Analysis
-
max time kernel
121s -
max time network
133s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
28/02/2024, 17:13
Static task
static1
Behavioral task
behavioral1
Sample
ac6b1c90aab035bbfa7f0203f9f26c3d.html
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ac6b1c90aab035bbfa7f0203f9f26c3d.html
Resource
win10v2004-20240226-en
General
-
Target
ac6b1c90aab035bbfa7f0203f9f26c3d.html
-
Size
23KB
-
MD5
ac6b1c90aab035bbfa7f0203f9f26c3d
-
SHA1
1451d7e76bdbd5e3e691e65d506e27a0820922fd
-
SHA256
bb90a2b969dbdd930b4952831f9f36500acf4bcd0979470bb62e9dba8efba9ff
-
SHA512
3056c07c88ebadf03891f57f7c664d51d766e1f1334ae568002685090a95d10403f302948266ad8e26104bb6e49e7ac3f6fb795c9384bbe0585969ec553019da
-
SSDEEP
192:uWHEb5ntazgnQjxn5Q/lHnQieENn4nQOkEntfbTnQTbnRnQiCnQtuwMBkqnYnQ7I:tQ/lyp0V
Malware Config
Signatures
-
description ioc Process Key created \REGISTRY\USER\S-1-5-21-3787592910-3720486031-2929222812-1000\Software\Microsoft\Internet Explorer\PageSetup iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3787592910-3720486031-2929222812-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{A8217BB1-D65C-11EE-B559-5267BFD3BAD1} = "0" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3787592910-3720486031-2929222812-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Enable = "1" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3787592910-3720486031-2929222812-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "2" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-3787592910-3720486031-2929222812-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3787592910-3720486031-2929222812-1000\Software\Microsoft\Internet Explorer\Main IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3787592910-3720486031-2929222812-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Factor = "20" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-3787592910-3720486031-2929222812-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-3787592910-3720486031-2929222812-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 20643a7d696ada01 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3787592910-3720486031-2929222812-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3787592910-3720486031-2929222812-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3787592910-3720486031-2929222812-1000\Software\Microsoft\Internet Explorer\International\CpMRU IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-3787592910-3720486031-2929222812-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-3787592910-3720486031-2929222812-1000\Software\Microsoft\Internet Explorer\SearchScopes iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3787592910-3720486031-2929222812-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-3787592910-3720486031-2929222812-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3787592910-3720486031-2929222812-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3787592910-3720486031-2929222812-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3787592910-3720486031-2929222812-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3787592910-3720486031-2929222812-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Size = "10" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-3787592910-3720486031-2929222812-1000\Software\Microsoft\Internet Explorer\Main iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-3787592910-3720486031-2929222812-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-3787592910-3720486031-2929222812-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-3787592910-3720486031-2929222812-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3787592910-3720486031-2929222812-1000\Software\Microsoft\Internet Explorer\LowRegistry iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3787592910-3720486031-2929222812-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0" iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-3787592910-3720486031-2929222812-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3787592910-3720486031-2929222812-1000\Software\Microsoft\Internet Explorer\International\CpMRU\InitHits = "100" IEXPLORE.EXE Set value (data) \REGISTRY\USER\S-1-5-21-3787592910-3720486031-2929222812-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb010000000c12c25e2ddfb54dbf19c8710c23067700000000020000000000106600000001000020000000ebe100f046826aeeff34b13d51dfe016b78adde717b07097d0f16142a6f6a562000000000e800000000200002000000057d76470942b087f417fd6d714b4360a7ecfee078b6df7901adffd6f489e835820000000a54959ae8f4575c49a6057e8c4d495108c3cacce1e315a4e7010da069f05e59f40000000ea7802a1f0338f0eaec6f5739d92e0230b01c31c5a4c7e09983f16ccfbbd7d6f2654e2ab5d2158f69761f92c390c38c4dcca8f4c13924a1563be7517562e0fe4 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3787592910-3720486031-2929222812-1000\Software\Microsoft\Internet Explorer\DomainSuggestion iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3787592910-3720486031-2929222812-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "415302264" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3787592910-3720486031-2929222812-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3787592910-3720486031-2929222812-1000\Software\Microsoft\Internet Explorer\GPU iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3787592910-3720486031-2929222812-1000\Software\Microsoft\Internet Explorer\IntelliForms iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3787592910-3720486031-2929222812-1000\Software\Microsoft\Internet Explorer\InternetRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3787592910-3720486031-2929222812-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3787592910-3720486031-2929222812-1000\Software\Microsoft\Internet Explorer\Zoom iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3787592910-3720486031-2929222812-1000\Software\Microsoft\Internet Explorer\IETld\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3787592910-3720486031-2929222812-1000\Software\Microsoft\Internet Explorer\Toolbar iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3787592910-3720486031-2929222812-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3787592910-3720486031-2929222812-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch iexplore.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2352 iexplore.exe -
Suspicious use of SetWindowsHookEx 6 IoCs
pid Process 2352 iexplore.exe 2352 iexplore.exe 2700 IEXPLORE.EXE 2700 IEXPLORE.EXE 2700 IEXPLORE.EXE 2700 IEXPLORE.EXE -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 2352 wrote to memory of 2700 2352 iexplore.exe 28 PID 2352 wrote to memory of 2700 2352 iexplore.exe 28 PID 2352 wrote to memory of 2700 2352 iexplore.exe 28 PID 2352 wrote to memory of 2700 2352 iexplore.exe 28
Processes
-
C:\Program Files\Internet Explorer\iexplore.exe"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\ac6b1c90aab035bbfa7f0203f9f26c3d.html1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2352 -
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2352 CREDAT:275457 /prefetch:22⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:2700
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5e35a6b98879d02a5bd8d0a71f4a5f982
SHA1d629ebbcdfa31327aafee328dce1a54e0e1456e8
SHA256f9ae00104be7123519daff47f8e7e898527b6d282bf44c687d696be16d1c9ead
SHA512e3b727c3b869aceac323e31444fbb435b24703b388f73e5c5c5e7d7fde07ea1c4684cd2c1dcc4bff45821f29b5eefc16eb6d173ac5ba05f3f440ca9ba6c8c9e5
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD59d3de699738d9665ead87af8ce612ca0
SHA15f3e4fdc8f31028833da0cb021f4cc7035152442
SHA256fafe5d6608ebd6a50067604c5e57bad3addb8a4e396a7fb97dd6207df0d61a05
SHA51252216891408e885c5a01ed61d08b0ed01ce521afdc98a30bf113498711f2de2224eeac734f0bd67d5d0383f42582dc98a678023bd55e0255ff3730b8abe12e5e
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD55e34116d0c949d23eb385674dfa68819
SHA12fbe7bf4ebf347e5c35774e656d03d3512129c11
SHA256d2b697a79f32f6c1806aa1547c431e1a5dfd0a605e40e70cc98d36fd17107ad2
SHA512d81efa4a5d7ef5c986aa737f409a6a35160d1513e075e1dc962a104398f9173e61916d6a20e4c6708ce3a1b951bf318ae39a24705f7242752aa29285c7dfb859
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD51e2eb725c3adab5422521541d1c4e4db
SHA1a62f1c48c408abbb323ecaf0eb1264d046a63fa6
SHA2568b5ed5c279cdeda7ed3fe2969594db628bdee7cd81c068ce69fc0a14f626065d
SHA512f6a707367b7ef791c7b33dd5e9ca66b995e083774dc8b869953f1bcfedf4ccdd407789204f47f384318ffe14e436dc072757e4d9ce9c39277d07b145220f367e
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD52e6d783752cb1fdd1a9cfeead91256ae
SHA14b732467c544b5242b8923129a3bf0677964a6ba
SHA256aac72e535c9cdf5fb955294e071e870fb8aecfe02a3f681a7b0b939fa8f1a077
SHA5124534c316d9c174b17cdde30594182677cc9360346b1ebe4600d95b988c55507e0b174d461d122525d465889c206f40701ff60ae8b5a6eb6d0e430229382720a4
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5856c7fd253c78f609e3be207af2ba30c
SHA1adbe88dbac08ea52db13a6b2d35043d9505dee4e
SHA256c8fbafbc44de555ba9c831cb187f5c66da17b13b4a6d9f0605e2d3142e5e2704
SHA5123c048de1e50cbef225e193faae5edac365c38c6381d2765d62512c7bf3448f25521cf439b3052d200b8c97f1f706d1cdb85ae358d8df65971bd78ed1187b3b5b
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD516ae86a3a7f1782fdec77c8c50954796
SHA179a216bf685000a4b8cc9251a4c6a097bcb180d6
SHA25698a86cc408e325bec15f94415065d8297938e54d148779ac03ddd407416598ed
SHA5126f3790d1216d065f0a06a48243e6b89f138c9188435c144edc0a98ffe0da3fc316e6a0886cdf2c37b97158b88f1217cb002d8f0397f844e799e2ce193864aa65
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD50a6b7b270646a86e6fe526426aca8cc7
SHA1cc5ae2d8711a2470a599a83b225a49c7ab2a41ba
SHA25605d1d5fc4ebc7d00a9bc0a2e6ea08da3ad1f253e1b65fa71ac4eb33c68d56a38
SHA5128bde39250faa099895ce714f819175b96c40b5589c0be6661b11b793bfc8016898e83f3ae7630059b482b8d8c1b29d40bcf46bd06762942075fd7f26156c3f79
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD59d007f794bed9eb370079fa02d1d0cc8
SHA133349a5be745eef47c201ad9263b8e89d3f409e4
SHA2562743b901bf42a4578e152c45e0d46f964b0c78244f161c2011987b5d05914bac
SHA512b7721b0abe1686168150d0fe1ab5b163b2bec61d84ef5a6ec55fcd044546642b8613993016a080a6d0b826009fdccd5b7827e2251b38d684e4f19eacd0bab307
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5ba11a518986b936155c8729a1a829548
SHA122bc2a419c95114caed6bd5edf710d65791ab033
SHA25648bad39b3ec91ba7625ccf2e7acd8cc8f06e5bc97a3c0a1f85a1f95c3b25b970
SHA51233911f5aa5487d80fa93a66d9a887bf09e69f595d8888a4b2cdaff57b377de4a8d53d7336e67c910718341bb7648238eb16fc32311be0a54f1fcab236d54c60a
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD593c39133d6100748b6acc39d2bcd15d5
SHA1b5f81109cb7b00022a84eccd4404d0b967300471
SHA2564809645ac4b6a7d82a7577883657c16118afb62c714464afeae9d1eb10ddb6e2
SHA5128cb0753a0f6eb9e39d2e9613845335a56593220cb7ab3c1132dcc8db42c8cb3b1c96b69fa89f34ef29d067dfee9a0a686452073be0b1a1f8889c376b44f5da47
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD510b29a70e01c073cca4f1fba997437e1
SHA111cf1cca25a9312e05579f633045b7041c4659e9
SHA256cf499182949d6ef646f252602a4d2c9462ec1e0f3565a7a4c2f9360ed87f40c2
SHA51287b886dafce3dd55186d745930d7d73d621bca56b843f8341c9496745d743afa10fc30f8ae65638671ca1f60f32a62a2b0a7186b9bae2d324812a51825df44e2
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD56ee9cec1f5b3db2e93192394025f70d0
SHA1e6a7aff818d469da77a9c0d27bf8c3a3cc2ac9d5
SHA2562211f4c715caddfadd0ee081422de32dc2caf38c3d36019474eafeaeef707889
SHA512ee8b7b8af4ca4818184852bba9b40495ecc39355c2308b95f8ad49ed66bbac909a36180e0ecab692f26de4020bf9aefb075ad49e12f847e25f4377d69d0606d8
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5911acc4fd52d8c2d1a21037952157de4
SHA178d72886e7794b67f824b3e0696d09ccd9e2e91f
SHA2566e4f0569957314ec747b32bbcaad81763680e09b8841edcb8b2c6ce068c40d37
SHA5123b46f34c800ef6dbc2fc13f11b992a6e3c3315ac2080ce099651f51fe051bf891239ebd826f0ad98d7af3ca4aac37b05e455be8df060d33b54107c613f527ce9
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD521a2b27840b3025c620964890e052ad9
SHA127ba7856e74a6ca37c1ffccc7d165fd2d03af49e
SHA25665610d6cfee4ac02ed6becf7d36bfdece181b9e58e5c3736170009ce49aa31ba
SHA51297bdc711c1906602d0be99d7ccd8b9395540e67e1e304ce5b4e16ba351ebcab93ee6c164185fa74ef6fdd9b605ce08d849577791b8b92bc2e35a8600fa58c8ec
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5525d40ca3a0af2c1f9faf6e25c5ac3fc
SHA1322e23f498b15fab00c3c2598c669964c9c1e7bc
SHA256ceba785ef12bc2fa277ccb3fb7e86275928887406a5e8dfc70fac5969c9c329a
SHA5121d89556c0a9cde53b80bd742ea9852a00c594553768bc2a5a9ec887ab1ea0a5767c1411a84ef09e1b2de549a5497714d52a4f0b06cb4624147e9f998590cec85
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5bb760350d7901648082f329abcdc0d60
SHA100392e2915b32a7dd09f8abe8c7c3a41cc6b0fca
SHA256acdbd689e06cb6f7a9af97aa2c8ba65727078f8fcd5c929f013a791de072454c
SHA5126e2143938f8fdb14447de0cab7d5079eede799aae6b9af668c4e5ea6cac96bbdb29564daebf90013e6767a5e24673d4a1d99dab5fecdb6c333608e7adbb94117
-
Filesize
65KB
MD5ac05d27423a85adc1622c714f2cb6184
SHA1b0fe2b1abddb97837ea0195be70ab2ff14d43198
SHA256c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d
SHA5126d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d
-
Filesize
67KB
MD5753df6889fd7410a2e9fe333da83a429
SHA13c425f16e8267186061dd48ac1c77c122962456e
SHA256b42dc237e44cbc9a43400e7d3f9cbd406dbdefd62bfe87328f8663897d69df78
SHA5129d56f79410ad0cf852c74c3ef9454e7ae86e80bdd6ff67773994b48ccac71142bcf5c90635da6a056e1406e81e64674db9584928e867c55b77b59e2851cf6444
-
Filesize
175KB
MD5dd73cead4b93366cf3465c8cd32e2796
SHA174546226dfe9ceb8184651e920d1dbfb432b314e
SHA256a6752b7851b591550e4625b832a393aabcc428de18d83e8593cd540f7d7cae22
SHA512ce1bdd595065c94fa528badf4a6a8777893807d6789267612755df818ba6ffe55e4df429710aea29526ee4aa8ef20e25f2f05341da53992157d21ae032c0fb63