Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    120s
  • max time network
    160s
  • platform
    windows7_x64
  • resource
    win7-20231023-en
  • resource tags

    arch:x64arch:x86image:win7-20231023-enlocale:en-usos:windows7-x64system
  • submitted
    28/11/2023, 22:02

General

  • Target

    policy_content.html

  • Size

    32KB

  • MD5

    a1356a5adbc941d1ed5dac6d201752a1

  • SHA1

    90aca8bb6b2cfb2a6b06ff25614534b8d399de10

  • SHA256

    1b6d7320b92cfaefe70ffe794f80aac6c54f677f068cb4153d12374f07b0f220

  • SHA512

    1019868d41e534849759ba59e41fd7aa3ee34641fa2c48f30db339693f1819812f0ab60af346c16e0f36253168587ebf931fe169b4c3ed200bf90f124555beb8

  • SSDEEP

    768:xDUPeD0UqI4+9azTqSRCc86hffDGBLo53EoOqyhhkqkC9:BUP+0UqI9J6CgOhIC9

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\policy_content.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:948
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:948 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2644

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    add29eee6b0f4777778b959de69d65cf

    SHA1

    4afabd44aea624cbf4672a805de98a99c71aeb08

    SHA256

    48bb7a1d74d6695e5136cf19047854638978043da5982b5e5c49eedf3db5740b

    SHA512

    f634d98709e90beee15e12abca85104327d3c2556a79200da9ae2acccd2cf8742b5647ca6171e500dc88395a74b812b2a81f76753415845fae527200a1eeab01

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f7ce7ba1e08b09f51de0f0265d35fabf

    SHA1

    4827cdd53ab15375f3f03042767f6d7160bbe6b1

    SHA256

    9d4b4ff682e50e10d31dc60a6255cda3de49d8306c060ce4e10912fb142cdc3c

    SHA512

    97e89c0a5ed538a2d58a504475e6ad5bf1265af20b044ed52fc64153030bfa6df7cd32de39d4fce422e73015ecfe683ec3431b80ddecd6ece32e55da47db4e9d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fc4c40b895a41a6cf97358cda1c5468d

    SHA1

    bcbb19cdf8bc9d27a3d60e09ff33c4172be2090e

    SHA256

    d93b358f855f4b98119083453925241fd40c1e7f9c5b9c56441e0cf94d1fb13b

    SHA512

    025b5ca6b68aa85e4429f51ab587a6ea587bcaa40e7359bb2d46cb75feababff56bd8120b5b56f856f2543720d684da92c7bb089756fce593ffab573293ae9dc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4e2c53d2a8a2931fdd55024cb3ecb2a0

    SHA1

    0ad40fc5b6c2acd4ba0f6d0924ec983a53ea2ba8

    SHA256

    c80686e7e00999f60edc2ecb59cb893f94a3d5ca745cf6ec83f4f33e55f509c8

    SHA512

    42741397d5a678ae7386d1a1088ce8ed61097dec7f49d881e7a924f96116f47dce2805e0385f7e558f34228eba0bfe8a8eaf2985ae5bdfff2018554a6e33b455

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    50e7561f418a6ce930c3f26e1927aa9b

    SHA1

    b5bb2c51c2a1fa0b816224bfd5e399d9881d233c

    SHA256

    7ced18edcb79bd94c2e7f0900a90eb90368d9e4f082c35502f4b50ef6a009c92

    SHA512

    02655c42b8890ae8f859df4c9e835fc113cc55155fb53599ff7090e7e7c105e3b623ac61e867af58a0a6bd0c93a9b49a6a0c03c77fc602a2163250791d533b7f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6706315d0d44fe2111bdc8ae1e92780f

    SHA1

    958d555e654149845a9433935b5e0e37dc4eb7b3

    SHA256

    9733a544b5b9195f2872519606adeba2967ccca4eb33acd9a62bce1911edcb84

    SHA512

    57b1fd9666ee26b099d77a2ad8ea74e57384f540b3c5c777ab0a14af3af214b612424e4cf29b61b01467b7b913ff917ef2660e42b6d29af1904e665183f2df4e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d03cf3fac90779cc783bd538611ab8bc

    SHA1

    a62870d8b48e5b4702d01117a387fdf37d4eeb7d

    SHA256

    ba04c3d4df9c9eb6c1048ebf0e31c81081f0d5ff92a97b6c67264a6af70a6271

    SHA512

    f19c0ddcd58417dac3114999c916bd4f1cdf28a4c433cacccfa4f133b6a4ffabea4a82b3021c703156137ea2989e24012f2014c9be2329bb48a5ef3ca847cfaf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e33864d6748bd8c84441c57b380b0c6b

    SHA1

    0cefa0f376b503406db403aecbb54051d0c35d55

    SHA256

    6088f40fb60d2e715cdc87b0c10de94f9aeef0fefb48008fb62f0a38d3a553bd

    SHA512

    6580e4923af4217b6ef07de914178defa12c2f301f36c97b81a86ebf6b350258738ebaeae1d9ca12ccae9c974eeaef8780b0ffe361592e98a746823a0b0e51ca

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    31bcbaa1eb09c8aec420e185be7ba761

    SHA1

    d6a85a2a0cc7e80342ab1f77aa792417567ea339

    SHA256

    e4f3b7e50fb5a81c396de272032ac7a4cfae9abc57d66afb0019cc71cd921f60

    SHA512

    287840f939d103a6881aee879793f3d852e601e9f38d51d0b81c7551a080a08311ba2abd9fb1326eeeacf03494fad2ddbc0f5cc1e1754e1356eb7f600fc00b64

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5a41993f5b4defb9c308fbf1e92e6243

    SHA1

    211a0f316f799d5335ed6785fd9c301d929d76e9

    SHA256

    747a14433b1cabd25002d235f6d3af5ef698285914908f236dad0818c79ce823

    SHA512

    18a6936160bd38b174b948b6749175cb5aba061587550d2276b01e1f3a3244c1eb7001587b0cadba0388ce2ab0b1ae06b41755d2cede668723d600f7cacebf16

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7bc369bf64bbe86663bf32d183c3294d

    SHA1

    d288bac032d52a675e1ebb32077baaf14283d768

    SHA256

    415e016d16373670a965d29589aeae5bce8ee180e243ac944df45e0b9449f9bc

    SHA512

    340e2ced6b9073f8a44ea78c72466f7c8bc1a6ed58124959b1a328006687065950106af404ea777fe64c37ddb096cdac0bc230d9e2f656abfd7d290fa93e6152

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4124c5d031d344f26a09cc99675300b9

    SHA1

    8ad39453bf819d50c031fceb49501685c19cdd81

    SHA256

    9bf926bd2a791966d1838fb01f5fefbecb95062af0c50283700da93e70c85ac3

    SHA512

    3f526ff79e9328cbd0ed6300642020e3388a110fa73f5cce6154825c05c5c194f7a3f6b6fe44faa2c0acb93b32d0179c27e1c6cf028d9a709e408d57a54aae94

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3774490d38562226b304b8ea3b5a23ae

    SHA1

    1d033bcfa229fd319757e0dc0089f0a80a61a3c0

    SHA256

    eda77901c0a9c8993f769797dceb7b885f51a80febae764fd8a0ffd405e09f15

    SHA512

    095bc9d5bf345c095410c857b1b429979f35d51e03ad12fa026811639065ab8ec1aecc499a442ac1e243d11b81bb054bdf50632f799c28543dbcfe4e63759ab7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9ee20ce8db0791a8f9dc405dfc91ccfa

    SHA1

    ba4b5bc37440d68aac00df9c421c2b2e8ca2dc1e

    SHA256

    c05db84f34871c3528feb4404de0ea61ddfcba40461e0d7fe583d978452def25

    SHA512

    2d769af8a3e3be5e042606af5bfcecfcc03f237bbb882452d83425682fe2b7c925d63571b91d84ff49942814f005ba5471ef414856ed9a1cf53318abf49440ae

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    daf99144eca19446c937ac970e47acb1

    SHA1

    07824d77a4cef901ec8bd0584fbbbf35ea841d89

    SHA256

    abee628330beb436823a2b5495ca941499db84c578290da9e1e7e2c0376c2d41

    SHA512

    4ff278d23178fb6d1ad58f40585126d8510394ee35dedf17789523ce66aaaba340365cc08b22a2d3185ba400d956f0eb94da6b03d711adb85040bbb02cf2351a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    de7ecc483c14c96412a27b521154ac5f

    SHA1

    0324737d2a88ab9f9d7237a7b936a8efdc0e78f3

    SHA256

    84bbdb230315b67f8937eb899c19b67fc7f8d96cac9beb55105683b2ab609b45

    SHA512

    627f7a069d54dbcfdfdb048eb7f2f60740fd3820d1a0147c58fbb94f9f30088f43ae74f770ff26497858b5b05db4c0578f3492eebdc1515195d0c11c153b11a4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    15cc7f015bb31bb71deaa0bbcb1839e6

    SHA1

    db1531abe0a74991c8568f624a530e903d9b4958

    SHA256

    d8bb10a361bb8c35e8f3424a16caa273fe91896b19a9cbb7b5df4134acbac01d

    SHA512

    610eea6047f80645a0349751271e1490ddd8d55058abd40ff055248412ec536190ab5283b71cf5caf7972280e4793a6513cd2e8db9cf6f3682c4135e3be97f6e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    968b3e49c9320e13e34f4bf43a3d8b3a

    SHA1

    a139cd9912e4a56c3c6e5c13e22b52a8eaa9f5eb

    SHA256

    3fe612d1d33479f00de491fde8c81641c82499e79c95bb10193d48b560c1f10e

    SHA512

    a7c95314dec10d6a631cfd4c044e5d80a4997c0ceb0bfc4e9ba6ef682cc472029f868fa34fba681bbd8604501e5e09063ed72e9e1dda20a71226861eca2c098e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a0f0c1ce10fc4d2abae69d75bdc3ec0f

    SHA1

    095132a6c597e12e1f3db8a27967abc15f52730e

    SHA256

    54c3fd07ad0e539fd8457917d1baf4a51d79250641a2127f4bd378a9565bcd85

    SHA512

    7a42b6b3e3ef159b7811eca4627dfc046ee61b0b8ebd81e17698da3b6cbf69111942b4419f51c9a578fa1b75d53cd8ef0ba6ca55afa72a7c902a0ef41e0faf87

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cd6fdecee0d8a3dc9bfb83224e69094b

    SHA1

    4278306212823c392930d826c019dc0d2c78ebe4

    SHA256

    68fed4ff1bffdb45e5164d8291d2644e82eee5d8f08daa03e97ed1bad0aaf10e

    SHA512

    999e82bdaead1673b2078f3737e5dc7ac4983caf185ec44f2c8d61d3418c78884fb3cee77b262648c75a583e50ac0fa40386bb454060259272dbc2b7c5d56bac

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    83dd327053ed015ff979c8dd75288225

    SHA1

    1e350f7753c00f56075e0d91df8c8031d205655e

    SHA256

    33f570bdac1f62cf1509478535ab5a838ecb1197798e513bf130244e337d74a8

    SHA512

    108811f120afda8ee23bf7309fe1a248a1e0a7186386a5f2df3da538fb6a11b20e28175bd5ac8ec056ecc2255dc6d055e80dda29a3905dd510e5defc33c4277d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4fb0ce929d5a79b1e81b5adb2ab9647f

    SHA1

    7eea59b88b24f8b78c80e3b841d83cf589f13c9c

    SHA256

    092adfe32cbf7d5eb69b967c7bb53e99cb8a3371cf09f93c85daed89b8fbc2dd

    SHA512

    90ab0b69f9e09c3d4e18fcb52a7982721ed0c1595b9898002ff3ebfe96e49ba6e6a0329e6bbbd2e78feede283c8008449edf67dd29f28c2112127c86b0fd1df6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    57e810b727771f788f87b13bb8180518

    SHA1

    cedf9b76502035187d6af85b57ebef013f006531

    SHA256

    3ea107b9ef908392c006f91c68d8006534f95772ae50276436cc62d9fc20bee1

    SHA512

    cce6e0e26a80035d633fda121e33866c322f4f131830fe23565ab1f9a93a1ef003d6bba9bb988096d6469d9b2ceb0ff77d3659a8a1cdd5e372b3625cd9473218

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ad7838226422a02fc06ec995cf8258d4

    SHA1

    5834e4de11f1931500967db81b5108bedd24bb8d

    SHA256

    e5b1dbd55fe366acfd9dcb944e5d418821617f91fb5af15033a52f790c91998a

    SHA512

    c06f099ccc82d7043e21fffb983f4f8ffb1fc0dcf5e5b15291261429065476fc59d4b131eb478b3f9b418b5614c0a88dffe4489f6904b43dd7bd76071a1c1790

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    eaeffc316816e658b2a0558fcb1b9348

    SHA1

    6033b5a9e70cf4d21659ed3343368d1fd043c179

    SHA256

    a3dbceeba9f437a2a34c7205da6cd263a48fda578a35c9b81966ec87658515d4

    SHA512

    24003b74beb45caecd56aea1fddb314e581cb8342e00728ce9746b74ab072c2025ea47ce8f9e49d09acd4dc5d53a5da9ec836ced91aabebcd307a6a9f1f951fb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    145137d3490703a55bd2716cbcb33cea

    SHA1

    08d39dc1fe81e9f31d71a6a195859fce7536446f

    SHA256

    55c9d634f13bcfa2a50c8652c3db3273a1d6b3671ee7a822591e50fc756879b5

    SHA512

    69b8dcaef8e32a717dd6cdf1514c476a32eabdee1c9cd5c5d34017e6d7d147bfb37a7633685efb1b299616235e6a1d22142faec6936f4f03a2ceb918a0cea146

  • C:\Users\Admin\AppData\Local\Temp\CabD6A2.tmp

    Filesize

    61KB

    MD5

    f3441b8572aae8801c04f3060b550443

    SHA1

    4ef0a35436125d6821831ef36c28ffaf196cda15

    SHA256

    6720349e7d82ee0a8e73920d3c2b7cb2912d9fcf2edb6fd98f2f12820158b0bf

    SHA512

    5ba01ba421b50030e380ae6bbcd2f681f2a91947fe7fedb3c8e6b5f24dce9517abf57b1cf26cc6078d4bb53bde6fcfb2561591337c841f8f2cb121a3d71661b9

  • C:\Users\Admin\AppData\Local\Temp\TarD6F3.tmp

    Filesize

    163KB

    MD5

    9441737383d21192400eca82fda910ec

    SHA1

    725e0d606a4fc9ba44aa8ffde65bed15e65367e4

    SHA256

    bc3a6e84e41faeb57e7c21aa3b60c2a64777107009727c5b7c0ed8fe658909e5

    SHA512

    7608dd653a66cd364392a78d4711b48d1707768d36996e4d38871c6843b5714e1d7da4b4cc6db969e6000cfa182bcb74216ef6823d1063f036fc5c3413fb8dcf