Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    71s
  • max time network
    174s
  • platform
    windows7_x64
  • resource
    win7-20230831-en
  • resource tags

    arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
  • submitted
    13/10/2023, 20:05

General

  • Target

    youtube_embed.html

  • Size

    4KB

  • MD5

    2ef02526d37f620d84e2089957abdc71

  • SHA1

    e2f3339e91cac8904d7d37f1f4909bb2e3c7960c

  • SHA256

    64759a92e22868f3a7bc37381908520aff9bae31ef2c5e3cf998ac2f9c0d6c05

  • SHA512

    58b4857311dc3a24acac11a511e0d3a1fc5075ef1354669ffba6e0cfb57369d39d40a47abcac29af991be71711504a08ec391e66ca59f1e9461573dc90657a43

  • SSDEEP

    96:b7vebZZFTzS50Nij89Ur9FUvi9znUlq84YI38FxxuxxprhUUI8s:b70Zh8A9Ur9FUvi9TUM849383AxTtUV1

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 34 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\youtube_embed.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2196
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2196 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2220

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    8f88cd1a5db9bf4a1548f1417247198f

    SHA1

    23ed7fecfedd956e98e1521df24ea5f3c6fe7e51

    SHA256

    37cc880e0235c2da54658570288d50b9d9212b38abda5d65353d937546eefdea

    SHA512

    fe47f81e3e633590f400638eac226c102d30c918c807d3b4c8c8c68ef489c909bca2a90af71db6462b48ba9b71f93fa007e90910e02f4f1084b53d2539f61b28

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a381db8ae85baf89e069cc1b48726857

    SHA1

    3f07cdd1c6a8b7503e1cd6f009216a6807f8d5df

    SHA256

    9a6da173546e62c9148b24c743f9281d1487a7bf2a22e23424cb650dac11cca0

    SHA512

    742ffa4f6227a4340ffb55ff46adadf7dd5fa1b73d67eb698caabc9022e74fd231d2f6e670b5d78d855e09680f5a5336844deb3d4c251888091949e2b2ab2dd1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    afbf920fe0f4b1a9231eb9cd9f000eef

    SHA1

    6c99ad704395eaf210a125a64a1d311cde23abb4

    SHA256

    9be087ee99f19631a40370a43a8cbb7e328712c5516d6676a613da024241e834

    SHA512

    ac0a26fa5764f06f6fb4d46e9efc168cab829e26c159ee219be70d37b85ca8c29b2ab89914f2938fe3a128142662720bada9d844f514d9271651d66570f2264a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    765125d2bbcc4280ee0c893e269ac156

    SHA1

    7128ed3962a2997ac1e484249e0de80cc1c3a8f9

    SHA256

    f9bed3cdfec55482156f76153f23c3dac11fd76977296ce4cd806b70e5fc05a5

    SHA512

    7a2819e04fad9ae43ee773c9f55253fa707c62837bff2f76272d510777a0f970f1c6ba02ee543d5208acfa523c59f9280b925c877483fab9047aeecb31c51282

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    992362bb6cddfe299fdd404ddb87b59c

    SHA1

    88424fa58eb4058636463feeba3483a8bfb36593

    SHA256

    31edd993636dd963a7b4079ec9ac87f161782a2d9a490ad2309153cc5513bf42

    SHA512

    304267dbe23e0ebcf2acaf30994be4176c78c5f91e794e532eb5c0ab7a621429a9d40b5d426b73106936a93db1173ef5cd84e88e630400648e3b478d4c12ad45

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    92cd9a83ebc8dcda42c89b1e7a929f3a

    SHA1

    e51107fec24e0e05653d6ddd22eb1c0bb7bd3260

    SHA256

    e1617dab106c16748add2ce4a10f60fe44758613bc36014bd8908cf5e64f5c43

    SHA512

    3dbcb78cb260784f315da7b893b18b5f12db1b92e9054962d6502b305d92b373fd8f33373ec5e8c9d93ba440ee0f28e62c6b582c063e24e357da4864c08a5303

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f518eb463db598dac5996b5e12d1d52f

    SHA1

    9b0ce51a28e448f1eb611605fe8c6a7967d1a892

    SHA256

    a432ef8cc9939e00b2eeeb99bc268d10a17a98db1d83704a9df09923f8610e6a

    SHA512

    dfc0999a6b66557179bbe86abe5aed8ad9511930bf6995f36035fd239531b846318aa0612f5e5d775e534d53f5e0c34ac29e628c1e3a6f46c391bdada20a7531

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b7d4239d2c1d0c5de766830cfc224ee4

    SHA1

    2902e75c1e2458c15ede734dd7ed1434931e6f2d

    SHA256

    1e64602a5f8cbd73f8a44eda371d528e88b2c8a5595ffee8f0c717c2e839043a

    SHA512

    e03121aa53e09cc96652611524c059c116d02e4ccc0750efc273a3b68f4e5482f3f87d34d99d05e7c71d88d793d5f7b340169b48c778c5d4fdbbd478074eda44

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8910dd0910d68e5811d08a4266ba769f

    SHA1

    9f0fcddff863564fdd52bed92702c5e15d50870d

    SHA256

    1b767d3e946c2a50aa919697d0a39dd8ff21d8511bccda0b3d526c4f2b12236b

    SHA512

    57a1e6a65dec0cd024f16ff21f707172be81840899f070ea31138840ea225113060e1e5bd886d4a7c423ca9efe07378019d6c48a407ce6f5af20bc3c809f07e1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2c2a94e17b057cec77058a5114b19123

    SHA1

    da17b10582b6d2ceeb5c283146b97a4c2432bb42

    SHA256

    eb8e8f3621f0d0983a46abb165b94026af8ec9e7743df56fb68cb5c91dc28f0f

    SHA512

    8b86269785cca639e4380210575fe95910b447d4b5611b8b3634c22652be5981abe5c026d705eeb331d3f5bdca17dc0b9846b710c85a8acdca518f6970080bd1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    aabbdd426ebb504b09010e95357d35ba

    SHA1

    11376f1273c1671c629774e8add30f1aa0179894

    SHA256

    7d1fe9118165063a53050cfbbb193853b6bc04ece69286e0d68aac3fcd5b3bac

    SHA512

    cd45789a78dedc5df1d1511274635ff3ab52915aa00d72c686c46c1c2a4521bcc2549df1c48175db00d546eacc6069f2f86628b27c77489cba5845f35f77b644

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c553793b200d0e2bcc72f2893e90b07a

    SHA1

    8bb3aebed092e22f3d9bb3b4bedccd2ad3795603

    SHA256

    e28a31d5c909948dad501047ffc0342f0090db872d8d9d664b4c7b79c2cf5eb1

    SHA512

    4b83d1e92dc07b59f941cf1b9d5944165af62b0c19cc3790f81155411e5dbc13fc78d366440633ff8f0383cd2a7023ed97b0e39fce31844a6b2edd47c71b1174

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    03c0d132b6df5618936d2a4bdc6eb54f

    SHA1

    6ed5e5eebc15b69030691d0a6454f22e41f50f66

    SHA256

    0ef5d543a81f0706407cbb9837a556db479e10e27aef50e2aa88f1349760da50

    SHA512

    36e62af83be991f198bd0a941afc970cf8c5dd860d559564dda0799f471e83aae5810094e03cc87edea091855a468d2124e0cd2d82019ba358d5dfba415f7973

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    39c0f95d88bae2d87e1f408981fb067e

    SHA1

    99d928213e85c8cfa64380eba854fb5b0ec369e7

    SHA256

    2b6acf8e8a8bab48ea8e9bbebe351b9f1dbd06bb3e8d8ab2a9c2f9252e163879

    SHA512

    5b9965892343c2409123255e50ecb6332f3f3119e4e2c9def36627c487a44856f35858bbad7f7797c43818e0b50577023d03663560a0986ff586e49247c23375

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    643bc27732a3cfc6da4f3dc816487a74

    SHA1

    41ab34e7b5c7586d47a30f6128584c916beb3c7a

    SHA256

    b0f74c1d39360cf76362607e40a54a37006020ab4f66d68d9d817ae7b02520db

    SHA512

    b919bcd26148ba98195cc85e56b76dfe877d5d24dc835aa689ddb2295bd5ba3622e8f2cf1462b5a99d669dcbf387e61a085770b69fc12ada3a725bcc1d5d4aa2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    01a4d37a961b865714db72023ca97863

    SHA1

    77ad8490a6733c50f84a8f2f33453c85c7ad80a8

    SHA256

    bc57711a6afdfe9f52e43403c3dd2152114035e4742d433ae08cc03be676f273

    SHA512

    24e907aa915f84d7456d8c0429559c8cfd44060f871a53ac9bff1b45a1b0946bafb4f0f75c6c8e8e9e993eee5f8cc759dedf5937bf441af0bdf08cd4cf1274d4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4ac63c040cd6432567dcd8d6fc61fbec

    SHA1

    9c4ec12e2a429e2c94878b492ab9a68b5333ee2b

    SHA256

    b20a31206b5a184f4928aa14beb4d13072b64f8cdbd1280a1599499ad3f37560

    SHA512

    5e1547206a2e17375d2e1026b1a80681377b531acd0c2cd34201aabb4c1ab3eaf5f91044f1a7c0877d47ad73f15d93f16a960d89c234f76496d7827abb620657

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    85a7fb3eb3754c9a6a1c413c60caf5b9

    SHA1

    1e6ae134a8f1d52fc0647c9a7bb0c90dbd90db1b

    SHA256

    685138884bc47537902b92803e5575d27bb1f8545dc4270203e133910a53f19e

    SHA512

    c9a6162f9296e9abe9029991bd90cc3d8e19f71cd0dd4842e862c2a9857e99fb5c2d7049cb0711ba4777dbb6b5248a48642f3b6c89d85727fa140ff67266f7ba

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b41087d8cea40f582f32a944802841dc

    SHA1

    a897d31c6bab0c0bf41c878b85f56765a2979931

    SHA256

    21fdbf409e6147f7322239a900d844f7f467bab97c894f4edc01bda5d02364e1

    SHA512

    56deb81700200d3187a08eddf253b5edcbf549735e5e701a73d2ffdcee6311344df76dae195307c6b569173ff9d55bb64ae8475bf7e3dcbd775f9ec92d01be6b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1d5ace185b42e50bb43eeadb01acaaa6

    SHA1

    517c9c08b4d8fee28f5fffcea296cbc5c9603c68

    SHA256

    c3437931cb704d05ad96031092a49ca5593989c1295803ddcde572b405c5be64

    SHA512

    11706975df0a217a2af777aeb2afe957591e453634d231e25f050cc8458215649c7604b93e179e68f15f31e0b9b8f70f41311ae616a7450850989036f159b12c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3a728f8a32f4af25e6cd90dfbf727578

    SHA1

    51238b5faef0f969fb6c623dde35889dcc6bb17d

    SHA256

    5bae5293e384871f0f3d62b00df643162812380bce6d4b13703854ab4634790e

    SHA512

    0d13eea01b9fc8fc835cee2e327a07f70dc0e8b711b485470913e60722ae7e96459cb0f71f9de761671d5cf96cbe5b4e6b1c09fa77becfd4bb0fc920a929fe92

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    b73aa8a24608991a715d261a53c4a343

    SHA1

    632294ca63ed7a6f92e9b5ad9db531bdb20376c0

    SHA256

    9dd439696cdaf843b1882a28744eee67ac8b61bea1e41acbae7234222c60b4fe

    SHA512

    ab1526377b567af41936191593a3c814249a6cd271197728ae26cb3de823fd8deca4b603e13f0afb915d4b61f783f0a3c3dbd387c6b4d31a46b729245a62191d

  • C:\Users\Admin\AppData\Local\Temp\CabFFB4.tmp

    Filesize

    61KB

    MD5

    f3441b8572aae8801c04f3060b550443

    SHA1

    4ef0a35436125d6821831ef36c28ffaf196cda15

    SHA256

    6720349e7d82ee0a8e73920d3c2b7cb2912d9fcf2edb6fd98f2f12820158b0bf

    SHA512

    5ba01ba421b50030e380ae6bbcd2f681f2a91947fe7fedb3c8e6b5f24dce9517abf57b1cf26cc6078d4bb53bde6fcfb2561591337c841f8f2cb121a3d71661b9

  • C:\Users\Admin\AppData\Local\Temp\TarFFB5.tmp

    Filesize

    163KB

    MD5

    9441737383d21192400eca82fda910ec

    SHA1

    725e0d606a4fc9ba44aa8ffde65bed15e65367e4

    SHA256

    bc3a6e84e41faeb57e7c21aa3b60c2a64777107009727c5b7c0ed8fe658909e5

    SHA512

    7608dd653a66cd364392a78d4711b48d1707768d36996e4d38871c6843b5714e1d7da4b4cc6db969e6000cfa182bcb74216ef6823d1063f036fc5c3413fb8dcf