Analysis
-
max time kernel
133s -
max time network
127s -
platform
windows7_x64 -
resource
win7-20240419-en -
resource tags
arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system -
submitted
26/05/2024, 03:12
Static task
static1
Behavioral task
behavioral1
Sample
02mins30secs_Transcript336.html
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
02mins30secs_Transcript336.html
Resource
win10v2004-20240426-en
Behavioral task
behavioral3
Sample
02mins30secs_Transcript336.html
Resource
android-x64-20240514-en
General
-
Target
02mins30secs_Transcript336.html
-
Size
5KB
-
MD5
c5aa29991dd8f3dc47a6a7a5fe032c20
-
SHA1
084c0b6df0268d8dc4625f6898e010e20f10fbad
-
SHA256
4558e12dbf948c321c5de75b1c6717f8a3cd9dfd4d50888e06a84c44b6bb6e00
-
SHA512
e92d8a0997db6e293115178d5f84f74108c02a0c32ed0ec5118987a6f2f3a954a7e8a48b9d5a4f768dbf45d120deb171a3008fd414e54d964a9f88a8496b3a60
-
SSDEEP
96:LCVkJb8gtcXJFzgE/CSSTalqfJIWx7CpdJST/lI+jK7c5YJN5ST7HfElIG1w:ykJb8hJFzp/CPKqfRdC4++WBA/fjG1w
Malware Config
Signatures
-
description ioc Process Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\GPU iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{C0B7F1E1-1B0D-11EF-B781-461900256DFE} = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\SearchScopes iexplore.exe Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\IETld\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Toolbar IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\IntelliForms iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000 iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" IEXPLORE.EXE Set value (data) \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 30873f951aafda01 iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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 iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\ITBar7Height = "0" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\InternetRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser iexplore.exe Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\DomainSuggestion iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "422855002" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Main iexplore.exe Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\PageSetup iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "3" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\ITBar7Height = "21" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\LowRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain iexplore.exe Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Zoom iexplore.exe Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive iexplore.exe Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Main IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Toolbar iexplore.exe Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000d7c7e73b934388418857a0db8be9c1d1000000000200000000001066000000010000200000007cb572d7c762d649eb82799af9b5c041143ba322b72d3bfc08ea3ff3b2edaaa6000000000e8000000002000020000000be746d38e414aedd1acab0edbb8bf6f704fb5f2bd11689917eb3f1e4b5e15dfd20000000d74818c2bcb1b644fcdbaf13caaa438243ad6ee7f7cbe105cde4a78b451dda4240000000bdab4c53048ea368a949532c56f1d2d3389c661350e5e2cf334775a4b73e2ae2a8a85cc97598e39a37f18089a06d3c7ac9cdea1cb93eee291fdd6a1a2ab6995b iexplore.exe -
Modifies registry class 5 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000_Classes\Local Settings IEXPLORE.EXE Key created \REGISTRY\MACHINE\SOFTWARE\Classes\.htm\OpenWithList\WINWORD.EXE IEXPLORE.EXE Key created \REGISTRY\MACHINE\SOFTWARE\Classes\.mhtml\OpenWithList\WINWORD.EXE IEXPLORE.EXE Key created \REGISTRY\MACHINE\SOFTWARE\Classes\.mhtml IEXPLORE.EXE Key created \REGISTRY\MACHINE\SOFTWARE\Classes\.mhtml\OpenWithList IEXPLORE.EXE -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 3000 iexplore.exe -
Suspicious use of SetWindowsHookEx 7 IoCs
pid Process 3000 iexplore.exe 3000 iexplore.exe 2556 IEXPLORE.EXE 2556 IEXPLORE.EXE 2556 IEXPLORE.EXE 2556 IEXPLORE.EXE 2556 IEXPLORE.EXE -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 3000 wrote to memory of 2556 3000 iexplore.exe 28 PID 3000 wrote to memory of 2556 3000 iexplore.exe 28 PID 3000 wrote to memory of 2556 3000 iexplore.exe 28 PID 3000 wrote to memory of 2556 3000 iexplore.exe 28
Processes
-
C:\Program Files\Internet Explorer\iexplore.exe"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\02mins30secs_Transcript336.html1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:3000 -
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:3000 CREDAT:275457 /prefetch:22⤵
- Modifies Internet Explorer settings
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:2556
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD57fdcdf6e5e9b33087572a250ab16f0a4
SHA1c2a1c60bfdd758d8a81d7520bc15e4cbc304f675
SHA256a2429c8e0ab629bcc8038cdd74601a0cef545cb9bd8986a71d7110e321faccdb
SHA512ec31ed179ff9d1f4d41a14785ef7f24ecc9cd48095e7e16db4f45483247bc42e5eecdac1890388c040c4390587ad2573b3806561e29ecd6557b0e24de278c9d0
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5df8c5ecd65836d03b64f15bf87bf2f2e
SHA11a8bfd08ece59cb7d0816c589dfa51731551b2de
SHA256b6a9a352338665e712cc790ae317e3f52639595e34063b16543531939537018d
SHA512c5da9edcf0d024c24ad2b099d5235836067760d47c97e062a4647550c3bb5cc7df7900cc9a1339a40e4364b3b3c03c752c2c5d771f599734e2b6bc138711f569
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5d22961074f40ac2d2652dcb4516fb5d2
SHA1c41fe1fa840fba5da48d90923bad36ae27196bf6
SHA256288c8140c765a0ed1f33b641b77e7fb2bcd155e9740d94c4867d7c88fb033586
SHA512d5c002d470305909aa0701cbafa925739a36c7f0c2a2fa3a05f0b325430e7463801d0764b257998885bb2d3023bce2026ca650a38488cb363e539376cf84ce8d
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD59dc242981e9aa31085c1e40284e6ad44
SHA1b6d6f8f576bd22182d27af12a6a067f7a75cfe00
SHA25627334d62f6d6a8f569907b5af5f70b1d2c6540b1f44b9854df70817985f35f37
SHA5128fb7231af99af5440931686948dde1cb22933f5e6308571afdd97d9dc58ab2d602fc4b4fbee6d8f86174681d945cdc07e3043a38557a2c22ad67e06c132ca054
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5c49c10319975a1e8724400f059284aec
SHA1ea6e238e6554d1909819e1737c8e3135f873becc
SHA256e5a9961263e14f3a5e2585529d64e29c948ce798a9a54f231fa9cc24cfd26a0b
SHA512957d251c2c0497439653ceaf803765276791e853b91521548acf4020414d7def94aaa4bebcd3b22a2751065cac145def7e9ca96f05294577600cb34bb5ac3253
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD521f63dce3285084cf9e5cf2f49f3aafa
SHA151468811acd88edc0cf40778eeb81da7a86ae2a4
SHA256a84ce882ee17288f6a4c20797510ba46e8e11e1667f1fe627086238464d1206b
SHA512dd3872b81f44fa29e377e959c29971ffe8f2aec46f669c084b4d6a5381787670465d6d9ec068b8b684ce2da0470b299a36ea1879f7f168c41a38202bd6a8af24
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5563769dec2526b299e60dea65c19d66d
SHA10d770ec3902f31da4498d73a440855a644d00a49
SHA25654fe97d74400bedac08df1f496e034483d516433a3e778aa36689c986b893d4a
SHA5122ab4e83b8747a651afcdde531ad1e34ad7009be3f999a50b5c818a5eeb1ab90621a8937a4965fc2cf5c47a17a6a5b2e8bab4e129d0d9e5f2d90c8db07ce2db73
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD57385a72cefdedec19e254975470bd7e4
SHA13d0e555dbf75cf9189a4cce2ad0a289bcb796906
SHA256a30dda67b458e194e3286d0cea96c0af68b3d3f6b498a108f075938fcfa3e7d8
SHA51254ea0149134c157e5fd9581e26a456bc56517de09301ee340ebb05db26af082a1cad2c00ad2337c6de98780aa6b7be7f5ddbd2c7fcac9827df29216be7b2c099
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD54608315b7fedc17ed81e264aac88b733
SHA1ff49b73b7c59cfa407d98b943b76af0496f99e21
SHA256f9af4d20e3bd29f11e94e9a3a375ca5c364a4a32a4715bdfe3109054084cf42d
SHA5129c6769337480e0f46723962f8c70dc63ace90b011b29767793bf2cb265833cdc64c067b70a567619533374c311448404f8cc139fc8465859fad0ea70e09c68ef
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5eafe24046172f8ffda89b22938e7d606
SHA19d06f3b958accb5304fd0f53c97e499a7340e6d4
SHA256c25513c87d944fa5eb175b6021d0154bcd89358abc7eedf7ceae2233ac4c2bd8
SHA512665ef749e5917dcb22cc13bb9bee500b644cb0f4d5ce3b3767b0f6587dd43068bfcf10d72faa53d0713d47a8dfde6cf6959bbb5f7e21f9ade8817722659f81f7
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD55be4d2699e866ed89b121b7f049ef3ed
SHA18709796b99c8c3c4d968c25f6d6fb6628340aced
SHA2569131c32412e347c19172c00d7bc06a7b16e64500b47ca53ecdfe9dc873bfcb44
SHA51283750cf7a2f18e30e1836b55c7cdd9c0a021f88675bb2491e12b9430908196465b5c45b9a2428657172b250da72937f958b71c9f5e899e42d0bc177fde02e800
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD595b8b1b3ca8eabbb9c4a7122e2c3ebb5
SHA13dc3f5b0c64a0a3940ea447b2bcd40cd886c9ce5
SHA256ac674dba43b9eb19994bf36b2bb66678be460153783f1ce3170cd7bdcadac72f
SHA5128553b3e16a139cc453a4800c5007403f6acacfc4b9a7e8f808b4d3ffb598cb3f4609ac33bbfdf4d15e408860226cf65e69f186fa296481d1377c221bb7f145a0
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD59f95e311bfc7420b5d4b6d7c08d318a5
SHA1a53ca6defc9246e07bb52d16edb5890d5ae5b0d4
SHA256ece95fa8ebac5f533b716fe7c2a883908caf44b68837e39e1713beb118dd3bd3
SHA5121ee56e856965cb16f3fd8bb7fc28dd06a5d6fd8a108ba3cc40b083cbf6b7e818ef8dafebd20c8ee7e25281c4b26756305ee1e29bae5bb7ed9fe72ff41ae50fb8
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD58c6f52b286e51d86d3d8c2d3a7d9a98d
SHA1f14933e2a3c0d442876cdc35470dc8b0f8958d3a
SHA2560920c5dbb6c3f238c543b5ce831f57580e0ab20f1f26b8490a9e4c931315e69c
SHA512c0122c19a2c4a4c1ea4e47f1b00e9916164138d61edcb4f69e7939b525a03db0e23962f6db7b5c8f017d37162cf48661833d16f594f317285085736df72fbd66
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5d69764c7aee161010a0056ee0ceeaca7
SHA1fb8a008c2dec5dccffda3caa28c4cf980eb7ebab
SHA25613320fd6fa121491a3ddff3580f1e77eb798714ce93a789689f7c68f8ace24b9
SHA512d8065a9263f54ac159e8a095c4ffc732e41b4896fcbc149f3d587b41fcc7350c5264308b4fa73069ef342209c274213b51af18ad2321bcb811a895c5d7f9e2f7
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5e1cdaf6b31da885d08bcd4665f679cf0
SHA1129bec4e1fba7abcd2bd23f2f0b2ce535da934de
SHA256187a4efdecf2f1b23087ffe47d321d2ed4fab0d0cda0e78966c575e48c2f58b6
SHA512e164f38863ef8a9df3062879f3878a1c9b91acee63dedc4406dd036987537ed90df8da8200e44a885551ce7fc4ffbb95aef3ef194ff7724b6991a131500c0e8b
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5bd75579297ee1007ddeb85758d538a93
SHA1e42866dcba908457abbd85b4b5886fd2f1749791
SHA25633102f90bbf85a0247368af00e5ef9e7d8139e499c1effc61823f95dcb0de0d5
SHA512a1445ddfc47eebf42d22a42dc4441dd06adfbe11e3936a885ee2658ea164ebb8c57f6e2bf017a7424ff9bbdb0f942a11ae1fe30b20b5047cc6f30123e03f7197
-
Filesize
68KB
MD529f65ba8e88c063813cc50a4ea544e93
SHA105a7040d5c127e68c25d81cc51271ffb8bef3568
SHA2561ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184
SHA512e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa
-
Filesize
177KB
MD5435a9ac180383f9fa094131b173a2f7b
SHA176944ea657a9db94f9a4bef38f88c46ed4166983
SHA25667dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34
SHA5121a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a