ee98e9d4289042e12ad31213620a3a33bd68f05c623e283df49bbf46f5505862

Analysis

max time kernel
122s
max time network
131s
platform
windows7_x64
resource
win7-20240705-en
resource tags

arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
submitted
08/07/2024, 03:17

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

editor/examples/demo-01.html
Size

1KB
MD5

2b389b86f5273ff131edbe77ac163524
SHA1

6671aa77098378b959ad4953b3377d7adee701ef
SHA256

839b74d1c4208f4b6c29de10ce8c22958b904b713458396b266ca6aed63e6f8b
SHA512

fa924f1a76f044043220712939446b5f441da04388673994ae98e8f7ef6fcc9019f8f2137bcd15384a57773c19c82b7b1cc1685976bb2019ba5a0df516c63f50

Score

1^/10

Malware Config

Signatures

Modifies Internet Explorer settings 1 TTPs 36 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2660163958-4080398480-1122754539-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2660163958-4080398480-1122754539-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2660163958-4080398480-1122754539-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2660163958-4080398480-1122754539-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2660163958-4080398480-1122754539-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2660163958-4080398480-1122754539-1000\Software\Microsoft\Internet Explorer\InternetRegistry	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2660163958-4080398480-1122754539-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{2BE66D91-3D12-11EF-9051-EE5017308107} = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2660163958-4080398480-1122754539-1000\Software\Microsoft\Internet Explorer\Main	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2660163958-4080398480-1122754539-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2660163958-4080398480-1122754539-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "2"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2660163958-4080398480-1122754539-1000\Software\Microsoft\Internet Explorer\PageSetup	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2660163958-4080398480-1122754539-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2660163958-4080398480-1122754539-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2660163958-4080398480-1122754539-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = e04c2c021fd1da01	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2660163958-4080398480-1122754539-1000\Software\Microsoft\Internet Explorer\IETld\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2660163958-4080398480-1122754539-1000\Software\Microsoft\Internet Explorer\IntelliForms	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2660163958-4080398480-1122754539-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2660163958-4080398480-1122754539-1000\Software\Microsoft\Internet Explorer\Main	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-2660163958-4080398480-1122754539-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2660163958-4080398480-1122754539-1000\Software\Microsoft\Internet Explorer\SearchScopes	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2660163958-4080398480-1122754539-1000\Software\Microsoft\Internet Explorer\DomainSuggestion	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2660163958-4080398480-1122754539-1000\Software\Microsoft\Internet Explorer\GPU	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2660163958-4080398480-1122754539-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2660163958-4080398480-1122754539-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2660163958-4080398480-1122754539-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2660163958-4080398480-1122754539-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-2660163958-4080398480-1122754539-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2660163958-4080398480-1122754539-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "426595240"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2660163958-4080398480-1122754539-1000\Software\Microsoft\Internet Explorer\Toolbar	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2660163958-4080398480-1122754539-1000\Software\Microsoft\Internet Explorer\Zoom	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2660163958-4080398480-1122754539-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0"	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2660163958-4080398480-1122754539-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-2660163958-4080398480-1122754539-1000\Software\Microsoft\Internet Explorer\LowRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2660163958-4080398480-1122754539-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2660163958-4080398480-1122754539-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1"	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2660163958-4080398480-1122754539-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000930ed985b08cdd4cb38e38023150682b000000000200000000001066000000010000200000005923bbb1c08eed8d74dc7540ccae00f591a95c8127c4a6dda25e2f67d2b24a8f000000000e80000000020000200000007f8a6ca8de847387d343a469de84f2a314d1ef2768bcaa0910cb42f652512a9f2000000038cc4279950bf039e1470e8949988a1494970f6482e5e1d067f0adf3f591cf5c4000000086c253cb3cdcded2992442fa42a3f129226bcf5c89649bfdf6314d539b38b62c632a15e83812545a7438177121914d201c739c5f906f67bf6f851361ffb1db91	iexplore.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
2224	iexplore.exe

Suspicious use of SetWindowsHookEx 6 IoCs

pid	Process
2224	iexplore.exe
2224	iexplore.exe
1364	IEXPLORE.EXE
1364	IEXPLORE.EXE
1364	IEXPLORE.EXE
1364	IEXPLORE.EXE

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2224 wrote to memory of 1364	2224	iexplore.exe	30
PID 2224 wrote to memory of 1364	2224	iexplore.exe	30
PID 2224 wrote to memory of 1364	2224	iexplore.exe	30
PID 2224 wrote to memory of 1364	2224	iexplore.exe	30

C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\editor\examples\demo-01.html
1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2224
- C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
  "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2224 CREDAT:275457 /prefetch:2
  2⤵
  - Modifies Internet Explorer settings
  - Suspicious use of SetWindowsHookEx
  PID:1364

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
7936e3b739a841fad1d25b8a4fb69379

SHA1
6b05f0584d30208556ec4a5dedaec402b2d065d4

SHA256
f22a914dc7ee86f8513b11a042fee744a75edb27a9807642fa1d665a9873d0d2

SHA512
40c8cde399ea5b47cd8826278ec79951dd723e0644921408c9f6ab3c253933bf5a5df759caf1a240169ef568522dd1c717e0a7972899a7e4f4e9c7139100614b

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
c086da7787fba3933c5aefa24eaf2fb5

SHA1
51c877a2dcffeb498e09f9240e084defa837220c

SHA256
77b8fb432612fc237049dd33a6b57fb32b3b45097ab5cde1fb0ce734fb33090c

SHA512
c8b2a7915744f121385abb4e699bc36f88f8ada1dc178168dabef4d29cb2a5ec6405f414d16ba23ba0ac207e39a89afd08b0264cfe43c57b11ef4bfa3d545e16

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
b12b276fc109e515fd1270ef37213e7c

SHA1
695496d1da72ef7657f696830978f523247ae153

SHA256
27fa777d0ba7b885cac548222e71a3ada1fcae0f2bc646332c2574f1a9ca91ee

SHA512
15f552dfae9f269f8c0312c3e88db10fc212e2fbcab5115898efa2215c93739c587728e44af61bb50cc1d3edde4c70b8bfb35fbb506a71492e9b55e548b65aea

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
3d4d9b4e5b5e5348175a182330d0100d

SHA1
0e4fa86ed100aa798c03a7098951d9c4d21728a3

SHA256
45442b6dd5202e03b8f571e3aee3a2f7f195e46de747f43d10fdde3b0dae2b6b

SHA512
7cbfeacf5e9f5182e91d18a43c083eb126dddce27edcaeabeb8fd63488b5cdbd3f4f0c0baa480c6c1a4a47d7fe5b171e47a7cd9a0769f072be3cb92293417d67

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
46aa4dbf253f695a6e4e54d7242daa8c

SHA1
616e7743d1be7548378e2814c8583321b9e79c60

SHA256
564635ed8fa6b9eca4a80ffe0d99cf6a920ffc9863b5a3cc7d288c5d04f5e014

SHA512
215cfa0bef68e9f0a6195cffb6ef4eedb6e7232ab1ed384ffbac497022e27cf72e61f0e64cc2702b50adfd253763e90af6171d0dfc6e6949caa89cc7c257f500

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
fdd85adee8af50f9190ab086a0b78bb9

SHA1
953e54546d8f43828d6209d3bb680d6b29ae0be8

SHA256
f64020d235d448596acc3de40e2d1ecc17ab125765daf7fa28c2d8166bbbf017

SHA512
7f9f14142175e89be8e3f37d7bc3e81c6dba25e7edd284d98c0e6f8371e45c48921f9c92f6b5429d9293d82e4f0630bb55115e2a63d0d3b38fa2ca76f66e4480

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
5f34d67ad4061a3f3de4a45ff2747a71

SHA1
fa7a3f7bd39ae0f3cac30bd9bc656c37aaed7ecb

SHA256
2c601e60cf983ff91b890b391b7b98b79d3110bb918ca0d5f7cf414bc3e60236

SHA512
2183783fdf46b68ffdaddccbf50b39763b2b09233443278a9686fdf8a8ab15c98bc9bcecc99fef6ae9ad1c5af6e05bf8141573d44988290cea5904fe360263db

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
5451a240c3d2a2db8ad28388dda35a30

SHA1
ca731856be9c97022ab26ec4b594e12e8c500192

SHA256
69568fb6491c8bab05c96ba3828aa3505ed9145169e3d66949fe1c31db560ac7

SHA512
a154d29de32e9208a379b4ba6ecdd31f73045fb07306cfba87016a9fdb0b3189bc2e3514e8b94b822956d949656a32c845b1b0e5b7ebe1cdcb598a4e8a5ac637

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
0a310c6735c67959d041521fc4e07d1c

SHA1
3ae441939a8871d294373ad586735d19704683c7

SHA256
4d03c6a00b811bf79a7739019e85ef0e64cab4b37a3c1f932f2a0420ddca7fe7

SHA512
21bae4d6d5a6d377dfbdce5034e59cb3c59d4ba37643c58a7c6f8109d57389c9640a60c4b3336e647a2c8a86465a480b46402bc9b2fba88fdb16fc9d2d735f2d

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
c9225b0614c10bddc51b0693845dc376

SHA1
a9dd95a39a6d92a2fdacf37e8d5c629bea137032

SHA256
082a9c8ae23be08d08d597e8ec394d941ddbca6e67d9f8231809c85945399e5b

SHA512
80c0c30f002b221a7b3401e63c6978919558b9a20d60e88bd46b547d2409922bd3fddb452f808f124a04d9436d9231393c60c93d090813025b75747eb84df270

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
45df619e07adc9d6f738a47474903c45

SHA1
436e947c198aa661c26c6dd8f8c33a88071dd0ae

SHA256
df33418b46ec0ad43d4e361253a8701627eef5e8c6aa533d3dfef4c2828da9d2

SHA512
ee49a02f31e433f6c8cbdcd07a32683a1d40d8e56ee169db761fbdda01b5c141e5b8503e998b3717d86ab77c54a385bfa98fd3dd14f699ddeaa7b4f69267660b

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
9f3926c25e1c06a8fe512757e365cff5

SHA1
b38ffa22b10ac4c6e8eab14d59b99e9a890515d3

SHA256
02beb5c6094b2c935f01848d9b5ae6f5c2e0c67ed4f55d7f2519c19f9456565a

SHA512
fe2367cdfe8ed1b5f7a41dc6aaaf67f6871c417d3e89591fd272cc6da5a463f19eba1d3ef52ee8dfe1690209c96c53de246059451a3a775ab478a9cac66302f5

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
7aae8f1f7a99c873871d40f9b298063a

SHA1
c68c7b088f99311d123d9b77bf9757d3c5ab9fa5

SHA256
e96456eda1aa3972a669b7de9c24f14f3c95c6ebcea7aeaa18b25f67d5ffb22e

SHA512
5a57d26b660698beb2a0386d0fdd84b929834ff40a028185fa736cbfec9a1a81c097b877bd6f8ba2dcda19c0b42500d7cf7ab93b5c43e43eb52553307a8e66a6

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
632864ed87292000150623948c0eeb11

SHA1
3211a95df25b8d73bc415df273a1a7a3d46c1e03

SHA256
3e0691621cd6342fbcb35da42edbe598574d3a7cff4505ba11ce8292ab9b88a6

SHA512
d8971e51f3a2879a9ea6ac7261bdfc74ee8516c9f25cc220f2b00a59f203c234387570954f977a715ac6bcb86a4e8136417e093273431462f69b3b0518f1b5d8

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
e0a9029b3f9f6bdceb015a9e8085b00b

SHA1
96f8ccf3b0f6451aa845d3d0bae6fb5d5704c8ab

SHA256
268af7a058325152ab3fb10d5f5ff77959a34d45e16acf07186e320522984191

SHA512
d743ca948a7994066533383d1671793cc25553948d36ece029f576c5f275d2a4731b45165415a5afc0b021da795f07e34b30f258f85c379d20ea56a33e8fa93b

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
edca4d0ffd0644c56382b3a93e8a7302

SHA1
c92bfa77f83233505d236aaa6e38cf42cb34098e

SHA256
540861db2a36ad947006615fc37c2b9b84216cc248bf6172a30b58487426b18d

SHA512
fc8031b5760596bac0dafe22a92b32f91832ee763108ce686213297378235146ae242a854269b2b176274398d3a24570452126d789b1690b07143d03db8f9b33

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
8afa9fc8f1fd0a8d4662868a441de2b2

SHA1
b140d1a61c093b26bf0d54169464c0d9b5575bb5

SHA256
3943921cc64697adf104b6a11e3ade6bdfd93d46813b55fef8b97e32e300fb89

SHA512
d99094011a73bda213fe71fe716e9ae5c1d373e052b5c30a524104be5648446c3796f0ec90f4c8a538e4a7ebccbf9172802eb51a94f4e084d2ac843bf94fe8aa

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
3aa2b622a4625478fab0588aaa7da016

SHA1
524083150a69c94eb445a5de939b912ffb9d8612

SHA256
b8943cf6b2051010a5c31062838b62a738d1e58f2ab02c325a4af3a1b51faba1

SHA512
38a066bf717832d55cfa5fda33f312a14c27af123f4ff025ff9a1dc5c4758a2b0be2cebad6f28864ef2687a83ed699c3d958f674b5eccc166d7df08949edfe60

Download Submit
C:\Users\Admin\AppData\Local\Temp\CabFB12.tmp

Filesize
70KB

MD5
49aebf8cbd62d92ac215b2923fb1b9f5

SHA1
1723be06719828dda65ad804298d0431f6aff976

SHA256
b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

SHA512
bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

Download Submit
C:\Users\Admin\AppData\Local\Temp\TarFB84.tmp

Filesize
181KB

MD5
4ea6026cf93ec6338144661bf1202cd1

SHA1
a1dec9044f750ad887935a01430bf49322fbdcb7

SHA256
8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

SHA512
6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b

Download Submit