Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    136s
  • max time network
    132s
  • platform
    windows7_x64
  • resource
    win7-20230712-en
  • resource tags

    arch:x64arch:x86image:win7-20230712-enlocale:en-usos:windows7-x64system
  • submitted
    06/08/2023, 04:00

General

  • Target

    index.html

  • Size

    4KB

  • MD5

    bf6b5aa0cf8a83e2c407e521411e6901

  • SHA1

    6065fb44fa51b7803c507ac19693b441890e2ab9

  • SHA256

    44940f08969f4852da010011f852b02f3e032fb22ed65f4b32317e91ec33d48e

  • SHA512

    23a42057d41cc0d1ee9fe8119f5b14d57fcefda997b3f316127e1c71764bd23f408a4a427bdd5cd076b37b77d52c60b395bedc860a9bf0d79e11f41e7aaa70ec

  • SSDEEP

    96:LzJKsdyHkMoiibGyND+KkBpkcVH2tprECiJVInhZu/H7oZe0j21Wdj:TyEMiKyNiKkLVqpozQm/bNpWdj

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\index.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2260
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2260 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2464

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    47e544df1e42c2ddbdec13c573889394

    SHA1

    a74e7526117dcd17d6ee2eaee0e6d01947aa2f20

    SHA256

    f79cdc595caf459b5f323f456b31f3b4a86b95b02332ed547bf5ac0093527e34

    SHA512

    99054cd475f165c5fb003144003b50c1ee9d6886f876f2fc4b4f29987346a9f266efc579796b8d3aa2f98bff4092a3062b3c8809fb9f9c70f1259c49660e7113

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ce15dbeee3999d087dcafc98093e97fc

    SHA1

    263f78a112f195b45f18e6f67d77f63f638ff5be

    SHA256

    12038396b4c720a3cdf12971cd7f7c857f6db147606a96f493b459959485cbb6

    SHA512

    ed3c55bdebe3b71143481d3a30b8781b55ba4677b4635f7ef9d77f16c82f6809fd9b9b7de5680eb77d4aaf5a97dc22ecf22d16267fe1ca5d023456a021020bc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    12f277c3544adb7040012a19337d4b73

    SHA1

    6416a198a1ab7ba7565cee647d3ae53dfec25b83

    SHA256

    5ae49e918d32be54e8cec61afe0bce80f1b607286a9ddc576cb23f5f5a92118a

    SHA512

    3dcefccdb98f25bde3ed0be850797253138818b2a9a4ba92df7e012874b822612b828c2cee068a8c9394103f266969b0eea296c5a2e4d25e33d0ebbe6a975143

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4be2b8a5a10e7c17d497627e34ce549f

    SHA1

    9b2c1442337828f65a2bfd82cd42a627adc585f1

    SHA256

    46a33c90a0aad5e2010a74319f042187cd9a37d04225ca19964828b094edd33d

    SHA512

    bf8de033ead30a15c5d94cc01088ee272ec26f2156c27756abf25ef11487c9361884673fb0f70493b996b7370d45e70ba8b514bcb129603539921364e2ab5783

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    984663933abc03eec89f359dacee4ad1

    SHA1

    492050d698ee0df68e4cbf07c29c552f6a23d497

    SHA256

    4f890d1bffb0cc5ba6b16db70404347b0655958ce753c1558943381f434aba0f

    SHA512

    351f945551ed8bf99bf8726d4b9187ce83834d467ca1539b33acc81d63181f83dc9b13a7ebb42681c0547a8c63e4e1792235fb9cd7e4a08ad2cccf1c52045b92

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b5dbccaf6b0b6df0ed250aaad0c780ce

    SHA1

    7fbfd4fcf50735c41dba4816ca0f768e08962fe3

    SHA256

    c02b5a1b91202033c428187a6fbd1fd3f0aae3f2505ab68d556ab28292f44fe0

    SHA512

    6a3da21be00330373682371701dbd81223abcbe052c7efca9046a2c2448eaece0d2611bc4d262f17151d469838c2ee70b06655e134f7336ffbd540ff35dd2cd2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b2e722ccb6286e37304970d7204d7b82

    SHA1

    6fdda0d950c046a0cf3bd889627ffc94e69300ce

    SHA256

    ab4f932b2dd9d2a2805b9ba0363b38fc1dd26f1c1fcf5d410f379cbf3a6cd4ad

    SHA512

    d71fd727d8ea86e8121f4455d515aa26ad2a3ffab0485b56ff111b9b851123d30bf609738662b11af3d74d3545b348db8ca7e81f9753fee8afb2ac4666032583

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3949ddd5ab47f5c7659de93fd333436e

    SHA1

    62774672c1d83318c5ccc81e0555b939c44ac3e1

    SHA256

    97366306811f6084702facc1086f6f9ab554b812d73be63fcd4c5e8876bb22f6

    SHA512

    1a2720258b19591c56e7ad4decba182da4eeb3b485122222f5444d621a7fb3d359d086504ac4567e830952b3f20beb576300473b238b5ed3a2979043c4a5446d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    764e212170dcfb15891436278a8d8961

    SHA1

    d6b2b7fad6ce9eb90eeaa7538b728db43c9c51bc

    SHA256

    02377d2fcebbb68bf84e3c6a24fd290af58e1e4f0fda6ad7b148d2447010867b

    SHA512

    40b7271d50deae3d65d52c6f76358921a3fc1c3cf766f2c9210c62500e4c4c7edefc48318b7112739e9937c6cff231ccfd4b9a0950e82db8c7e3b7ed96083508

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    94fac73cdf5a3b2c857b09abe8abc559

    SHA1

    33dd18b1ad4575484050892e0f3a0dacc08d9704

    SHA256

    b6859e94b58683ba83b0343145fccf34d33d59e282e128dc2b6558a5adcaff29

    SHA512

    f66edf22f0b4c06e389072029a5d8a2600972299c91256b8b82a05f2c3ee699736997721fdcebaac7d503a336ea4d48dc30ae9a707fc170a51b058ec4546e8de

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d21c0b10675cd6f88c83e7f31622de89

    SHA1

    7f50c859f52b0483cfe914e184c893b1c39e1c09

    SHA256

    a5aad85c7573b3f3185ae1e3a96ac6136ecb50baafc3b039708391c0550606f9

    SHA512

    ccf43a21217317362f0c3a07db346d4e96bc1f5061a4536c70d348d028ffab067f5963a833f49304e02b4c7cc7900c73eda680ea66aea68db194c262164ca1e4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3415068ab7cb2b9df235099cecaa51b7

    SHA1

    2766cde149188f69b4cc773a86dbf509d505d3b4

    SHA256

    e9610c34f0360f25bb2d90356401148f455bef69dcba789fa5aabfcbe1838fe5

    SHA512

    3bd48cf00fe6cdc85b8ba2854decf2e2ec030bd5087eb2df1506543e81a6833c24265f1662832ce9e9a59df6bbdaf11aa9810fa1202c71857ae2f8bfd1b76483

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    81313c3809d3af7bcbbb4374e1119067

    SHA1

    dae3e45439d4edbd03b20798129ee2a981b8afd1

    SHA256

    3cbdef014c4b54d674d60ee36e570adfd1d1e98da316c6158a432785b3ff00b1

    SHA512

    b95de937ae1d678413a071b6e9a33c9813660ec5ff0cd5ce025d728fedebe9dcb01cb365ddccb34e24a8f85e42c570ad955347bc568bacb8136edf6f8fdde230

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    02018bbc329fff290233a215179ebd71

    SHA1

    3488d3eadb779d4ff86553ded23e2b94b5aa96b8

    SHA256

    e79d8b6dc69159a5c3c22839d6346904698bfbf45a19f1663fc1c2b9bb9e511b

    SHA512

    4d751f3f232178f59e052b1093be593e79ed238a7344c69402a45639e02bc458a4cb149de08baa9b44e9ee1e178f4e621fce1821530ab6611e77705a36093b84

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4d3626c6b927154a9078453dbafd03af

    SHA1

    1855aca6d805d5abecc4338d59b6e45412da36d9

    SHA256

    43496fc1186687fd04e468d156dde3c549fb468001bb8f27865e55768be3100a

    SHA512

    3766dccb6a530d51cf3398cf07a1f5441cf3f56b44d1ee318485a4e40c5f9334b2efadb2323f51c4a3c0cbc9d741756634a3ba7950f31bc2c3d9d68b0065028f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    53b154fc06450abb0497829a345291f8

    SHA1

    c8924dd9a1ed20be31fe594c12f2d4dd78cbee28

    SHA256

    1b2b5b1a30d5112b27716236cab0de75bd3927f81c9831bcde48c1aca4237a24

    SHA512

    09f7ce4ef09c4335e2d9e6f2a16f8e0141b7131e1b5182203acb0f1d65c60cb6dc6c3becd9477c3a97cbc92f15b94813c3cd2a281a57440d284ca45ba6374c08

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    35464a273e049b4a1763414a8c124a41

    SHA1

    566242f84c59fd99bd87e05e4ad01a3d62887230

    SHA256

    64f02e5478fa9d51b5bc9bf1b80e856b3542774b50ee0e567021a022ce5c6e20

    SHA512

    1051b1849a7d1e5b652d910d15fc446c747a0babe46eb921a0d8aad120492d219494881afd689bddc4bcee8e4a6c635fa055891457e3cfcabf90a944cfa15211

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e4fd1afc28b29b76fcc2901c7d632e78

    SHA1

    2df65b3fe6f28d736e959bbf9b7287e7cae8d55f

    SHA256

    5771d2d23ef24dbef016b21cba39157f60b010323f013dfcde5ea5727dbb07c7

    SHA512

    155218fcd28d1defaa4a535ae7f0df7e7851228d4144e997e35ac1c7d7a1a2eda26f720b2e0292f1809753ef1511beb5943547d406ce533cc577305aa9d21771

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    869d1ca3c17d9f15edc3072192de6924

    SHA1

    64a82b7c642a2282f5d8ee81f417b21e58030a67

    SHA256

    775888c9d6dc26095ab2001d2661cfa840ba257f492eb203ee356da9149bdd42

    SHA512

    8972325466a273cace538e214de7201daeaaecd633b2ba30a293b4540feefad64b9850712e59817170e0742ae9cec80ba7b422362fce6ee337e15bb66b64bacc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e239a392ea2023f3af0a4f51cedfd7ff

    SHA1

    51502067c0041c12eb39a451d3c26a3473f6eb54

    SHA256

    acb89440e780b1d8b66d11c0036105658ffbd99dce66e738771ccb675417ffee

    SHA512

    12ae1d163cc4d364faed22d3f56f7518eb74d79813bec38be8a2f189079cc723b45ccfadd7ab309dfc48cb56036b2d89915e06d4241dae6fbe5bb5dfa4d37c32

  • C:\Users\Admin\AppData\Local\Temp\Cab9A9C.tmp

    Filesize

    62KB

    MD5

    3ac860860707baaf32469fa7cc7c0192

    SHA1

    c33c2acdaba0e6fa41fd2f00f186804722477639

    SHA256

    d015145d551ecd14916270efad773bbc9fd57fad2228d2c24559f696c961d904

    SHA512

    d62ad2408c969a95550fb87efda50f988770ba5e39972041bf85924275baf156b8bec309ecc6409e5acdd37ec175dea40eff921ab58933b5b5b5d35a6147567c

  • C:\Users\Admin\AppData\Local\Temp\Tar9B0D.tmp

    Filesize

    164KB

    MD5

    4ff65ad929cd9a367680e0e5b1c08166

    SHA1

    c0af0d4396bd1f15c45f39d3b849ba444233b3a2

    SHA256

    c8733c93cc5aaf5ca206d06af22ee8dbdec764fb5085019a6a9181feb9dfdee6

    SHA512

    f530dc0d024a5a3b8903ffaaa41b608a5ccdd6da4ba1949f2c2e55a9fca475fec5c8d2119b5763cabe7ef1c3788fb9dcac621869db51d65b1d83cfe404fb4c27