLORE.EXE

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 856 wrote to memory of 2796	856	iexplore.exe	28
PID 856 wrote to memory of 2796	856	iexplore.exe	28
PID 856 wrote to memory of 2796	856	iexplore.exe	28
PID 856 wrote to memory of 2796	856	iexplore.exe	28

C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\a9a79c4846cdd12bfcc1794ab6ffb6c7.html
1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:856
- C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
  "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:856 CREDAT:275457 /prefetch:2
  2⤵
  - Modifies Internet Explorer settings
  - Suspicious use of SetWindowsHookEx
  PID:2796

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
62b093ed1caefe64268dd0ae9e9f4d85

SHA1
d936503870e0c72468fb3cdcfe4e296d48dd5742

SHA256
b043159fe1bebc9fddece4adf37b5cf1d426197073e509b8e56e41664da66876

SHA512
a0d1f86e37ef8202a9e025083ad3c7375509794f4177f0cf888b35c7ea5e5a775109fbc838c511f5c0314bac48fffffc0ddb4232464a56b002364b1d0e4505ba

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
09d541f298f3aa77cdfd61bdd2e0df42

SHA1
03e089693ede518ac49f93b5eaf2864f7a993324

SHA256
367ab5c17c1b2c28c031e1ee14d069dd341083a84c4f78b7841cab17cd68d38b

SHA512
a53f2837dffd3363070e9991e578f8d0cb137527f04e809b1a31d06561c7425e549187488ac87b3bf7997fa0099f97fcb066ba487b57149372e07efa94c3bef3

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
04c291f550a42dfdae8930a504dca7fb

SHA1
7f06150c72c87c6d4056af54d7ed915929913d36

SHA256
939e8d7c5b6510e904f98111bc03ca66fc072981b06e577b6958d5cf33a4c9e2

SHA512
684dde908e58dd6f6278aa017e7f75ec8be6ca1f9a6f7da13f52b3df590e1ac2c23e8f22858e435b6f75a345f8c17719379efe263800d807c80de22d6f751921

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
12112fd11a28d8920cec115839503bb8

SHA1
a0683bfa1db695d825d20eebc0f1b27c4e9a4a12

SHA256
76b806786c094952654f0f87fd9b9b10fa1c51f78d7cba775ff25e6c0335b0ce

SHA512
19baaa4ac9afc20e6093eb64b66ea6ba897f74994301ddec7176bfac2a3b30051abccb878e35788fc9fff42c2b487e859a82b8a0c44e7f43ac777f6df17ebd80

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
f723af11b2df909dfb1a42b9d74bef1d

SHA1
0e35dc8e964960612db0cab88788db94f1d20e97

SHA256
1c8dece8d8d57f6547d0e1c5cb59a64e9588b307bf14937e8178273dd95aaffb

SHA512
cb09fb99d81faf4df8953a4a2134c266bce67eef81cfce5572ea6f95005733a91854cf9c434527fa6b7e3d47f9565c74bfdb93d24c2506aef48e0acc367eb43e

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
c0feb0d23112321c72de7513fb6ef0a8

SHA1
524ab17096b9e67e18436ebcfa8a6fe9323e7d14

SHA256
9c41bc49cd808e6c11ebf0f7c37a52328a8ec66c9b61e36442b40dfce8d06a96

SHA512
b6d6b2841edc1e67ed2193d57cafa9ba875cc5dbd8bd61b5f06624a004de96db16d583702b7465610b1d3b28f9b85c5954d3de08cea2aa9a40f7e17be0283e43

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
21fd115c14be4b7513dab042ceedf736

SHA1
0b1a7a846bcd0b5d996f4fe6254578a7cb8e980f

SHA256
095079e75372a89485e1cb29f6c67b23c5c4cf7cc6b84b7a99fc223f23abb45a

SHA512
a02055f7cd784347a68bd9ce59cbeb9b19e68519906db009e6a3ab04fc2903c6746f7188d7538419df936ac31d42931b894f9033acde4e1261a3f4ee61dd9849

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
dde6babd7b9d4296b2156f286412a514

SHA1
b8c330f3f1bc5647479052626465561333bda325

SHA256
51e67dbe4dfdeef5be12d8cf38bed6d0c9e19113ac0c3c4ad971209b128b8230

SHA512
891e97c75c7dec02c7c821bd61d9a721cc2531aa4de7db2184805872d5bfe79c7720b88e5000953d19cefdd2223629070027f423e0760102a672da00830edb8c

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
6085719f03a72209140ccac2458c52b3

SHA1
d414fa570940d9d81c46fc4baa1b8ad74da5d540

SHA256
1be1242ba2b9a937c4d91c5245e3cd5767a7b88c7b9981963f010cc889715e4f

SHA512
22b063e20cc788b1f28d16603c812111e8688beb0efb1295a0fe6f8d9b0928651a1f5bd26001f33d90a0a7ef6c9520c94d55740d216d7d428e0079dda5060435

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
6dd3cf739ffb8a54e3e72236759cd97a

SHA1
bdeb71c6aa259e913c639e22bf2758c7b4d0dda5

SHA256
f469a92e027200dd86630aa20b2cc586905bd7dfc954b67e7c93ab3bcfa3f450

SHA512
95f8cbb7814ac611921c444489a889644bb32479d2508ba94d39ee64c9a18f888f8492bf184daa23f9cd37aaa335d94f0906350f0b79eb9bfc1258c244b66cee

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
fc39755adb9cdde150a7ae8b7f0d93f1

SHA1
d06cf96cfda7ec2404fedbd061da3e033a0a82db

SHA256
19722df1c7a6508b7a8319b66fe1e09ef9284f0b50c4b75e5c162c49e77add10

SHA512
93ee7feb490f5084baf70df3e5658acd836c6a524bcffd49f63b105df3e5f1eaa0b738040b31c8e38346a053c0e12b7d2452b26e7d1c998c764d91a1a8ec946f

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
46f3806b151efaecb983f67462c20fa9

SHA1
e67ee2089629c4ce1dab044710fd03183f0a7ae5

SHA256
62e8dba5928b912c722c0144d1f86c210014973df1e94f7786894559d9347b83

SHA512
ca8adc8cbb651a75a72606289cc2a54e3b18d6632d400c7ac0b704fc3ee1c1d0d6307891b18b1773643f24f884e0331bbfb86706f540990a7db9ac1e1102a451

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
8cd2041466e0c9b763d1f859efe91c83

SHA1
d7be708aeeb43971863193035af514c4180a7af5

SHA256
e24d849c0125ba57702f383ad01789a7e1a81fbde20a17bf1ebe41916db74f27

SHA512
bc27d619f14ed565ca4d804efb7aa2fdc2e7f2f36931301141431189865a6462b6a5170a87914ebe2c69c09c1586660f156ce59c90b798aabf49a91d8b62316d

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
5d21ca59c68d7232466492f4d96298d4

SHA1
90500c2462f89e3bdeb7b2b8bd1d044c69a56e5a

SHA256
b5054df514a5d5cbbb73052f819547c04caf9336a3bcb05dec5a4322148d1cc1

SHA512
12f09fb71f319ac3a8af42a18db3ceae841794856d5cf4667b26ac1134c59c8ef5dfcb6f302bebcfe04f66f68248b7de6b8793bd57552c96d288303f0ce2beda

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
2933637f67c24b9921926e08e548c59a

SHA1
80c7b1c924d8f26fedfbf7155f2bd2c72bf49e22

SHA256
67a17d37cdee2ed791b892a9172eb27847be0294b728c0858afb2743fec9434d

SHA512
8f455c7c7fc8541e84416814fe6d5299881495f1326d4ba2d5bc9edabedd2e4c2e8ba50f165dedabd44f36128b41605a58689144570d158461226fb2d2561467

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
0bdf008c30c73c457a2ebef72eec503c

SHA1
6aba14149a9e5b80a61f8538a69dde3ea6a57262

SHA256
983cd5677cc983dd6168d4c126814c437fad8a3cdaa1641242abb9cb862b4162

SHA512
495d94417c46df8035d56eadab7829e0f30eb3a3f393373867743f5540c842feb3edda7c3c37b84b4e2101fe29c822aa5ad9a79a1fb6f266b16a52460c7b3fdf

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
60b13f67b485d9b30e8f86e86395b6ac

SHA1
029acc83ff37b253249ae4c5f784554d532207ca

SHA256
4373cc8e586bbe29c1125874998a52bf52adf206dcb8957c6e26fd78d767978b

SHA512
73d78b45c93e470f82f84ce9d4b079c5dadc12fa5e0a06554ec5c7e7682d069ef8d2046cfdd0c4839c402191dcb886d0438c67dcdaf69dcbfdffebc80cf3b281

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
ea3169815b23f1394b51479d7d26f4ff

SHA1
cc416aca467cc1d4f47293a9f3ccda6120dbab96

SHA256
4f211244af57406c98a6e23d5b52c13ad34d904807057cfc0f97e820d6def139

SHA512
0b503598426eca6a8ca572517ad09efc038eaceb6c4ffcb900a2e8d5fcec347667f62d4e57c7421987aac811fd657e4ef5036ea9ed000f1bf431b7d913e32052

Download Submit
C:\Users\Admin\AppData\Local\Temp\Cab2DD6.tmp

Filesize
65KB

MD5
ac05d27423a85adc1622c714f2cb6184

SHA1
b0fe2b1abddb97837ea0195be70ab2ff14d43198

SHA256
c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

SHA512
6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

Download Submit
C:\Users\Admin\AppData\Local\Temp\Tar2E76.tmp

Filesize
171KB

MD5
9c0c641c06238516f27941aa1166d427

SHA1
64cd549fb8cf014fcd9312aa7a5b023847b6c977

SHA256
4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

SHA512
936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06

Download Submit