Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    134s
  • max time network
    137s
  • platform
    windows7_x64
  • resource
    win7-20231023-en
  • resource tags

    arch:x64arch:x86image:win7-20231023-enlocale:en-usos:windows7-x64system
  • submitted
    12/11/2023, 15:35

General

  • Target

    webview_error.html

  • Size

    122B

  • MD5

    ae2a2ae9b611d16031478233a0dcb758

  • SHA1

    ff618df41e1c41e8a5e0a946ba2bc07b026f179e

  • SHA256

    a65e69fe5c448f5bbaf2c8a6f2ea2d4cd4afda007bf869b4c2d970de668128f4

  • SHA512

    b414d8d06cd8f508d44ba0912e6358cebb6abd3184dd809deafb425f68acb071f7aaa79431089596acef89db3fdbfc922083b8fa2aa4750ba14340826bcb4fb8

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\webview_error.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2904
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2904 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2620

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0498d8764418b3dd2afe90062e6c4ee7

    SHA1

    9c04431c09f18740662f3c4b804cbf863701709e

    SHA256

    45815e243c40b6cce44a12e608afc33d015edf7dc03827f5c4a84c5bd1c8c7c7

    SHA512

    1bb52ef3c30c34842883edbc32c840d59e4c4a375f1624430ab7b94c323a92cd743242a019bfad504ebc1c5905a4b87e760177b982b65f95b2eec9960320205c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6428235e391402f0ef6fbfbcd6155a89

    SHA1

    f331849c7d3e62704f29efb85e4955495f9c286d

    SHA256

    e8db1ed7aa36e3610c29fa1fbae051096209813d98382f95d235f2038ae09d20

    SHA512

    6d7e14944a940b5a5d5cbc99139cde4930218f4e6de4b95aa5c1cc78df5a52c107d1386019ec68bb4d0801590816451533226f35a273c8f1c6c1f779cdfd3a61

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ff2dd27ed6d2248a8c5b15e210b6416f

    SHA1

    244447218957072b343a8b0ce6b57446b539666e

    SHA256

    5d99955891b3c4d1ec334e6343367bf8ff043d3ca39d5af8a66fdff7e27767f3

    SHA512

    600ca9e21643ccaad049cac4e71e344faf00b23aeec2f5575fb52ebb8df3071f2c907a0efdf0dec88b02413a04646dd8e86c01a450d2ff4a4645058e4dfc9787

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9b90b885162849f0b41be56d9fb84cbf

    SHA1

    fb10724c81f8d666f77aa9c57c7c414bf4837f98

    SHA256

    cdb76980c5ce8fec0fadcaad179a349a899e7c3572f38b03f69871cbb6163353

    SHA512

    44e0116b7961de8fb6bb63961a4a24b10005a05946f6249c448f93c7bda8f0b5a42c202c53bdf1726b3817b860fe0a4490bc2d4d7417554adb414c5b201c62a2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9a9273edcb74baf73a94aa9706ee83b1

    SHA1

    bb0f8e5cebff065e0d2c3e4231c6305e6f1b4950

    SHA256

    8159fcdd965355b1230adaea7b046c2e8466aa2f67a46fe1aeb4802ac28f6279

    SHA512

    46272940dd0eba885db67808b3db195c6dddaf7ba61f4f416f0dd6ced896378d24d0051e149cf17bd35c271410176252c4d7973642f1f5db1636b7f35aa50b20

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6a5b0ab5f3ff36a908acbc612032964f

    SHA1

    078c72c0434f8565d66397a9ddee0d0aedcef465

    SHA256

    7621e9c1cb72e477aee8220d3c1b84714e10fca4988ed7a6a081ce164e90be8f

    SHA512

    b137212ea7043adbb984ec4327fd9f5b053cfbaf193793632ef8f874a3933aef32545a2efc4835e2d5fbdea30bd0a35bd683b4ac7d0c1e5aca380f01fd2c1927

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d49f8101497e3586b544c4041418acc2

    SHA1

    97731ac4e35a61a615eb87b58f65d40b71012c6f

    SHA256

    ea764b54f71a440a59ac6177bc15aa0240951102a37b0f93dbf1964498d319aa

    SHA512

    c360cf492287f8e66e68a5097a327e5e1422a328d7bb15642e689404de80885c451dbc68a20dd0f686be364fb8a957fb72a706731123ab6b542e563bc0131f68

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7548c9ffe25752932fd8c4e49f16c62c

    SHA1

    154a1e58d06f333ddc7541f6aaadc2265c1d0de4

    SHA256

    8db388ce4635c9b494609f234a6706ad08b7dcffc781267f7eb437a0a3292013

    SHA512

    43418f7066e0e3e3fa52701add625eb501c8c8f3489c7455e4cddbbfce5e3aedc261e0d3e2410a4e55c5a372e9dff4ae546821a42ef4b106c5baf699b8cf9800

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f6466062c133d56e48b8fe93a5255280

    SHA1

    8317739707ae447453da9c1122f945912fbbbbf1

    SHA256

    e900ca24feee63f7073aa39779e88bb30cbaa8363eedec1353370279c68852c6

    SHA512

    031e9f646a3870760c056c3d5e9733de850eac93091827561b6f322ca27bde2d4c6458f67e6b99233b782e18e83c5fb22d055aa04d261252052f9ba572ec7a16

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    163bcc6e4c159ade61e88ef56e051db2

    SHA1

    983c0c159853b79dea05c50e153de58574e71b39

    SHA256

    367ebc2803e07e7594f84fbf495531af0dd12aeed9fa29494d44257769b0cbbd

    SHA512

    61130aaffc7c6ea4f2affc3e030f8643173141eb5f1cbfa7180fb8fe0e5731a9ea43da27a2678afd65c007d2de01bf9a19948b9badaba49764fa8b01255f863c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a94872b3f67292a97b1b9c71ea6b1115

    SHA1

    ed7e7041e83264422bf2a4e785e2a599fa3a4607

    SHA256

    32f2cb31c96b402f3780eacca04acc328e611f0cff85bd88337622e168f6d560

    SHA512

    154ef7ad31772e42638dbba0668ff5b0f3b84aa6a2b623f5ac13a83cc49653b66cc2051963cf5a1bf6e0b2cde06b3bf6f0e83716791e3d04f47b338106225211

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1f59a0fa6f498962b59deb9d23afd6c1

    SHA1

    ea60c23f6dec259d70dad59a922ba3539ca160b8

    SHA256

    432ff94bb6b080fab4e73baa7943a17e5b82db4a1a317070676846419973210a

    SHA512

    fcfc36aa5905ea1a21e58924a06369718667ff16900b281db2c325bf3ac0f9cc44aa6255dca0f089f0953202be243e8d1c41255a0a414fbc6b7305be65e0aa14

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e9e82fd540a1769fe1bea05943b07c3c

    SHA1

    c32537540c08e8d4a909b002c316f106f4b251d8

    SHA256

    06b5a784e8907a1eae66c3fb87fc1471a06bdbf54d0f9cbbfbd7b97bf63bd12d

    SHA512

    961142ab9541042be3e0ee615d6c3b85da30488e91f50b95caaf3b65417f9a842b552f102481e2ceff901673dc63354b10020f0f756917fce6ef9e83ba502e4e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    45584fb38b9928b1c29fcb575f6e0cda

    SHA1

    4d5421d96859a852bb281bbf4e29648eb79f12bb

    SHA256

    adeb60171c79fddd09e9a4d250a9c2ad45195a1504240bf232e88f4c4fb185d4

    SHA512

    f47498cf3f4dbc15dd0d4667f799084bea897ef6e68df209b33f3125c951947d97d099174ba4f19fe2ea2291945ae000ccf0c61c924c042f7defd7fad2bc55fd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d6db373051590bb381019098e429083e

    SHA1

    c90a7d32e518dd14cbf3415f6ebfd4545b2271e8

    SHA256

    4193d31b3caf88addc7230451312cd488f1cbb4ec6a0d80f61bac5132deaab72

    SHA512

    11db219fb4cd0a918627f91fe09b1894fd36f3b54fd253e3d9366e7c0a884bced1b3cf870459c05ed085fff540f4432cedbf2ca31c9ff89c76a9902fca01a4d9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a0d5a2ab272a3f520e18c6959916cf2c

    SHA1

    0eff5c5d698a0bf50030face54c78162df3b97da

    SHA256

    156c44a4fda84680cf98af8f59025df0f0ec5791b4696ce4fc65e1859df61cea

    SHA512

    23c1ddcf56bb66bcf211d2a02663441c9d4cfce5595e2ba968cf6078b0fddcf7a95889fa2bb1b2b814ebb9b32e606fdaed2abfb42774159eb9e07810a7adffe1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    def99afc530a986072e47b52b74bb2ea

    SHA1

    3d7db79dfa08f5b34611b0e7a520244db7054b7c

    SHA256

    df30abe25d7bde16699118747af0ce6e1d92bf7031ccb7a94f7451d76067a9a3

    SHA512

    f499952ee62a7d27ff8d7a562a7c6387cf24cc27c8c5f33172326b6aa353f148944372b4d7148cd1915fc2e272e95636d701b3b23da6145df4284cd0dd908351

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ff6c6bb66e828f9bb50153ed1cd59bcf

    SHA1

    2b2123ea6ec7e0d38e09ddf7aaefea75abe38b5f

    SHA256

    51f8b0d999c87e0ee5bb7befa5bea35bf6ec14b0e994135be93f819dcfc747c2

    SHA512

    058db356e2e21f16c8063f6cf077556cbba1cd8a543d8ff2ca7900d57f85b160d358e797cb5432b42b43f073d46a55f0b02ea6d603fbf28e8d1efcdc4c590866

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d3bf3ffbfb30cebd242861c9ef3e60ec

    SHA1

    21e3aa961a6082f79de29ff1dd0996f1bd3a6e51

    SHA256

    4467f3b3b31f2bd71c86dc9a92dbe80c2c2791e2aa70091cac15f4257fbec2c7

    SHA512

    c364fa4c79dfa04696acbef3d9e5c3010f410ebeadd9d0ea4376cd7ec286f9ad6023d585aa523d9ab5b2ff53ffd3dec494613c0d46e382975db9e647c60a98c1

  • C:\Users\Admin\AppData\Local\Temp\CabB637.tmp

    Filesize

    61KB

    MD5

    f3441b8572aae8801c04f3060b550443

    SHA1

    4ef0a35436125d6821831ef36c28ffaf196cda15

    SHA256

    6720349e7d82ee0a8e73920d3c2b7cb2912d9fcf2edb6fd98f2f12820158b0bf

    SHA512

    5ba01ba421b50030e380ae6bbcd2f681f2a91947fe7fedb3c8e6b5f24dce9517abf57b1cf26cc6078d4bb53bde6fcfb2561591337c841f8f2cb121a3d71661b9

  • C:\Users\Admin\AppData\Local\Temp\TarB6A8.tmp

    Filesize

    163KB

    MD5

    9441737383d21192400eca82fda910ec

    SHA1

    725e0d606a4fc9ba44aa8ffde65bed15e65367e4

    SHA256

    bc3a6e84e41faeb57e7c21aa3b60c2a64777107009727c5b7c0ed8fe658909e5

    SHA512

    7608dd653a66cd364392a78d4711b48d1707768d36996e4d38871c6843b5714e1d7da4b4cc6db969e6000cfa182bcb74216ef6823d1063f036fc5c3413fb8dcf