1c6d305c14df22e7b0c58af9ffbb34d6312e47e57c8962d65cfdec8953359169

Analysis

max time kernel
141s
max time network
149s
platform
windows7_x64
resource
win7-20240611-en
resource tags

arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system
submitted
16/06/2024, 18:24

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

LICENSES.chromium.html
Size

7.9MB
MD5

8303b3a19888f41062a614cd95b2e2d2
SHA1

a112ee5559c27b01e3114cf10050531cab3d98a6
SHA256

9c088caac76cf5be69e0397d76fe9397017585cffdba327692ff1b3a6c00d68f
SHA512

281b2ecc99502a050ee69e31256dec135e8cb877d1a6ba9f1c975fcfb11c062980ee6061d2368b62f91e392953ae6235dd726a9d98e6efc1302f7ed713099179
SSDEEP

24576:dbTq6T06T5kJWSIRWnBIl70mfT76y6E65606F/HXpErpem:t4scj

Score

1^/10

Malware Config

Signatures

Modifies Internet Explorer settings 1 TTPs 36 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\Main	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\Toolbar	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\Main	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\IntelliForms	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\DomainSuggestion	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "424724265"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\Zoom	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\SearchScopes	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\LowRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0"	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb010000005ec80cf279b2564c91633e21940a807600000000020000000000106600000001000020000000cdbed636b7673db746ac99535de2526844db6dc2e0c633a50e9c78a90398e5c2000000000e8000000002000020000000d59cc5b43f3be1ee46f0c7f307e2290549a066e23b12e075a64974172bc7b3c8200000008b8d452c390f961c0bd8cd9ebba6648a8137d822eba89e8e07fd6ff5454b9abc4000000021ec39bade50ef6615f252e1fc752de9a33cc80d8b3903ef68117fada32c817ea9b9fdfe3e4537c3888dbcc9b7e94f331a59a18cfb50bc086dd5b3c4268eaac8	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\GPU	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\IETld\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\InternetRegistry	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "2"	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = e0ffafcc1ac0da01	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\PageSetup	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{F66536C1-2C0D-11EF-8144-CE80800B5EC6} = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing	iexplore.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
1056	iexplore.exe

Suspicious use of SetWindowsHookEx 6 IoCs

pid	Process
1056	iexplore.exe
1056	iexplore.exe
2612	IEXPLORE.EXE
2612	IEXPLORE.EXE
2612	IEXPLORE.EXE
2612	IEXPLORE.EXE

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 1056 wrote to memory of 2612	1056	iexplore.exe	28
PID 1056 wrote to memory of 2612	1056	iexplore.exe	28
PID 1056 wrote to memory of 2612	1056	iexplore.exe	28
PID 1056 wrote to memory of 2612	1056	iexplore.exe	28

C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\LICENSES.chromium.html
1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:1056
- C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
  "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1056 CREDAT:275457 /prefetch:2
  2⤵
  - Modifies Internet Explorer settings
  - Suspicious use of SetWindowsHookEx
  PID:2612

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
02003d1b6696cf2a756c40fbc02d27d4

SHA1
4d0adae0986e6ec830b0aa071f1d9fcc19b15cbd

SHA256
b6b2a0161fbd1d327c85661eb69be2e4e98063b73187367776475a12c28ded37

SHA512
cd80bda1b73d3ecd705cf04400666270dfbdb90b1151c46ad0b371ff2b48f7dcda3af890610a26545903b7988d46640f9207cfc70bdcbb6073776f65be1519f0

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
1e6e5802d30b3e32f22a4f65773eb236

SHA1
4a65297c2e19a021af91edb0245284bfdd6190e2

SHA256
632964c8284585c09d0d5fed7bb37e8b076ad0391828aafc8cd826b2cb3deac0

SHA512
73935f254539b0b571df3f480e6b5644e61a24c38459e92f2fd2b8ac48829f2f8ef154db3c2e5488ed0ed943aec43b10e537e1fc80a11f0e23b0150c976fceaa

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
4341f861e3294bcb54d86e8d2d59b851

SHA1
ea7ccb308694718ed4efd46476042cf1cde41967

SHA256
cac5d127e1c16058b8a3130c3d62db040a4675ae5b441a4aac0702819f1c299e

SHA512
deacfef9e98165180cd6250e2e6f5c9e3d929b389d009285a7ccccb7d26a3ab78e951e93b3e76789d02373fafbceb201ad9ad4d273fa696b04b55f4daca5f7da

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
808934cd5e34c597c283effcfbd18cbd

SHA1
323df70a89ae82f9f76999c2cf3d0dac0a30857c

SHA256
affaf058797f3666ec14e3c9fac12f1c0544a0a83f7e20cda076ced1fa3a3d07

SHA512
a3b6690568fc90421a5e04ebf0b7c547bcc4babf03396e0fa5c4af75c2abde7ff0c3a8ba08ad6e3ab59c790e478833af4cfa66d1ce2f5d01d4ed453e243c5cde

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
5bcb5ac5007f4528f6aea8fdd68b7617

SHA1
b0185c62df88c2543c2abb0b9911c590cf29cbd0

SHA256
e452f3a6eb43d1bf4746516dedb711bf31e9850c11d577c082d868c8d2df2d15

SHA512
81b2053ddb9bc00c1542e7830f0ef764def802df63e9004fcc6024c90e7bebd9e1bb026a8dafecfb0e37352104b6769c6b09fdfa343235e046ebe1f5d5f0fb70

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
397b991f93111f1af4ec27f79960454d

SHA1
e5e1035279a57e91a8923bd970229d353d179541

SHA256
24db5d2e0b2e3117ec2a30e324e9ecb117646c1eded4ddb358b574a22dbfa414

SHA512
2bd765ff27eb58eda8ff90daa93c9d55a6eb904abc97e4af42e1f9f9bc48ef03773b3ecd76ef38330ad45e72220f47bb15b1a9045080dea1160ad4e0a62b51ee

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
5a77baa2f60489b8a3bab7f60d908a58

SHA1
deb2ed7a1877f5631c93c3fd243a62ad33f7be07

SHA256
90a6cf29ded28e695fa8a6bf4253ca1503007abb2ec89da62d2f80c31350c2d9

SHA512
9464972233ea86d6635a9ef93d2683d47c7386a60a4f609e7cd3b8cd822bcf837a721d19b0401f5eef87d7b405d99ff30511106e1988ea09a1f4868077977f8b

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
00e2b66ba5b640409d47a729115d0765

SHA1
e32181f857fee351140dab268ed1525fd7281791

SHA256
82851e2eca6f344e55bb10960142ccc7c87cb055553f83096672afe18a5585ef

SHA512
5f6fd721a6fb87ddbdd21de02ba44604e41d7084cb0713f3cb0fafc63d7dbf4021ea30f3975a7f36ba9cf3a95374d26f3b0729c13606870d7232a130279ec435

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
3ce025a33e0a9339304d341eda206069

SHA1
679df34d40dac34196d465075cf90be1b9b67a47

SHA256
c2b4829e5c5cac65e5f29a6c5f9b10e6e3c0db17d1e11c67d4709f799688819b

SHA512
b3421dca30f806fe67e48f5eaed62e5a17775a6c139019b14b7102136666b9d5b8e162e1e100266c8abe700b879b13ac3bf71ef3ead3c682a712b2ab15c55be1

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
5ad28cc91ee1648920b85e17262a8c60

SHA1
c0d357b6bd16b3754cdcc2ad49f16e2771f1e30d

SHA256
450a0d964e2e6264020976308518e32c4aa302430400883c17c96fb9f40bfdef

SHA512
3f98a796b31bda09bb2785f0247977272f406b602ae63b86b02093226b601c61cbb52fe7abff3b69d82385089ceee4af87252f505d645c9d7f0de7db64e084fd

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
3626fca428417a020de7f2cf601cca24

SHA1
fb5e3cec641b0aa834ebb8efb8f2668df5fa9cfb

SHA256
b180973bd192bfefb55e199929a80ea24f43c6381576a82f537575a6843dfcc5

SHA512
e806a20691f11f9de9ff1c3e3f291478bd2fe7138d0d1524fca12982802d4962ade7e1b5d6f08d92224e001f7b45de584be8cd03e0b7603d65fe0f2ffdcbb213

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
7bf4a4482c30d97c5a3484c29829a17b

SHA1
957a63f8ad6d3d2f0d2ace7beca7e228bcbcebdf

SHA256
174129b5f878eee24cd54642c31ba7077cb79837c517b705e6fe2f0b5aee8fa7

SHA512
c0a5c3a8336166517bc63d8a27069430c6266aa99bd36c17b8ab3e067d733c83a407e12b8f882f784553826d12cd51886722bf2c178d03f8f75f3cfd9a567b6d

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
70fa7a6532d6f5b3c75bec8212b41191

SHA1
278f1f045afe8f6967280ee958a1fad0ddf8080f

SHA256
f1f9ffffcea59ea5a2ed1a2aba99a855e792d919d05dd5ae1606859ad14dd04a

SHA512
80f6a4ad90f9c0bf36ed6523b8c4b0f01162d04adf644727dd91a807effb0df36365247440bad7e304f4da5ad61f2cba9d2288c81b979f32f758561551eee3a4

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
b1d24c53846f7279e198746314174d0c

SHA1
d95885c65b669048cac1bdca3483c7c7bb1dd9be

SHA256
dc9be8e98c9c7c3ebbe06392ec5d3e5e7f4b6852118af2e15fee4a7a8ea35554

SHA512
dc21a5c1b37bc7d29a1b8cac122c268c20f8496867cfcd40dfddc60b2fc8ce96d4057b7624eadb0874796de855816bd52870ea8a6b8448619560afd2dc6b87e8

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
591e46b6a533ed767a411caeed5fe23c

SHA1
8e8ff37586f22cbefe645ba1ab324391b79748dc

SHA256
af770ee952371d0ebb0c340ce200a132fe4c75d237f7b08e4f2aa3d023ff1b1e

SHA512
eba46b4dccd34802f7bad2f48f53a779ea0f04fad69296c5d4d69367fd393b745115cd631d8bc8466400a4c4444f1ef7886c1430ccaa7f6b43d743e413e9a0fc

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
4608b8328ad7050be92dc3ad43a9dc5e

SHA1
1886e79281faa1e55821dcd31447b3d118c1d471

SHA256
02bf286faac0273eef806fa9c8813f9f554c382f173860af80e2dccd1eeb5c71

SHA512
d5daab2429449b91b4ca5b270bf8bf3192f01b32451947699c77dbe3de2638e486e8a40fb5ed1eaf0ee8a398c2bebb7cfd4b4cfcee9df9b2160f431112ee9215

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
be7b419dcda92bd8c0ccbd84abd6d828

SHA1
3caff3712b14984501698e8016b7bf7290412120

SHA256
184e883ef7033fa708f9c75dcbce7e1cdce3f19b4aae8b96ba2ea1a320b74c17

SHA512
6149e7a75898d7c19299139d7b5b5c1cb382b1236dde6229c449beffeb0c465ecfaa806be9523c8aec063ef940f807b277b2562b68fe2ae2381ac04219703904

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
cdfc2d959f1432614fa40c061e1911c9

SHA1
ea8078a9c2ddb52ebe35d2066ea60669875dfd94

SHA256
b0748f61beeab8d3ed1462e403a2e384a52b09fc03455d3a0932040dcd0851f2

SHA512
776cb5afbe2275285427ed7e73d91b9cc8e8c69b4b083fe90a53d39055ab3a1f16c756effe7a3512107a8b64056b8f4bd1ad714ead35745a027f7f72bac8adf2

Download Submit
C:\Users\Admin\AppData\Local\Temp\CabA94B.tmp

Filesize
70KB

MD5
49aebf8cbd62d92ac215b2923fb1b9f5

SHA1
1723be06719828dda65ad804298d0431f6aff976

SHA256
b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

SHA512
bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

Download Submit
C:\Users\Admin\AppData\Local\Temp\TarA9DC.tmp

Filesize
181KB

MD5
4ea6026cf93ec6338144661bf1202cd1

SHA1
a1dec9044f750ad887935a01430bf49322fbdcb7

SHA256
8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

SHA512
6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b

Download Submit