a20648fe8838d37c74e87b8d6a6f8b96c2bd58fe6f90aa7d78e6dac0c89444a2

Analysis

max time kernel
137s
max time network
124s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
05/03/2024, 11:33

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

b49a889feee52b28421aea6921ddc2ee.html
Size

226KB
MD5

b49a889feee52b28421aea6921ddc2ee
SHA1

466c0e0ccd5d4d9dc779027a8b4cb8bb4c9fde2e
SHA256

a20648fe8838d37c74e87b8d6a6f8b96c2bd58fe6f90aa7d78e6dac0c89444a2
SHA512

4d4a99335f7558df08fb1055bfc445bdde8811742e644da592732066ee96701ce1cc7dfd933ef83790310e08629f1f0557ed921f361a9a035d5247befda01643
SSDEEP

3072:fKA7109Bt0ERPByfkMY+BES09JXAnyrZalI+Y6XXI6EyA8:fKA7109BKERMsMYod+X3oI+YS1tA8

Score

1^/10

Malware Config

Signatures

Modifies Internet Explorer settings 1 TTPs 36 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Set value (data)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\GPU	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\IETld\LowMic	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\IntelliForms	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "415800311"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Zoom	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{3F907B01-DAE4-11EE-AC06-EEF45767FDFF} = "0"	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	IEXPLORE.EXE
Set value (data)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 609bab53f16eda01	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\LowRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Toolbar	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\PageSetup	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DomainSuggestion	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\SearchScopes	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000112dd71d930ff24b8b2b71a2c228122b00000000020000000000106600000001000020000000976b3411f27e743e3a90ff8dae77dcfd89fb58e54807e4319643c244a86f50c4000000000e80000000020000200000004a586cc796bf6d992866bf0752446a0a5126b150832b8c7970643a91e29b8a1620000000bc31ba8dd57587e262bf803070381a3560965a7d4163a2b7432bdc7a46566d1c400000005b7f9162411b3cbc10db9a237a1d0fedc77415ece70753d5b94baf2406fd594b2838f38057a8c269270414cb96ecbd18faec14cc508d1fabfe6138a3abdb9397	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\InternetRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "2"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive	iexplore.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
2244	iexplore.exe

Suspicious use of SetWindowsHookEx 6 IoCs

pid	Process
2244	iexplore.exe
2244	iexplore.exe
2636	IEXPLORE.EXE
2636	IEXPLORE.EXE
2636	IEXPLORE.EXE
2636	IEXPLORE.EXE

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2244 wrote to memory of 2636	2244	iexplore.exe	28
PID 2244 wrote to memory of 2636	2244	iexplore.exe	28
PID 2244 wrote to memory of 2636	2244	iexplore.exe	28
PID 2244 wrote to memory of 2636	2244	iexplore.exe	28

C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\b49a889feee52b28421aea6921ddc2ee.html
1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2244
- C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
  "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2244 CREDAT:275457 /prefetch:2
  2⤵
  - Modifies Internet Explorer settings
  - Suspicious use of SetWindowsHookEx
  PID:2636

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

Filesize
61KB

MD5
a2f9a6940cdc24d8608b4cb0c84a51b4

SHA1
e9893a3e35f21865ac677f4f7da6224a6df53dc0

SHA256
a1004e80107daa2b487f6d0ab0d78c9e37aea7a487b341db8484c9ef31f23d37

SHA512
ebb434d846e517f7a283613985fba318ad32f56235fc34e86da4eed1d444ad2e170b730cb0171cd986a93f2a934aa068e3c79b090ec846ed6f77d88868bf2a24

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
7a3bc6deb628224b9c7c3d6a6c1c046f

SHA1
a75e1193dfb38e048c3461453e0494624267b93d

SHA256
537e86c633ceac435798649645d53019c89fe3051e566942d37002344d3011b7

SHA512
69a3f90139504f107c6a2f02487afc340a83b16bed46f6782538e6a7b33d709d6ea68eebf924868dd6f0e65ee465571cabe689f6bab7c688c7b0873e0bcc7bf3

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
083055bc19c33ef0013360c46cac87c0

SHA1
3a8640e7275124cf087e02a25f77434d070a0bfe

SHA256
8d667d2a6aeef2da1b87465094b233d605a84587e686355e69786c416f6a7560

SHA512
3fe81197e5d1de143bb99fcc20ef1b21370d9169673d81417896007c0ea236989fe9f12c54f4b5a45829b4fe31103aadc6261f2d0e2d2baf5466e5bf0757dbd9

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
c57ad088340df4131b152220798d4570

SHA1
71dff0f6d86204a8cf062007e7c39a6e5b6aa476

SHA256
ec7754836af8e500529c32a7ce34795aac3fd31223277cf751c1dd3937232703

SHA512
3757737b698e56ca82d31d04a339a6adeb67ca6335c19eaeebabfd3dbb43be825aff70ff64d5ba138ad542c5052e132dc022b922011deb96b4301cca02d3c7d8

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
2932b9a902dcfff8a588786af21c486f

SHA1
87b5232c2dadf18e91e1386585fcb3b3844125bf

SHA256
19b76114b9c95cf0cdb3c8fa7d8b1d25c139ff2b7f00f59f2d1a069d59af891c

SHA512
11c81ad73e010bbc94e2c9528ac3486b62a40f3c001c62f67a05cf0319b7f09717261b099eeae57ed180b5898546a0e64ede06fa6e73a053d59dd67ae6dedc58

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
77815836348988fce3260b3d96f703aa

SHA1
87e0e275c6dae25343baf9b54287ba0a3cd2f397

SHA256
675345fa502907273f08b3ea7b263be619a4b17fab19e8446680a2a04f7c26e5

SHA512
c09e0defe68bf7fe448d148e3aa7c0bd09b48a4c80f557272e522268fa15e92b9f921c3eacc4e379399185c12709e79ee842332d014d169cacd35d24439727de

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
a8894e64575276ef89dcf950562cb6a0

SHA1
ac062241eeaa815aebe6b5d4b48b0f3165826a2f

SHA256
6c52f7808b8eff806507f671ad8959bf1bc4c4da7c15fbc39ec358e2dfcb010e

SHA512
0cd31b51c40c95970d72214f50f648515a2f3da74a21c1ee5fe599c588262d998c0eff6b16b0b394d10cbaedd6cd01a13b47864d29a3b6dae2964bb004aeb591

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
7c9b2eb740bf6292f00cc1bec507d73d

SHA1
559ff019b22ad2157b9a6432dcc32ce66e793613

SHA256
db6236864e0c74bf63821cd5351dcbb8d0e98ca42900ee04e78279a9c615b35e

SHA512
34d47e6841db04747a4eb5d5b981b0103329004092a30db35964025b7d24c9c79e97f348a7730afe01fa2be426d8a0006b991a9f7ac292dc6b57bcdb6ae487c2

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
52ed7a89ba43e1a39b1c698e33fcba93

SHA1
cfbbd29aef786c827b0b93c16379ab269e2f681c

SHA256
299221ccf4a457eea8562dc491ca71327b1a09c796f59fa3337414eca79e4341

SHA512
90020b7c38af8434b2111cfc75d5abfdffa3a6684b45b1061534dfa5c7744f95e71f28d13c5b0e27c1f553ea6bf2f9957ec2320c3f7e9d2729a83b296caddfb5

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
6ea7ee21fd5035bf3ad4345ccca68e17

SHA1
1d9f19dbfa9ec19657d46d1dcc8ab68b65adb01b

SHA256
ef415abcde48d341e7ff3f3ace457af4edfa20c7fd55563d387ee7738a87c8e2

SHA512
9007c70bd3f234d4409df7ca093239beb7d0e6e4454c7bcd6f1b174019e62e6b346b3328e7e83bee3f94d8b6c563a51337d410a8426408bdc38e69c5c9cf4cac

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
a75a95034c57e4cf43298b20a3266d77

SHA1
808d3db499441704f29e203083031f7c2fd0d1a6

SHA256
f55ea286903051c73b513773d1ef67bad6d149552fff06ce2568ad2ff68c5f10

SHA512
9321032b1b840a955d77865adbe37b125f7a462e60a587e9c306b689355618afc105cadb741722631119d6307567232aa57c5face2f8d599d121251fe8cd1265

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
8f3c58b0e02278fe038274fa1b52620f

SHA1
ec0f7057b4c365d6eb26ffe47197c8779e2cd475

SHA256
b340256517b082a2c5bdc51c5837b4556430b8b86fb2307b4d7796f050f5842a

SHA512
9bf56764aaa5df3b19b2eadcf0e440576770d1e33ac48f392fb9e7d91ca87d904d30ccc3f8cd1bb044763261368b4ba1b68069658a7630022395c20ae97c681c

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
99d77cbbc654dcb9cd81693e96e5aa2f

SHA1
a32f14c94940c6e77a20ad320cbead14cefa2e78

SHA256
be7a682240902742ad5882565bb488a6d16966891283d9df3ef32a2eb4c445f1

SHA512
130dd5de40a796de36a3b1f7152896c6f5158eccb4dce003fd3808079afc70eb955143dba5d05627cef2f882a4782d124c9a32b27c0dc2edc76cbfd212122a71

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
ca6e937cf8d828f094e27461e69ca7e2

SHA1
7f890bd3f33496733ce7ebd2c1a52b94b1879220

SHA256
6fc420a507cef14c1400d25791be0ef916784172a8060eadd229606af8775e86

SHA512
5dd6c2c6d446df087d9946d2596c6dc02858a438262cd3db07c2913c3cedb00048992ea458a2d646e3b13e3811c6f9f54591dfe887bfbca79f2ebae56173c363

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
1e34596a23f69fde23e6bdd1aae98d20

SHA1
90b5ccac5193559b101964f9a1ba55cadfb52254

SHA256
8cd79b58b7a6472a8f57e9e3669b7aa21e6376b7062ff9d552273129b263a6e0

SHA512
00d06865b24304f7406f669b672571e23411bdadb6db750f0c240cbc65ee6f957e1deaecfa8b1bd8bb4c27f56b2274d781adfab62e763e2e9be686f1e4020383

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
a69b1579601cc07218b9f3081f497764

SHA1
557703649d517cb17e8584c738c1eb730e743ec2

SHA256
a3b42ccee8ca3075e39e10611d683db4641273b0372d6fce4116311dbc850d0e

SHA512
d797c5b5cec76f48c31e4e11ae9ea7d87ce0cc7e568f8dfb9893a35af422b211f995cb66e2a20ccaea69c46d087591426360a74c38d99a76e9e378e699bf7b50

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
6efb67e20ed679a4df8094c1d875ad5b

SHA1
3dc68e6d46d44d09842273684eb77deaeee7c83d

SHA256
7b7c5530ba28cecbe0dc63a70cffdf2ad3906adb1cc6844ee1bd18fae4bbf33b

SHA512
4b6747c426643e12110ef59a3608e15a68a0daf6a667b5847f33d62ea76e8a88ae777c0bd563ce3ec792c5d606ca3a9b7c07f28a2380696f78b99d3969563e23

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
f568a5ea1a5558647bc4bcd465482334

SHA1
c257cf756175232ea349edda2206301be17206b5

SHA256
ef9589031ba163a1f743d1c031c6fb208c3d8c626c29aff71ebb8c01c4ede87c

SHA512
6e759aa3ac97f8c53fb878af65629e8d0a48b1d2a85caeed6dd1d617acd33492e2922db096083310a2a7209f10ed0e0d176e5fc1fdc055a00a15319bad093160

Download Submit
C:\Users\Admin\AppData\Local\Temp\Cab9A6B.tmp

Filesize
65KB

MD5
ac05d27423a85adc1622c714f2cb6184

SHA1
b0fe2b1abddb97837ea0195be70ab2ff14d43198

SHA256
c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

SHA512
6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

Download Submit
C:\Users\Admin\AppData\Local\Temp\Tar9D13.tmp

Filesize
42KB

MD5
bbc8c77c6fc47006039dc542adb45217

SHA1
0c6165da051868b4595e67fd26b838c571580084

SHA256
a93b4987cab36b46db244a88a5e4729e1298f5d9797fe635b3830c4ac5f01da9

SHA512
814fe93d6c83ed37943bdb7c98da79b7e740e0c9c977f0976f82eec563ee80c1718349c19a8ebc59bdeaff5144f927652bf14426d87bf221c23190661f5590d2

Download Submit