Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    143s
  • max time network
    148s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    19/12/2023, 12:27

General

  • Target

    21d6f68e9826ce51b13cfc1a2d73343e.html

  • Size

    84KB

  • MD5

    21d6f68e9826ce51b13cfc1a2d73343e

  • SHA1

    e98c14c0c2c1e3f2893761fcdfe08d24195eb85b

  • SHA256

    15a3d1039c271e718519cc775e3a84df54560bec79340abd49caf0b10ff3df14

  • SHA512

    3158f9117c3d6686dc3fcf64b9a4c79b5e78a49bd8b2e657dab67ddf4d5e5bf866b051ce5beffea6ad24a2e3b3be5b2b98a90224d6e29b902f7235bf72a4203b

  • SSDEEP

    1536:L6FamjXODC1ODCwWxlPgQYwLDFHAXfJQFu5:8jXF1FwWxlhYwLEJQFu5

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\21d6f68e9826ce51b13cfc1a2d73343e.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2520
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2520 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious behavior: GetForegroundWindowSpam
      • Suspicious use of SetWindowsHookEx
      PID:2924

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    1KB

    MD5

    54ab4ab37793f53883d0c6599a7fae94

    SHA1

    48a3d1480a8c02bd18d20d2c2b4934acf5825e74

    SHA256

    0c15f6a7bdd1f99e458bd321f0e391d237451594523d4982acd8f5d891a76111

    SHA512

    d3901057d2784599d27b53413c8ef1401dac7e299545e212989f529f495df199d3e5e89982be34aa2aaa427dd782fd2a0871e5e633d43df8a2e93eca8d52f3d6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\CAF4703619713E3F18D8A9D5D88D6288_A7725538C46DE2D0088EE44974E2CEBA

    Filesize

    724B

    MD5

    ac89a852c2aaa3d389b2d2dd312ad367

    SHA1

    8f421dd6493c61dbda6b839e2debb7b50a20c930

    SHA256

    0b720e19270c672f9b6e0ec40b468ac49376807de08a814573fe038779534f45

    SHA512

    c6a88f33688cc0c287f04005e07d5b5e4a8721d204aa429f93ade2a56aeb86e05d89a8f7a44c1e93359a185a4c5f418240c6cdbc5a21314226681c744cf37f36

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    410B

    MD5

    5a1691ab530a2765b348ecb588e5b06c

    SHA1

    f30ac4ef0500263c536b57546406ddaac2b0de2b

    SHA256

    cdbc2205b7a6129672b3cb543dc5dbb8d1a17a276c860201de5fd7c91c43c7a4

    SHA512

    6b3af1e7e62f3b18be7152346edc2a1ffd5b0b9c16e67415951c5bb7a19f97a68add44ca441e627b48bb1f43fc73a1629a98c42c52b493ca8d2139d71dcff6c0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d87925af80d8aef7cabfc3c86ca17bfd

    SHA1

    288d8ecb17497dc02466371df80d863d32771cc2

    SHA256

    1b9c38a54ae5be8766d029e7f0cefa90b982581164bc8e91e7feb8967594c4f7

    SHA512

    2dcacffea5030431e986559a81bbf14997ce4b39116618a9aa835c4e310aa598ff5a7dd14f001f6c6f8942d7a162d4aef6d04fea15925ffc8d133859dd5ebe1a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    477d41ecec802386366b5ea5259b5eeb

    SHA1

    83e8af301e40d8cb12065b85defb43002d566c20

    SHA256

    1d16112243884815369ab8a224aa63f179297d6cbc924abe470047419a7d501e

    SHA512

    b10ef812b739b896d5ffca2fe9397d3fe66546491a6da70ace4d2b5acf3b5ba8047c90e5ffdc50bdd50370c1975f7b160e7cfb3000933eee3a39d83336dc432b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1c4a4f141f2fe8a8c77764a2cb9fc306

    SHA1

    896e43e36ab3fa418f23f3dfe5ff7eb80c84a0ca

    SHA256

    5b7abee90db41738e24af40b18503d3157e1777216a1461d31114ce9e267dc3f

    SHA512

    bb067f3cd8352f323cd38a028d0f29b1d7c776e4a7dee580773596b95d6a4c13480c84afc4f149a91c807d70b395b32bdea804521f2a74520c93efa6162b9a1a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    eac58ea48e798720f3d39f0c8e3a4fb2

    SHA1

    4deac568102f0104e4e2c02795f0d49991ebbd94

    SHA256

    f3a8e4551ee396b842679179ac8bf054004c1e99d7457c5f1d5918dae0134948

    SHA512

    44691d6f315d907421223f750f17bb7d985e85de0f6f038d7a679ca5c60371adef86b6532b230f0e7f066039d694fbda5957babe978669ed137476908d5c6fea

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    87aff00aa9b43dda750121cdb9f163f3

    SHA1

    893c27a39a1cf8beb9ebbe6e621a09c8937861e9

    SHA256

    9ad536c29103e23bf05e5e761962d471a0340ea9954d3cf06f0193d57a0f9460

    SHA512

    a2c65d14bf7bccea1c577881b531020e93e1c83b37be552d6cef578e9c3f4f53c1a37b691ba16d02b7ab43cc58858aea0298e60b9e0601816253a4e468e5524c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b2368a9fd39572f854901b92075fe3fb

    SHA1

    cce6b75672ba2bd5f27563b977873966684bebc4

    SHA256

    d47d6317e966ede00e837a4ccdf0062c5548d3b7ce899610b28ea3b2e383453c

    SHA512

    c42d6b1f45589168c06b5a2f6cd13c308ce6b1e96c0427f323a5f1156d0c823c35d5f0f0d395578f1df6d250ccbf0a8bd0a84cc7d65e4ed7eb027d6f39cefd9e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d28c2606a03c8c1fe51923e3b2345da8

    SHA1

    e76155cd2ebe6aea2c1df14c4a8652ee5cf91a52

    SHA256

    a9b5fe2de783ec5a1bf9c98711accaa25add41f6a973de09b821e0c243065ea3

    SHA512

    ef004274c41ee30f6edec75c87e608330fa4eae35a4237b4be7deaa70c4acda758f67d59d340f42f1048663f4c00eb71b532393ab39d3b55d2d876d657b6f1f0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    14077b3a61a52c57a869e1628f796324

    SHA1

    529ce2ad8b320baa95e769d4677a55c4465edc37

    SHA256

    26cbfdc043c440d8effc3bb77fa5e2ff44fde0a9c3c169647852a090c47866aa

    SHA512

    a25bff91a736d395cd162314d69af0672db0c9f594dbc89ba137397073220b8a4399b79fc6f19703541fdd2cc7931d2d999b985b717de27e751926e0b5909b02

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8ee3f0ae9aac9389073f6811a8d8d12c

    SHA1

    b3197892ea8165eec5740295909d46e7554726c0

    SHA256

    bf8ef389449dd14f8118c20d1b5b3ec3d948f5e97c61222e4332bb1d79d824e2

    SHA512

    38649e1f9b9d82df04d0f83ae439350c4eee647743c13ff3895f1d18cf41c7a40bab8d5e238d4f16c13bcb7a89a6c0b6f8fe71666e941e90204b6f31ea317a99

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    69c849a02a9c788ce091b26d352ef2a1

    SHA1

    d9bd7ccc8c25910ebaf603fb8c39822d5fc246d7

    SHA256

    c9a707a9bc89c62870217213463de1b219cbabf2a7d652016fc716fdeb93a14f

    SHA512

    8dd1df5ec2a6cc26982e54339abe23d68dee9afa4e89092f957dcf3ae32949eb45a4db7d7866f8420a40f51f0064f5ef954da92c2e51428d5bb3379dcd5e4141

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    62f7843fd8bc3ecdfd6de3b444e91dd6

    SHA1

    b80d4a498d03f2d865f928e098e93cab00c4d74c

    SHA256

    a6c31c2dc1fed8b361640151dc3641d09b3a960cea741bc6a79a24fea527ae08

    SHA512

    e42a0eff3fdd7b4940fe228b80c3abfe5ad9b32330898f4a6b033b7f95f63476c878dc761f608d3966486f46711238ba780236bc795218401e204703daf111cd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    03713f18b952c4ea3ad700dc244970a6

    SHA1

    44bd6248a6ca4ec3d1adf1dc12b7595c3fbfe43f

    SHA256

    c794906f65fffdb94f113481cdca25226a0a71ec778364ea0196711984776d18

    SHA512

    d71dd0ea83809eca4db3361a1e9b5e1c12d1ab1d24bb88be8db59ca44a1df52636b3281d8e4096ebb30e874e6f023e37589c947a02705679b452051988491936

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a165612eca7b682a694e12711ddc7f74

    SHA1

    5593b6b74bc397252b405368cc9df3ad7cabffba

    SHA256

    39be6ec64c3824428afad51a9f0240f33c11484b5d7e45010872c97f58e4bb3a

    SHA512

    4bb15c090d00246233a5bd67a815b197241b74ea1c478a581289002db415f9d4a8b34be4e66cc9aac0d7a3f1c521292778af0c046e44a1994929dc227f704569

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3fce89bbd2c4ae8eca4749ef9409b3e1

    SHA1

    3b43ad160dc5b5d7b03e116d2d0a007aa46bcb57

    SHA256

    8d62bbb7d1ad4f3bd14019ac032ebdee9cf6e80986b55861b4d2618002da1622

    SHA512

    9b68c273f38a338494d23248589d209d05a9da0fd5741c49049e9a6fb73319a35e6a045e32cc030b6df10192977f1a93800059b307e06d336cfe87747ef68b45

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    55b468687a727594e059942152054624

    SHA1

    ae563aa0054ec63e9c25ddd875bef569c6a0e8a6

    SHA256

    b65094b4bbba85b01daf2c50af3b28d607bc430f9e93cc39f4a5e32bd3e50480

    SHA512

    e42aeda1fb73444b1502ce51885abee7213961605696f2dd97e2f174022c178d3fdb2c75fd31b57fc5b2119d99ef63516aa3710b786e0b7cf1767ab87fa0e19e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    dc56071165c965741de309c6005bbeed

    SHA1

    224c293f33ce7bcb8a45382f0476bc3577bb7124

    SHA256

    26684d9a11341dc7d8d8575ccf629be4a5a5ae5a582c0ec2f98a131ab1292e2f

    SHA512

    174b45bf2ad7e32ca23b67e07ac458e100caf0e123cd0477338132c5d656a1762baa768ec6df044dfe64557bca9ff5a0fb10c51f06d04239a948e4280c56a4f3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4a34534e0f124b4bf740842b80dcc68e

    SHA1

    50b7f250191d2b282bf09d5dcb360f13faf8c264

    SHA256

    eb24c22fbe816686c0131e92a3c1884855666888e78a1be6137d76de8fa63ead

    SHA512

    11241718a61c6d04455034f709cca706290b9f2f317a217eeb951babb8e5f897c6eefa83acfbbde0cb37c2d57760e2c66820f3b41033c86740ae34c0ef6492f4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    884c7b03264b4b35093ee97da37b8f1a

    SHA1

    0136d6d755a53fd116f3df81285795894ad04b45

    SHA256

    69cc37cf14595465a3254cac95a118d48c5b2282baea70439dd52587fb383067

    SHA512

    742d135d4846ac2e189b8b96158a3390a3284db659c22c498a90f228c3146f1f7228243237ed1793d325ee09d6dca4510c739d37a0a5ab869873d77be470eebe

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2d2d6ec6a853443eba9e7cdc033abca9

    SHA1

    877911c52e4b8197eada611e6edf1a0ddcb6dd66

    SHA256

    585c5cfc1dd7545359db610b80a048315e6e110839e8188a44e198a1e434ba3f

    SHA512

    26de737d155c56388b1049b8692479aee8c9353681145a806ed9ea2eeda5811a7382b0a7aec02ae665c6e0d09a0aecef3698936d12838afff682f0f1a88f8346

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    dbefa3c894eb0a6a30c113ea3c72c54c

    SHA1

    3c0a69c88596a79dd334632dc5dd257b54037551

    SHA256

    d788b0970160dc75550035e3479f031040b221346f4fe408785a1c7cf167c7c6

    SHA512

    71da1ba284b21d56d4cd9b913ad63ce2c61d7d37678e19efcf228ff2f736b91afb20ec631b2b071edd6e7377f608724c883042c2314f195568a06c6f44bee4e0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e0fee2cb5774c90ad084502c1a0fb782

    SHA1

    86f66887a6206d25906ace237979878510568333

    SHA256

    b765fb5e4feaa587e84d87362962854bf8e040c0687f79e16ea792f9d43620ab

    SHA512

    21e9307b886fc387798fc6c8931df40d70f60cbc045a44cfdcee8aa0ce92c1b5d29ad7301a85da240859254ca2c1656bc8c21f8eb926ebbe07d8229329b0879c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    057f524879b61563eb54c7c57868b1a6

    SHA1

    34fc432ec5411dc5c1708e1c3cb6e42fd9137c4c

    SHA256

    90cf24b89e1be094b0901e68f9bfb0d3c9aff2dd15a75d962e1838a1549fde18

    SHA512

    1893768e43b1a5a184be5c6861fc8ed16933484d8be8a9fb665f88a905067731277dc01060f426d30bbd60883489b775e044032e47e94ce9afe17cf40242ecd5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    331a3c79d6d4bc9c49a778b5b59129ee

    SHA1

    745a991cdbb73e998cd9666c4ee916a1ba0cff41

    SHA256

    f62264a9c4fbddf859c25bbdf8c9cf431b7a270eb69f9bdff443f52cf75f92a8

    SHA512

    0fbf3ebebf96ebc32bb5ee114e0af2dd004d85b6675109918d6e57623cd944832b3acf70bbf101de34830824ad15816d8945aeedfa52284e7983ac41fecc1ba6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    da4bb037888d09fc9f8dbdf2fe0d5490

    SHA1

    3bf4dd61fb1b87139f1a7b4810f3a26d82757077

    SHA256

    f711cdec17418eae4a9fafadef6c45d52c50e3ede0c10529c90bdba97731ead7

    SHA512

    90cf24736a9126cbfd0ef0008d1cac200df50f61bfaf5a02e60e89476411397e849e65225ce5c35f855d000c7e6100209b1f618baaf60f55bfafc3b9f28ccc8d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\CAF4703619713E3F18D8A9D5D88D6288_A7725538C46DE2D0088EE44974E2CEBA

    Filesize

    392B

    MD5

    a1fddbeb13bd1c653115857479358151

    SHA1

    1e06b3d2254296a342a96af7a95e18f8cfcb639f

    SHA256

    f53ea2ee81ce2f81423d0b55be5f475a73e1f7ff131ea0ec5325687322a29732

    SHA512

    cce708ff4fa02b8415fcf16fe06ff2e0f7606bd4649ebe29c1fe72c67b6c59d3d2a421f1211bef56896b1635e447da7f678931c1249305139c1b0bbdbbf8bba1

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\FIEDGG3E\px[1].js

    Filesize

    346B

    MD5

    f84f931c0dd37448e03f0dabf4e4ca9f

    SHA1

    9c2c50edcf576453ccc07bf65668bd23c76e8663

    SHA256

    5c1d5fd46a88611c31ecbb8ffc1142a7e74ec7fb7d72bd3891131c880ef3f584

    SHA512

    afc3089d932fb030e932bf6414ac05681771051dd51d164f09635ca09cbd8525a52879524b6aa24e972e7766ddf529484cc1ec416de8b61255435a89ba781f8c

  • C:\Users\Admin\AppData\Local\Temp\CabA30.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\TarADF.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06