Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    122s
  • max time network
    131s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    22/12/2023, 03:35

General

  • Target

    5c2a0792ee97931f57ef6603a500a0a4.html

  • Size

    44KB

  • MD5

    5c2a0792ee97931f57ef6603a500a0a4

  • SHA1

    6a8853112970883584f5ffdfaf729f3f9d744c17

  • SHA256

    8e452a60281068d0bf3323e19da4e5dcf66b12d3093073072b8cfe5bcef295d9

  • SHA512

    44dcc24f4f34453539ce9aacdcb6d023593c35a63f52709ee1d7a272f5d28b9e010f0e6d0963cfdd007e4413c4cb1d4de4ff205e6789db472b4636f191608a54

  • SSDEEP

    768:IIRIOITIwIgIiKZgNDfIwIGI5IVJ7SqIRIOITIwIgIiKZgNDfIwIGI5IVJ7SZ2eC:IIRIOITIwIgIiKZgNDfIwIGI5IVJ7SqH

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\5c2a0792ee97931f57ef6603a500a0a4.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:3068
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:3068 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2680

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    396b187b5d75bef99041c9235adfddfa

    SHA1

    aa90b95f79ee608f166a393a55708d0e2fa89ff7

    SHA256

    387bcacfdb41271464271d5e072d92b4e89abd00d4e6eeeea58b911bf36e7469

    SHA512

    9dedfda46b1bd519ae043744fa23d7d97bfadaf4c728e364ca5d66b16b8e0d85fba3e7169937cb89dcac632cf05a1d86cb00b75d9f0e92234595a57c5178935d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d96cdb789ecca69b579cd483563c5bd5

    SHA1

    8617d0bb743c6a1f73344bc6d75d873a64e88307

    SHA256

    ff0fdd6f0c51f7606d5a9f6f7e5340be7fdd2bdc11897c8cc85397962bbee612

    SHA512

    2a99664f6fd3dcf51918ca7b8989f43ed9513c19675f4a34795452acb9098bf27a62b546aa10ad2e2cd95365345252045a78150fccf670be619c42a0d00d08f3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e550ea417173902f92a99691cf340d27

    SHA1

    26310437e493436a8cdcdc04daf82cf0f38a50fb

    SHA256

    134402e2dbe4c3b620cd13da4c04de0fec96f56a90a7ade25bf6a474967d0550

    SHA512

    4a066fd08226027605af9a7da8665cbac90ca1c529e1d4714d2bb2d2237da0e6b63c052b209147aa13529f36f38da9bdab0d91528bae81441d9b834ee79a4303

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c3d9dc20db37cb15d6d1564e776d8137

    SHA1

    5b2602366a52986dde047d3e2f4a9eb4fbccd10c

    SHA256

    a64e0e3c71de4f370b8537a0e08c97a5fa0b013de9d5d31d674350b3a7f86f7a

    SHA512

    d461175769aa4d94f47448715c1c2a5e4e64a8cb0eb9ae13233dd69ab35a3ccaff75b713c01bc612b9588967fbf65750f7a0e569d44503d4942d3835aa01a232

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fa5c57207c4b1bc93dabc145fc48d497

    SHA1

    0c182d10bf82120931d6f195f472ff8da7e67626

    SHA256

    2ccecc4b359911c25d5f7efa07d91ed54f7c591e1c62d87cdbeda666c6a16eea

    SHA512

    d233dbabbee0f659dff8e1f26d7dfb436da3c1ba30fe36839e8fafd56445e533f4c06b096209caf8dbd18b9a2c9eab767cb23ca1618e9ce034989c4787405a04

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f416d23f674bccc8a9827b4762f1b1a3

    SHA1

    d275b6c184d09232630a62bf367a776b909c6bf7

    SHA256

    d61f8a143739251df993981c5deb5e67e3654709382849f256cd6e64e6f6816c

    SHA512

    0de8d4aaa5293132a55dc42d111314118363ca81d1ff3714b7f6cc1488b1d43fcdee60da7d56efd6e235bd61859759b72d86cb069f7ddad1c1a1f76f83055157

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3b874c463dc4e5c0aec3f62786b41a2b

    SHA1

    1d1b7beb4411e942d61b4b555c86b3917a5467b8

    SHA256

    bf24a2a3b421ed44b98eb0f1c2ea93ebc8805b228a8b4d930bfb2c43a9b4d77a

    SHA512

    37d4866960929cda0e5c115b3da7c89033fbb1930f1eef1bb7a458be5e8245ea75d794e13e8c5e5d45433765043ef1784914c57e5c71a4de02eaff6577fbc38e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    80594f72825db6a5e2eefa646e660750

    SHA1

    d33c1e1c3525f57ac688261ccf5a18cae0d5ccc7

    SHA256

    46bf7f4824afbf05fca03d556fcc813140349b1013fe5c620a365d6f9634933b

    SHA512

    d3cc7fdac891c0c00f0221b0146c1c8ce243750adc1cdde54983940e5e329f49727f943444b7cb48ec873e1af63e6e22660f4e740e08894669f29a0a64aecb30

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6f2f024765302c8f2955427517ae218b

    SHA1

    2556b698a8fac382050418997b461e7847c90030

    SHA256

    05cb50fe6dc3ba9c429756ad91b99497f63b12c91d034e4bfa4451eba9b45a69

    SHA512

    aeae14760b9ebf225fe6f2d88b534acac29208a27fa3c4013e9939e3f674b24eecb8c9195e7daed3a39d7c2a211735a5abc87b73a9ab0c9bbfeb463f85749b92

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    285f069ca38850e94ce2c2eb25abf71f

    SHA1

    e2bb57ed37b4af69014961d72e14cbbace9835e3

    SHA256

    525cc5164533d7930e2caee8fbc7c1fe0ec9bac6ffc2dbfe881449f87034079e

    SHA512

    7e29fd7fd26b5bffae5c9866cff1ce2d8c4f7c86aceacafd94ce7e00bddfe931097ab11176bea6fda9cc506d8dec3690b491e4921175da5915d3f9c62d237dd6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    aa0a9849c35f373abd90b0fb38439e34

    SHA1

    7546dc30186558f1f725699824cd2a09941dcc8b

    SHA256

    a80397737fdb7454524adb0500ccc4eee96a4cffa53fe7d670bc29559bc3b7cb

    SHA512

    b52d4a46c62f053cd2036f3ae07137a3cbb6c33b12335413f83e19782e87c3cbaf536b6cd8e179a5c80692cb66feb511d13a2849c97a6b86641b6b525279dd83

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4f375949f54d1a5d8684dc64d4bb5b0d

    SHA1

    1706deb5414606897fc7677e8b3178b9bdf1ee1f

    SHA256

    f0fa6052c8f1408fd13fdc6c6c3a7289ec8bd014c564ce85dc1a1c5f6bde327e

    SHA512

    50883ad8c7ceae857f9ef6534c9fd15932ed7874b817f0267ca4da07679beca75046190fef1acf4092a6701ca3b0828603b080d1a913807e144ca56db4416866

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cbcb67b0727ecd6a79951ce10228004a

    SHA1

    32ae2a93610b18039fe35d80f169a94f8605f796

    SHA256

    1c3c4f1a59e84e3e90ce6aa986a66b13f0a88fcb822e36be80a774f8a97b58bf

    SHA512

    fb47242039588706e78760cce7f711fad2a074259b25aa7a1761fc4b1dccfb8f6746d9130c765a397b84afdfeda5cf0c562eefa8c239fbe6aba8fda4c4218362

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e2b36cc11614111fb9e962a85a328a9d

    SHA1

    be6fd36fd05353957e996796ccef7452bd5d56b3

    SHA256

    c0388638ab7b23c1b98463aa37543cef94cbe88586d86268dfa9bde3583eb552

    SHA512

    279ca5f20e3a5e2f4548dc9c4c9570d98ffafefae062d9f91199087627f7a62afc2c4d4baf2c3f701a8ef9e03d2f5a397619975feac3bf0724e75906eafbaf7a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    04f30e9dadf765997c4ed61062300778

    SHA1

    dc4e45162edd42189a273ef112baa07d45f09b5d

    SHA256

    957da06bbe62d59ec56d1dc36b796dadc5e738e31dd6ec876edc696b364219a7

    SHA512

    2bcaf41481747b3820f3ae9ca1601eaa1d585440010d8227e7e4e83ff3a748e118b300987127c5b9a716055e3ed261354bccd99396d49410174999f3f75f2f10

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    728cf291099a996113b1ce2d0f269866

    SHA1

    6f8d902d342ec6b3e1356db9c7a364be9623769a

    SHA256

    9f91d85c895527c96d54f2041a9774dd33adcf2313bbc75beb740dcfa5bd6ed9

    SHA512

    cdc5b3060eebaf48e2b0750368729d8b05093ce84587b2065c2e4ca68e5137dd18f736e75996b9f7110c1273bb0417da5d35d52b3299aa5ce126024c4f1ea0ee

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6f45eba4c087d6626c1720bbfc44e5eb

    SHA1

    3499fa06b6b691a3b65fe80f0f1eaa6eafea2093

    SHA256

    15d512c1c03e75ea918d8d4fd05c5df60585c4327462a81f4f1112af21b12ed3

    SHA512

    b29267b8dacb727ff8d5bf66ab693991ae1abd2093dbbba57640925aeb017dedb165ee326edfdc3cfc1b62d7aade060319624e4252c0afe5e4040bc23b2720db

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    42b6a0000f0e4765a573a6ff5cd4303c

    SHA1

    3d57a7a73031e5c1eaabc94e8eaca8d7edb315f6

    SHA256

    abbae61c8737dee035682f1ea9901b8b04ee59b4866ce767e8061a26ec81296e

    SHA512

    f4e997ee129fca771b958f89b6114cdeaaf7a3d5bc367b31b274c8cd2170c419d3cc5515147ad4391ef659abe14b43b78fd9ae488f489864e28eaf7ca06a9f40

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6b731a429dc702d8e57089340a86ea64

    SHA1

    bbafaafc95bbfc2347ef4d54e5978011b2d8f862

    SHA256

    cfbb3e98be111636f81d3e15c9034b5b9a9fb7414a5ec87aa8ba8393230d5e7d

    SHA512

    44d6afe9fe1942f7b2324b4b96c59c412388c3f93473c9e1ac648669f3ded11566ac7aee0db608488574a48b70cb4e1bd9822db66bc8ca4c2ca8506c89e696a6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    27ea05cf44c873e1c8b40e081359d182

    SHA1

    bcb76855a359fc589f741a7d493c718af853d6bf

    SHA256

    bf3b5be9e43d277c7d81b0776dfd2fe57fbb93374fb46a11c6129122d71fe8d5

    SHA512

    7b2bb526d24fd957df737e33a8910e21a2abd15b9665721869768b3c6f5b5fcc1ced2d3249b350aece31d23bdc957bc3f7450f29035d3869364b2c2feba04670

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6f3f4185dd7f8c6334ad295cd2bf214c

    SHA1

    24445fc1eeffbd4a3f9d2a6ee523a21eddc2fa8a

    SHA256

    71e6df9221328a2d23567df2d30eb2ee7fa6fb339845cab6b4d7ba64c953447d

    SHA512

    c38779a68387bf5c00dbf3bcdb28e71032d56bf2d7e39b8e5af5da5eb7a8bdc604bcf0094a7e2c1de53a0896cc5362d4c5e8b48ef685eb4dbecca46e22046903

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    82167cf39f5806c5052657b2aa35dafa

    SHA1

    56cf33b1ee3498759d0c791155d39a85c68fb513

    SHA256

    5a78299c8d6496126d9823778b8ae1c4d5ac6638897b1c813495c16992a5d705

    SHA512

    e3cfbd8e870499c71c6933906412e8f48a113b17902b6e4106573d401cb13df32851269b05364676fd43bd47dac21033b3421d32eb0ad8d4ecece0d65a7ca26b

  • C:\Users\Admin\AppData\Local\Temp\Cab3832.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar3854.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06