Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    135s
  • max time network
    131s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    22/12/2023, 04:59

General

  • Target

    6bca6e35d430edb6ac1e340778706087.html

  • Size

    14KB

  • MD5

    6bca6e35d430edb6ac1e340778706087

  • SHA1

    d0f755ec24efb006c57a148dc6437d0bf70ff93c

  • SHA256

    bc3c7f697ba7e6ec040f84232bf33cc28889c505f96d17b7b4eabcd65ff357d7

  • SHA512

    0bab0b7c6795ad0508440720f1b86fda44d41a0e18ec53d3ecc83a36f1904658b058e077f0960c030940a6798dabba9f539b77ca2f27c891a369824755818ffc

  • SSDEEP

    192:+yEioELD/ZmXg8oWllefMJkZQ3wf1vmmlKt6DvE:aioWD/ZmXg8SZQNmlXrE

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\6bca6e35d430edb6ac1e340778706087.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2228
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2228 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2316

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2c70e644d0bd80db2405ff028d448c02

    SHA1

    dbadf228d010f7df893272a75855e7cce8c4e0e8

    SHA256

    c78b1d3c7520b167a320ea2b7ff9cfc9f07706d362fe46b9e42a8c2f86f000ec

    SHA512

    b86a8b742f917315e87aaea59aa916dd1e6f938157b8622d243622e67da7179d7707db89a5f6a7b1a6717c652aafdc249705945e573f99e0cef18ef65a459ff8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c13a652edd56352733c2169b79252327

    SHA1

    d7d26f2b1ccb471b4c116eb2a14b121851133911

    SHA256

    88edc26826ff29939453498f9f3bf64eb7d43cd47fc4742e8fef0bae710b51b0

    SHA512

    e9cc5fa2c28106004910b20db1f1d894f922d3a0a105089d6db048b3fc4fb423748dbab0ace2f0d2fa9b9fa41ec49f8ac65a0521f8298ce0554a001550e293e3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    52b1c7b5859c4ecf382d3cd04871c62d

    SHA1

    46d98289ea8414724caf76118c33f0c175acd526

    SHA256

    c7d7db77c50f0601518c9f7a6600400ef9ddac746b5cdf40cfc94bb14e908302

    SHA512

    f4fe0050b9a2a9c39cd506658e92cd0ccdc45c43fc38e5f35763b5c80e3a460d42948aeec551b5f7beaa617940b7155ae95976c74bd8e04c44bdbc752d1f488d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fc8931ec18a05f0d1e3d8879d5dd96d5

    SHA1

    c6f0e2186854b570f83908535ede299c536fbc2f

    SHA256

    f9e39ca3c02235ad0b7eadf377b8f2b227c43c17d157be3deb7f5a211baec3fa

    SHA512

    43bb75c8902aa72bff02d4ce40bbc7156da10cd23c9a3e99d2267d95f88aa6df56aa94b2b00f92dffa14b77aa8ee708a6f02a305910fcc52a1a0f7a17e69ee3f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6d7bbbcad6889260db54ce9689f64cf2

    SHA1

    8919325de4ac9c746784adbe73fc20d71bf17e79

    SHA256

    a43fbd2eb361689b196113f96bcff4507359709cf7e20d4f98534347c053e899

    SHA512

    b035aa545df0e2c19843887cd59b0b0e9f42b92b1d97c3066ea16976b3fd528b1a57858376a53a64b39a8270f4220bece5a487329f8fbe0322b0568457007ac5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d11263d83680d7dfd341e3952e91309b

    SHA1

    7986ad3d22641a7431a923b59b08b12103123d3b

    SHA256

    e80ac051194162e7366a33e58f0be290f01b3b92ce8aa394036899644bf04064

    SHA512

    22095fede9677d9c493c7e91421ea96882b9665a252fc588b762924ecafc18890d07ef5ec95339579a23c0268ebc6ed2a98ff521c4391d51e1d8fb9726c0510a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3e7b9304b1068c9b7a2ecba2fa390bf7

    SHA1

    7aa4ba29b7d45c0eda8fc3676669c41b1e2f7586

    SHA256

    70ec878099824c0702b4f1e075fb0ddb21a0ef47f7952fc622f882bc9a7870e7

    SHA512

    528f742282b128755c246dd99430ec0a7202e041447cec63d312f7bfcdb7e339de71a9c27d4c20929f601e6798b04f9d4d3fc47bc6d4de4360501a3021bc6090

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ce418bd95e6aad59b2ba09be4b6cf8c4

    SHA1

    6c2409bfd4def2e475464c56175c2c63ca40dc85

    SHA256

    b058b793c8bb595b78a9394a0dfded6b9ccd7c01bd4e7ef39e00ebae7e4de502

    SHA512

    ef4e6dc4e4f1badfea3257b5fb06bf5ebd591fdc80600a9e1af8399da35bae5b355a2dd7ded64c54d8f817a1ceaefa10315727f641618139b98795a08bf9c22b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6096640ac10fa3a8b8378a4589a283ff

    SHA1

    3e9049ce22927501a898a95d313cc4b9b21cc399

    SHA256

    e8e128843469cdbee6c28324a4b6d1dd5580039d7c6b50893340aa1fcd58db90

    SHA512

    2745dfd4904c0ce20bf108da27b5ef82e62de81bc45ed6e2bbc0b982f89eb8cbc5d680721dc99c2937ef380b12cc56f567cefc4ce849b565f56f4da90908578d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0271793f9bb96fe86b217838e090302f

    SHA1

    a25538ce0b07dea8c1ebf34b76dd18b385671e24

    SHA256

    f4c6ac26eaeeb793d7bc620c5c2bfa5cc9962bfaa4ca0c8038373195dbda4ed7

    SHA512

    87d8867b31c5ef166b6aad19de4099fd0eaf7ad49af8a90d37bee6f2cd88687451276e4b74f284112b56b80f75a0b0bbae7965f5cfd0f93d137d4375372ca247

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    aa2606850e4a1267555773415410be6b

    SHA1

    3c78522a8ed41598265e708182f5458e5413d785

    SHA256

    c403e7dfec60a7cb4e85da143c16fa0787c8ac64b979ba09aa57d6237a487bea

    SHA512

    b58cd5b00f59266aa555d6ad3af85557e1be77a0c8abe4df3755b46b3621eb19a8798a879dc441cc7ec627d5ce87af293693fee2daf50d4e0a5b45533435b42d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5764aae6b7d9978a145593a589bf9331

    SHA1

    506f36772f805b54361a34e567dfd426040a3118

    SHA256

    6bfc320b6fcbd2b1a6d51192f669b2c252a2c189b1f26dc9b1e11fd5b72bfda2

    SHA512

    a7c9365ac51ffbdcb8de8b203e29f3720c3894ec76bab53131e2c0a55d50efd431be13cc60b86b13371f2688157e1029640d1c147164a5627a5e4a1f1f8871e8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2fe7eb066f17152380aa6d85b6fd1411

    SHA1

    975d10d64b2bc22d0446bc372e92b54e6f9e389b

    SHA256

    cc3ac69f132ac7dffb8ab2613e15974479a1fbe30d1e8f5f002e352be6f8b5f9

    SHA512

    6b02e579aa35013abc5790e2e252a09a261d01651f22347d262f4157cd0699431e304522c608ec73a4abe19b60b81bb53128f35e47c073dcaf3cb0d31219f4b4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    33aebfe1c4a11bebc9e64510eee960a7

    SHA1

    e4632a2a7bf109e51b086b3615d2c2459e78d884

    SHA256

    36eb5cf9ef4d15bf44f007095e90c3a59bd2668ce401387cea5e4f30b5844858

    SHA512

    6b589c79b52ff58fca20aff4be2bcb195d8a4e866606a6a4297deb8879b21fa37d854eeac68d6a056271b02c7b15b62a07c18bceee2f0a64d9e8ceeb608b494e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2ddba5307cff6826a20e5477026fe18e

    SHA1

    8e0014dfa94b688009b7e70a99d74b91a7a2c7b7

    SHA256

    b47fe2ce90c3e9f2a2c146c55eb561523af32c9590e4fd15875e6fdca1c7772c

    SHA512

    336b2003c79a6e48c270a6db7cc5377eac23482c4088d23bea8e7e737c0e3b3bc27c09a7c9ad810d7f59a626ac968df715732054f604c85aa32a148ed1372d64

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b6a616094935ceed3ee2126fafa51897

    SHA1

    2a033953b2deb08c559ce6b8e27b8d5ac7377e46

    SHA256

    ea0cc095f9bb3bf276bd91614377baca962c0439380ee1a308ac77c0afb411f1

    SHA512

    cdee29de33c8de2407db85bcf1c0a4767c49ffa285d1733246e71918b0e96ecb8b6a9d808e4577fab49b507295683c01ec7988b41f1102e8319976f7b51e95e6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4f7bb01f47dd26921804f1079256efc7

    SHA1

    8452286bcefb0bb44a565de25f4ab3ea8ea78195

    SHA256

    c5acae301ec8a3d826df364c258907f27a9b948b54aa88fe5445b65e24a9261a

    SHA512

    069f2c673b396627af6c37a76b27fc2bc2312d55014ef8e4129ed9638ea3377c5dbf3e5148c5b6f3047a472066fa92b0b82014622dda6ad6c17b6fc3b374402b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e72d39ea2213e7816c5afb5ad78e73c4

    SHA1

    c15344d3c3e53a1105fc79c3aa7bbbe07f9c7354

    SHA256

    c9066d89eb7ce1f1c8a3978708f37f26fbfb8bbc0aca6c932883cda9e8e9174d

    SHA512

    445a4b10341fce0efbfb1053836cc6d6e7374fdaca9610ccb6da0a275be5e1f0ecd161b8ee437242b355eee5305a7661821ced01b8bed0b3657df9691d2e461b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cb169b4f3289198e0cd0f44e50060d49

    SHA1

    88c223fa579f9098f78668554c1027212b19d5a1

    SHA256

    ea029baac5bbf5ee423679d236579608a4bde9ac6cc68928060b60c443fbed93

    SHA512

    d3baaafff0224a85371c15786bdcbec4713f36d5cf5fbc8248d32408f4210fb611e999daa645590a6c9d6276e00786f7c22b75905f580f0205c335f872f85605

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    88ba51a7d1b0a67eaed991be7b24c7dd

    SHA1

    9f31aa328967eaaf97accd071172ae460cb381f2

    SHA256

    720d410a5f9ea40e7d3d9d3de03d5fc49cfbfa33912e61a46465349814697dda

    SHA512

    4bdaff83c4257fc9d2abb2b7045aa06f9ced75eae740bdebccd99b61ea342d98103f2e387c397760c0df39d61a96955e41a7372b401f8a55ab31bc938bbaa34b

  • C:\Users\Admin\AppData\Local\Temp\Cab68E2.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar6992.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06