Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    149s
  • max time network
    153s
  • platform
    windows7_x64
  • resource
    win7-20230220-en
  • resource tags

    arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system
  • submitted
    30/03/2023, 11:00

General

  • Target

    Odio.html

  • Size

    3KB

  • MD5

    7d25ffe763196846b7cddb16850e9375

  • SHA1

    7a1c77d0b10b02432e23c5f81dbebde2b4476e84

  • SHA256

    4a7686d40ef63b3b8dcf8c40085e277c65de4e5b27f00199a51c3c6457f0bcc0

  • SHA512

    f314512f2562a8e7469f5bbfe20eedfd97f509535afa0b81e2ca49e98d2604be5109dd9d7b7e0450f753d2df501c50b0b9b197e53869467e4b1d8b81c4d9465c

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 38 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\Odio.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1616
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1616 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1872

Network

MITRE ATT&CK Enterprise v6

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    61KB

    MD5

    e71c8443ae0bc2e282c73faead0a6dd3

    SHA1

    0c110c1b01e68edfacaeae64781a37b1995fa94b

    SHA256

    95b0a5acc5bf70d3abdfd091d0c9f9063aa4fde65bd34dbf16786082e1992e72

    SHA512

    b38458c7fa2825afb72794f374827403d5946b1132e136a0ce075dfd351277cf7d957c88dc8a1e4adc3bcae1fa8010dae3831e268e910d517691de24326391a6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    88da00dba56d6cfab15fdb8e5207f33b

    SHA1

    a88c085b7ada7258df24aa263a680ceb905da6fe

    SHA256

    1ac1445238805eded873b64a3721f88457fc01be37056dcb53e5bf88391e0218

    SHA512

    de0bf2ecb7f6a75923970972b436fbf6048b89cd6d5ddb368c9e5831a927cea8acf7a98cb00d600772298c77593fc6ada50e5b4682aa79ddf7c61dc216137c67

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b623ccd2c0b10d13c6e9ca18c687ff0d

    SHA1

    dd7c2791f60197486e0116bb7a07b7bb84cd786e

    SHA256

    7f4b68ce3f833bf7f9610b8876f9c0a60aa29e8a7bf0e45d370d0e424e2df760

    SHA512

    0f6e764f31cdb5646896c42c479cfd79a4651f1909108a2913fe06af9994a0d833ea6c0a513492020a5ed7c650b35a4273d290eb458d779ca6d315e706c6c616

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fa50a8c904f35a5427a5be8945ce6c38

    SHA1

    eb57de094af65d42391225a0472c2a9af7c3690a

    SHA256

    dd46aebee1d5b788871a2fe9c770fb615322015a38eb9c7634965b6da9356d45

    SHA512

    9a5b501cf36a3bdfad6cb89e1de6bd7403a7dfe5dc9e78e2e39f41f08ad75277b401db2c979a6f5a3259e4a74fd997782fd56c6771161ab23f059d5f7bb00c2e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5433242bc84c37da655b77635e8ff3e6

    SHA1

    a17f8a6d44d2bdf0fef4b5eccb8d98c1e9904b32

    SHA256

    25f75852db3e59fe8f250baf5d3ba30e2a2370a81f73957b998df4a55ddf4b01

    SHA512

    576c3d8c42780ae8f48d175d523fbd5d403a0c91c252223c729669538ec62dd34e5e89d35aea499b283c108f2c165ba2218019085b533e37ed656f6c5b41c09e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5f01ce464f9443a633055b9d8c9877d0

    SHA1

    6a8d94f9af518c24342ab2e70918669934c715fa

    SHA256

    37f743b5f868d75bf713ac548f4e6438bf9175e75a37eed92158e8ba7a8dec09

    SHA512

    c1822707dfce797b1f19bbfb0b849b1518c12b391028121a34673fe8678cf23c802c16c454d7526b77354651da148b93174a59d0a294d14f7ab4c192577825a5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    31d421b031f19eb39ae474ff7604f05d

    SHA1

    aee940ba1b0d9cc618492c5c1f727e2a79c07403

    SHA256

    20c332a549ec7f76500418b24c8e3fda355236655e5aec02bc1fc28eec9fc268

    SHA512

    0cc675f56fb2e4f598ca864bc33686285999040d5a3a14b788b52a065253a9353d7693ac725332cc5a16c36780619f00c8a83e61637826840b5f8c5131e24828

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0696f197ab25e3b83720fd9abb7db114

    SHA1

    01558ceb9de6fe839022ddb2e42e0c1fe3ff17c7

    SHA256

    cbaa69490a5917364bdb8bae54f391f526776f1f239044b564bb6a3a1f79f45a

    SHA512

    77dcdf95b6842ee25a7732909b5b28caf4c25d9632d4761d052137d9ef6de1b04c2d16728a1c2e72991d5a8d3bdde473b2d6bd20d96c5c1b65627c167ae4071a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    96dce49379bf9ac53020d99d4589853b

    SHA1

    80de445505358aa395b4bb280d572e815f53f2cb

    SHA256

    c194a5501e346772ec636151cdfad01100d439ed2c8493811b37710d8e2ea943

    SHA512

    8fc1756f0f1b9533222f0f08ff113a09079022b5a8d7dd5db1a79d83f80f0b794dca55a53ed4e2a606cac786fed21655025d359b5bfb9597016d27397d94ccf8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0246b7b6fbe09b4a62622c4b7a80b697

    SHA1

    a210232ac777292d4ca2157991f991d75397c723

    SHA256

    00b80e7c31b741bafc652e0d2715b2d0df1175c3a5946538aacb883d62a94be4

    SHA512

    ccc4eb67da78155ac706d11416ab3821c19968cc61b519389f1d1a75bcc65ff4ee6e2ad396ec77311d62d3e4abdb7650640f4d35570fd5de0385cf9b387d228f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8d2c8c9b2acfabbf859087cf4d5065a8

    SHA1

    8d703baaf982c28c78f4563a6f68d41720e57697

    SHA256

    0e3a95d5f4f49048985000b1588dfb41566aa0a0c725e634edb56bda2cc737f2

    SHA512

    0325bbc3ba79046beb0876623100d8b7b0d56a15a3af428ad7f60ba3feec4c20a2eab9315578462d8d2cb8411bb7f5c57e594c2d66703b123ff4cee1c20a1755

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    68dec461d60335b07fca25c7115b676e

    SHA1

    534ad417fa86204e7c2ece547deaa30074c27af8

    SHA256

    4428e61dee71f6e2452116d891cba5de18e1de946bfbdc4d2af01593a1778c9e

    SHA512

    d6422e54cc892efd15fae535e03df8ce4e3cbb6a7283b25763c447288408009f10fa9fe643df3743a45a2f8a7fbb041141062f28f80896d879a617d7477570d7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2a9930890436a56ed5bfdde9b979f589

    SHA1

    fd74c695f0402a8d5ba3120e1e31b39557cf0dc8

    SHA256

    bf26763250d0beac0d032dd6c81946c33c8f7bff61e8b8914f4d149c2231269f

    SHA512

    dcdc2717e231e78373138e0893ee695fecc7636db4e4ec00c3d93a0443196312b2d46d4f6e981a0f38cfdabb8eef6fa59f4d0e2da8797f674a638fbf36f49141

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2be49c4b07f2b7bb1b680ebc3cf017c8

    SHA1

    12cf312aeeaf061f6aa463baaf5ebb0a3e8a3d27

    SHA256

    52cbcbefb0f76689d3d806d4e036d8a889711a227061ed67649f85c0e84a8a5d

    SHA512

    65ab40530af5fa7dad396e9f323ad0540f2964cf05711958840bd2e78febe18ded9768f1298fbf41bcc46252c55c677cff807319d8313902d31e1b3bdfb7cd93

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\UIC7WQYE\suggestions[1].en-US

    Filesize

    17KB

    MD5

    5a34cb996293fde2cb7a4ac89587393a

    SHA1

    3c96c993500690d1a77873cd62bc639b3a10653f

    SHA256

    c6a5377cbc07eece33790cfc70572e12c7a48ad8296be25c0cc805a1f384dbad

    SHA512

    e1b7d0107733f81937415104e70f68b1be6fd0ca65dccf4ff72637943d44278d3a77f704aedff59d2dbc0d56a609b2590c8ec0dd6bc48ab30f1dad0c07a0a3ee

  • C:\Users\Admin\AppData\Local\Temp\Cab6693.tmp

    Filesize

    61KB

    MD5

    fc4666cbca561e864e7fdf883a9e6661

    SHA1

    2f8d6094c7a34bf12ea0bbf0d51ee9c5bb7939a5

    SHA256

    10f3deb6c452d749a7451b5d065f4c0449737e5ee8a44f4d15844b503141e65b

    SHA512

    c71f54b571e01f247f072be4bbebdf5d8410b67eb79a61e7e0d9853fe857ab9bd12f53e6af3394b935560178107291fc4be351b27deb388eba90ba949633d57d

  • C:\Users\Admin\AppData\Local\Temp\Cab6728.tmp

    Filesize

    61KB

    MD5

    e71c8443ae0bc2e282c73faead0a6dd3

    SHA1

    0c110c1b01e68edfacaeae64781a37b1995fa94b

    SHA256

    95b0a5acc5bf70d3abdfd091d0c9f9063aa4fde65bd34dbf16786082e1992e72

    SHA512

    b38458c7fa2825afb72794f374827403d5946b1132e136a0ce075dfd351277cf7d957c88dc8a1e4adc3bcae1fa8010dae3831e268e910d517691de24326391a6

  • C:\Users\Admin\AppData\Local\Temp\Tar6697.tmp

    Filesize

    161KB

    MD5

    73b4b714b42fc9a6aaefd0ae59adb009

    SHA1

    efdaffd5b0ad21913d22001d91bf6c19ecb4ac41

    SHA256

    c0cf8cc04c34b5b80a2d86ad0eafb2dd71436f070c86b0321fba0201879625fd

    SHA512

    73af3c51b15f89237552b1718bef21fd80788fa416bab2cb2e7fb3a60d56249a716eda0d2dd68ab643752272640e7eaaaf57ce64bcb38373ddc3d035fb8d57cd

  • C:\Users\Admin\AppData\Local\Temp\Tar672E.tmp

    Filesize

    161KB

    MD5

    be2bec6e8c5653136d3e72fe53c98aa3

    SHA1

    a8182d6db17c14671c3d5766c72e58d87c0810de

    SHA256

    1919aab2a820642490169bdc4e88bd1189e22f83e7498bf8ebdfb62ec7d843fd

    SHA512

    0d1424ccdf0d53faf3f4e13d534e12f22388648aa4c23edbc503801e3c96b7f73c7999b760b5bef4b5e9dd923dffe21a21889b1ce836dd428420bf0f4f5327ff

  • C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Cookies\JJX04LFZ.txt

    Filesize

    599B

    MD5

    c235bd0e13005a012a30439e67fec18e

    SHA1

    4088f64b41766f132af95a92ff9f1deab3dd3d5b

    SHA256

    1111df2aea42d14dbed12115a893fbeffbf35fad1521b53307534cba100ee7a8

    SHA512

    3fafa43a39f4813d4aaba98ce5294d34e180c28d422f26a73bcc4714fb481531e6c62337b31297c42a9eb77feaed249eed26b09bfc93a699658873b41d037bf8