Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    133s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    22/12/2023, 14:34

General

  • Target

    c69bd01e582d41cf1ed7e3e4c85760de.html

  • Size

    601B

  • MD5

    c69bd01e582d41cf1ed7e3e4c85760de

  • SHA1

    3c00e48f52d675ba91f2d1965d28a16e413213e2

  • SHA256

    79a518b6f3d6881f6ae44d1b34616588e573de3dabf389996c782410ff708238

  • SHA512

    6cefa32a6772b391ed475980253d9e4ba071aa938cb68255e0d585092c6547f57d2ea93676fdef728929ce7f8d93a4490b139c4c34deee24120bbfb1d43d1259

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 38 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\c69bd01e582d41cf1ed7e3e4c85760de.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2392
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2392 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:3008

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    5264d3b2cb09f21505515410362297dd

    SHA1

    09a63751d4004e243bea17d71e1fd92be76fd9c3

    SHA256

    c0c8c31662bafb54aa5489225b084aeec3c15a709778b1cd0342fd1d16f445b4

    SHA512

    5d5286dbbc609513bdced5bb0911c642dc5bd633906d9a35c3b8f8d667d28322db410b969bd425aa5abd8a661df6f38b1410b194bbd8759e3044caec4f40b46d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    630cf05cff079431b3ba714001cedf98

    SHA1

    d1a97437c5ba9ed24335cc40e10e6890763c4991

    SHA256

    52c0adc85b40f7e036532450b0382b637aa7b2394be7ed6270a013359825fd9f

    SHA512

    289388ce54c980309911f5ecf226af0e5349789a262977db1668369ca1b8d7d345dc52b661d0b65bc2ccc5f408332238c7048adda1e13d8eff0f811ef859a81c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    74bd54a521d924e24abe0aa14d923db0

    SHA1

    ce732085091b2474cef855654ec7d75c9dabf96f

    SHA256

    ec862719e33eca99831252b6b4029cab18f189e2fb0368f4303b81a9c591e792

    SHA512

    39861f4792638164ed820ab23e962ea8c6b4f1c7ee580a5a4638f44f8fce368c06a0fe584ffda19f3441b4bfae72eb46bce54f450fa53cc76f787cded2cdfddf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f610c71691ea78a994caa0bb8a3fb602

    SHA1

    860bad809ac9e770d620e8d06f79b70e9131b58a

    SHA256

    d09e77e8c188c875920114c0bc94959a88d6862ab08b54a78b321fdc2a8ee789

    SHA512

    2c4eb8bcff5c7c9156fb900d6a72473594a83b7f3710866ef4e1061c17d1cda0ae9c0d9949690884446a2da5aef5288b1ae38afc6ebb3d0da5df163ce9ced998

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b764a68e5c7c806238ed4a31933fcdbb

    SHA1

    06c6c208acafac78462c70763655254330b9d20e

    SHA256

    959013ad80fe8eb115c48a8d443f0c0f016347e0d4fd7bdf37366b2b4b31e8c5

    SHA512

    86512a0cb59b98b74758e9fa2f2a7c3195adad29cdecacc344be2a93c814f2a694a052fa91e52481f2ae1bdba7eee2cc53cada608306cfef3d2ef8a0c0ddd5c1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    22ab37d2783f614ca60e71c6cf8d32ed

    SHA1

    02658486c7126924ddb7f858057e051b2aa97a26

    SHA256

    c05074637c530eb620d63ec148cb74c12cb353e80aec3b5c0452fc1a1d4ffb0d

    SHA512

    1315744f785fb2cd2cf0a78825ed9c5d9f91f4e7f58ad97932b9526a55e8653bdab4ae26a1d95ba31c72e1f87677756fde4fbf71d100aa8cc4677d793dec969a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    641efc23353afabc84ed0bfc740d8727

    SHA1

    79b6683d40d8ebd36a9d329a852aeafdcf0f6f0e

    SHA256

    a9e8d61f7064d8f455e4e4110e7a734283de8914fd51ad924595d78f781eb43d

    SHA512

    5f7b62deb909f2234f731b1efa4d60d4f788ce713a62075e367d7b60f9ce5bda2c3bc715a5b862415b272971ae6b5a1f65314254862d56740cb0b119a01b5876

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    dda765693291053e3c9e97cd22b55cd1

    SHA1

    3feccc8de476570e17da65e885dad380530ad897

    SHA256

    1af20a1da83b79a030a9d3c29e496ce6be56488d4b6ec4db828a57aca76414cc

    SHA512

    7f6f3b575da6f4615518c9b4eb3ada81ff211d15e4d0f19c514e2fd68cd7bb0e9ef8d352c3e2587e609765526afe6d6f73794096829186d707b2fab89c2b8822

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bbdb41cd3b072a78c3ccfdb0773faab6

    SHA1

    7496e272ab462f3ffcdd63ff8ba93bacfe9f5418

    SHA256

    3136eb00ebdd1652b4501bce87be2f22dd606017d37556b5e1614c88e26cfe56

    SHA512

    771b78077336e6e09a1d4d67cf5323efa97e5e7fb4c018f8ae262ec6604de6bdd26e0f28cb0bcee396bc9a78fa6a72c72f17bc8f9556bc432cbc90ba95bd541e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ea6f80653761fefe1f576bbfcd5514b2

    SHA1

    8af030e1510554ef78cd3f3eecdf4928d9192e14

    SHA256

    4b7b7e54bc045116f39cdea0c586f818c9897196041d9b5a374636b976da6157

    SHA512

    860fd2b32c91bf082403da636d8fabc34a36842c97a3a48b75dd74151ab287d1b5cc3979051a217fbce756d2c976c819ab75aae89f1d0d79e77c9e6bcb06dfdd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    104aff9e8cd009e26f1519d715a588aa

    SHA1

    5cf791fa680884a419bdc7b91ea701c674d3010f

    SHA256

    6aebddefb20c95d5973eb5b42583d06eaad94de2d8e6aa14d446c5eca15de8e6

    SHA512

    7eba46a8f6cc6efb64dabe567e2c2d4bcb89abc672b27fc59bec9dbd069a7a427b54688a19923b08387466f8635dcfeb467b12685944360160da847a8fcb1d95

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    01603b7e845475dad80442ca9057db3a

    SHA1

    12bfd2c4e0bfb21009029ff9de26fc6c89133fc1

    SHA256

    e634043aa5e82f95a7be91df33ab4b465df5a8bf84244e56812ae80ba0c20dbe

    SHA512

    a99569bdf7e0c2df241f9509b5e384731e143a9977c27b94fb1fe8b3209f8e6b776c559320c3e833bf2e5df3345b7233963c16d03af6774f511178782b59ae55

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b94fd4890a338d53481e1aab5f1d6da6

    SHA1

    c2d04473146675474cec0f58431303e145a66b36

    SHA256

    1be780f8a5a3680bb5cc480172401ebaaf515d3c6485a8f5d5e3a95db9bffc95

    SHA512

    8c344f5fd8d56dacf77751efb195ff8ed2050c3e0be52855452929b558b9d508e1785767b360190452a26fdb86dbfd780d116b706ee445b14c6dc4c44c5632ee

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3d41fc846f43ab5d9371c475e4797292

    SHA1

    21d59d8980060b6aafa0f515cb14983f062b17c7

    SHA256

    85f16b4c1db7c05a6bb761160a9bfb281c105ac2a8b2c47a64df0f49e63c7493

    SHA512

    f26fc8295f29bf55d604923bc22007c0cdd59a4e7ea4fabafcd5c4b7786afb0f5330e7d8cb0ef8850c0f94c7130dcde2dda87eb5cb36fdd0032cbd9a897473bc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6e3252e51314671a57e5bace288898f2

    SHA1

    570ee39adc15a302e2cfd0e8ea0beba2287d8f2b

    SHA256

    6706be6bfa18e1e77c35149cfce83ac8531fcf921527ff59c9572ae355e4d664

    SHA512

    3534ca398b439fe3f1fce56c89563f99049eee41bb357506dd3040cbff5f452bdff75f6bc8314483e62e978a418d314942ef95f2d4c36d82045dfaf355886f7f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cee589f8c6921a8a016a59224be4860a

    SHA1

    b5e34da57a35f0b9a68f52817d95e0d644337a48

    SHA256

    ad0efb9cf1e9bea73096ce68a7b09b83568b0102307d2b76558c8eba7dcbda84

    SHA512

    c9f6e98c6dbfe310146f1889bf2acc0d29e970503a9a9e39227b1301a68468243a0d81894cf0870446eb3697126da0b236241e2237901e1fea2435f451cd4dff

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4942b156dab21f38058dbdb3c1bcb25f

    SHA1

    854165789ccc9c1710b5beb00be278357f08345e

    SHA256

    c128b308b7fd9746762b203625c1ac7e369fff2304366891fe7b44a21a4e19cf

    SHA512

    281787871a22e765d6eb4d9e0e1b9b96c6880dd0994f56af52ee31c975e9d35caea13fc4dd1a7cce0c09357fc040333e1fcfb2eb9af1d3e6d60b58fbce8daf3a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fc64d3b3697998e86b6efcd40dcdd9d8

    SHA1

    5a9b25d277aa67c2a8d09ce9fb40cde57cdbe7d6

    SHA256

    d233e7366470066c423cfdf8db7b08d4d697a0d35b8cd3e5b5347458af3d2386

    SHA512

    82a5538ecdd2224d12c128016f2928661bceb30ab2609c67ec29d5d0a718f77bc762de666b65ab8b0d067749b9f6e9432d39531cefdfbc43c1e4d81e8422eb30

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a1695385b62fef52502cc144148d6edf

    SHA1

    c426fee90e20d86c8f919f26ffdce38d6d78cd59

    SHA256

    1af638b46911c344ca60623f87d85d2950a97feeab2d751fb355d0623e2fe556

    SHA512

    79e63609c299ab14cf771b15dbef301d49c3a43c045e5720845dad1b08403d9e71d14cd67796b08c433aa264c9e8c3c1390faa58bab096a5d8800bbef4c2c175

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e3266829320f4c0c74d520eeb846792a

    SHA1

    8429c2a376adc3a108ac0f5a38bee0ceb7d8492a

    SHA256

    4617fbd8e794574c2513718a8db92e5f12ee22fa69430869b2969d47a7746da8

    SHA512

    41cfba94f2d2983d416de0cf61910a9a7840e786ec52926881a6ab49d96da5bf237f8fcf03443f6578b71f19c29b46bce98daa92cbe56ad68818c93629ed8f46

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ec1f74b71ee3602be118239d84f47688

    SHA1

    b7e724686a91700538dccf89a11acd90d9345bb5

    SHA256

    f5dedc0a323bc6be49de9b256df2d4dcbf99b2b1f56a12b4198f3b9e8325125a

    SHA512

    8016c23ddeada6ea29d70500851eea7dbbd73c031ec94f72b421443c796a271c570be65dd39497d86675158359590c35ab21a6619145e50a1cf3fbd451ac0df9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    42cba68ec90f7262a3ccd1dfbdffbb9d

    SHA1

    4bf188abfc4b3f9ee6cd6af38dc84a67f33fc1e0

    SHA256

    a3a238a1b5ba06bc8dd62ae96b148fb36694279a45cea75d9458b6b1047c37cb

    SHA512

    4b6ace0017a3e00398c5c65fc010ef78b99ee8f7c8a117275833b3a7cff1e8c939535b1cf1bd8f5fcc0316ab52878d3e4c7678295cab00876287e44f7629348b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    86c35e63d6a0dc44cdc28bd68aed39a8

    SHA1

    cb0cdc6f65382b4a364bfd4b4becad28cc5e81f9

    SHA256

    ecd3e49e274b111853258a59614e471906f735495c76fdbc00eccdb4d0203c1a

    SHA512

    e0f1febeda12b8471a33330e0e67dcc512e30563eddd0740b3d3f0917d5efc9bf06c18c9c074fcdbfd16e3d21b32f8917fa25549f243c4af54a16cecbd0568e9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    664ef0b88a5432032630e2ecf77ba1e2

    SHA1

    df67a5276c804a1ccc030202651a99a0df62ab86

    SHA256

    4b1dfc095fdd0ce96456c47a8767e218b4d8badfa29ee9f1968b5514cac033c6

    SHA512

    ecd13f77b4326c813d439d24726daa6450da725975dfb8abca33922efeb3e4a5c6c39ce7f447a795677fae0dac59656156ffaf95cf764da7b592dd7cc117403a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\Internet Explorer\Services\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico

    Filesize

    4KB

    MD5

    da597791be3b6e732f0bc8b20e38ee62

    SHA1

    1125c45d285c360542027d7554a5c442288974de

    SHA256

    5b2c34b3c4e8dd898b664dba6c3786e2ff9869eff55d673aa48361f11325ed07

    SHA512

    d8dc8358727590a1ed74dc70356aedc0499552c2dc0cd4f7a01853dd85ceb3aead5fbdc7c75d7da36db6af2448ce5abdff64cebdca3533ecad953c061a9b338e

  • C:\Users\Admin\AppData\Local\Temp\Tar8DC.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06