Analysis
-
max time kernel
121s -
max time network
129s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
19/03/2024, 04:13
Static task
static1
Behavioral task
behavioral1
Sample
d52b1e3462d1f751944713a8aeafa434.html
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
d52b1e3462d1f751944713a8aeafa434.html
Resource
win10v2004-20240226-en
General
-
Target
d52b1e3462d1f751944713a8aeafa434.html
-
Size
31KB
-
MD5
d52b1e3462d1f751944713a8aeafa434
-
SHA1
c3ce0f0a5bd4355e4411dc98bbc5ab414674608a
-
SHA256
2882e7d56838b8b4e93ad77b69fa363e4dd94d2b2d93af0111191646dc51c501
-
SHA512
459f6d479d0b244828485a54b00896d5c2cd20504ca57293ba389d947445ceb7a9a55dd9dc3ca087e0c66addebd62450e797edfd351c0795410176e25d52603a
-
SSDEEP
192:uwTlb5nyt5anQjxn5Q/gnQie7NnT4InQOkEnt0unQTbnpnQmI5xOZkhU3kJ4z/ws:sQ/1oExOCDksA9Fz
Malware Config
Signatures
-
description ioc Process Key created \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\IntelliForms iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Zoom iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\GPU iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000 iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Size = "10" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\SearchScopes iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\IETld\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\InternetRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch IEXPLORE.EXE Set value (data) \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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 iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Enable = "1" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Factor = "20" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\LowRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\PageSetup iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{1A0396B1-E5A7-11EE-BC57-569FD5A164C1} = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Main IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 20e0f7eeb379da01 iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "416983505" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\International\CpMRU IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "3" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb010000002dcc56832ee45b40af0f973e997a3e3e000000000200000000001066000000010000200000008e374e4a82ddb718e9de3dd1dabdc7b36b84bd252192451373c11ce9f6086514000000000e80000000020000200000008e9692ed48c4555e5e78d9ac990ac9e3958dc5abfe2be8215ae21ea65f48ca2a200000001474430adb275aac3e247ef9f1bb098a6eafc7a6f424110efbdc15ba4fdc847b40000000b191a4e8eae4d9bcda96facd3f9ebb1f24781eca2ee2d1d4238b03edaa0a8498e735eeae82f87da5508065c9d55f32b775d2896d5f54463d8d36e413b2c0d4b2 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\DomainSuggestion iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Main iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Toolbar iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0" iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\International\CpMRU\InitHits = "100" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1" iexplore.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2104 iexplore.exe -
Suspicious use of SetWindowsHookEx 6 IoCs
pid Process 2104 iexplore.exe 2104 iexplore.exe 2624 IEXPLORE.EXE 2624 IEXPLORE.EXE 2624 IEXPLORE.EXE 2624 IEXPLORE.EXE -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 2104 wrote to memory of 2624 2104 iexplore.exe 28 PID 2104 wrote to memory of 2624 2104 iexplore.exe 28 PID 2104 wrote to memory of 2624 2104 iexplore.exe 28 PID 2104 wrote to memory of 2624 2104 iexplore.exe 28
Processes
-
C:\Program Files\Internet Explorer\iexplore.exe"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\d52b1e3462d1f751944713a8aeafa434.html1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2104 -
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2104 CREDAT:275457 /prefetch:22⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:2624
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
67KB
MD5753df6889fd7410a2e9fe333da83a429
SHA13c425f16e8267186061dd48ac1c77c122962456e
SHA256b42dc237e44cbc9a43400e7d3f9cbd406dbdefd62bfe87328f8663897d69df78
SHA5129d56f79410ad0cf852c74c3ef9454e7ae86e80bdd6ff67773994b48ccac71142bcf5c90635da6a056e1406e81e64674db9584928e867c55b77b59e2851cf6444
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD533778d4c30a73320086cfac04c42167c
SHA19c0a3d6f77d5543e83a768df127bed2717027c3b
SHA256bc76208c357f959605edeecad6cd4de98df8338c4c437184663b3a12f61e9a47
SHA5123f6010d2c5edba5661c9c685c0a78610596dcc73afd1233a62c4a2906c3034fd00e05d861f640276e1492260b6fb3e26e822ce1460294273de5ae235437d3152
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD52d071dbde477853ede402cfc55039dfc
SHA1cbd94ab2a88530daad51bb08f1cee892b24a116f
SHA25620982d77d5242bf7451a04fb0de6b966ecf9b199029e404d7ce9b768f14c3571
SHA512e775d7e707d6dc340d83f7fbc213df58b3b146579f0163bf517541fef3336da53fa49466c579084e6ec9e676d22465895ecb846ca42bb643cbdec3de5b110359
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5a5ab6bda042518831d3269d18a05cb33
SHA12e1134993dc6eea73eddba4a74c56c44138ec54e
SHA2560fd25c017b1c93f39b8b265c57ced50d656c1f3be32d5a1bc07259025e49a87d
SHA5123a1f5da1c39cc7b3cdb303efbff5875cc9cd3346a085b6a8e55d159d88a1e64778b32b2a605eb2d781b86e956594f875e119f705a96ee1b6b505194fb0b3f61c
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5d405b63629dfc6749dbcd54308519ec4
SHA1debea86bba3b1fab1412beb14daad05d9b6ddc62
SHA2561af3923d0a22694fcab18dde628fe22e57103b5089bdebf6ab500e71a6295449
SHA512467d3110c847b8cf007fbd619d5eb57f7bdf09ba45eefc566fac6be204a2c0e6c5aa92316c7a81d2bd2174dacb93c31f796fc149d409f2597797dd36058b2327
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5392e3f7eaabb8efedb6d187fe050d10e
SHA1560336878a46d823ae66c1381d2e2541facb19af
SHA256f02bb74f2b2f321dabcc649c571cdc3dbc46ed5b37296e8fc4c14dbdfe0f1a54
SHA512b29733904c031fbf40742312d2153327dabecf24e95623256d10ef734b04672a2af074cf7908f8c9f5e31a31cf22e992de295657f6922e8ab6ff120b5767a5d2
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD50770e6ba03a2f03dab1d8134df2befa0
SHA1a8d7add4797fb9d5fa2e20fd1042929f77200267
SHA256b350e6a31eee022e56338e7ca6e36621fba332e88cf19ea2414a0eb092d7b00b
SHA51251cb124c386f85bce451f9f5e51a6f261490fb03007944376b557242aaa41c51ca4e18d112a913c3290d698d6ad3651c708f2d7e2983f1db9f17505d4369839e
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5ee29385636297516b6c83b5905eb8152
SHA1ec728ffc4d8a9f9be1950211d91f92d664f5c9f4
SHA256f1dfe22a884cc9630917f09cf4f3ce7a27443f2e9ab00761d4a0bfba71507914
SHA512b778f5d1259555bcd981202b3e0aaa21d081f4ae3ecb395fcbd2f38e31c62d40f2dcf1c5485c17c15773383fc18aebbfeb35a6d0d85854fa0533aa6fe0efd8f2
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD58dd3cab12f7a939977c3e1d2c3376479
SHA1bca51939934ae268a2523cb21578f07290162933
SHA256fb2ff5737dfc66da50c7f4aac50c02fe75ffc9031ac77881f4d7d30aced02398
SHA512ad7f60892ad0dbc3072d757a66d9c74bab23636ce5836b65bc8f7eb94af51f1c195574eb4031d2d6444916cbe10d1006dbeb83fbe1c41604fe042690086ded61
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD536b193611559dfd4412b9afd6fa8469c
SHA11ab4d5dedfca3ffe0b560ed7e1e9888c049cfb60
SHA2567054ed67acf26cbe744b3a027befe0c5116f665f61ee8164da1aa6ea18eaa46e
SHA512c55217a3bc51d28765a2f10087c5ac3dc0b56ef7950ae7290ef599ba3802714c730e33fefa4fe007bcad038df3c2d8537cf7009ff857268919cf875fc4d9e6c0
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5df551dc9c746f02feb2229d4fc24a2db
SHA16713423c5032988e4b2b91b5f60266ae4a4abe20
SHA2563e34fef1b0a34b0cce14c236ea7358b178cbdfdc71830fd0c0dc588a45633091
SHA512e591baf313f49525df9f3370ad85f619f2c12309e27f9ec4a81a51869f4e97122431ded9b7d8c3da8c4528c1c10afb9706f3fe2f4e8dc2afd2f7510d8faae011
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5346f637644c758e6b1857fdc97b65365
SHA17956f15da1387a14bd9031a354f15af407ba0d95
SHA256cc6c442ed76118c11fa1835b30d2efd31bfa54bb48c808eaa0f6c2cfffccad5e
SHA51247ecb5c3d5cafbdfbe9050b6d9065475c99bce88e12c3cbd067e4248cfeda85d2d6587cd07ac4321f3d8a6c1a8bbfe6339d3bb62aa0f561ab76d7ce547b34fad
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5af1008d8763a7b8bbdd63d327e01fe5e
SHA14268f2c50ac1bb711ff5aab463ceb64e9ea2a993
SHA256eaf4161518a62c8942c05164a4ea4e0ce6d381889c082b3cd7dcda72657a7006
SHA51289760c99eaeb84c1f4a2f9ab97b448701ab4efe87d6637dd9962b976b7aaf6820bd324b3e31a5c44f02d4f657c78577e6648bdd68ea10be2958368463d3095b7
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5bc79e9d6e4673fcc023f2e61eb9ffa81
SHA1261c0d47f9b1904d456c55f3ded7081b0575cf3f
SHA256878743b570a4628fdf6de91a0407bf850d2638c08aa26f94c17aa9ae91c4fe56
SHA51266208d98f48605ecc749b497d03bb31871dd4f818623aa581583a6843ba6af96f9b42128831794b10544d51ca3300073902519865ae1157be74d4e6272c28b44
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5c332f5e1897010b93fb0bb63aa16f347
SHA100b2680793ebe2952e5e285fc67b232d4ed8ce5b
SHA2567303a028550a1a219598b8d43eb71e7d6f0197f66d4e33741d5df684fd19e90a
SHA512e65a6aab2a66ab42db086670f74efaba96a586ef6ae576d3eb8bd50133dc2832a4b4f69fdfb35390e1d85573720cad5f3809124eec261cd83861ffba261da28f
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD575db0541f5d7b59cb87e78ef135a770f
SHA1ef650bc73d38806549320bdadcdcf7d089b62784
SHA2564fedb56d27b4c596c2ea49cd0d9793e970352a924bfa7ca6d8d3e17b0033452f
SHA5124fbfd734eaf1f2cd4226cd95127c53ce2fc82e2704245faa8708a79eae53732d233b0625df14f4dd28bb40b486d7b5fca118ce74400efc045f204caf39e1ab8b
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5cc53e5cd3dd45b0677f378461fe34599
SHA176a084bb9c76673cffeff0df6d8ed15d21457810
SHA256d6f9b4a9a5372a6f56ec5e440439e86657e13f46584c4d8b7eddb226231f553d
SHA5128d0f313e2fd1322c87c88908d16f7ebb21d4dfd61981c1c82ab6312e486dd0b196f296443f86fbe5d0436fc0f1003cc4d91715f52d048766008d0a0ee4948b9c
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD550e9f085965bba4dd09965a0ba32a407
SHA13336fcbeac3dfcd8d50b9c81648418e0d8429a57
SHA25603cbcec57054a10b1d4bbf5ec94a0b3b90aa024f5664defd978af4b477520411
SHA5124124ade0204ebd561b0f1f22c58515894d2f06842e9b35dfe27552338f5c222aeec8cf9f97866324de1f0b61bcdcfd40d983dd8e115e9d2b423757ca6ea5c302
-
Filesize
65KB
MD5ac05d27423a85adc1622c714f2cb6184
SHA1b0fe2b1abddb97837ea0195be70ab2ff14d43198
SHA256c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d
SHA5126d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d
-
Filesize
175KB
MD5dd73cead4b93366cf3465c8cd32e2796
SHA174546226dfe9ceb8184651e920d1dbfb432b314e
SHA256a6752b7851b591550e4625b832a393aabcc428de18d83e8593cd540f7d7cae22
SHA512ce1bdd595065c94fa528badf4a6a8777893807d6789267612755df818ba6ffe55e4df429710aea29526ee4aa8ef20e25f2f05341da53992157d21ae032c0fb63