a4a81805a5e5f38935c1c2379b4136272bd163b99da43a05dd45cb19718900e2

Analysis

max time kernel
121s
max time network
138s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
11/03/2024, 22:26

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

c1c2c327fa959f9f238d78ee893d9012.html
Size

228KB
MD5

c1c2c327fa959f9f238d78ee893d9012
SHA1

322df9642c198c1bb57a47af991bd1e65d84c302
SHA256

a4a81805a5e5f38935c1c2379b4136272bd163b99da43a05dd45cb19718900e2
SHA512

1ae5e5d6ef5cc1f62b5bb4109fe1919a3ae507d297e00296606a1f3a86ded95c64a107338d081df9022bcf5741ae512bc8e55d9d057919d65c82d0027387083f
SSDEEP

3072:S41yfkMY+BES09JXAnyrZalI+YuyfkMY+BES09JXAnyrZalI+YQ:SHsMYod+X3oI+YLsMYod+X3oI+YQ

Score

1^/10

Malware Config

Signatures

Modifies Internet Explorer settings 1 TTPs 41 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2461186416-2307104501-1787948496-1000\Software\Microsoft\Internet Explorer\Main	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2461186416-2307104501-1787948496-1000\Software\Microsoft\Internet Explorer\International\CpMRU\InitHits = "100"	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-2461186416-2307104501-1787948496-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1"	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2461186416-2307104501-1787948496-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000ffebb09deeb747419e902f1accea58f70000000002000000000010660000000100002000000081ac01c5e50f863ccdfb0082faa90a1d391d9132fb4c0ace2045c27e590ca394000000000e8000000002000020000000a78624a75d67faf99c520acdf7cdd268ffe8b751e611fa5f92085246f8fce53620000000e50fe8a8ad3bc7601ab6694c61d851e88f016d18ac10e675965dda3c6f089f5d400000004a9799a997f7b0472667c11f1c50b83047fd91cce909954cfa85931073042ea53026bd5c44ebeb9dfb79274a46e2d21bda5621b1622e97337d12b63516818727	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2461186416-2307104501-1787948496-1000\Software\Microsoft\Internet Explorer\GPU	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2461186416-2307104501-1787948496-1000\Software\Microsoft\Internet Explorer\IntelliForms	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2461186416-2307104501-1787948496-1000\Software\Microsoft\Internet Explorer\PageSetup	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2461186416-2307104501-1787948496-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{6E5D5F91-DFF6-11EE-BDEB-E299A69EE862} = "0"	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2461186416-2307104501-1787948496-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2461186416-2307104501-1787948496-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2461186416-2307104501-1787948496-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 306cc2430374da01	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2461186416-2307104501-1787948496-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2461186416-2307104501-1787948496-1000\Software\Microsoft\Internet Explorer\SearchScopes	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2461186416-2307104501-1787948496-1000\Software\Microsoft\Internet Explorer\IETld\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2461186416-2307104501-1787948496-1000\Software\Microsoft\Internet Explorer\LowRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2461186416-2307104501-1787948496-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2461186416-2307104501-1787948496-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2461186416-2307104501-1787948496-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2461186416-2307104501-1787948496-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Factor = "20"	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-2461186416-2307104501-1787948496-1000\Software\Microsoft\Internet Explorer\Main	IEXPLORE.EXE
Set value (str)	\REGISTRY\USER\S-1-5-21-2461186416-2307104501-1787948496-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2461186416-2307104501-1787948496-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-2461186416-2307104501-1787948496-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2461186416-2307104501-1787948496-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2461186416-2307104501-1787948496-1000\Software\Microsoft\Internet Explorer\International\CpMRU	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-2461186416-2307104501-1787948496-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-2461186416-2307104501-1787948496-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "2"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2461186416-2307104501-1787948496-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2461186416-2307104501-1787948496-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2461186416-2307104501-1787948496-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2461186416-2307104501-1787948496-1000\Software\Microsoft\Internet Explorer\DomainSuggestion	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2461186416-2307104501-1787948496-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "416357871"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2461186416-2307104501-1787948496-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Enable = "1"	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-2461186416-2307104501-1787948496-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Size = "10"	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-2461186416-2307104501-1787948496-1000\Software\Microsoft\Internet Explorer\InternetRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2461186416-2307104501-1787948496-1000\Software\Microsoft\Internet Explorer\Toolbar	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2461186416-2307104501-1787948496-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2461186416-2307104501-1787948496-1000\Software\Microsoft\Internet Explorer\Zoom	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2461186416-2307104501-1787948496-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2461186416-2307104501-1787948496-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2461186416-2307104501-1787948496-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing	iexplore.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
2428	iexplore.exe

Suspicious use of SetWindowsHookEx 6 IoCs

pid	Process
2428	iexplore.exe
2428	iexplore.exe
2484	IEXPLORE.EXE
2484	IEXPLORE.EXE
2484	IEXPLORE.EXE
2484	IEXPLORE.EXE

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2428 wrote to memory of 2484	2428	iexplore.exe	28
PID 2428 wrote to memory of 2484	2428	iexplore.exe	28
PID 2428 wrote to memory of 2484	2428	iexplore.exe	28
PID 2428 wrote to memory of 2484	2428	iexplore.exe	28

C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\c1c2c327fa959f9f238d78ee893d9012.html
1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2428
- C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
  "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2428 CREDAT:275457 /prefetch:2
  2⤵
  - Modifies Internet Explorer settings
  - Suspicious use of SetWindowsHookEx
  PID:2484

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

Filesize
67KB

MD5
753df6889fd7410a2e9fe333da83a429

SHA1
3c425f16e8267186061dd48ac1c77c122962456e

SHA256
b42dc237e44cbc9a43400e7d3f9cbd406dbdefd62bfe87328f8663897d69df78

SHA512
9d56f79410ad0cf852c74c3ef9454e7ae86e80bdd6ff67773994b48ccac71142bcf5c90635da6a056e1406e81e64674db9584928e867c55b77b59e2851cf6444

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
029dd2427d357f4e3eddb905c5aa9cbe

SHA1
67209352553373a08ae7cf29133e1a0ce77a93d9

SHA256
c4d46451bfd0d84e735e93950f1bd17c4e69e39f2f493a8d1bdd92a7f430ed09

SHA512
99c75ccb24cd0b7b2f333afb1efbee203c6a84d8108da4d7696b33cea2ae54f4101b176a8ee45389cc9993ef2f8ff29d4658407cb009ae572b0e35e102fc4da4

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
4ba499559c4f4326fb809ba77b7b774d

SHA1
0b132406c1aa402e491b79a695eb18ab9aea7adb

SHA256
491c2c8b5a679c5b15510eea17e922901df2ba477530b240f905da93fa8f8ad0

SHA512
d488704127c8012dd36afcb599d4896dc8e5d5ac839028ebe2ff8aaf1f31790ecd8a5b0338b3df14d665b458649f7131ffde8ed97ae5a6dbac83409638fc8138

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
2d21c30744810accd9e8b1a90f5f1ee6

SHA1
26365aea5976b3b3f846d505a7a3a5177f2946ce

SHA256
01c8209f5cd5c14bc36001256edeba11a3c0839115939d7d68c7aafbde9e0e08

SHA512
764ece7180b914c450daa0cf322f6ee7e055b1dba48483c7598feb8a686abf22b713ec72dec3871e7bc945c9985660a0ed6f0032c27d0f6f4952e83f335f832a

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
885b889a1ea8ee1b91d5d552b93a4b2a

SHA1
63badf1a53caba5b30e2b37c04d0b0dd6981e7b9

SHA256
66ceec2516171920cce4264e4f47bbe7619bb8766d656ea6938b1b39bf26b89e

SHA512
5dbe6e0fe15929b40be74ba41106b8745a6396c40cff2056418202cf58cc017e44f5ca15614ed93661cdafbeddc4b4b76b64b17eb2b44ecef9954e909f654eb3

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
3e5b6c9474bf41fb7e267e21cca2ae00

SHA1
9821da42fde19a3615fbffa64bb6048be56520e8

SHA256
46ef21a4726ba5e010e125b398016cf6d4895c1c7fd1dc409e239a02f7b0bfe8

SHA512
3cff2bdfef84575b2f05d9a46b97cdc667b14bc96dd7dc25e8f772a28ef6736b55d93e9e1a9581bac148ca041cc8109e8655f3f14db05ba26cc0eff8bfd92b02

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
4f25c6fddad65e1549c135ac688d5d33

SHA1
7113ced734550a20845a711893597330f8624a9c

SHA256
b3514a6e68074f75602510c921c459be7f7675e017fa8a193564572cc431669f

SHA512
e64071a2e0a944eb52822f9c332082d3421755bfdc61b6583312e415700306f22f9e204e185fa4b038a6b9afa3af1e8a02e228b5a886654cda82aba2c00961bd

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
3edb55ef2ec693ebba5f5d55951cdaa4

SHA1
062721c50680a431e37284e296313df356aa0102

SHA256
0c508a15eed7b3142b03c80e252605c07a726801b3e72d65b043779dcdccf24b

SHA512
dda6f4aa2872bbfe490d925eaae03242a7fdd0247e62e5a4736aeb9af10d0d75f2db6efe136268d648739a878ec8fc38e18de518a184a02a47a584f246c48e42

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
153fb3c5e124a59a664939da79bd5cc7

SHA1
a31bc8b7fcf06e84fe9b10dd8a427411e46d054d

SHA256
446b0b47d14183d96aa6f64e5057510f0c129b2ecdc6012c3b1c455b6474b5ba

SHA512
d3c6f7703f20195e545ff1d611233a2a97fa131b82f0de7e617aed6db5482779b22009778eec10e9c48a315a3a6a226c417bf46a3161227fa1dd7439dc0729f7

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
4c01beaa4ec00ee08e5907cbf1b257d6

SHA1
8a7bbcf16940abf69a31225d25e84d21ffc7355b

SHA256
a05ba27caf930c00905770cc0594c91584a0c809029b1672f205828ca2d485c7

SHA512
d7fd3c8f429682e260c86a87183e7ce70ef731c08f67f8111d21c86a2d38209b58acc55c5cf27ced64dfe52e134768b1f3a4864d46fef59f089e8ce2adbb650d

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
75a4be99658d5260df9c005eeb6ff26b

SHA1
2a60cb63dac27383500c2d0d7007f7496eba1a07

SHA256
06ce3826f7f68175301f423f776e30a4f4658e75e07c06c4b7fa5e769e51d9ca

SHA512
72242602d394046a21331651024fb9deb995d8701d0ba8a74b7646fdad07df93a0234688b27712aa96dd6647097392fbf4ea47bec02688be552e44c95e076d04

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
7163f5648b5f48483b3b0472552ee96b

SHA1
f6fa654c418e9d1a7d99a023a747bbbd2402b1e9

SHA256
8afcd818dd72cac50b13f9b081eb6a9fb7840bbc3fde51013c1350bc7b0b6af4

SHA512
62199fc73820ab3542692277ec10e89aa20883728329878561ee922c1ff311c51a0587fd73f1fbc2770d9a928fa59b8805013ed5808b0599aa0d02b0aecf329c

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
cac8683e82fd469c2ea8eee089a5f89b

SHA1
1575b746132b5b23bd98c7235b967b5d5d23ef06

SHA256
8f550930371763c612f2266a715ca3cff5f2c1b65c207087fbaa20c2cae8a0c7

SHA512
ab33cc0d3b162a3bca35f92404730d1f5ef3fba72a77866b6258baca50b3b889f5d8ae6a751ccf01b8215e6fbce910f1c03c5f1e18372170bedd0a0956810546

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
0f3061a8eb15a51fd1313cb5626e556a

SHA1
e490a2ce2f729411d51e075d61a5b562c9e19cc5

SHA256
90ee3677c1ea333ed160d566e7377f9406e7d544c71ae200c60156bf068db3cf

SHA512
5df3b082a93e86b7242fa113f3cf498cf525e7d2fc57003339658e870df9afa0ebcf2459766844a9abdc10f1154feaa87e2d45f297aeb704adace92dcc6e6b66

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
57e45a9c7a68248ab911b8f35ebde0a8

SHA1
94d840dee4710a025947394e08a95e550be298b2

SHA256
086ef79f19b562032facebb6906db84ce36f07faca5282e9aba72a5eec97ebfb

SHA512
9420a586e35cb325bb9594ccbc6a89ff584447bfe4f51435a71ba90cad8df03e4611d12d0cdc02ca6c50256d81270fd3e72d4d1bc9b54d0ff7d8ac0f88455884

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
54ad5b60b016966469dd3437a7d4bdf6

SHA1
ea5947b6ad30f268da0223e9bba1a89e6a8bce47

SHA256
9ce2ffb6df29d52632e191a1aabf93c994ce27e4edf4a953663c579a6cdb516f

SHA512
ceed592f130669a89b903a59effeb2645bbebc75a1fde4545ab687ca8f0ba259da4053b0eda1ff71d81b8a87699416b6b03e9287a5adbae733d4ab4f8425977c

Download Submit
C:\Users\Admin\AppData\Local\Temp\Cab6BB0.tmp

Filesize
65KB

MD5
ac05d27423a85adc1622c714f2cb6184

SHA1
b0fe2b1abddb97837ea0195be70ab2ff14d43198

SHA256
c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

SHA512
6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

Download Submit
C:\Users\Admin\AppData\Local\Temp\Tar6E86.tmp

Filesize
175KB

MD5
dd73cead4b93366cf3465c8cd32e2796

SHA1
74546226dfe9ceb8184651e920d1dbfb432b314e

SHA256
a6752b7851b591550e4625b832a393aabcc428de18d83e8593cd540f7d7cae22

SHA512
ce1bdd595065c94fa528badf4a6a8777893807d6789267612755df818ba6ffe55e4df429710aea29526ee4aa8ef20e25f2f05341da53992157d21ae032c0fb63

Download Submit