Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    134s
  • max time network
    136s
  • platform
    windows7_x64
  • resource
    win7-20230712-en
  • resource tags

    arch:x64arch:x86image:win7-20230712-enlocale:en-usos:windows7-x64system
  • submitted
    23/08/2023, 15:12

General

  • Target

    e80120.html

  • Size

    315B

  • MD5

    a34ac19f4afae63adc5d2f7bc970c07f

  • SHA1

    a82190fc530c265aa40a045c21770d967f4767b8

  • SHA256

    d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3

  • SHA512

    42e53d96e5961e95b7a984d9c9778a1d3bd8ee0c87b8b3b515fa31f67c2d073c8565afc2f4b962c43668c4efa1e478da9bb0ecffa79479c7e880731bc4c55765

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\e80120.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2580
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2580 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2676

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    34151ef90070a588f6c4ce613f66f943

    SHA1

    16406fedb7da621e5a95bb812cbc76bfead6f2fe

    SHA256

    b43c0abea9e2067fe3b35bd761ab7fdbc88eae82f2e51ea1d5163366f227fdba

    SHA512

    c232519a0c3aef652b8abdd18a5fce4cab52b1f04400b47449d7bf296b9dfcf31dfb8bd3c4af37711a5b9dded30c4a47c6288f5cb1863c2afadfb31c58530b59

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    90d43d5ff1ac767934dcce196d0b119a

    SHA1

    7baaed777c28d7fb718ec242322061b250929726

    SHA256

    34b2270cfe95ccf2ec04c1ce3272550d42f35df5371a560ab38da2ac84301670

    SHA512

    64af972f62bf30113e6a95c83091be61d087e4e6965740030c47c398fa0e77da42d21a7f5aa4af37d3f3d433e7c3c809dd5e92c3ad6cf7eeaa8e6ff264d039a6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    946b8dbfc64d2687782e7559dc171a72

    SHA1

    f029abe3e4ab4b2bc437a09b04bddee8e1b441a9

    SHA256

    431d0594a8c992968547e54536ece1fe665d68f72099050b8eeda0ef73ee5934

    SHA512

    8aaa3826c03b3e6d25934926777a1643c72de8e109115e17ea46ba0c46fdd38d27242f1f352ffe3695e8056ee1b4d2d2d6d408eea19ca1558e2ae50942e1917a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e6875b6f5a1ac25ab437c520472e2e60

    SHA1

    0ccbf9af7cfa259a0fbc286f439d6b54b8019664

    SHA256

    e37157166d60b84c3f7dc19bbf51d9accfdba4dbb2a5496eb74c0f2c025eaa27

    SHA512

    8d34f21b77ee333677d529882042385570ba09cbc6765051a472b74f015cb3f3deab5cc5e7b5eb90d0114cb68aacc30e091c1a2f24494fe416353d7616820ed0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    113b0a554b33392aae3be23465279bbc

    SHA1

    6148a4eeb7f48524b7b26a86d024ed43315cd843

    SHA256

    0f40843ce3f0d157e32e402ab9b7ef1879e569d09678a35a7b98b57d22a5dc0c

    SHA512

    41a7bc359028b11adada6885dc88460e6093d50a488809d90403252185fe058a3ca020ecbdb7bc056881bef8709b5c28fa8c8fc4d22873e4a12a7754520ec588

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    94aa1b25b3386a7a02cdeeb7ae4f35ca

    SHA1

    33c6ae08e2ebb5c0a0f77e3c4aa17a1c934973e7

    SHA256

    0adbca993cd92be10931f0d37343d437be583df6e52106e9038ccac862275247

    SHA512

    634734e68206b3b97608251d7c2beb35153da20595a2bc9f25b50fdbf853492c11e6042d7654b3b1c576103d8b413fa87540ecddc1800a81ded98a23cd76691a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    05eb2310cf3b7497221f2f3af212578e

    SHA1

    b386a5dbb811d2dc3f608eaeb2f5f0eea945259a

    SHA256

    70973e0d8763ebe04651b61dbc5dfabc0359ac2a1e40a4e18b62833bd8b6dadf

    SHA512

    a56eee03c47546367a62a93679b900c8173c8cfc024fccef159d7c1a00c30017a7fc8f6ff7724da81c3a239562dae2f196804ba84e910d2e49a48532164732db

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e4faf049e412ed6954da94ae4901a2b9

    SHA1

    727b731650747af9a1e5e40f0eaa11586b20c712

    SHA256

    fe30a3ddcef9180b85932ac4d03890245c5024ed07d15f56a0f44ef9bcf55750

    SHA512

    61c0bded2432ea3d5d828b2b56fc887d248d7a65b04b9e8725f1a395ecccb041459283e9e8db49d935d803de5a35d0cdb52fc21cf1aab13a9f7a989e8936233d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    62528c86f87e178174074e3c92d6b627

    SHA1

    e3eee25f2f16fb49a4b5d920a9d6f6dcff14494b

    SHA256

    85f6f061c0f757c576f5a4d5bf0cb577558297533307a6538d4d83f591a402e2

    SHA512

    c70bfddb3bcdc29c5e25e17dc0494c7fd7f6d070fb5b56ee8870eeeb8c4f41f1023980282851e72f5242a02de3c0625d9b32cdc88bc584f5bd6e398cc8398c9f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d58b4ebce47cf5c9176859519023f05c

    SHA1

    4ad000db58ca014dec5cff527cd317787e8f4607

    SHA256

    d40b8477d9184fd7a999b7d93da80f83a993dadab946623f8c72727395e95b26

    SHA512

    e84bb468130956ad3f3df6cbef7a7ff7d7947640853ed3d6b3c973b09d1e3a84a2d46182da8a78aaa2dedfd00f1e9c540b063ab70b120f5851c355b0b2043359

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    18d1c0112313194b3f218599fd1f3aa6

    SHA1

    a3d775e7cc1181f9220bea3f6184148066811e2e

    SHA256

    abdc73bd5270a4f9f31f091cb286a8d4b56688fbc5f9c0291fb2a60458e1f15d

    SHA512

    7e6e7f8ca598d254388c0a6b556ff2c730d54400c82c1ac3e4bb584b0b50bddb3b4ffec72e8ae57fdac71079bf1146ce783f349f374e44e9da4a96d5ed31bdc8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4be7485966b49394ef0a68a631c3952f

    SHA1

    a8620b69259f294eb84607db00a908ecd1b039b4

    SHA256

    f777786d67fe8fd859062d37d7624759d369f2a7bc157641a7e073afd30741e5

    SHA512

    e2071d28d92e6cbad473d6becc913c6f60428a72d03a7fbb20df049702adbe925cd2871a412467b3daecf2aa2ed25a453bd33bfc8b73079928337e9eb1758f9c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d347730ed9e8cbd5035eb69d9ebc2538

    SHA1

    fca46c301a7e3ab14ea50b8b7afeb14e3110771b

    SHA256

    17097222ef2b16a704637c1d3edbb6fa6cb0036ce3fcc11798c8c358f5f3d733

    SHA512

    ba934b47b5415e8eeef582a72a17df4ab4f2fc0725afa439a8eeb9a15d27db2552d98d241f2ac0d11e0f8f21ca3d74e91d92dd081beed52bc7c23ebb0158d8eb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4985bdbd1e2d3521fd7756612347b59d

    SHA1

    d7b1aa8eb21476d7ede379e21f14c258573853bc

    SHA256

    6b6c9be5240e2e825e09313fc42b8b944236e72604445fb0fe231f0b14d64e43

    SHA512

    fb3b44802557d8b5d4d0541f0b68c55469f38cff34c57035becc4ca7b5d3f17b63d334b7cfa4c2983d53cce2a92f4ac9c828ffffa34413633207476c72f8d18d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7659ba780eb7334a81d9c852ede858aa

    SHA1

    8414ca5b1fda6f063e0188bc5deb859cd8d3db1b

    SHA256

    879230643a77a21669df00a278a64b4752a662f5d739728d847f8297b3cd5e9b

    SHA512

    e51f3b8297e5a03e53444ad97457f8d379bb3d3b6c6a31840570ecc0ef28757f2a6af4f9cdc0cb895b30576b9d3b3eecddf7fd6fc47e257b58fb12a9c221c1f9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0b1f46133b7182ccaed44d4dc2450516

    SHA1

    cfa228954a7b88fa4a006cee86ebf352ccfbb8e1

    SHA256

    67e2fcb27d61d1349f66f65c30ac103f0a1275483d5dd198bb2a03ccbd96d5ac

    SHA512

    de9b50bda523324ee9827b95cd989c32994b596866875fb4eb340b90117b9c4327792def8f805cf716c573cf56d091e49499f40921602d30c951dc6bf7d44cd4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e53981af404d484f7133432855c937aa

    SHA1

    50be6dc9d7604b25a5a53f7a292ec1726f61b01c

    SHA256

    ffda4e058d4d2a452e57b5be655e702eb5ffd8eadf338c7d87503229d5a8db6e

    SHA512

    de05ae5c554b68e2f109037b782e8dd0e5113dd5485e9b2b4c661d5ee62ebc46ec09d0fbd8a49099fd6c140fd2d538f6d218f73cd3a3a3b5920bdbe7f7895db2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    37348dbc3f890fcead9f281c20007f5d

    SHA1

    29b59e929e0e5406efae7ad1590a1d28d2d82d5f

    SHA256

    a4c27a88779a8d2a0112e126e7edc47207691911ea8157fe8308df244966fb8a

    SHA512

    b8bfdbf8f89d78a31f1eff86a0e56b8dcc0e119121e089d5fc2ce0deceed37701fd87bbcc03c9f4fe106c9d426493aed9e0676be8adc26740e2d75554f8e1d7e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3014700e0ea16befa47433e39ca777f1

    SHA1

    a9a229ba524e87727e4ebe6c3ac50b298c064591

    SHA256

    19b8fffeac7ce2d67a59220358f5c77aa701f78658a50786f0d73ff22366c643

    SHA512

    c8bc638c958e0b7a710c87854633b92e28855cc564df7b50356643eee4844e41c4bf29d28d3fd2143a404e105a002c0979735ad827395e16f4bfacce92d11faf

  • C:\Users\Admin\AppData\Local\Temp\CabCFA0.tmp

    Filesize

    62KB

    MD5

    3ac860860707baaf32469fa7cc7c0192

    SHA1

    c33c2acdaba0e6fa41fd2f00f186804722477639

    SHA256

    d015145d551ecd14916270efad773bbc9fd57fad2228d2c24559f696c961d904

    SHA512

    d62ad2408c969a95550fb87efda50f988770ba5e39972041bf85924275baf156b8bec309ecc6409e5acdd37ec175dea40eff921ab58933b5b5b5d35a6147567c

  • C:\Users\Admin\AppData\Local\Temp\CabD204.tmp

    Filesize

    61KB

    MD5

    e56ec378251cd65923ad88c1e14d0b6e

    SHA1

    7f5d986e0a34dd81487f6439fb0446ffa52a712e

    SHA256

    32ccf567c07b62b6078cf03d097e21cbf7ef67a4ce312c9c34a47f865b3ad0a0

    SHA512

    2737a622ca45b532aebc202184b3e35cde8684e5296cb1f008e7831921be2895a43f952c1df88d33011a7b9586aafbd88483f6c134cb5e8e98c236f5abb5f3aa

  • C:\Users\Admin\AppData\Local\Temp\TarD350.tmp

    Filesize

    163KB

    MD5

    19399ab248018076e27957e772bcfbab

    SHA1

    faef897e02d9501146beb49f75da1caf12967b88

    SHA256

    326842dd8731e37c8c27a08373c7ac341e6c72226cc850084e3a17d26675f3c9

    SHA512

    6d5b12ec637ef4223fdd0e271cdc9f860b060ff08d380bba546ac6962b1d672003f9ae9556d65282d8083e830d4277bad8d16443720716077e542ab0262b0103