Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    134s
  • max time network
    138s
  • platform
    windows7_x64
  • resource
    win7-20231020-en
  • resource tags

    arch:x64arch:x86image:win7-20231020-enlocale:en-usos:windows7-x64system
  • submitted
    13/11/2023, 16:34

General

  • Target

    index.html

  • Size

    7KB

  • MD5

    8880f31ff9b56aab50b99993bc188717

  • SHA1

    09bf87a1a3d2aff2e9add4570f6259b84d62ee81

  • SHA256

    53c620f8215404096e6d71a91a1cc48bd6b0c42c242a2debcc4b36009a63b26e

  • SHA512

    c36739760ba13294815140e611f8e5dc7bf78294ed269994e04147bab252b77a6c8b283b0c3a5c9b9d998d312910b8257d457a4face7d4e8f22687f347eec1a2

  • SSDEEP

    96:O4TsnHF9oIPxrNiEpJFSFwtUZbWHtyp6KpcNFYaImafylmf2wJ:O0snHXxrNLniNit8vp6FTvafylmf2Q

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\index.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2880
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2880 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2428

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c2130a92338359df1f82a74351a2c39b

    SHA1

    9b8612b4b89f076d948a28dfe6c3a59043f521a0

    SHA256

    b1df6717b22564495df57c458524410105f9e2cc7f4850a8e099ab4d8e3e1312

    SHA512

    3199300a9ebbd83f7a00ec303a78914a7c0f0dd53e9d2496975719e09473bf4ae18266526c03a6300885d9762e93c24e25667925260cde8de26858009d59b933

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1b230fbdfc65d32df2ca465e0d92738d

    SHA1

    8fdfd73cb777760a70d3f8ef001dc669a0869cb5

    SHA256

    dd73a49adf1e853adb2f6933cd2f6cda34c66122d6594f34cf9d2db92db54a8b

    SHA512

    74dd202afe0b13c396035c6abb03a70054acbb71c46c31881401222d9f6fc39ac96cc12b0db41faf03c9e05d1bcd81271c14326110c998d8df30ccfcaea93903

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2f96c27c4acae34eeac80d19dbf0fe15

    SHA1

    d07bebf1329ba39d04716484e74c927de671d78c

    SHA256

    dd031e58618281135f89dc5b86a5c9855264f8a53fda3c970c48600641f4bb81

    SHA512

    19b23ec2a512defa91c82cbed4f70612b28d7bda3f91c45766c6fd8b63ede58bea9290364702d76c8bacbf2ae86a38dd68c8d7e42d58d6fac7ce8dad8358401a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7f3db92b0d1f2af5d02eb67c959de9f1

    SHA1

    5580552e6225d848d1667955e51d66ec591dc6ea

    SHA256

    fdc16956241aa653f1dde29bcad176320956db69090da1f4a1e80f5fb03ef3c1

    SHA512

    385e15ef09c88f9d7e77d5f649206f80426d765012cc1b191ae6c0a2d48bb623ba5f03e4f64f1dd6d8f0d3ece3b8235402b26d79733d21bc8464db3874d649dd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    749e317e9fc8bb303a5fb29f0c55be8b

    SHA1

    eb9dcdd9acab6ed1318d6b9c35b4abad7cbf5ecd

    SHA256

    529727eeeffdc02c8fd05f6751748a84d59215ad92df55c370b2bfcdececfc94

    SHA512

    330e9910bd1334b48c19e6abe0f097d35dcb08c6d2d18c5f7c8cec28ba168803ff118cb34b7953e390ab77c74f01c53fc02ecbcdf3cf9dddeb7aed6fa16bdc74

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    184c865e0b45746e1d00714b9c5cd9e8

    SHA1

    08b5f7f43899ad2287fe35daf6f1c9f9e48d061b

    SHA256

    7a5b1f62c0b85bfbae23c76807ac5f4f81b22dfd964c806b24f350a405b6ec53

    SHA512

    eb8a30a10624521deb9527d16d9b4b304f3aec3936d5be589f4d52b23fa34b18f678fde8f3ba2b5efb8b77fb6971514b458e9b164d0eb6b99f4003630550233d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    95be06197cd44e9ca6e9ae9d474e34be

    SHA1

    1061f2ec287daf3dd39500eafb6ce2c9edea4c44

    SHA256

    62d68f7845d48746d69900ee7066930665d7c6e257530e47a9e5c711cbe7d4a5

    SHA512

    b762596c5a3e5cbabf45fb438d2f58728f840eef44a05a19aacd31e73d143eccd089d4f15ddc6dac0ab98ce8d1a25c09615eb7864ec3404e8e2bed38e061f612

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0ec6c8cc0924b0d29d568c648c5e9f4d

    SHA1

    27857438fb35b4212c9a4f8b76d6331d1abfeaf3

    SHA256

    88db2fb51bc5b978b4d8bfbac26c30c6ce46948040d45e11472dca498b0a518f

    SHA512

    d365e3fe6f1108d3803895b36bcb73744d4022f40cdc214683a4eb22c5c47729d7969c7520faae8913574d098ce8622550cc4a09af01a1e077eeef7ba20cbc6c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f2fe19c2f150439ff890ee1de79c6f2a

    SHA1

    3f88cebd2086a025a8603addd1e5d52305fb25c4

    SHA256

    cec4b00e27d246db46989c2441156400067643efbb47c5e57ee743a0f1b20174

    SHA512

    99cacab9d59d36fd3bf05b026fbcba2db1d19cc7a0ec5da234671abe3c498954281108dd3ca5bd18f4a3424c35719cf539c3607f31d3d037b6cb1df70aae9e50

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    91182ccdbedcc568cb00a5e4122047da

    SHA1

    ca1c7135d257b202e0587b1515d1734c2688ba12

    SHA256

    f3e1476489e935fe58e5ed08accd71606f1b95fc575b893bc1308160e2c052bf

    SHA512

    d2778d5f032855e4a583108888a1052d04e15271dd71e3763566e3049d09b20a9a09dc4c7decc2522f4026b469e9364b15974047a688d607aae627fb3a643e17

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2d0ed7aedae42c3ead6ffc807c017eeb

    SHA1

    fc0ac2496458852db8f84562d24b4efb3578fae9

    SHA256

    0a5fdc9949b5f8fb3e02332ecab70bf0677a4d40e6fb91a36fa4c52653a6c74b

    SHA512

    cf0c6c26c309b5124066167d6c7779f016ed6dc17c57d26d38cb2ba0a2c0d6c09ad678cf137f98eb3dce600ed4934dee21edf0e94703e3cbeaab03de8be86b22

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    21ec2d261df85a5acd7ee28b5492c187

    SHA1

    8dcfb46daac7d7dfc5afc099780519def88b6af7

    SHA256

    9ca40d529074a3e0484d09c1a558c2ccecfa76aabf7991e382f1cab98cfe1bda

    SHA512

    4ebf863c70603141af4d1e0132cda72552477dd02b7115f669d873637d3e0ebcddf56f9f1a4b766bc7a7ff076e56e76290d0b66d90c33fc607470b3347874efb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b38f2d9faefbdef7fe2fbbc43e8ad948

    SHA1

    a3849c916aec8b5f9b3a96f220f70d9a369eaaf1

    SHA256

    04fe54eee9e3d3d8a12b8b225f987295d6be58b0e352eadd05bd6312fd0d3f44

    SHA512

    c09cc3aebcc071f06637d207f6420643fa714a6250d15e87ed13dbe121cf826462266f84d64858057d2a799fd5c8fbf4e88bba2db0f9ec3103a5b4a6bd02ee2b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4c5374fea860a303fbd002ba05a65542

    SHA1

    065bdeb73f86e1244dacdc294a75f51345ffebef

    SHA256

    3f5f00fbc17b962b4cb8ddc15f0094614688678bbea52f6a454e728563520ff7

    SHA512

    96064fa0330b0e57db3089a27e8043f0fa0806306934975c40c2fd514f54773f0d35939e2a499bcd717de12f1e29b0b914f24068be47bd55411636ae41f2de5c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5b81cab71387ea5f88cbb8d4e32b2e42

    SHA1

    111307fb556c66cc0ee059eb03add130c74d04ac

    SHA256

    b6a91873bd62fc515bd44fd2d3386d116c79f027651758658af7eb7ce4fba16f

    SHA512

    607cdcf3c8cb637e2f50b70fa0fdb41c5363f2c9b5e96b860ae65578d00a3f2e1d87299d8b0cad096df56dab45fdcad7787fbc99a7c1aac8cc26714cdb8db3bc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9f7a9e51f347f8d6f6fc7e0403f6ffab

    SHA1

    594010f595a4b78d53cb12338426c191103dfcb6

    SHA256

    8791d13a2be74cf03a3fd56cdef080dfe359b46d7392b85a1871a3aa462efff7

    SHA512

    29371be31607959df82420bf6c705d6593c1041be58050314a8afc09543a596192b9c368378b1bb9d9de17b4bc8118a7bd7af1056bbdf0bd74054a79ad801725

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f03d9d3cb3e273775848fe703b65439a

    SHA1

    268e93690005b9acc26d9c387ff1dfb2df9baf4e

    SHA256

    e78c646801c08e1377dbdf3b818e1bb42488252f0f9896acfeae9b1cd3f792e2

    SHA512

    9a12dd49e154a016b5464d83df7b0a251e310e79a8d4f21fbe7f5c67ee37ba748a5d1db177f1e36d829f6b749a0fbd9e5d5fc8edafd68831869ede2fe5d8d54d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    73dc671170851522382ed0cf02a0638c

    SHA1

    2c7da7ed0e3bd866c9f193531538ff5b494d23b7

    SHA256

    7fe686f79ddac36728ba6e2c692fdb2a438d78b44dde4a28ca6c5f30213e318d

    SHA512

    5882e0a4c2bd511850b7b2e921ab36c9963a91a96a942137263bb88c1d08bfc36035ea6c162b9fe3733aeb89d89613ab249dcbd8e6b973175d480ac6a1259821

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4386764af44be765e2f29acea943f066

    SHA1

    802c2b08d348e0d245a0dd38ac10b98fb94f2626

    SHA256

    928cfed29fcd7c62e2c91404360b4d0beca7a2cbc60269381db01be6719434eb

    SHA512

    0e95f27081b7e24baa5e30e23d9213fc3eef08bd5e198fd59fc5287d126892b8fbeb95b108bfee3f56589add236e5f5519beeadd0591bba957b35ae94a1c50f6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e25466132f1ff00f0a74aa9d9181fab8

    SHA1

    86c13fc52ebd45fccb1ffe552a035d24bce3b42e

    SHA256

    5712d45ba3221b486b762c22787558a64086e30a9f1009524991f85e8677aed3

    SHA512

    b66b9ee34d05f8ffad22c6d3f9b2a9f6bd979404c83e4e7e459dbcc7596e337cadab9a7c9c1c6888a76f08b3a2e4c1d376934989cb4122fbc7bdbd5f40c89f58

  • C:\Users\Admin\AppData\Local\Temp\Cab543A.tmp

    Filesize

    61KB

    MD5

    f3441b8572aae8801c04f3060b550443

    SHA1

    4ef0a35436125d6821831ef36c28ffaf196cda15

    SHA256

    6720349e7d82ee0a8e73920d3c2b7cb2912d9fcf2edb6fd98f2f12820158b0bf

    SHA512

    5ba01ba421b50030e380ae6bbcd2f681f2a91947fe7fedb3c8e6b5f24dce9517abf57b1cf26cc6078d4bb53bde6fcfb2561591337c841f8f2cb121a3d71661b9

  • C:\Users\Admin\AppData\Local\Temp\Tar7B59.tmp

    Filesize

    163KB

    MD5

    9441737383d21192400eca82fda910ec

    SHA1

    725e0d606a4fc9ba44aa8ffde65bed15e65367e4

    SHA256

    bc3a6e84e41faeb57e7c21aa3b60c2a64777107009727c5b7c0ed8fe658909e5

    SHA512

    7608dd653a66cd364392a78d4711b48d1707768d36996e4d38871c6843b5714e1d7da4b4cc6db969e6000cfa182bcb74216ef6823d1063f036fc5c3413fb8dcf