Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    141s
  • max time network
    158s
  • platform
    windows7_x64
  • resource
    win7-20230712-en
  • resource tags

    arch:x64arch:x86image:win7-20230712-enlocale:en-usos:windows7-x64system
  • submitted
    15/08/2023, 22:00

General

  • Target

    404.html

  • Size

    1KB

  • MD5

    55c9429f6ce39952916dea140593a1ec

  • SHA1

    78c9d0dbe381faca8ffbe4706d179797a6b42669

  • SHA256

    3d07ac84fe7325becbdce52c315117fff3274003845f28c4468e51dea8f10286

  • SHA512

    51cc7d54f97bdedcaca18ed280ad7eeed4c89dbf5d05d22480d9721cd4a84e6b7cc3391e52f427ffec1c781f257f2dee8e5da7460663a5074c5d0c19664a2b2b

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\404.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1936
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1936 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2504

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    69a10e1a363402d4fb54815966b8bd69

    SHA1

    2495f3a7ff2b93a752fed8b38a817d1c547e9eab

    SHA256

    d47eb51399a9bf01a8f5eaf0f187c02045345cea44e93de44d5b0ce54a5878f3

    SHA512

    52e66627bd707ea5f6d731fc0b127a98416b88491ee2409dab7265b444d148b9d7175e9e9c6ba8ea151348c162f48a934b112da142c2f14f3ca1ea17aa1d1d0b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    39ce72f727803af7c0563bdd2ac47861

    SHA1

    928fe4927140b8aba3b434620fd7e2b0a74e9730

    SHA256

    4cf16d1b66d583ba3204d7118108fd3927d4e3d3251851d84a33cfbbd98987df

    SHA512

    ad4f414a746bcb4757a7523710f57261c29a2f36a0b3a14ea965a45be995221338ab416a39b0562907b5cbaa6312d1228844fb444dc0c7432602578e75e932a1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    61fe842c9a1f350ee485b7f410aae65c

    SHA1

    fd7a1ba6ef4b84ae4f75a5007bc3ce8bddf5316c

    SHA256

    53b02722f196da263a2d3287b9a71ce579767c37dcb931b9396928b29d02abfe

    SHA512

    f3e7c5d9914fa5988048f15e5151f59fc1e576f7031e5a818a6a2ad47531f5ba36fc7105e9fa495faa889af6533a9d95fb65f54855f31b1b6159555fc03878e3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    684f1cc32644253f38551f2f255f62ab

    SHA1

    261b450240f52bc59e2e3dd4b7a77a05b2eb1233

    SHA256

    8aeea74eadf5ee3cca2b49d7d8fce193671d981200197b64140fac2ca64ce514

    SHA512

    8aca45c4ca7d3b79f1df6bd520b68d008e5d2e5219b5fc800bf37fde4fc5728f1313f0c7c7105a9ebd6ca450026a7815169291c7ef63c23a63957d3ab05c7b2d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1c72209b8802aac06342df81804d606b

    SHA1

    e3794dfca4d3ce9e4eec1cacbad05abc99c1bd40

    SHA256

    c7f44eec55557e47da785487750db032cf8ddc092996ff59bc07078701fffea9

    SHA512

    659a852350bc0c891f80d94c5063c98e7a488ecbc723e4a355adb41eac5a0981cc1770512da079e4ad42a473a316b7b6c6533cf801cc4158bdc761e11706baad

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a666805d76870cf1b9be8273ea9bece2

    SHA1

    67146256100af1e6c34b3c2f6fef3903dfd7e8cc

    SHA256

    2c18387fe01ab50e6ad31d2d02d89b39c6fa61da2e3064b0fd5457dae539d06a

    SHA512

    d344893faf2099092b639a5b2e0fafca1e4ba1959c12fb769f7ec323933bf1ca00d1cd339eaf95f9419a5d2ba2a18e001e413f2c30cac29fbaed9e74ec919435

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0375aafcdf38a367f829b079572e7109

    SHA1

    e8f204e8fbb636cb9e97efed704fcc520e93bb44

    SHA256

    3fe002cb68fe74f516998a9194b41aa6adf13e682d6510e7d235df9344968d45

    SHA512

    6e6065917b21d0389c664081b0da2b71e371f24f8394a922e45454c27996cbb286fa090b3198ee1e13ba3056ab6c8b96e19066179a6c3b5a9ef64187887ce3d3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5cc5b5ccc4a5fca88e7ad246e3165661

    SHA1

    7850735414e4eaf97426e588b52a009de8332cab

    SHA256

    a31be7b66cda5a9305911095198b7ca95e2d5179893954be91e0a814746006b4

    SHA512

    abfd795dfd8dc79935822273101dbcc580178faa1a4945b43b192e8d51d49e9e6c687c2903e4ed173bbb567b015133d37ec768d0b1dc5d61fb9c403ca480dcc7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    20845e07093c9cda39f8e686d52e7979

    SHA1

    33e25c3a1235de0c9deaedc19cebd36612a97821

    SHA256

    060f0c7fb399a6098fee5a9c7ab9f7198a108a1935cf7fdf9b932ba06b2b7f51

    SHA512

    f2af38dd2a8a359a81f91a4c78498c62318c492c9a5eeedd348b0240fb832369f3223fdbaf444c598d0d88425f233047d8ae6fdde73b9625bcded8d6c58b5023

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b2b96cecd5cc8122626c03e4a6f98ca2

    SHA1

    8c4003c5ef33dfed73a070b186628f1898cb72ce

    SHA256

    246b539a4e795d00ecc73bd0e6a831985626093fc2b90a03cb38f967b04a356f

    SHA512

    e6e19683c44874a4e4e7c68c8d5573ec1ef3245b74040698d0d73f678333d1e4303c72c4da838a513858c251a74e90a9e3ed5421b251f3700ef8d9d9e115c01e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    41e7a71d9a5ade236ee274e12514b720

    SHA1

    5beda3c513a009960b38c54559e2cb2a1a2b3e7d

    SHA256

    77371217dafee73235b7ce726fce9648df537f388e2cae9d3b9f1c4aa9913183

    SHA512

    35dfbd6eeaee931529f35d331b71074b3df827c78538eb9ca0006c845ec29ff74146d13800d7b93ee23c4559a0b12db74cc0bad973a3504d67d9fb037cf058bb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d4ad9c8c9aa999295d6774fdd02d2f58

    SHA1

    cabdf10bc073f35d07da195deafe99641dee2d3b

    SHA256

    513e084acb3b09e56a43ad11e64caf023cd737b49a2d48f7e5e3577dc0b140c4

    SHA512

    5919718a2f6fa3f309a7101f7e7947f7184693e418aa1c6d8493b27a102b2a85521389d38f3993eb4b38897294ab472cd3b7392b06be9eda8b7ed9b056d2cb85

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d6aefcf283d08dbf3e4ee423209d220d

    SHA1

    d185c51c800348f9bb169e81893f209dbd3ea679

    SHA256

    e562335cf691bf1800bc0fea054ec1e079ad8d274d99ceca2516a0721a35c2eb

    SHA512

    9de83b15a5bac5ab964c8a08afd76e8fafa5f024f1381bb05eb3516a540c724e6d8f9a27e0a6dc14c36ece69551e7146f05e2760c10adb2556301391acf62ff1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5fa7834b4f1430b1b63cb74c504cf804

    SHA1

    6de792c3a7606f35496f1cec869a3e612e3b57f8

    SHA256

    3da20e8114fa9b4a2d72f9aab49bc44c2ee7938c454d42456e8b0bc9c680fd19

    SHA512

    ef5e602a2f76ede9229a9b295a970ce38602a01ec234ea3f2a221d0e988793beebcc92e119cc3f6ccb0064d4035efd86f9df6f3dc92e4314b2cfb1b059953893

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    13562a62e1ea918466d93f6050dce716

    SHA1

    f95e46696a70b72b6531bac0ba969827aabbcf9d

    SHA256

    e1256736582232e52bba80349b1548f48ad8fd8b2639906804e09cd6ccddda57

    SHA512

    cff2a6ec9fe0900393c119ac6d026f55cc9c2d832503b36212f425d4e7805d8f15b48f7fa4b3c7a4e5817a2c610113de54deb4db1a89068f987410d161835967

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3deec3249917631752b4a0a12b3baf46

    SHA1

    0f7821f1ea505386fdfb1b6c52b3e83e7c4fdae0

    SHA256

    5724ceeb896d8f1e87a4d272b6c1c41375e63c303d0b537af8890139dfa9ee26

    SHA512

    3271ae272bdcbf6e6f46790bc1c6524dd95292d1ef83d153a8b3942b3d6e38f3e106ae5bded3a9d6e410e06ff20888e8ccba1fb3853323c080548d78de67b863

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4ffd8ef7f9007aa9b4fe9f7dd94c968f

    SHA1

    1a4c5b700dff3319a8da06591b62c0d43c312e86

    SHA256

    5752069c3c32d05968539b0ee1c63c4b3265ee45557b5755dc7cb72735a8831f

    SHA512

    d057f81fdabefd2d655e35e2e96b1fdd7a9805ae223dd00d0781e8b9f808001511e3c0aa564c52764b75f39a33605da102f78d3b4d6ea64de24f84e727a98e27

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    142fb58ed31e2e6c9395c72d5516d92a

    SHA1

    99bb0f08e759bc60d11041acdf071219ad219676

    SHA256

    a7bf20f9193a948533aa8461cdc70fd9cf61e08d4b083da0120076d1464c9982

    SHA512

    affde00f055d5f5ba6515137ae70fb59f8f5d7136fcd1286392164a732bd4b4d126312f6221888fdf900dc1688165cdb7efa4cd8d5332294dc3a1283d84c669c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c0d19299761b42e10fa222e265304f18

    SHA1

    18de7cd56e62fca98414a6624e46357f16204fa6

    SHA256

    47220928705a0227ddb1841ded63524cbf4467efea1ccfb4d59ea628f4bb313b

    SHA512

    669c6233d3141de3fbbc207470b92501d30d95b309b857924efd38cc6814d5c0a90248518ba54033103aa78147aff59cb292f7120b45ea961bd8e57d6e3238ad

  • C:\Users\Admin\AppData\Local\Temp\CabB3B6.tmp

    Filesize

    62KB

    MD5

    3ac860860707baaf32469fa7cc7c0192

    SHA1

    c33c2acdaba0e6fa41fd2f00f186804722477639

    SHA256

    d015145d551ecd14916270efad773bbc9fd57fad2228d2c24559f696c961d904

    SHA512

    d62ad2408c969a95550fb87efda50f988770ba5e39972041bf85924275baf156b8bec309ecc6409e5acdd37ec175dea40eff921ab58933b5b5b5d35a6147567c

  • C:\Users\Admin\AppData\Local\Temp\TarB62B.tmp

    Filesize

    164KB

    MD5

    4ff65ad929cd9a367680e0e5b1c08166

    SHA1

    c0af0d4396bd1f15c45f39d3b849ba444233b3a2

    SHA256

    c8733c93cc5aaf5ca206d06af22ee8dbdec764fb5085019a6a9181feb9dfdee6

    SHA512

    f530dc0d024a5a3b8903ffaaa41b608a5ccdd6da4ba1949f2c2e55a9fca475fec5c8d2119b5763cabe7ef1c3788fb9dcac621869db51d65b1d83cfe404fb4c27