Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    136s
  • max time network
    133s
  • platform
    windows7_x64
  • resource
    win7-20230831-en
  • resource tags

    arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
  • submitted
    19/09/2023, 15:30

General

  • Target

    DHL Shipping Invoice Doc.html

  • Size

    331KB

  • MD5

    fd32c4fa1a2d47e7245bba86eccab23d

  • SHA1

    16184d658619c40b13efa0babbd9b30a270f1fe0

  • SHA256

    1ff8f80b6411447599dd9b96ba74265e2c570e15b2eb53da00478a2cd5b61da4

  • SHA512

    e8ea1e8b6c7fa133d04990d79d06f9786da4aa3664c5648fa1ec0488fd2bb8b4f40af3b8fc350c15207339d516d45d5004eabc14982bf77dbd327f81cd380df6

  • SSDEEP

    6144:fK+OdicEpHgxzER+guaoM231azshV4XGFYwvD5UKMxZfK+z:fKVD2HgkGatzs627uK6

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" "C:\Users\Admin\AppData\Local\Temp\DHL Shipping Invoice Doc.html"
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2888
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2888 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2732

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    4cfa4a5fc13e610b048f3361071ccd9a

    SHA1

    f65c0781275b15c5c15c45b81b4f3466fefd71f6

    SHA256

    2e80c3d6f7d100a6a3e4d4d76860dd10616daee22e0c251e004fd153d4ab8dec

    SHA512

    ba4c1fd53695f6eedcd3a2f267d6f528bb35cad86a93ef115c359dde2e3b0581e526a95a2ff8772f9fb99ff2d853cee913e0e687ee2045d9d6e089c633c28e3a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    c10801ab1b9116bbc3f88f1bcb85e75c

    SHA1

    ab962d502010ec69becba3aca0dae5d5456a4555

    SHA256

    de975e356fcf6f5627ab0a4c770ec462765e8e8e0eba93839d31e9ab860565d9

    SHA512

    a027ca8c495d29817a530902fba3ca9d66d546149d837884bfc96c4f0ceb2fb042a6b9663bcf0f0be521bc2ef53e9d376215e74e65378b2f489ba781bc1a3928

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    e57e408e308a3ab2774b8ef9d28efdd8

    SHA1

    36d74253abc4a336ed9e26889a4add4b890af776

    SHA256

    dafaa097f912070dd070480e6df61579a219080a245e0cefcc4a867b11660a16

    SHA512

    5f67f75f1db6d282ac418c09304aa07d74fc53694187af5a96f3ab7c8b8143222425b9bac311fb56b51c9e3ed7cfb651c59061a1487a4d572d19958571667649

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    828536da1fe8208be84d837b7a5fac70

    SHA1

    41ee36212f77aa912f5452c50717ca11e1f9ffff

    SHA256

    f97657c902521cbb330758a4f6f340c77994aa773bfc45dc42e887ff9a10e500

    SHA512

    32d65b49df2111d0c2802f563aaa445fe1cdf77a17825d27f0e826e96db0aeaf0a4892dac0ee591042f386c79ee3718576cef5a6d1d8a4fa17d277a12c9d295d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    de7c49c0375ca7f2cae4872090f28d60

    SHA1

    a747dbd42c2b1794aa46a2b64f1099c5b8d40494

    SHA256

    610c340793b90d414342c7f4f353ff7b9f364943fc51ed994dbfa66e97c809a1

    SHA512

    cd1ce59176f4c91f916ed2693016f413d638babe5867033945079468f3f2264efabd5e941c1d8ece6c8c0261da59cb286f0f718352388d00754df89c40dd2251

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    41c128d09e60e7dfaa34a3ca575d5e90

    SHA1

    2d27f917af6400605df277818db7b7ce45d848b5

    SHA256

    17dc48a3ddcc6e996b8c6cbe8564a3a19f8d5d970a868b253590a96950892a69

    SHA512

    0af095faf212ecf6a77f1d26fafe289704c190b5438105b36d29d3d2955313b830c6a2ac4c8de4dc113f664ec74ba6e4b0c365bb9773e91a29ed9b249357ebdb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    420b1359741208e7eed8806b20d40ec1

    SHA1

    eeced0a1fc133eed944e817e6aa815fb052c0a7b

    SHA256

    c029ddcb4be740e528ac04b325f3457042967296de69d790b686a80b49ca5c42

    SHA512

    901ff5a67c2820d41f7c5cb3a8343f485320bc5b89234896bd0d99f1512a4f0eda7156a2486e1c799f20f86a601f3653f669b2da632f58adaa5bc8a08fce1a71

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    668f30e391d60bda3f8e6f17accd4f17

    SHA1

    53cc9b96da66c01608085f22b3453dad2ffb6166

    SHA256

    580a49f58a2c0798d84d56926ffef01eaa7df225d5aede30cf563ebb66bda1ee

    SHA512

    1c193fdc1cc0282f021dfd2edd7f993b05c0cf4bdda636493268b255c8e5791d218faa16208524211880f07ee007400bc87635dc88bea7be7d48155b0d934902

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    6c03f6336abc20eaf4b65a45ab4a016a

    SHA1

    7ef662b50a396af2e4be4d87861089c24973dfc0

    SHA256

    c49ba9cc2bd6f0700054a24b4c9626c38e3b8950d75f6e0b7c6006d5ddfa354a

    SHA512

    3e6ed652fae783ae8b80faa20475dddbed53579e43715e1f7a10ff78f9f8897c9c605bfa88f4b5ab9fbea7e309f05ce81eeba52ad00e45e61912cb8e1158338f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    4644bff54cc4f5cd03f0296e6b18fa38

    SHA1

    380250479d28086b82424bab11570c202413dbc7

    SHA256

    c266cc9c245b42fe24acc0a0b9469ea535bb8aad96dbf837e5e6a8e135a17ea8

    SHA512

    7e5c12f050ca479b404526ef6fa916e041807f54f92b35179ac3e80172caada7159d9fbf08c857f7c038d9d7921e522d2465eb7916f4816881c5e37b450441a8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    0e1914f2fe249985391119193d91e501

    SHA1

    57b1b1fd1d3d2909fc8ff9e4b562295420bee8e8

    SHA256

    ae37c783e5298e4a766e5be8fc226df23880cf5b68370db5664776189c63272b

    SHA512

    8991e7da204d788e0b9aaaf24fcb1c73eb8202fc698a2796097217e83fe37f94214db14a71c3863403b1d4d7f4bd6fd9aabe6d635df5834a94162bfff65ae77f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    8658d114f2371e7e1d58bbe133d2a758

    SHA1

    a64b9cc4daf9a5ae6490dcb3ed5c5a57716ef965

    SHA256

    1d3b734292ead94d6f6f793483e37257b524df970b9f4607308dc15429627620

    SHA512

    58e97be2d166b01d984c108032312abe4d96b294b91377ea155af8f4d55a51ba934949f0b1a291091bc538f09e50a30b2c330691b1edb0569300fd4be018756e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    bdc1b6412ee635aa9b16385280b2f049

    SHA1

    150dd7338409908989cd5b45cf20ab1b25e7f521

    SHA256

    b79b7a0fe61d3bf52049aa9270913933460e08b0155da542ff6debbff0b2f48c

    SHA512

    e3f87c3f4e90de84bb93f9164f6894ad8a93c2e342526212e02ed8b53fa66288a808bda3a8e24b04bfbb4ecf08dbf511321525e471d91c2cb0ed8f830e68c87f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    911d7e16b2a6682006d6aedc160b4ac3

    SHA1

    27711624af2d0e402f2482b63e4c4945c5f0cc93

    SHA256

    a12009a3d4793730bb186787f7457911dba926b0d0d03698c4c21bde988940ff

    SHA512

    e228b01c146afa2334dd1b75f186da2940ac4d68db5e1aa8195b8693a1fdcfff06c3ea8e7f926f6fc830c839c2565428b771f645b716fd869debfc3f940f1c9e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    495bf2fc03e9cce8855ab7c985dadb69

    SHA1

    5c64829a755b26aa9a636b2034a4ae2dfaadc95e

    SHA256

    b0febcb8110fe6b3ca4a867b84ba176499c9b62c1e36a5212efc65d947c54a08

    SHA512

    7ded2ac16598151633ea7dbe20768bdb8a70cc7c1e1ee599a26593744b5441872efd03701ff179532b0ac25670f3bdcb7ac08a2125c63823265c9a5f3a2a9378

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    f941e34415560a06cafc04752011fab6

    SHA1

    e6128c6c21ae8639c6fd6c1a8539ef1fa1e687e9

    SHA256

    bd6d559838a62f0e5207018d10e0a5a5b51e387e5df3fc9e8e2fa1bc02447690

    SHA512

    2b075671de3564579877a83bfdaf843cf3f54748cf48eee6780ff6c6a88ba8dfef693ed641adaa93ce7efa38194d91dfe20a3a97a8889776a70882b665825335

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    0b8da6dcb652a5118e9110630f864abc

    SHA1

    61ff628ee490477e3a4e3d67671ec75685bb647d

    SHA256

    25898843b3295f70d30f3d1400fb98d84a8dd712defae958716ce78a292df447

    SHA512

    791de9b4372449062503ac2fc1ec75d41e3275e01a9f8dfb6c079723cb60582347850dea91e2b26d0b35f52f9d7c2bbb4da480535bec443f608fc574ccbdfd21

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    7ccd7e7d941e2da738e876f8060e8210

    SHA1

    bedfffcc051679b0381dd962d849a7d5810b2ed2

    SHA256

    d33ed40930a3289dc74b0f0be0db2258d4a2e3daeb042ab7df4408a3862caee8

    SHA512

    59384cd18f7ad0f7a4133d6eac978aba5bf7bfbcfd9ea625350c1546ae6ff803938a59001752a999b1f4c2e0b755fa6cd97a40660f36eb530b7c8995fb494487

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    0bb40a23c68e62cbe19de787844f98e9

    SHA1

    1afcc5360a3a911f3a1085fdb77e3bb796d32f3d

    SHA256

    2c5c12382e09290c4550def8b8c13ed69287e8133fedc5945cd8770dd88dd01c

    SHA512

    645d6c8f9a6e60d109a8015a0e4751973333012ef4bda578a7ba10897d2747af03d1995f32f1ec488ef105d212050fc7ce876c392d33c91a70c2d51e5ac13994

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    552321f35ed857353a544ce22b16a5c3

    SHA1

    092919fc16ca78276ecbee113231c88ab1713f92

    SHA256

    e62c902c358bad278eaf4cfdf88b40f380bc5459a371c5b2a2ce97b7f3b2c28f

    SHA512

    743b703cfc338ceafbc20cb70294c1fa128aec6928ef9c46e6e9ad4aeb1180415f572ffbf4d4f882e2e96c1a50a1597fb11753e167b1912b14ecfcf5d072daa8

  • C:\Users\Admin\AppData\Local\Temp\Cab68F2.tmp

    Filesize

    61KB

    MD5

    f3441b8572aae8801c04f3060b550443

    SHA1

    4ef0a35436125d6821831ef36c28ffaf196cda15

    SHA256

    6720349e7d82ee0a8e73920d3c2b7cb2912d9fcf2edb6fd98f2f12820158b0bf

    SHA512

    5ba01ba421b50030e380ae6bbcd2f681f2a91947fe7fedb3c8e6b5f24dce9517abf57b1cf26cc6078d4bb53bde6fcfb2561591337c841f8f2cb121a3d71661b9

  • C:\Users\Admin\AppData\Local\Temp\Tar6972.tmp

    Filesize

    163KB

    MD5

    9441737383d21192400eca82fda910ec

    SHA1

    725e0d606a4fc9ba44aa8ffde65bed15e65367e4

    SHA256

    bc3a6e84e41faeb57e7c21aa3b60c2a64777107009727c5b7c0ed8fe658909e5

    SHA512

    7608dd653a66cd364392a78d4711b48d1707768d36996e4d38871c6843b5714e1d7da4b4cc6db969e6000cfa182bcb74216ef6823d1063f036fc5c3413fb8dcf