c950bb9080135e5afb438cb1bf194c7bfc826219079d3e400fc083f8e16f2f35

Analysis

max time kernel
134s
max time network
129s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
14/05/2024, 17:35

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

office365/form/default.html
Size

16KB
MD5

7eb1d0befbc7ea745c8441498c64470e
SHA1

dcd78c31411e28a0a2b61037a5fb248922833ad0
SHA256

d81cb960dbb6c8e00637b0562349dd9edad9b1a28b3ea6b80b0f7ba077e70cb1
SHA512

33acd9fae4527a38ece5c045e9d84d6abb3831cb88ba6e2368f6139d87443d90710c680d8ebf4b498eb92b162ce620599a64f43a76ca7369d099132bdd631685
SSDEEP

192:Cm8szJ2A8snFWcgLAQ442+n6SoVGi3H3zi3H3LdamExoXC/uw+0WpPqyRoK/32hn:P+e4cdQ4u6rVGi3H3zi3H3Ldw52DReAC

Score

1^/10

Malware Config

Signatures

Modifies Internet Explorer settings 1 TTPs 36 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\IETld\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Toolbar	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 800f172525a6da01	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\IntelliForms	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\PageSetup	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\InternetRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Main	IEXPLORE.EXE
Set value (data)	\REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\GPU	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "3"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\DomainSuggestion	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\LowRegistry	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\SearchScopes	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "421869979"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Main	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{50A98241-1218-11EF-82E1-DE62917EBCA6} = "0"	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb0100000071c834f68b8ed044a0afda50fbc58a700000000002000000000010660000000100002000000084464202d2bafc634c253e39003d44a4bc9b33094c1d0e75a9b2f64f07d202a6000000000e80000000020000200000007ebc53c1488e2e8c10e08679a09fb4e2dcf941a7c8a7d312f693201b7a14991a200000008e463bebde9215d7a9236d014d7a1dec53ee6088f4bf525f2aa1c8a5c4fa9288400000005d30887f8afd24a12cb667b1ba7b895e2a74133c7194bf5ba10bd7710f3a47c3a46686da7520a21ad6ba071fd295f363c456673c28260077ade77fae7fdef3ba	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Zoom	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage	iexplore.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
2188	iexplore.exe

Suspicious use of SetWindowsHookEx 6 IoCs

pid	Process
2188	iexplore.exe
2188	iexplore.exe
1612	IEXPLORE.EXE
1612	IEXPLORE.EXE
1612	IEXPLORE.EXE
1612	IEXPLORE.EXE

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2188 wrote to memory of 1612	2188	iexplore.exe	28
PID 2188 wrote to memory of 1612	2188	iexplore.exe	28
PID 2188 wrote to memory of 1612	2188	iexplore.exe	28
PID 2188 wrote to memory of 1612	2188	iexplore.exe	28

C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\office365\form\default.html
1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2188
- C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
  "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2188 CREDAT:275457 /prefetch:2
  2⤵
  - Modifies Internet Explorer settings
  - Suspicious use of SetWindowsHookEx
  PID:1612

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

Filesize
68KB

MD5
29f65ba8e88c063813cc50a4ea544e93

SHA1
05a7040d5c127e68c25d81cc51271ffb8bef3568

SHA256
1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

SHA512
e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
b79bdc65b33d8637bb2d440b801526fa

SHA1
e070ab3c6c783ba703d2c5b85addcd0909400b7f

SHA256
c7f22a5e67927c5cd2218c19dfc275646f5788034cc9bc2f79ae690377871bf7

SHA512
fd7aafe851dadead976995ae4484918348546178de8786c98b7da080d96c546c8c8a295938e839e8a16ac883dfd46c4ba3497d43d296b17e355a7605c2ce2876

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
23c0bbbc3ec210caacf9efb9e234a1c3

SHA1
60d3cc825c94cb91bc1ae4f7d7f9a17e996f3837

SHA256
3b7951bff44221b1e591dbf958f723017e284407286bb9fe2b3eaf69a6b4f85d

SHA512
61be65b86d52a530f802f9ae26a58a32b60d0aa312a59b8c2e163f52baabcd79a3cb7fe6a87099dd742a2cabfcf21dd5396d77a8886ec4f56b547b44791f98f3

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
e339d9cd3b24c826174ef134ec9647e2

SHA1
e8716d550027f0cc7dedf487a7f1b4a27c3e4da4

SHA256
5b464a58520eb8385d30316568ae563e712fa4d9db39432f6b96590862d99b57

SHA512
39b8ad48eef41f477f84b8fb409ab7b054f7edaf15357990fcc796540e80ac9c4e7367f9c65a8c258cb1076068f4cb3aa4581a82b454560440c70e8e538ca064

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
67b1f4a575014c048adda6230f3f8ab5

SHA1
d30a8184b615015fe479e9361840a08059293090

SHA256
ef8fc4a7e354abd682be194b74637e7b2580d58bb303afc349e98abb1183b685

SHA512
057adb0372f6441f575b8ca0db309088f471d286dde6fb75ccd1105d80c7e0b034419e7c16c91f588f89590ebad71e3d1087f4e34550ac5625b9ca0ecfb342fc

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
fbcfabd33815e4b33434e4d6763ff4c8

SHA1
22057ee0c85175752d9ea39373d905d01068e551

SHA256
d49ce32e8148f5b07dd2948e91615abbd3c55c25612ec014a7720fa93654db7a

SHA512
8590f5bfbf2b08af297a197185916062f70a18f39fa0f7a70f62232746528a7c0ac9350b60442ba6b51ea068fbb3076fe79311b9b97218d49d539ea4c02799a1

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
9df3e5eef37b76ca92ab66f044955bc5

SHA1
25517b816eefb4d7ed51bbab9b9166b8ff74d6df

SHA256
78ad5544fa174dfba843804c9576f19072c03e1e7aab32660b6dd7102afe80be

SHA512
ea5f3e2a03a65a0726e92c8982bd8bee465170ecd75ea04cf7c071c724880650b3d5fae7b6d2dc10383faf0c3584b217f701cc8f7658c1541569d1d625b95129

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
4b39c646c86c84f9da2224ec3034c502

SHA1
dfca0277563b8991c558aa7fcc2daefd4961a04e

SHA256
af7dbf293d43b04ff29a9de8bf0b255f80407b6d00359e2763d51cdae8a35940

SHA512
0c64874b367f7afa681be2da2e46159a2eef439e01d4d04359993d05620d64ccfaa9e007b1ce98876fd85e3296b5fbc2a4404aa791a2413919cad9a85811164d

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
496e2d224bc58bd9b0c28cd76a002cb2

SHA1
3b0d06623507db6e82090a794184ad7033bfe73f

SHA256
42a2d5e5f8b07009217febacecc8f48a738e428c2f1ac3cb33347a7bf6e6974e

SHA512
4197955b43a60ef7ed3beed1e84c63bc78f781f572995d323d17d804cb57169357a03e0e19e780eccc27e96d3fac5ecafd70c18124e69a652aa3c88ccadf342c

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
8c4d8d31661793498c55b646d787c3ec

SHA1
cf8f610bfa5efbe1599d7f17abc1400561785804

SHA256
f6d6f504d4687621e302d569c1d37d1d305bb078ea3481527fa1cd3a4bf5731d

SHA512
38d29fab1c1ccf5fd498093569d9af5a87ca9ff8651254f9006ebfa6cd5fdada7f21052b46fc985ef79ed124ec8d7bcc0ec454ecafa1198911da5862637ac63e

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
42480b8486c261d9d16970789b7d0878

SHA1
0e780c54990b5f1b09d46279138b14e246e637cb

SHA256
44ad4f00ac2c27120bbf59d4a2c851aad795c02dbc5956d91fe98933c994ffd9

SHA512
7984e02e8310bc3975c4f0e7906e892524e40a162aca08ab5205e7272ab294113b142144b4363ed2792ce15f51f4878d6efea2376a770be37bce853b46b69a8a

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
734e1294970ebecc82d3fb1ee449512e

SHA1
ba573da7a91863f8bec2e54d63e8cee0d97b8362

SHA256
622d40e4262cee5d9a071fdf44b13da753c9fbbcf6e6df6273c64dcd6ddd3100

SHA512
8461ddaad3ac0c0ee7de7e25e891278920879a43f59e1624bb448bde171493a5450977d45282f507248575b632958a1da7df54b095b3dda2b2c5275efaad3fde

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
5dd10e40b012f6a95a9f42be9976e8a2

SHA1
683d8b78bddec6edd2bb044eccaf6837aded3483

SHA256
92dbc56f76de17433ae0e3fd35b90634f760e4d31290a7ae75c385d01d8bebef

SHA512
218d3275024dc88d3fdf75f9e4c8f72a87db53bc42038c45bdbd628f092f6285fe210b2b4428a325f7f77ace2583aec261990a1b4bed43474cb449438d984d45

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
53bba44419f85445f18d9b463dc584b3

SHA1
47d7b7367ba064634d9d544b761749a0aeb9d97f

SHA256
5c48d3b9f4904bfa5f12bc6a750dc1219402d8549aafa3c2784cf365788b3574

SHA512
6cf8242800d23f4487302da088a1d5d53eb0eb1f2ed89b47293cd8912d71a847a33f1516d0bb7778ef31367fc9d9745062029114f314a812cbdef1de1167668b

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
4ad61d9e2111238ef98dce822ea50b48

SHA1
b0f0fb2ce23a08f3e940d5d18f9046800b16c886

SHA256
5b630a360484f49b5f44280c0d7ad9cde2ae2de49cfb594523dcd21760339ce5

SHA512
2cad068a632d5d5fd9bbf071ceeb539dcf6995ab417e40e828dd21208acec5bf711df9ac09765658de6fb4566ea122fc8d9f66c0ba8c752d593046cd0915987e

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
ad32c954901c7cdd7b00ac71e1a6d869

SHA1
1a03bb0150e717c703dd349a12556cbdef7cd5c0

SHA256
07713df0d44f1ebe0c56932f194d9dc66515a025ef9c5d7c7d7fd87da4257aff

SHA512
dc52b0722876fcbaef533f041358bd003412b6cebe45e78954060fbb64e8bbf7550b29ccd8425e713e09c225f57218157dc7c5db2a38629857c0bfb68869553e

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
e244cd8d15582336288d2cf0539db81b

SHA1
3eca1d4a3dee880a762be7a1fb8503f4183f00e1

SHA256
05ba0f3ae99a0a0b81a8e0661d3dab368f90294dbd50726d2f531a50e82a2e06

SHA512
d70ad48f6708733c43795c221446f6f2ccd8fd3f517628e876b1297c1ca0703124e66a43bd195668473bacd93ec731ea616fac697800b70a15167efd40ce29cb

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
2b0e505097855b98aa56abbeceea1a81

SHA1
0b492dc1db287f047d22caf1348adf3b993b3c0e

SHA256
7e26461a4c683d553003038a6399123a718eebc68a8232a36eb672fb5ccb664e

SHA512
ee6f8a44ae12dd3405d9065e3800f2a07270aafc68a01ec6bfe5a7318c852146717c868dcdc5670097943e51b806771bc37ddf35ba9e6c3f4777d4b4b4ed4991

Download Submit
C:\Users\Admin\AppData\Local\Temp\Cab2722.tmp

Filesize
65KB

MD5
ac05d27423a85adc1622c714f2cb6184

SHA1
b0fe2b1abddb97837ea0195be70ab2ff14d43198

SHA256
c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

SHA512
6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

Download Submit
C:\Users\Admin\AppData\Local\Temp\Tar2825.tmp

Filesize
177KB

MD5
435a9ac180383f9fa094131b173a2f7b

SHA1
76944ea657a9db94f9a4bef38f88c46ed4166983

SHA256
67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

SHA512
1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a

Download Submit