Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    122s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    22/12/2023, 14:51

General

  • Target

    cd68007ec7f78de7f138ce568d369b1a.html

  • Size

    4KB

  • MD5

    cd68007ec7f78de7f138ce568d369b1a

  • SHA1

    5ad84daa3872bd8747e912f2efe280cdec9b5562

  • SHA256

    4fb28b3698adf8c46a608079788f23911c53e90341d595e5d7c0f2e759ddf5f5

  • SHA512

    c9aa044e15e857ffd0ef30cc6faf74342f5bda56f5b51c7158935bf1dbdbfedae42056f2a57f0359d7a71283dc71167dc781b94248761e11b8a3390a3e0e6ead

  • SSDEEP

    96:rf9seakGiwLsvfpFFOxUEevBUqsOeN0Eg9jag0MwpZgYR:rf9FaL7LQFIatvBRlVEg9+g0Mwrh

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\cd68007ec7f78de7f138ce568d369b1a.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2080
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2080 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2312

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b39cb308328fc61352423e9123e68753

    SHA1

    27115fa860db5e7448c5496161b1052ec50246e3

    SHA256

    36099365d70c1cfffa3d149e485830e56fdd32a789705e78861d83f56d3c7894

    SHA512

    f81790c147251034189ee7777f6c64afb45efa4a0414a026edf587f53da5facc4ba4c337af8934efa5d5da1364daeda2d814a15f3cd1603005c63be3177e1942

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2e3f6ea53479e24fbf94f4fe199dc4aa

    SHA1

    47639c62a7641fef1c02b7f827cebf4a391a9eff

    SHA256

    882fc487899fec80e9c36f3cecfc48a710710875e1b53b33e3bd9e46ce14bd58

    SHA512

    106453224b77b0ed25e55594bd92c2323006ebf4bc94f98f31cc4e16a2f353af582db3190b1f831c110a66fbe10195c690030751b5e0fcea0709458b460847ce

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c0338e3788384874b2829791271550a7

    SHA1

    299ce6632c9488f2d5b78a958ce355b4baf2c72a

    SHA256

    904d4b6666a357e7ac85a60acf1b7e8d9e7dba3b84db6a4bbb55c8410eac3fdd

    SHA512

    e00cc732c3770ebedeafad8b8e3052e89313ff1d7d22e806cb1cd8c929d1084805e628c29dcdea0cf204bb0d378d3c3216288864dc40c0f9edc9718caee68a78

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9f6e410fc569354bd80e13869f0fda77

    SHA1

    46324a3b3658f07658c18da7ee4742c47071fea0

    SHA256

    57d19214c4a99d0baaa90db7c9f5253cb4aab0812be843b39ab077f6d77b0399

    SHA512

    d84cdcf144f37c5bb0df298177e8a1e433dd8c4f3881f8559bc5b2c5a92ea44291e0f0d8152ea6777c1e2edd051776f4d8307e4c144183dbe7229410d7474cac

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6bf4ab954c6a4f3186351d4a3b2a564d

    SHA1

    0732f4b774da86b593d1040f32ccb687571a5418

    SHA256

    a54b1d4e1db14f77639dbb015c1928e2f0462632519952b4d595903584ad8bb3

    SHA512

    70e909e514b622171356c0398e41acb3c6ac81030df9372470bb4b8d46fc77b74fa8c67124c8e2f0ea2b9e24dbcb3d989f97e3f125c993330ca75b5fcb5c3979

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1e54e279d2a13fb53604c9eb6bd14645

    SHA1

    9934583024478580fb65176b96749c7ce156383e

    SHA256

    4eaa11b4675ea67028a915af8b54b89dee29b999ff7dc33e205cb852ddcce2f4

    SHA512

    ef8c4d49e6e2e9803eb3e3df409985e124aac518989692dfc0b133b141d7b3b02d2f95d6de85dc85c7338eefdd97a2075c17424738eb0f238e7823d96607248e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    174a6b654a34c9b570e93e4865b666c8

    SHA1

    33672f927ad56bede643de66158d5c3405898ce3

    SHA256

    e7aec050be9300cfce9b8bc1d97a433bc4a1b66ec2f9224fee7a00181473ac7b

    SHA512

    63f3bebb1a3c39d894ad1733eef135d096fc4e1d307065eb49731df86f800e6b9e00dfe1b9447571f48c28c81aa16ed800590e01c31e317151276ea923f37317

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d4542f7e7847fc212c7d2f32cd0f3995

    SHA1

    e6c00dd98cdbe5d2496adb4c9375198009ed1178

    SHA256

    e7748867d208d2f1b957529f416daa5e45276343496c86e3aeed6af6749759e7

    SHA512

    b16cf7eb749e3c3ba3940474095b377fb48e760d8ce27f744ece60e2ae02a4816c08695b5102654ad9c343c9f906c50df9a38833ccd9f34b7545e4064769c546

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    54a0bbd6cb2f38f7044c6487cd6155dd

    SHA1

    0e84608d2414d4a61dd731816a4400016965ace5

    SHA256

    d9718711936d82f55f21b1447a5fc8c22e1661b4059d98bee85bb206b767860a

    SHA512

    a1c61ef86400c040a63ec8044448b7738c8ae2a875e048c1dd8d6813b9d479902c5c009e53c8c49c6a407129e077ec8093ea4ccaedba86fa089a363693087dbe

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a27513be392f0b4af34094c4b9e3ba5a

    SHA1

    f2a3826267215fd6281eff46d0d013f2d91f131a

    SHA256

    12041aababcbc3043e0b51090c455e0036592da5e2bded64e9b57882e609a3a6

    SHA512

    a2d7d34b4c65d63934687af52965750a2edbe39de672ca68cbc29f2828abe17624fdde966d7e3cbe5837af4a7d0611f18d2e4dfb21c8063e5e554329bfb5568f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4028fe1687f7cfe7a2850c65f5eb1477

    SHA1

    b9d286b955014c397854133d55b3b0c99b4bc6d5

    SHA256

    7d0ad323da4e38a43f7c7d306aab15babb62005076200f0fb9312fdf61363f8f

    SHA512

    a605a5f1ef262660acbe1a1899c4a33d888becb243cce0b66eec5b87c52d3ba9797036459b56a393141ac235ab51943de04043dac8d187fbd7b81f4775a3824b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4ee9d96f34a5b027fd9cd50da2a9564a

    SHA1

    4777ec524b4c99051998bf9eb33aeadf50ed9b6c

    SHA256

    b0f9d69c3efb0a81bb4d088ae3083a5fce016d0a8b78cf9f1750610b3b82ee23

    SHA512

    499ddec129b14bd4fbb0eef3c9b609b282dcbe18eb630ed2ac0634f1f2e01453c7ce2ea7f51d56e159fea702d5928aa3303a958f2fbba4c2f6ca2768b1d34303

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e22fa6b46e4e7f7f88aeb3857f3f3a74

    SHA1

    be9895d57e0e0a3bcf74434b8f577c9903d87fe8

    SHA256

    315d4ce1739c76e38a561cb5759bb2b3e2610a3b4ad12fef933e78377bc8a6ca

    SHA512

    277b9372ee9aa3728103083e34d960949f73638e6ad8478fe0a114e7245e128226b1834dfb6ab78ebfb616e514f2103bec44ba1c87a25af6a6f1e018f7f2c69b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9f403ea709f7620fbdfcf4b432f6d09a

    SHA1

    e2c40f957af6844b30022da6a792785c891fafd6

    SHA256

    c1985d2816d24948b652b9071236499b4f38e314937cf52e58b5b558b6a34a53

    SHA512

    5f5906d7f7b05b609dd98120b5b2d3c322656dc9bc690d07bc52d4da351ccb287eeff349286324a3315c10ff5d87310b421215b526651958c76d52c589208f2e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a83c1681cfc3eb0e303155d188d99d07

    SHA1

    f663bee0459e37af43fd210e86432d30bf0a8246

    SHA256

    258c609935a145be3f51deb91c9049ae6ad1c0f9d4c566a494002235a99ff60b

    SHA512

    421ae8ce3b69269fa28713fa2e43990ad4c40328c70bfd974352c5865b7415eade12a854f48d09c71b9c8ea5888365f5ad5f6521db2ba617a14ae2f01c1e9de6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3ec311511e87421736cd7267832f047f

    SHA1

    c3616aaf11ef2ce84fa928b9bdc804837d81c962

    SHA256

    8fe1965d6463b2c4344692002dc29378516d8bd69953740a77ddab940793ba7e

    SHA512

    e4859f988e4b9b4e2edc66c76e8324d29f2a27386022011abce170e2e28eb13e76031799092bc4071df40a2c92cf3d9536046ae63b54d186e6eb46dbd0096e87

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4db2fecc33ce837d2067c56d276bdcd9

    SHA1

    88449f6c29c7ae3e1b49a2936babce9d6a89a801

    SHA256

    c80b3dab7c49271fe9167432232304e681c4185b56961f1fe551664a78affc3f

    SHA512

    faf078d33f0f31657dafba05a9e77e70e0cb86ba0073c885b40e00b3d1e7180da54b631159f5db3846f27bec51e2ad361ec31f5a3203f74a3dbe5e71078f9e29

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    70631a03e4c20af33a76eae541f26243

    SHA1

    11459c7fc40e2350cd03e1182a0ec025f407c84d

    SHA256

    6b7731ae2cc00fbeb2cbd56a183a09e1cf7d0a19d1a5735f85cf19d6ea969399

    SHA512

    2fd14a5a5679cba06bb2702779829a141769806ab9c95339e6cb2e884124bc711ba378f2f66acccacc756b082bd244be8016716c1cd691bf5bc89d386d502ba9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9283d5ef932637cedd5d7a0a0f9eca6d

    SHA1

    0e8bf320db7e7b91424cc321fc4bd1ce717fb981

    SHA256

    e27643899c714e6989b2f3fcdfe90451a8fa311ea83d3365e1292db98f6b727d

    SHA512

    bac3fc30e06eb4c8cafca95b52faf9ff13f94471b87f90688b65212ad4f41358e7d40cef2202599e7b4e96ccc03329e187d4373195d65c2cf1e1e887454ef5ae

  • C:\Users\Admin\AppData\Local\Temp\Cab232C.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar23DB.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06