Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    144s
  • max time network
    143s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    22/12/2023, 15:41

General

  • Target

    dda32784b7b6f83e5df26f96a91d68ee.html

  • Size

    172KB

  • MD5

    dda32784b7b6f83e5df26f96a91d68ee

  • SHA1

    43a4fc125abbb3391713d1eeffee340547c17ac2

  • SHA256

    97883476d15840e8bbc6e32a6b783021ac07978e95f1d143d27ed50b83c2ef49

  • SHA512

    39688c56e8eca7532814177c249d271c6841826c7dc1165fecb8631d6c40a4b9ef157db3b119a432e9824f1a236e64b6bebef5c542d066d8a0854d5d16be555c

  • SSDEEP

    3072:S+hoeU3urXN2ZWZ85XxttNveBNiFsKHGuKK7hdFzdugv+QBxzqyfkMY+BES09JXu:S+hoeU3urXN2ZWZ85XxttNveBNiFsKHt

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\dda32784b7b6f83e5df26f96a91d68ee.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1728
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1728 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2648

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    147e030712d05f5e22e132c192ffc92e

    SHA1

    d70bb0b13f04908fd4506a5e2f0ea67627b0608b

    SHA256

    a603da7b09f7d643a42b2f55a5e8a05faea2383ab79ffe76d6eb2d9a0f6995ea

    SHA512

    cbbca178df2f0cb9a0631961f3d93f06d695f592d107c0d8ab2ba375de01f4ecc08d03359bf8b8572d5661e940c306d3c3792ad0edd86640302aa63c73d8dcfc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    47972b87213522e7bac59ab93dc70367

    SHA1

    029647064c7651b4b9e749926d461540c75be765

    SHA256

    08270e4811f376c1a330954362337fdf70354fb5dfdecb187a4a79e083bf1bbc

    SHA512

    4aeab33ffdc4e815956f27d5aedea5fc7b590a7e9210294714fa79baa50c68f84ae766862b29b3caef860e38fb2445fdc88dedbaf4e3cd8f46970e2622329a0d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3b6a07a8c3aa97722528d64fddbad7fe

    SHA1

    5fe69d1de27cdd6e7e0399c1ec98d06113ab4553

    SHA256

    2db28c0caeaff1714d8928852fd80d5606ac8ad5a294ef3824c57a027d85f97d

    SHA512

    c7c6b3aa98f86b0ff34d29bffc9c7ad794b42304ab4607fd0d6cc425437b4181d200cdc02f93cfc5b936a8b0589955508cf2f4cfef128b87069e8c35684eea2a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    59d18f73f3c58fee7b424566b9ec0c73

    SHA1

    17f3dcbdf5c9eef36f9b57b738bcd1f9804ac813

    SHA256

    7778fd8fb87911c6a7bdd2102e20c66e9c1db5bb71ac36ab55f96da2ab9dd874

    SHA512

    542de086e20ea73b6d727743f08e6d9f1908cc3f4cfef99800fa9df7e72b0c90eb158e8b192f4070e560abb55df482fefc2e48208bef6d0955bafd72d734afdb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d6d621a119c2a34151611ea65ac98ccd

    SHA1

    e45bff4ff0277255237f89e9aae2e401a703c4a8

    SHA256

    7f102977cc70071d5da4e0941bc19c4422fcc78514dc3ebda6e6738e0fd9c772

    SHA512

    4904c5e645447335057e9e5d869049dc32c2f79080c32b3737421a0ce0929291e562b588c6058531ecfe96506d72e99d0c2db4074d85422e244469fd7e75d07d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8d1b33ac1444fc232e859d18d2bdec95

    SHA1

    3ab7d334f879491dbb2cb9e855a9c0abc7b5850f

    SHA256

    ec64bb48283fee44b9c4d7180380c1ecedd60ec823f31e7581383d5e37ae1802

    SHA512

    f6d6bf4935cb18b51377e683054d026fd3f9e4c48a415940f36f392dc53b404882a584eb5bbdf75e471b6de0d56265811e14c59d1e0f910fd1637350f832114e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    de899512156661586f37319ca6e9e6f6

    SHA1

    5d491d01fb1361f54226d7552249c4bf8c3dfcc3

    SHA256

    ab6e2208b827340fdf1798699f7b32b0a31a4256586b491bcd481d5890bcc114

    SHA512

    90ae2c5e686d9dd0e3bebde1be6d967ae074bc0ad030a426ae3e1513c579cf887331b2c38df7e69cd310db13a973e22eb69d6ec2757460fa22646477961fea6a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7f7be0d9463e73f73fe6eaf21bba57e4

    SHA1

    63a9a393939a9efda771795dabbb00f8feab8a04

    SHA256

    1b8bca34265b5bb8a0ba8ee5ad7648d3743a420295d0e2b40c5fd7bb76a0ab3c

    SHA512

    7c7f363e5c70c9a4ec48efabc087773ba8eb28ee40c55f3998294fc8fe6a36a7de3cc27c169296d950613e84a60d9b749135545704bd06b9e3b3bf5bd03b4fd0

  • C:\Users\Admin\AppData\Local\Temp\CabACA7.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\TarACE8.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06