Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    130s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    19/12/2023, 12:26

General

  • Target

    219d692ea271c1706171f63fa81f9343.html

  • Size

    30KB

  • MD5

    219d692ea271c1706171f63fa81f9343

  • SHA1

    787cb24bf98ebda173e07e7724e075b9335cfeaa

  • SHA256

    81ef6645fdc1d74d64cae4b6e28cf9d48cdc036beaf48006331814e7f1d8ec3a

  • SHA512

    c33ef9270b795000c4857db6472c28dab0ea829cb08f1225b093b8f5954bcd05a1775c66a9b30620cee332e1ca69efb36d71899754a0a03b3458c42070edcb75

  • SSDEEP

    384:evzgoKDbOv+uUnM4JPAM3z3Grhu+ZSalxIG7hSQ1UM:jrf+cM4J53be8+ZvVhSQ1UM

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\219d692ea271c1706171f63fa81f9343.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2656
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2656 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2716

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    1KB

    MD5

    54ab4ab37793f53883d0c6599a7fae94

    SHA1

    48a3d1480a8c02bd18d20d2c2b4934acf5825e74

    SHA256

    0c15f6a7bdd1f99e458bd321f0e391d237451594523d4982acd8f5d891a76111

    SHA512

    d3901057d2784599d27b53413c8ef1401dac7e299545e212989f529f495df199d3e5e89982be34aa2aaa427dd782fd2a0871e5e633d43df8a2e93eca8d52f3d6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3092ccd98b196a9fd0a45c14e1cdcf25

    SHA1

    c26a91194011ab51cae3af22271fb92c06b9ad10

    SHA256

    62f2c8a96016fac979e2a2a86431848445ed84d98d9f2e1182daf783fa72fe93

    SHA512

    df68ad2f148124743b84760df302817e7fe4100e373442b975c53aeb42c73a1266845d7ced81195f95cd530dea12b95320ad33a1b08a1c537097d8a61eacab1d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    27803899448803adbf02e554ca526b51

    SHA1

    2d48929f65ce561504541a1bbf13279811cd11aa

    SHA256

    ca9f3e405745960f5764956d7e78efa3977485fc8e9c8a14461fb5fca15edd08

    SHA512

    66c45ca96e6942aaf3d3951fead7d7124a8313fe9c33f7a29c72e16c8376675ee3b510b6e2cf96f40d8af896e14150b74f8572607fadb8df31e6f8a3da090b67

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    12635b8d81f25fbb17fdb541c801698b

    SHA1

    524806a8790cb076d99946663ffcaf0c14dab107

    SHA256

    f317679b1a1ae849d8852ce77109e0e3a7fc493422f66933cc3d2c7374ecfa64

    SHA512

    b29d58a532092d84014f62d4d3a2eb1faba5000f062a10c98fc8670884dc954cb454e7d75938e108e77d460728fa5fc0210816b0b3a9e2a7b43ef2b2a894293e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    01fd7c61f8dac436f05a4b4ea279befc

    SHA1

    82d03ae489c6c90200e9c3fd2f6e641b78b8cc72

    SHA256

    27d3786c570f51d23df55f9399285d1964b4b42210e8ac00d1b7017e75fb0754

    SHA512

    372411249fe9046b290841ddfe5b005bbbb8479d915615d61ad1f7d42a48d1b1737ecd75cd12856eb6ca2520db4cf5903183abdd843f6ba9e768a289858512b1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9a16c677d7351c53c91d3567820fd014

    SHA1

    5d0cf0ebe54f05d1251ed51db4c9c0ed7a162922

    SHA256

    775e6f24f4f2d11fe2beade018dfeab41b379aa5b0f881d9866009c2d3663965

    SHA512

    a2f58d9bdb5d4ca0af05e65e0345bc275544a33cc9bf04b5660cf6fd56258557ccb0e74aaee24fb447d3c36082b273938636282d748d17c2ed7b3ebb9614b1bc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e6e7b6162edfcc8d7568c3b985b3f9e9

    SHA1

    1d52b5ade343bdbdb5f56cfd07c5651a65ab5e28

    SHA256

    b4b4919278844ba06fca3c9caf42d66b5f5749235a73605bd1b6d27a6bfa2352

    SHA512

    0fa4e52a1f64e4118b95fde312cff6961480d3fdd597d20fff966363f007176590d433f05d62e2c0b5012903ac9bad3946f89dc4299c3a3dad37d0b93b3192e0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1dc48855a5f63aa69f582990065f15b3

    SHA1

    56d2bf603cca4a6d062c6083b7f89896a7a38d98

    SHA256

    41eec1278eb10950559f935231086a78036e80a5404d6431e47e6179f821d23b

    SHA512

    9df03fb6ac5cc12b87406623cfb59726e92bc7b60170a02c1be6cce39c1a6144fdc0ce6ef67ef54925e8c20ca0848b5824fc5fc17f33edff2ae81462a0d2036f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a1bd6c84334bf4f966997db7cbb58e84

    SHA1

    68f5193086f90a99aa9b47da1fd789ab22407162

    SHA256

    b2e2381c6bbc0692dfc63e41376036fa444c057416366febaebae70be94fa2ba

    SHA512

    1edf0571d54142ff86d4e8730220e7cc2ade29be3fe0d7d65201e7951464ee3afc235a3e4a829291a76c31d87a4e4a556bf7408b52471ca76e8424617e499b11

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2b9ddc18be41ce39c70ddad3a9fa4298

    SHA1

    c5bb2509c26c26859bb0703533e0f81c890db86c

    SHA256

    030ffbf64254171ce4ad88503afa47618f6ce03d6d7526e6c5bf5190a57f6112

    SHA512

    8865cbd73753f684cb3a554f67a996c363dbb3914c25d427174c230c1ea1cbeaef8d747c1b56571972709edb93ff183cb71d9c90b81dd4642af22066c1900572

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6da5b78bfb618fd17e684a6a83fd2b5d

    SHA1

    a8eb8a791e21ccd2e148f6730cb4ff8b51851541

    SHA256

    6ad27ba94b1e09a6452ba6ed53b9da456c9ebaa5f40783b6e3510cb621469748

    SHA512

    05d6f2f22a583f0561222f62dcf9687dff2d40c0aa124dbb118c4a89603bbc894e7bc44b5af30458d91c36c7ac8887ff8808d573cb7f4c24498b39534199e9be

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1435115a034cd6e6a5873da1c6abdce8

    SHA1

    7d07cb54e8a506ff73d1dfa0046b1d526bef06b0

    SHA256

    44c97b78fb100539f21e7435f7734f3b2786b0285e81a4df5a266566ea63492a

    SHA512

    3b0bd88c2afe6577ea23d445337222ecd1a836afbb6d0fc6d9251cc7abddb3f9e699f60de27f898847f7c9c767ed2ef49546a52cb4c48ea1f33b4b88c5430e25

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f491ab9db64d285715501e22da6cecda

    SHA1

    168a9fd8bc5abaf3ba07b4e6ce8ceb81998f76da

    SHA256

    96078ea39be3c89660f132544192d5df2b455bfd6af7f4c86a221b8dfeb6dc26

    SHA512

    d2eabf213de8911ed74906cd7bb5c306913d07648b4fd2b2778ae1fd4262de03ce3477cc03cf7e07783ffc7b43b5a4812dc97ff1a886ee5456232599c56ce4a1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    18a4b319e48f74491e6a2211909a26ad

    SHA1

    8db504d8c0dcaeddbde00e65aae1d350c8bf7b9d

    SHA256

    b14ed68f7c725b155c239e555e236e7982d14aec03b0f35d4edc908e7d99f399

    SHA512

    c37612ebddf307d14e56116c8913f66cbeb3f40b7f372164c5c438ed12f25cd2c56db118309c62f3c90a336da8bf673d6107c70634a2a5aebdedddf36e240d1a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d9381f4c01aad146b3bdeaa88c09446b

    SHA1

    466aa056bc8ec26d4fc75ae339361214b7ab7f3c

    SHA256

    edb6d897985fefec0e0cef707f2dc986e60d668a397e38bced238b4b99b8d3cf

    SHA512

    0be27920903819d201e21ac80f4e7a7a687b619135646fe26583034ed24f83c294ff842f1ddaa3f1a8093bb595f177b7aa06233077e54bfc88f32e9aed9cd017

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    291fa0314550cd505dc8b4df6e0dddb0

    SHA1

    000a014c26c5272a128968d1877ab4b72ae687a1

    SHA256

    e95f895f0f997972586d98c7c15119fc8212f0f2db8aea93bb7e6f3676b3f691

    SHA512

    ac2bf3b0f5097af52f321512edb68270956a6f49883b138d9ffceea357265ca70b0f41f87315e2759faf74d5ad71a2132c87b03563a8d5157b57ca8b1ac32625

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    78b9f925b2bb10860a897005fd1feed9

    SHA1

    9b58b9e762adb74a4bc30180009790d10894ecf9

    SHA256

    9cfe2e8441c0d22697e50602302f25887bd8cbe6891771ff0d29e6a0cfa6cb91

    SHA512

    52b15ed7b23c7ae92f72cfcd0e29173b91db162a68df945e53fbc80e531561fc98e4b088853af2094d346c9e14be8d25e1f2055be90edb5ada244548fe418708

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    80c94502a0d76c110d43a6aae9544ce9

    SHA1

    641b9a7b0286525c8868ee4f8aec84750a653b07

    SHA256

    bc0dd4af55f1476f035ae379428d619aeda4182ce1ceed2c5e29d92a4af78918

    SHA512

    79409f9e628675c4cb43774cb410d9760576ffa996c6e3cdd159ff725b1edd200630db17577023e448ff4c7b2e261de3b4bfc53ef8e4d7e8ca852ee53ecc8f7a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    122845525047fadcaed1cd4c2066242a

    SHA1

    40a44df69aa9261030f7a14c4219c7f3ed0d6315

    SHA256

    b5fea6f6178071064b803dcfb7f95463e60a862d23ebdcb6602a3463b22638b1

    SHA512

    f2c953c2342201cdbf8b642f8d8fad1125694069697545c4b32135689109ff44a92b8509b75d75d11efae0c2063755e250b9dccef1c70f3eceed2838964e89ce

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ebe5c1ced566d53240a563d3869f18c4

    SHA1

    cf00893ef9217b1ede5a5ba79ae2dd406799d2fe

    SHA256

    d6bf35bc667d1efb0e17cca07b43afd1e2c2afcec5464ff8f34441a754370a4f

    SHA512

    5b9c4b5c427642eab93052a5a660f1f47d3eb46b4865aca054f5a72981a3b8ae7662dd049832be571eb344ed8ca762f8f6867da0e552ae6fd4133d3fd2dddbc4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9069c6bde2d7d00ca0ce61b1a0fda237

    SHA1

    51851a27ee945eed49d6a0b1a999750e49185dba

    SHA256

    e4479445a96fddbbeaf486f25f95ddcda8d3f7bec9f10a55cc548b510bf420a7

    SHA512

    7b5a72e2627714d6fd2b482aab39abafea6e333562c207cfdd866b812a95b71d7661e7b361ef56061b11108f9b43fe5f465e8966edab07506d3e79e389472a24

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\CAF4703619713E3F18D8A9D5D88D6288_F2DAF19C1F776537105D08FC8D978464

    Filesize

    392B

    MD5

    8439622a79a852573aa3b6970c0cdcc2

    SHA1

    f8a9aa2df33dfb4e3e04e18daa5e95010639f381

    SHA256

    4e6fe0aac3d217d639ae861b9ae609cb306cabb26666a0971fd236cb212fa01d

    SHA512

    2f6e164677a52dcc48aa617c3eb073b957959090528b1e496fd629c673ef660cd1883f3e848380f32f2c70323199ff72141c394c994a71cdcf1d120ed5c76e6a

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\53STNJLW\wp-emoji-release.min[1].htm

    Filesize

    11KB

    MD5

    69317dcf650bd2c26bda1bad61c92a8c

    SHA1

    7a4f8eb1b6235785583c8bd57b7d8ad520a40898

    SHA256

    f97ccbb15f7d102b199b2c24ca41c59f16a93c20796776fb1f2c57ff85a15e5c

    SHA512

    8cc2716c7a81c30b713318e04ed7317e0a5a48a843fe977ca8eae3fc93baff512b4f8d3bdc78192d72e4b29c05a8ab8ad4a84e377745821ed2503476d9ee24de

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HJ0GGVIM\style[1].css

    Filesize

    5B

    MD5

    fda44910deb1a460be4ac5d56d61d837

    SHA1

    f6d0c643351580307b2eaa6a7560e76965496bc7

    SHA256

    933b971c6388d594a23fa1559825db5bec8ade2db1240aa8fc9d0c684949e8c9

    SHA512

    57dda9aa7c29f960cd7948a4e4567844d3289fa729e9e388e7f4edcbdf16bf6a94536598b4f9ff8942849f1f96bd3c00bc24a75e748a36fbf2a145f63bf904c1

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\M2VO416U\layerslider[1].htm

    Filesize

    7KB

    MD5

    fc9864b3c9a1bba1720895ca40b8e81a

    SHA1

    dd3e3e2bd5042b5ae9767e40d53d131e062b64a7

    SHA256

    5c7373b6af5d9ef65f8262101df7b2cca4e5f8b7dc2b5955fa6c9926439059c4

    SHA512

    001790e895a24432634738e059afd14669969c69fb0cd22ad00ae055c85206be2eded4516dd3760dec1c04fd7388905e6abdf4cc8d00c4996c697d97e2987f8f

  • C:\Users\Admin\AppData\Local\Temp\Cab675B.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar6115.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06