Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    146s
  • max time network
    146s
  • platform
    windows7_x64
  • resource
    win7-20230712-en
  • resource tags

    arch:x64arch:x86image:win7-20230712-enlocale:en-usos:windows7-x64system
  • submitted
    28/08/2023, 01:33

General

  • Target

    data64_3.html

  • Size

    187KB

  • MD5

    26214637879ac67d672afc85e0f62437

  • SHA1

    fb0176a380d85efbd86be3daa5b4716b2062f29a

  • SHA256

    89a25dbc12f88ddffe86c3157b87a69011a0f13c072e76444994590649c2e89a

  • SHA512

    d95461aab046ab2ac6fdc618a97f27cd12b4370d00422065b1da429605c154ca736076614b5d2f85d5ca09e3d6059f32d32f8becb06fcda6fd077907009d2c8a

  • SSDEEP

    3072:PGFqcasBo4rdyYlX8erl6YE9Mmh6/k59m49VVbf1vmHRx+3jzSGOqCf2ifqip2xc:QrdyYq5YfgSGofF5p2xZTXF3ft17CKgj

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 2 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\data64_3.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2144
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2144 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious behavior: GetForegroundWindowSpam
      • Suspicious use of SetWindowsHookEx
      PID:2448

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    61KB

    MD5

    f3441b8572aae8801c04f3060b550443

    SHA1

    4ef0a35436125d6821831ef36c28ffaf196cda15

    SHA256

    6720349e7d82ee0a8e73920d3c2b7cb2912d9fcf2edb6fd98f2f12820158b0bf

    SHA512

    5ba01ba421b50030e380ae6bbcd2f681f2a91947fe7fedb3c8e6b5f24dce9517abf57b1cf26cc6078d4bb53bde6fcfb2561591337c841f8f2cb121a3d71661b9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    9e6584c876abab83bba0b7408f5b2ee1

    SHA1

    2c3329884d78b62d8f190b2c17a90ed290d91d67

    SHA256

    4bdd8e0811c17b5f2cfa99a129ecab502a248aee2fe4a7a9c2c5a6c5dbfe7970

    SHA512

    3684300627ceb6006505a5d27fd922affe809fec63e5638cdfb438c6e099a20d919b2bb6619f7313c8bae0b93b9f89ebd1b290830a87e6203f15be1da86ebbe8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b8dba3a711fa92c4457351e2e531e7a1

    SHA1

    2b63202b70e9f9b29662c1d9d478a5a1bb1e04df

    SHA256

    10512902fffa7c59b92b8dbc6c1191d79c036dde3aa1be22c0c8584b613d649e

    SHA512

    36a55275232643cd5552118a0b192e4ea0613d9ebf176802b3e2a6491e51f308ad8aac859c7f75f009f11c5e3d559b226d78781d565b0536d406a0b168b1ef0e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1371b5f7e6655690d001731abea1ae93

    SHA1

    1ce8a3ee22699c8edd68dbf425b7aa7513375ec2

    SHA256

    711d5f035e74d79f0d09b6189c33f6177592be02ded9fe08cb891e5dc6118940

    SHA512

    7e25ee89a7bd87a0fec965bf73f40a6f016ca0c836ae7e1edf168d6516cb22b256b301ef96a21d9efe06b1c45c7c0e5b4cf2faf709b5018b7ef514380dd70c81

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4a7da5204bece4715554960547bf8679

    SHA1

    56c72b72c05fc6fb6dbef7686953448a75b5ec6f

    SHA256

    e8f3acb4452780aa6057fe65ed832fac529867c822d1c38ecb4b460e390ac7a1

    SHA512

    6dac7b84f7eabdfb0910534ded1d982e743f662c28088a3fab43142c342ba311026f75b4f525ef8fffa58d30dfd13e526cae2d7f4ec8a563d33b87e4b80dc53c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8ef5860238db8e986fa84ec8d1cce324

    SHA1

    add0142614d01d3f850f91b80b9a37a6497d7015

    SHA256

    9b8f6f9979348cf86136a64c6c772a6acb95f5f237dcc55f7e1b9e8ccb81527f

    SHA512

    ff45d1b8b4c499d8c8db9ae8e1c191029ff6a52f1b8ffc46528318221681933a8e397cce49910b01ab99c47fe1c831bc68e9ecc895b02b7808c56774c3721ae1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fc14aadda5d23f49d3b68ad581479123

    SHA1

    b5a75f244cdf7344251ab0bc8ee2f5d65937a00f

    SHA256

    1cb8b097ef9c27ce4e8a267d9c6f94a9d34b8b43a2ce579cf953c2d35a452b51

    SHA512

    30097ea69b50710e3e40e8e92e4e627e1c6a06bb98402f19426108a9bb6caf1ba263b715199c263445970ea95130bde5b29583586730d7e40bc3507d67e2e215

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0e2f46b605c53813f5ac7c968406a11c

    SHA1

    09344fa4496be2128564fda52cb706486f972acb

    SHA256

    656e2fd4c397ab0dad09fa8a87a553715f773406e30d0f725f72181b28ed4d89

    SHA512

    2f5dcc2c14bfac15447d8ed3a8452f63615b51c4d871507632a26e3c14538a00d806aed169042d70f04355dae71e842326252e458d7777148eb3db9f6ca765b7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f7abe14a279d939a7ef759070db576ea

    SHA1

    a2e88d15903e375ddb6650023deb8b48ee63dace

    SHA256

    d69d8700d2ccf782cc5ac809e1cbdac72ec60cd1ac220aa95bfdcbfede2db726

    SHA512

    d3c93095f332248bcebfba6fe6a969f8ea0cdb0cf0dae9d87c32896bf3a2e391dbfe1560c02c47064893fc59c5b2b8822f9d94fba263bfa72ff732ed648905e1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    974ad73e6cc371521635b830c0e03a08

    SHA1

    7b9bfb4ed0d62ba4c17ac9285e7235745aa525f7

    SHA256

    d4c26c801e2e412fee9ea885f8adaa5b1f05e0aac2ffa494a8b62f8db3a20bf3

    SHA512

    9089e6cabf44ede3ce0c726d4fb7c3c5b53aea60e51cd69e797e4a21759d1e327f4f68578492b893d21639e7dd31874cf9a93ae2db66160e23b75649f5023eaa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cd5c0fb08df800b3969d26eddbba1451

    SHA1

    0517de231404e14ac3024580a5c02dca209c6171

    SHA256

    15e2b799c0dd39ca3df96cfb586de52831798f8f2827176bfcb330fccb84298f

    SHA512

    a59fd8f7bf1ea5e9622b16977a225f06edc80f4c8a48274a8b04eaa3e6212dd7a63521ee9e9f5547c2c5b8fe30d344943e238aba20d6b29099bb45907a8ff98c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fc7508affe9ed1c9ed3d3aa43bb0608c

    SHA1

    12c13af7f687556012588a02bdc87dc26e6ce887

    SHA256

    3669cab06d3e7796a23c0f901798dedabb8927e4052279067c77ae0c12adc8b9

    SHA512

    885f64d91df53bfdedc3d670b591a7ccfe506e171d488fb7f5c9a78fb37d4dee4e1bcc79c33c0777a1646cf4a80465017867bb77572d1aaa6c66472ada7c94af

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8be550a49694a103740154bb7bc3326b

    SHA1

    533ceb741a12616b146f51756e93a88963dcda10

    SHA256

    6704d969630dbe520f8c88900c9a81c922cbeca126694d49edf42def003232fc

    SHA512

    7f0ca98d91f595d69c13afdb2f96a73992ba3206ef6d94e169c1ea350f2825091ee954eb55cc47ed80988a39b38304dae7286a77a38c8acfc95875b349b392bb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    93fd2488b8a5e90bc0851277dfeabfc4

    SHA1

    ae6eb3c669eb77314f2fc51549147606cef075f8

    SHA256

    fbce929491db749ea7990649ebef50f2557ca49188beae265d722110f2ac46fa

    SHA512

    08ad925a986f98d80bbf3d7c4d3d0861fcc6b2d6d2573ebad8c9769ac0f00b38fec729d9bc053117b5b4d07f79cf11b7e6e89b701d884df6185ec6e7fd405666

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    edc017c4991ca9d15358a7d798aa3ed4

    SHA1

    295dd52b634eb3273846d154d64d91fe2ca307f9

    SHA256

    7fca820505101bb7d557e70f8075fba21c70cf01df865646eddf1edbf5ebfa3a

    SHA512

    6e214b9f4a7971ec182d34c894b2a1142817a49525ded60342bcbe68fb7a692814cb66c65e22742d5c6b3a539ed2d477584a6cf3ce4a746894b58542a2951106

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    205e007954f2fd8e2593e27a8cd64b0d

    SHA1

    551c9717d800e0486f68be61225c115178e6af35

    SHA256

    08789c7b9940a7bf35b7d8c3462ae6c8d76f0f600e85b28f650494568820af2a

    SHA512

    a24ee462c8e28cec66aa5dd183186ecfe8c4e796ac719b570a0d416130273d1ae409c266504c2cf3540e724abaa38ab2390e16303ce50840fa34aa7a0370a5ac

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a07524af4f3e1fbdfb31e257df3dae45

    SHA1

    b070ca3852440e6b74aae5d9829ab3574150bde0

    SHA256

    653881825ce09a98ec8bbc72f77501d93b14698c946b76d8ec06efd52c08e5d6

    SHA512

    ddf5a660652329cb4466f82c07bebcee54300f5074c5b5e54b3edf37afa4f00abc6f7a6adfe88e90197c4d029ac9543f11478b0a612f8365fdb52a239a8236f0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1155a530bfecacf3696396cd58c2f05a

    SHA1

    d784cf75c38e2248a1225f185ee017ece4749257

    SHA256

    6981da4e1950b0e6c067f48502fce561ab95af8e8ae22213acdf56c358731a54

    SHA512

    e3ca1bfeed1f65809c299194889fd090621335c90e976188096801de72d507b50b56acd8b199e736eaae8b57c1cad3d6926cdcd6370f94cdbf81964312e47236

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bd7bce218e833e28cbaaf9af56947412

    SHA1

    6cbdb77332b53b8f6a2ab9f3d3b6261bfc259b8d

    SHA256

    1a15b592ce2afaa09601819b900960dfafc708b65641f883e5a4c35f3e525d91

    SHA512

    cec7b25a0ac0abdc17fd988df17db1f4f75824c59f615d1ba9550059f64f51b4b6af1eef86a9372e3c5ab49fe5cd8aa0bec0b0436c388bc9e91b6f7f36bae9fe

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ba614001fb4e35b43b8a60798ff08f63

    SHA1

    8f8c7157ec86b357022bdc1753104a4e94a03bfe

    SHA256

    c50eaafef824d062c8ca31abc26913698f9fdcadd93839ae3f1c782799d00104

    SHA512

    d59aafaacda8e01323c050a9d2502f3d494f5c98a045dd36cff985a6fe66be2923bb9d6cab5250cbaf3e2615b6f399b1955bf2c55b55463c1d8e04842e5adeab

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    84a74d1d4f252631385b8b80d5a8ba83

    SHA1

    27c6fe73f10e45d53c8699044fcbb9365985d2a6

    SHA256

    094ec3701a827af58a946e1cf2d0252881bbdbc33578af3d028b79b72827427e

    SHA512

    515da45eccf7a8d85870c4485d98922077a708b178ae1627212f35dd83325f96ec8cb36eacc538fc0990046d06b4b65de4d27a2cd073991f21a60baf4ec2e2c2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0e831d4b2c6f451ffd03a0988f7129ee

    SHA1

    4d76c0c726a1c28ac782dab73ec61928e82551ed

    SHA256

    c2af8306b3cf076326cf6eac1ba3f72cd4c7210296197dc9c66708926897ea40

    SHA512

    1190bcf6ae1b26ce5695f2c25c41c1b5486007a6a213b877e151bed3bd91a4f0951acaf0eae5e763c2e05c5ebb149b586e5598a5472b8fad904e5fb04406ddca

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    eb19f5e290178e3c45dcd10e85166ccc

    SHA1

    65636aa9d79df2097f3c94491d0db60947ae62e8

    SHA256

    5bde65b7246e3a0ecf30fc98c08746adad96c8bba34ef8718ecc9b67c0bafed4

    SHA512

    f8120251f603582a577ceea9b55752a886ce46e5540e905133229890c227385edc2604c8c1514d0d297bc8876ffd1da8921c5a307e96f23d92cc62a8d14c790a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    d884fe4cdcfa7f25d03edd1ee8b684f5

    SHA1

    ade31677f102bec19c99da2342577def25e9c34d

    SHA256

    07b13359900f6af1871809c35fe30d55d0590f4fe3ac290f57cf00fc4bd71fb3

    SHA512

    fd246fa894d26ddd0bba9b834636d714c9cc867451aad82c70dbc30d501a65d45f23d4e9aa4250131544d8f5d55559e3af12ee2df440c6a422980ec7901266fc

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\TGCFYHZ3\all-reviews[1].css

    Filesize

    10KB

    MD5

    a710ad83069e3d5083dbcbd1947bf68a

    SHA1

    94fea850705885040bc9581b2492ad8339359b4b

    SHA256

    712fe782b9d50de150194e4c25d9b7be2030e5fd4d9dbfa5f4bcafa860a33e74

    SHA512

    816b9e7c5b9e7794204a619cecb163d2578d5bdfb089f85f8f9799589bc29771f2440bd799c6e7e2f9021af46d1b6a6801c50fe4a0bdeadc9f5b66ae268e8ab0

  • C:\Users\Admin\AppData\Local\Temp\CabCD6D.tmp

    Filesize

    62KB

    MD5

    3ac860860707baaf32469fa7cc7c0192

    SHA1

    c33c2acdaba0e6fa41fd2f00f186804722477639

    SHA256

    d015145d551ecd14916270efad773bbc9fd57fad2228d2c24559f696c961d904

    SHA512

    d62ad2408c969a95550fb87efda50f988770ba5e39972041bf85924275baf156b8bec309ecc6409e5acdd37ec175dea40eff921ab58933b5b5b5d35a6147567c

  • C:\Users\Admin\AppData\Local\Temp\CabCDFD.tmp

    Filesize

    61KB

    MD5

    f3441b8572aae8801c04f3060b550443

    SHA1

    4ef0a35436125d6821831ef36c28ffaf196cda15

    SHA256

    6720349e7d82ee0a8e73920d3c2b7cb2912d9fcf2edb6fd98f2f12820158b0bf

    SHA512

    5ba01ba421b50030e380ae6bbcd2f681f2a91947fe7fedb3c8e6b5f24dce9517abf57b1cf26cc6078d4bb53bde6fcfb2561591337c841f8f2cb121a3d71661b9

  • C:\Users\Admin\AppData\Local\Temp\TarCE60.tmp

    Filesize

    163KB

    MD5

    9441737383d21192400eca82fda910ec

    SHA1

    725e0d606a4fc9ba44aa8ffde65bed15e65367e4

    SHA256

    bc3a6e84e41faeb57e7c21aa3b60c2a64777107009727c5b7c0ed8fe658909e5

    SHA512

    7608dd653a66cd364392a78d4711b48d1707768d36996e4d38871c6843b5714e1d7da4b4cc6db969e6000cfa182bcb74216ef6823d1063f036fc5c3413fb8dcf