Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    119s
  • max time network
    130s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    19/12/2023, 11:25

General

  • Target

    13896c36881067ef7926eb28ced70479.html

  • Size

    82KB

  • MD5

    13896c36881067ef7926eb28ced70479

  • SHA1

    bcbdae699d56c14e5b690b454d59a623c9c532eb

  • SHA256

    ab149b5195956b2d58cb4fe8ba0991b9683faf13c01ca633b7d8835383b6137e

  • SHA512

    af2dd972e697595e83a519332fd06f90e30608a8418cebd6a8dfefc4b94b66bd77e2992e0f716741a7f441cc15f355915d80c3d3bbd705ae68f16b9cabb122c8

  • SSDEEP

    768:Cms+VhDHiTbszg9/69GQR4QXAp+NAu3o/WUL1pj5AgceWnGAgdQ/V:s+LHiWg9QR4p+NAbW2mgPD3dQ/V

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\13896c36881067ef7926eb28ced70479.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2236
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2236 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2676

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\6BADA8974A10C4BD62CC921D13E43B18_28DEA62A0AE77228DD387E155AD0BA27

    Filesize

    1KB

    MD5

    1b85d099da4c3504a326fabe28cd6440

    SHA1

    5d31c38dc1c9f4c274c228e17493341f8c223dea

    SHA256

    c13670b269b48759f57a5b91030c8533baaf8e6b0d270ff8dcea01698230036d

    SHA512

    74918ff1dfd9884d29b647291f9cc7f7646a6573d4d5c2e30bbfb49d01afb32465b059a5119e4130ce7d192c8f53faa9cfb92b3854cac9062d14304a860d04b4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\6BADA8974A10C4BD62CC921D13E43B18_28DEA62A0AE77228DD387E155AD0BA27

    Filesize

    408B

    MD5

    a46a3b880fe58f8ffcc49d495f9ff637

    SHA1

    f33cc55b3ce8c6817e4bd30b8c5a7e235379ee35

    SHA256

    0e0b1d115c31398d2eccfb9af00dbcd4e0ea52fa013eea60d4ea5a4b286cd697

    SHA512

    120b0ef7b735b97f90d960e48505cd3c6dbb52665357a0166ed72fdb80c698a3bf5956423fa80dcf25461cb9c22f64fbe62000ef451b5957ae07f26a017f75c9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\6BADA8974A10C4BD62CC921D13E43B18_28DEA62A0AE77228DD387E155AD0BA27

    Filesize

    408B

    MD5

    b85cceb4c951097e425fd24232baeb62

    SHA1

    9dff93b6e58664f900eebb4b18aaa98cf4027456

    SHA256

    81254633fa21808be81eb70b02432a6fa8dd49df47375aeb6ea7546857c71ab5

    SHA512

    7ef83a9ecaad6456d28ec6b6a46d4fffe169a8cfe85e469fb5a90ed1337e24239a9486cb01364d85d736bfa9bd5a2ff411a7d345afe24cda777fd20c44a656f1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    579b4b970b5db842c096e761b853aa1e

    SHA1

    5a00813f51ba88cae4f69580c3bed54d1cf8e12e

    SHA256

    64eb7537d137c17840d8fa33b0cf4d02226c03f25647b4a1450e85f07128f43f

    SHA512

    d687a05a8c4cd5e09bf144a7e5241aaddb1ad9ee22199c694af01ef6b90d4ca2f7e6a65db2d3f0433cae855f3b20f279cdd0e3a4b5a71334104be6d919754a2d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    60634c1c26c69364b3df0a4ab19e6fa7

    SHA1

    00c3799137229237bdb06ba4abe2e9001495b330

    SHA256

    89e00ca27e91745e43a74ed8ae6a44338fffe22a87a14944f8d0ee1c245a7ccc

    SHA512

    e45dfeafcf05e482fd56a0521c2f8894578a2fcd16e1abb6111fb8ab84f503e494f2bdda48e45db7d598e7b354ce60512dda23f72cce9e6ebbc4d34ec6be968c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    748fff928b4de6fdb3662ad83a2b94a8

    SHA1

    bfe421aaf56706ccaa1156488ce6266c4e007cfb

    SHA256

    4c652f1243f95fe7d0afe5e1b0d3a4e462c0ddf5105282a298c5a5c367951b1e

    SHA512

    995564406f3becf7e4919bea03ae51a532ad2f2b88238f0f96995e625f9338a327e2d7d6f998b38558577882b3c2795ca70e9f286831094803ecc27f4e30d75c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a7c533ed6b755c78bea5b34e344c1c02

    SHA1

    aaf58414cb17ff5d286c3778270115a0b20b893d

    SHA256

    268ea2a5a9a2fbd960713074cc37f8709a6c56def2dc1e5ee1a1539b8e45f5ff

    SHA512

    016289777d08caf17718e6f6941c1ecbd50cdf511a14004fa348be9c0731d28956ea122c64c6d7275a29379de5fdf1d206bd323ccbbb14c2f2c222bff4bd4f5b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    64021d697eac3f64937854fe0b9f8eea

    SHA1

    d9867600d36162f284607c0fa0bda38a80dab668

    SHA256

    ba77144209124f77959c7d0467f624dae26b33f18c32e0f65cafeb6f2137aa0f

    SHA512

    971eebb4863da064c3d6085555b51656e7fe116ea5d20582a976deb1072676d88beb2f7b10b0dec4393280d684e87b3cdac47d1b4eb796a227dda864135a4cd5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    08db3a7f16baa6f3d65047adf64e62fc

    SHA1

    5bec0a896681483b39a0b220eb9083e53188ebed

    SHA256

    3eba507c80544092630239dd235e83248c08e5027ab4da6d06527f7f90bad1fb

    SHA512

    a71739c31c0995f559ecb3628b4103ae4e90628a9976456df8a04e4f55d83b5a4ba8304cf1a159f1ed31bc8024c5c77e47d5df47e887a2dde022ebac26c935c4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d366acc5c900ecf79cfde64d696c0133

    SHA1

    bfe9d93baaf9d391449a16c1f216024b6a693b69

    SHA256

    420064503b8ee71551a9ee14c4eb625cecb9d30a688ebb0e9b66dff257929900

    SHA512

    66dd6efa00dc4efcf169517307765f15f27cca50d353300a1eb88e01b7109c2c77ef9f36e2d7ceacaaaad11a2f6dfd25ff58b6bb61281a0d310c1fa1ea8b774f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a6446a54a2f5fcf74b80d595b061152f

    SHA1

    94454ef92e475f192d6534ac42af8106985898c0

    SHA256

    11e92f71cfdb3db483f0116622303dc7000d02b765bff2961d83f4a5adcb1956

    SHA512

    3faa1b59c5b8cedd9fe0c4aff62606e5bd7b842ab4d63b5919005902aecf448d21eec99d1051a7f6e71f14037310a00e435c3afba85d950e0f70614f8844730b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    103a85d4f611f1acf9bdf44b7b11afb4

    SHA1

    db4d21f4580f0cb8c3258053b78dc13cfe30cd3d

    SHA256

    fab5a8e9243b85c5a1fa95602cf551f7091e7039fd4d96e46b5571674f4ca1c8

    SHA512

    9ef0b5fdf64d1d7cc0fd171377992cc1587c19839b8e9a2d3b161b304e094506a2920f07dc342d432fea96d57d1d8ccc3d972941c99ba078d8f530472b7f0b80

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ef517ec8a1e418b128d9831764f42c45

    SHA1

    dcaa4bdf3fb731785f7c73f2319840533dcfa1fd

    SHA256

    28f22b5f0cdb68a03664969f9dbf97ed6c7c9a68cfe063df8c3e7e461f96c399

    SHA512

    220e90344bb858f5bb0d084b73f9b42036ad59a7bd946a00d75e6100f128bd990b3712a8d8406afb363df7bb6e3b5e43cebe1a5c85809379c4ceb5fba6149628

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4bdc039e1509e9e0f2fbf77fbf8fc057

    SHA1

    21da632f3c53eb3de7de4b5c5523a0af3ebefebb

    SHA256

    52c1ad811f7d9685ab9b1e376e4edae4f263debf9cbafd43e45ff75383e844e7

    SHA512

    4e5c128b4d35d309efe494b9fdf4e6287a62b59a3ff6c7453a2b45552adc6f7280ad43899d7cb6440359014e86a58eea114f96f9a2d647ababaa2e41369b010a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9f01d3e5b915a0655a6e5434c1150c0c

    SHA1

    b4de1e47043809c0745d33c20337381372318202

    SHA256

    c744e71379405827241267dcbaad765353eba128574b96c1e44dcfe718f7bcb9

    SHA512

    8d22c2ee0b8796078d47d923b47bfeee1e06094ba63e853272114fc3223c1bd8dc240261d2638282ff180126715510a24d47057960e01d9b71260840ddebbb42

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7eb7cdf407514e6ee9aa2dfaadc771da

    SHA1

    fd416becd46fc70020cb75154f74d15a62420ef0

    SHA256

    c04e766281ef3208123cc0b5937b45783a5745852f345d46d54a2569ed783d2d

    SHA512

    5ccd2f88950faef57fdadb91bb151ced9e9d70c3f550c3b36e77d4ee0c44e0b49e4442b1689aa23db95b3336cf354e8a2b55548c7de9705fbbec50feb6d53ed6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8568ff8a64c07326049a794f9d35236a

    SHA1

    d5f3945b868c83665d54f5a2b6ac993ae87c25e3

    SHA256

    3fd20ffa95979f0ece32d11d767f542edd52b5514642efdf13ffabaa9840b3f2

    SHA512

    32ada88fe61de892ba60028fa100e09585f177fc2812c25bfde981e8c843052190c1ed8723feefa486f092618e94651b12863aa4444ec2647f911d8be0eaf22d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6060b9bf3f54d7b74230ddab5c634a75

    SHA1

    695745e54c186eeb6380daf6030f0252b7f43af3

    SHA256

    ff8057dc98cbc4682e5e06f79c942770a638c1d2fde18510e74b249714ad3449

    SHA512

    7d9e9c75164641c2a170d251037f67aa35e620ed803347f4af7bb1d51e81bf9529326bab1570805008946a5912d8700493fd62f4234aac0a8d146266e84f0b39

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7bb7544d0feb1e44d4d77550d578b918

    SHA1

    d903fcc247609ecb1e57f7c7a669f539b94260b8

    SHA256

    50d761f1da831429eb996685842ebcded50487e3b51a905571dbee640e1f53c0

    SHA512

    6b19aad9812a290af0d4c6d8a68cc61b43c089f688ac3285ddd0ec85d47f300836f7726bdae3d7f4256ca1505bc607eebd06ed3143fabf39e93aedacd400441f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f5e8357970cd519d5150351c44024f73

    SHA1

    daa22419bfec02dc66e9053a41b5549249c30818

    SHA256

    f6bef08d063309e4cfb5212b338fdf5d9e18cc6cf244b7c27c6156cb4d5632f6

    SHA512

    f1824d636ede418b7ca80aa7ae25a071bfd13d5c3ed4b6aca33d20f5ba9352ced0547f4091d6aacdd4ac945f9d72da5bc9875dbe685bf125030f76c7eb2a61aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    632278b6485db90885503d680c16a9b7

    SHA1

    d163be4cf34d5bf48a932ccfb2ebae9ac94a0496

    SHA256

    5cf286395e698ccdec0c13512166cd6fde624162d73edeb72c04397c435a2455

    SHA512

    70a3f8c23500d25940b1483d9e82f2236773e51200fd2ab2890fbdcd1b228bc2c5eb6e30f5590a8c12cf8a814ffae93d3b0aaa5daba0f444bb62e071e3015183

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a58a40ea93521bd70ecaa0b3a7745d20

    SHA1

    1767579ec9e17884619bf8330913cbc3872f804c

    SHA256

    01fc33fbfab6058dbb362ba17fa06b9c5973811767df969d47fd52c96040a207

    SHA512

    c85fc077794a9e02bbda31a985c71208d808e956429afa8da3d25270aabe14119dcff47aec75e585ae050fa2ca7ab2827c06e86fa003a5a8f29221e882c2d935

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    88f5b152a4cc0504b72ea864d6689cd1

    SHA1

    7902c2ead6df5c5b340837ce00211bc33823355b

    SHA256

    88af2b03658412b6699ba8db3d76d0d9bca506e3298744f9501d18fa762e241e

    SHA512

    610edf04c434f7ab66e0cbe18afcf1c4a13e80d6e36f1e09d8c26d9a67a3bfaa62435eb76991c2c4f0570a4a85bcef2692dbceaeba0f850defebfca21076f180

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ec0eca802d0fa7aca93c8869adfc68e1

    SHA1

    2cbfc976f1d687af847101d39846eb25354c662f

    SHA256

    f959c4a56a3589fef0345cf173292dcdaeae29f14b3a6356a62401b0a0ef8bb7

    SHA512

    98f14ce80aaa7f1b3c7eb0b0df2e62a5ea49f01913dece666a744bc6cc662daba8cb48ac6a5a06d17760c1354b8e389a3df4d75c8c292536ee08c7caae5635ca

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f53b5d5a8441029578ff9baf12702f34

    SHA1

    2f84589f60af13140b8180434301e30dfae92d00

    SHA256

    d9b6131c8b044fc760651d48c3dbd41c12a537aa9316e52aca958923fdc065b0

    SHA512

    06a405cf5205bca2ea50586bcac3908af6d5d41d9470dfd31f7c1e54ec3fc6fadc0465264cda1e1c686729c4475029c7b3ec865fd89d6c31f3d579a75a4d787c

  • C:\Users\Admin\AppData\Local\Temp\Cab5939.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar594C.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06