Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    135s
  • max time network
    132s
  • platform
    windows7_x64
  • resource
    win7-20230712-en
  • resource tags

    arch:x64arch:x86image:win7-20230712-enlocale:en-usos:windows7-x64system
  • submitted
    30/08/2023, 14:29

General

  • Target

    consentform.html

  • Size

    107KB

  • MD5

    606b67fe07d406edcd05430cfa764227

  • SHA1

    10c0204754ec23b1954f703d20bf0b8ba606b29f

  • SHA256

    347cc76e8788f515007cfa98e6ee0fe3cfd021492580fe79372a33850bca3f04

  • SHA512

    dc7bc673c8408bf1fc01976f8c33b8d8e777c850ae5dddb0699bdbddc2e7ad017a078d2c26564b95bc176e62829824c86c4e5d9d4f8edbf410d0e5482a4605da

  • SSDEEP

    1536:yqtgPagx3amKvGiNU58kmXzyr5SgobiDJgsdfU:ATEvGiNU5zm455obUJgr

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\consentform.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2556
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2556 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2412

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    61KB

    MD5

    f3441b8572aae8801c04f3060b550443

    SHA1

    4ef0a35436125d6821831ef36c28ffaf196cda15

    SHA256

    6720349e7d82ee0a8e73920d3c2b7cb2912d9fcf2edb6fd98f2f12820158b0bf

    SHA512

    5ba01ba421b50030e380ae6bbcd2f681f2a91947fe7fedb3c8e6b5f24dce9517abf57b1cf26cc6078d4bb53bde6fcfb2561591337c841f8f2cb121a3d71661b9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6ced42dce5c01359cd3b5de68a30b4c1

    SHA1

    7950e8b6668ae017da3f75200aa5f24359cb0835

    SHA256

    7edcc15a06a93a70a664f6394c619e1fe57462f974a31ddc9985029674839ac1

    SHA512

    49c4754f184773b487fd12b04966e1ab070de0b775fc0effd76bf8b31081a00167f8277b358a0ad619832101695e43e6bdd78e9df35c497ea412401b4f82ee94

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    02d2eedb4452f2dc297859b6d3609e1c

    SHA1

    fffd3ba5c9d57da4bf32d0723776e896e011df1b

    SHA256

    7878b3593cb67437dd86d0d7d0cc4d351cf79380333684a86671887d2301a1d2

    SHA512

    f8e647edfb16a737cf22672da6d2b230a56274a56a3833da84af611c701889b0e9f563f70ad35b526456376a80f0b9925fb589e08632bc37a2586d61a7550b9e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ad607a5fa9d47d2923ea8125af92856c

    SHA1

    d0909de56e5c0c76e868d1a5d7eefe14f958ea26

    SHA256

    6320576bef6584023efb8c9b4878094ecc40b22b7474ddfdcab67fd98ebb3092

    SHA512

    26d0551534c04942370a2d72ca403197c6a825ab07ab4b99a94dcea959acd7d9fbb2dca2f9b29a8b6381b56f6e851de2b314d87b14e89f263e0b7689edff4f65

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    45d90049d43702ed6bcea7d324827e2a

    SHA1

    4c97f39055244ad1dc24491efead7c2f8605cd5a

    SHA256

    19b9f70aa577683ffd9af02706e62cdc6a070ff97abffac6549f232d62f5f996

    SHA512

    262fca439033a3fa8d16bb03c84ea76e662682fdca9b7046894d3667afecf3afcd91cf097a96235fa14a26bc339b3bd3484ca00123b8bdaf9b5989f932e6a4fa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a0c0a7e6a0f704f74a4cf9d1d8945bff

    SHA1

    ab09040f2eb0e41f8fa77a188d89ba724310fa3f

    SHA256

    898d1c7391201655656411fd2b58f15358f8acd8e4056af2e9e0e7d4940602ee

    SHA512

    f427feacac25db22d4e0c50f9d1d793b4279409f4340b0c503149a273e85077ead9d4a6962f496bcd8f899dbd369864d2eba90c3470268d7611a16076e3118ed

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    40564165004f92b93ddac4629542e8b9

    SHA1

    d18efa0f1f8d7d016701b2ef174e9569627b0266

    SHA256

    ecde556889a63dab16f5f55d65842992bdab5d133e29eb0702ac9bffb9dc813c

    SHA512

    222af3f4fa9dd2ad03dd348709ae632c120896e44621f5d7d5b7a75b8a50bbbbdd70502363b9b7c564ef9132932305acb30e81eb3a27064414653573ec21b814

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e542984380155d096c050d92557b43b1

    SHA1

    99be980089de0916b60735b1d7c41f3c90d71b40

    SHA256

    6940c565b7c1c0eac3d159d8e28ce8c464957f95844617d0fff68eaef080dce9

    SHA512

    90aeca2e9bea9f29dcf9889af13bc62aab0f0110c1703f634e3d564d1e9082dfbafe0a7e2c1f5c69ae63df7e30479c2ee6f3b166d6277af6ba1c811771cac8e3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3bff6ba6bad2b3db0513265744f921c1

    SHA1

    6f0248a1f6db20e8bec092a8611eed3c9959e287

    SHA256

    13410a27ace25bee2e6124f27e68ee6d0f18560b4738154d1eac47fdb75ec9d8

    SHA512

    5249a9443c8f2441904ef1b670c3330726f166f30ceeb3a3e088d394e75703909f22c6b5b7e1250a18d909ecc997a192ec8b60b0d045ac4f70b55b94ccf9df8e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c677f80396b968fb1929524b54c4960e

    SHA1

    bb8d6a22d14d2dd0e23de713427589222c43ebdf

    SHA256

    6fa5934d3e7daba17f87fe2702d45d30678970cb2c59f1b08c586138579d5176

    SHA512

    d7e511d8425984a4e589e5a971e005e368d4daa5d5b491fbdae817805860688a7d65278d1abaff9c16fc38ae9ad14fecb833aa4275131b562d45ab0ac5d49f6b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3ad632b8b9dcce9a23c0f17fd0e82887

    SHA1

    e81fea390b7cca5f3f108080d1ba870a92073b70

    SHA256

    119c35da029ccdf96aa2fce4dad7b4f5d60f776b5a495ece46c7beee43a16caa

    SHA512

    bdaa86d4e084259683628f4d4e6c63b0f36396a2a6ab799c88fa494a8a41ead17c77a1ce2d58c9e124b94a5cd52c6022d02fd545d158585dda415c21e3a7569a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a2090ed125fd6dda17dcd29e60bf8857

    SHA1

    ae2945bff2765e9ca174521736b388430ba7ed75

    SHA256

    ffc817754e2862037e1cdbe9b458bbbb342b3821d5e71be07364385dab8d091a

    SHA512

    9657cbe3e3189711199d116bef49dfd5d5453772364574a9002bb19cabaa0c399a33bed9c9b72ab274db87107cce133929c960d39bd4ddb96670b193f3e61db5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    445339c7bb3830c0a1882bef7d466a4b

    SHA1

    b40025ca4a12c3d8400085f5313c32c98a71c6c7

    SHA256

    835b7ee052ef4f25f1245150601ebb337fd65f9aaf7adab0f212f89813c951cd

    SHA512

    4520603f13ea7b644dfb3460452646392cdeba8644da5bce366e1c8fbca6bd653aa4bb84a09f9b3c75ae34a4e9c6b0ad9078abff89775ea072145a87615d931b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0500c89aec636fc266b87c433c32dee4

    SHA1

    dca16721bc73040029411c6566c2d40425e679a0

    SHA256

    14e903fd61801f45f3d25f78d1dbc5157b195e8505b2e7d7f08a8954ac0a9717

    SHA512

    910e97092d3e1fbb66c1615a0feeb5dc327ce3340459f7a3d4ea5a8c567377b7f9c1701e6660c23460606495420a8828432c9062f8ee42cbcf94397b3a67a60a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    20c455136f399248ae298107a5e606f1

    SHA1

    2a4a6375465c9ef2fff76c4b62563720c319b2bd

    SHA256

    37e0ddf54ded06d4ab1acbed8ffa88a5797aa2df169165f081e88c22a63a8464

    SHA512

    ea05dc3f5fb5519ea12db1653571ce00255629e1ad7b29956be18bf0ef9f14fc8edb31efe3191350aaa45f6882966881c8b573c59b690b873caee95091606630

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a192f73c8f7d6b745d1672371c9fef0f

    SHA1

    9492b4834cb12f2555e14fbdb236102a5f7361ec

    SHA256

    6d9e67260970a15568e80c0fd46f7a7f050d9d7dfa62bf6c8146ad87283abb89

    SHA512

    dba750e2bb4d1c24b613a0ba878315a5bc700315b2e2d648113c23fb425cdf66067b970788b562810ab8092de416ee1a3ebdceea5e888f8b005757460579abf8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d57ce55f89aee3c4435bf06693fffd05

    SHA1

    7c80b3dfca6ee82e06b63284774a417723918a2a

    SHA256

    2d604858fef7e8e0c886110609609ef91ff9602c4ba2da7fbe71435871cd3962

    SHA512

    35722df6e90bf8fc17d6aa439b1b8681fb1d5cb885d52141f9f2d9a6ad75573f038755a8e540177f5ed364929b143b53a93cbee321c430804596cd7384a9ba8f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    58fd689a887c02a40b3eff7c7fc27b2c

    SHA1

    f7369ee1b35a6c4951a3dbb9b97a7fd8bdbb39ae

    SHA256

    d114954072bd969ce24a0fcaae9093eb740a9bf32ba2389fbe1fbc8cabc0257c

    SHA512

    18456d99fca4762f12ff445745c2a92b4dbf80b73124a4604525f5a7d5e24d27247fb1f62cf505dbc6673637c2285b3721eb8f9da3a5a89c6fd02f5923fcc75e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f806e19060633b346eb21b53e33eb0b0

    SHA1

    b2a34091ed262dd8e5266308a4cb82a0d3fec6a0

    SHA256

    b1b7aec672a5ce2620b8caa535fe010f43c27b274cfea11e238f7db1f5cf6022

    SHA512

    3d97be61a45c132c9bcaeb9a910c6be1e3736758aad2feaadc50e52b2ba1acc1274add14a67b060bb9da7940167595077fb0e4693d3ef1d76f7b785ea3b65fe3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5e9aedd2e3ec737ddb99bef9ea2ffeb9

    SHA1

    8b5db45db4378c610f8c6999513bc2cc19b476d6

    SHA256

    83e56df5978e981a1e9e5e9cfc2538e0407078c90bfdb86e7d688f312de7a9c1

    SHA512

    fa412d4cbbe5f233873ecdd8afe8d168de39a2178814e31c56b2fa0bb5e796f4872d0ded0938c152d5c340945b7c76844b809df2e0157436cd353c1054fded55

  • C:\Users\Admin\AppData\Local\Temp\Cab8DC2.tmp

    Filesize

    62KB

    MD5

    3ac860860707baaf32469fa7cc7c0192

    SHA1

    c33c2acdaba0e6fa41fd2f00f186804722477639

    SHA256

    d015145d551ecd14916270efad773bbc9fd57fad2228d2c24559f696c961d904

    SHA512

    d62ad2408c969a95550fb87efda50f988770ba5e39972041bf85924275baf156b8bec309ecc6409e5acdd37ec175dea40eff921ab58933b5b5b5d35a6147567c

  • C:\Users\Admin\AppData\Local\Temp\Tar8EE1.tmp

    Filesize

    163KB

    MD5

    9441737383d21192400eca82fda910ec

    SHA1

    725e0d606a4fc9ba44aa8ffde65bed15e65367e4

    SHA256

    bc3a6e84e41faeb57e7c21aa3b60c2a64777107009727c5b7c0ed8fe658909e5

    SHA512

    7608dd653a66cd364392a78d4711b48d1707768d36996e4d38871c6843b5714e1d7da4b4cc6db969e6000cfa182bcb74216ef6823d1063f036fc5c3413fb8dcf