Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    0s
  • max time network
    149s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    22/12/2023, 15:13

General

  • Target

    d4b644fc52b91bf929199b4054190887.html

  • Size

    89KB

  • MD5

    d4b644fc52b91bf929199b4054190887

  • SHA1

    1628d4c8d4ee8b44a6705c2f18c700cbe2523e3c

  • SHA256

    1a5cdb9d8ea1c047424a6f7ae983bcc12183792c2a7f8f76f3fe037631f452fa

  • SHA512

    a368a08a6e784648ba0edbceecd0606f7ae142946002902fcc5ec41429e0891bf906f58c3524ccea240b3bed7eabe7a203d5a7f64441559bdc6705f9bddf06dd

  • SSDEEP

    1536:AGAMLvcKESJkXg6UdreYJ7pzCSM+pl//AGghWNE18M3cT+VD:PrLvH6UfJ7BCD+pp/w3cT+VD

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 24 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\d4b644fc52b91bf929199b4054190887.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:860
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:860 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1456

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a30aba7f4dd0155c702aedcf49e65598

    SHA1

    3828e8d7ffe32497df553cd02b54fac4b013c4f6

    SHA256

    673c927df0ed267515c752f6c2129ad05c3fce2a9c695286fb10c8ac5221c1bc

    SHA512

    594a8c5b4b356d629f28e56a473041d6102cd550a49c062da4f3451ed34eb336ef4cd14aa323df78601dcd05d523bbda382a53daae49eb7f6bb74848081b1f0c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a6738276f9f55a4ee0a6ab021b5066b7

    SHA1

    1c48801429fd5f41a4d81e6cb2b36266b30d38e8

    SHA256

    330efe73217afd79e7809aaf5b14e49f2bbdde530dd225b2f219558925b6d01d

    SHA512

    de960f432a55714f9ea9931a383589ac2dd21581975d80290fa44fb09ddd4d93a4c43108f6ac6d40bfc38ff233476fbf10e0b7b27035f09cbcba414609bd860b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a89edccb8a41682a78225486676a2380

    SHA1

    16333585df3bd2c09da825ab606a65019c35ff41

    SHA256

    5a97855130adcc0f9672df88ae755717de3c49f3f688af692b69205e0ce19b1b

    SHA512

    b151e1c2624176ef6b6b37e63fbd7b4939b456a88b6af87a3231619b465806c6ad4dc67584c2b3ef509140f24de2052b19ecf67d52830b34dd3ac642ed34ae4b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f5fd5b00f695c0e158bac9e58078d9fa

    SHA1

    770bfeff3b133895bb84667b9f4a6a6ae0eefb07

    SHA256

    4dc7e86e7e007405c20edce24ae340433075fd8811c4ac85dfcd774c3676daad

    SHA512

    6734de2319b1fa1a3aaca4e96ae54004bfa17e08f7778b285a6e44dffdbe06e5e6bd6fcc84a5b0c511177a8205666886fcc16189d10f7fcd604e2c20f7ba0b77

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3ade0a07ea8f50afe2209b3d9e1e94f4

    SHA1

    732e8f7c07e2218723b37590a263b2a8ec46671b

    SHA256

    ed2e9264ca6a5e39d354f3272a7b5161eba21b838e45f009e6631aaccccd06da

    SHA512

    9b938483c5db21041acc753ff66398cd531cab377f197ccad92973baf7a281dbed453e9952b5a4e875dda5f9da237210e6be5a3a33259f0c7d2e15dbe6483a4e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cd774972bca7f78b9a69fefe406bcf1f

    SHA1

    24cd240885cdb77468ff8a21c89a80d9ba593d56

    SHA256

    4808c42142acbed6d2d78419048affe41e312df8f93bd8eaf54ddbc2ec1f2e29

    SHA512

    ec5f5b3e007c16f57e132af64bb4917b9fa94079504f14a4a92c02e7723fa1f9ec37d3486db9b541c4bc65ae73fd70eb4f5296b5e2e25c8f4d13d504e9c085b9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bd8d7eeda6a8770491edc141e982553c

    SHA1

    604c328e7723319463c36c2329e6019ef57c16f1

    SHA256

    4c2ae3ec1bd01fa52b7af941385c7586f86f5f8147d8c7a6ed83854dd25a451e

    SHA512

    08cf63d72bb2b3fa0c07692baa797577a0945ae5eaa75307e790c1277485ad20cd9af5f0a244e0e64c84532cb229523902c73a85b492b14e3db9e2a909b2c996

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d46cbe632f1528c9d0be7d1da8537819

    SHA1

    29866bd6a94cf16d57af75c9d82f91d80c4a1ba3

    SHA256

    5cdcd2245e408113a3dab400b21e3e829bec6c7e3fe0c437065b6564fb0ad9a7

    SHA512

    851cc9ec79f5814d9627a7d1aa0c90d99a9d96eac37c9165488b250868d5afc560888b7f9bd04882cb1b7af5ac98a45f17b5b713318f572a8c9e57f8a2c355b8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8bcd9d82053cabd2c292d9ce44d48cc1

    SHA1

    bcb1150655073a61e93a61e4295ad0770108e3bf

    SHA256

    bdb4e4f12c951878f8997f07d7e6da465e64f5ea839c916dca6cdf1b8dcd7e8a

    SHA512

    48cb2d47dd823c267ca76058db19ac185fc701a62372d77149364b6a427c58b00cee2167a9d29d35c6480e8e31e1657a971c38d449037b7209ad89e4c5526ae5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    69dcc7b1c93ec1394d6677c8725830db

    SHA1

    9055e256cda4ba007f9b593eb42328c2e6c7b251

    SHA256

    1a5067546c8cb70e90b0759a927a217018856fc38048a92e43ca0356cfcf9482

    SHA512

    c834f7b7a21b9c3cfefc6b18dd4d7e0c524e86d6f86d85ee28f914a4a312020ab8f1766b9402252d88e3fa2bdc77be096c7f340c5239d5bf8ae7fda0cde836cb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    50c48ff498d0e4a9a75447282a51b64a

    SHA1

    7a10ea33cb2cdb5320a2ac4d00cb5329678e21bc

    SHA256

    20d75ea204ad3193059bb9680591831919da0a83a5cf3febfa2652f447b522e5

    SHA512

    0e60b933016d933877f6ed1f2d4aa6dc5c865492d40728e0e6bdda56b7e04bc8aef49355f8c61fd1dfccda8a7e404b1b31a49738b63700acb2d6806b22147ba0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    baae30c55be049e4ddc7b21bedfe0089

    SHA1

    5f6979955e629842f8d7c895c1ef6d18e81cd837

    SHA256

    afed70a2e9f038e888f80fff815ce0d609a8e675a109c9f9b18e36a13a0ad534

    SHA512

    c44f21ef0ec21077c43024364c7b658e7a201070af0aa03a80414d8aa74087676e2ba55d689c95e70befc7d8f76cb2906d62b54ef448efaef685bbf87e94a0df

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1294c628c96e8677b9999791b17d156f

    SHA1

    dfd21d1f12a6907c25129b71074dbc38d0d8c403

    SHA256

    76d705e4dffe68e004041d04ecfc1f4850d743bc1c84571df4aa2fd1225a9643

    SHA512

    65e697eb17d1fee828c3ef558c14a639631dd3fae9892eddf64830cd836baa19cbe3a03a78e3024af569cd7071cd59886c2505fb53b23cf413846bcc4242f957

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    70bb0df39596dbbca8d85e560b417ddb

    SHA1

    aadd45b733e499c2578b01143db73598628e6996

    SHA256

    e792e4335883d76effaf9528341b7d44a6f95a304e35bed1cb3e194de7da767b

    SHA512

    c767f6a984311442634cf0f4246e689a3f5d9245f691ce49f8702e82fc1c330b2108e3c402041d8ff053650d1e54978a887071686492942bf41e960f3b3468cd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    138502f2dbce0d2acd81424fbf688ef9

    SHA1

    59d89b6860b04e33a3892d33c43c28fef987c049

    SHA256

    f2a9234e48b6e95dc5cb7d1c0301d329ff5f6e070eac1c6bc15ad8712099e67e

    SHA512

    424ef2f656a1ee4df5a615496e63b4b55642282f97be485bd1bc772de0dd69faeeab73faac43595b1ac6b30fac34e0ff677cbd3e7eb716fc87d7033a0cffcfdc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    22f9e1923f83bed1830dbcc0da6a5b72

    SHA1

    c7cc469f79515d9637345d9b6275143484db8156

    SHA256

    52a0a9f00c70b21d12d9473defac857147a4b74482343f7be058af72c32fa19c

    SHA512

    a9c1ee80cb7bb3fc65d2820ed2a756d73e284f90802791dfabda153c0986b0393b4fd8c129cd85149669f1ead90f6759576b2e2c2611ddc4ae7fd7c50f4b5ce0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a23a8ea734001286f16421108b0da86c

    SHA1

    8cb2c7669cda8beba10ed63e94dfc72032e60b15

    SHA256

    e4d1570158f98bcbe2d7bc8c50a03314441f6be920e69c7365b8d23536279a01

    SHA512

    59f4902d801cf65d326574fe4e1e3a399af1fbd2c55fb34418405a7b653ea1d6e411d45c40efeffcab833bd4b999acd3ce94c0d83d9cb24628aef262b9b1b559

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cf7bf1afc68536418770fcd83437f811

    SHA1

    ed4f0f39ece790a9ec3e987b6d2f543236f2986b

    SHA256

    5d1cdefe94e454487594f4ac42eff0b82d29b5bf068b25290526abf6008352b8

    SHA512

    a01ff858b321373a513800cc2076a9720f9fb43a3d07ac5d1850bf1e1ca656a7e9897697b931ea2af1e4aaea173fe57535e9f6faabae2c1378d5319689e98535

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a5ebde23b8d94520877849b2b4dbd9d3

    SHA1

    e5bad65f73cf437095cf111de731b45a0442945f

    SHA256

    84bbf8a4e8188b68fd5924547cd4e5dbd86fcdd57191df2fbb0fadba2fefb9e1

    SHA512

    8d83ee859db27df4ced72b21faf28a6774c48aed662fae39da61106d0b7371e65f3ba8c72e94f1995988a55ed9aca09f37aa91c9d35b2ca3b55276505ee1a98b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4965459544b4adc870943a298039d10b

    SHA1

    79baed079fa7111a4e6b09c5f7f294c342fe332e

    SHA256

    73c384f23f7a4684fc16d78cee4814be68e0921f4765612b021a69c370a74f3c

    SHA512

    12821b18c4c8cd39b0f8efcafb1f11b8d39463380c5e58ed9a01575134a96f4cd6f5d4881e334943eef32cf5cbfbbf6f9ca215c4eadba9c8396e1b70c5c7cc27

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a9411c59b7aa9fb8aaad20f951096bb5

    SHA1

    03101a9f9a2834be7c35e14b343f7a684ae766fa

    SHA256

    180f76382db7a3b184686bb6aeda7437abd0290ca7c2cc055cedc6f5ecbf336a

    SHA512

    d4a4f54f6dcaee19c282bac982b3d38e92b0a3d5e51946bda12e3d0318f61cb2b2e019761d41d3a5849f9665c8531541aac1f17e8cf83389df02d9a656aa2e5c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    73f38349a07bd157285344c3b856bf92

    SHA1

    f2e14b60d37df5d5b1430c7ca724b886cb29a2c3

    SHA256

    e7107227cea7cfb52a47e1734979946aa3f53c6c433b757f0dd4c68b9ac5c15b

    SHA512

    c5542fc742e6a81995832cbd3bc8099ff2a495183e75aaf1d3cc7bdd54e62f7cfa0766a8425f1bf25912bc940b0ba53a5de4d91de0adc5ef4487053aa3e373e1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    388ec06038f8cc931a936f64675e06db

    SHA1

    6eb073a15a1b24a96558b7fa464574cf6d424ba8

    SHA256

    cf3f5bbea610608ce14a5e6b70c416364d88789a43c10ad187620aca5bc7fc26

    SHA512

    bc92bb795e1f492260fea14a4cdfb37e44566585097ed2fc34e1c625aea3c9b1eea2f2212380a7fa0c80f5abe0eb8d81a5917bc01a5cbe1b04c055da65c8a9ce

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8e04b44bd0c30a9af8695db7ca4a6224

    SHA1

    9d6871527082d73fb13bc817b4791092099d16b2

    SHA256

    a6b8f592189f7d0aac67f0d9cb0d205026e741659d96f22185f3b328b5370d00

    SHA512

    9d301d30bc578997c3c5b5152cf582549b472ce70ce698b69a39e470a202c98f42dbde128027938e8bd59a62e1465f097252bd9206ccf579c96e232d698ebd9d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    99a469da4ae816e22ad637541bf9043f

    SHA1

    bef32d7d22ba0dab4a464dc3bc3d2fc828704210

    SHA256

    65e41877e65e62aab5e80b2fd4c5c99982c7f813af06a986cf35cab843a6002a

    SHA512

    7c48640b1035c16971eb86e616605551717aab26ec12f1a3662a33547a300e4aa21e4aa2ed1928c73c23265c9fa19ec748610995d49ea9f37d957c3a48da992e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    07acfbb0fbcc8973fe10e48a29711b4a

    SHA1

    63ab90ced9c35cb8aecb23a5476397bb8027bf4a

    SHA256

    84fe046fa4e59fb2fb8439724d809bebe890f24ee69484bc24f1bca6ebeb57b1

    SHA512

    a72825be278081e926b41eab0575b9cb873365d1ba890b67be19ef031e006487bd7afc2d8f3ac176ef26659e927ae0b42108f971057868add9e87d4c8ba9c2b9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    77a2c9e0dcee1cdd1a1e21846fb54fc0

    SHA1

    96256b3c84a4d6b2f94184ec5d8262e5f04d63bf

    SHA256

    f1e6a0ea4216e1fee38de92478387b748358fad69dd0565b5fcd0e960604a72c

    SHA512

    db1cf2df239342b2cf1ee82b07cb00dcbdfc78ccf7ada77a344a529d8ea7b47a229fd6cd0158b65aec649934f33e8971ce356e02885dbd8f2113c59ffcf68fe9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7f1603baee007c4fe37b4801459acc78

    SHA1

    cd13555441a71c92a6d1acedf84af34fe0455048

    SHA256

    fe6da5c9c5e606fdd902e689a82304ab4748d663e710018076e4334e942bb05c

    SHA512

    f6c0ab0745ce540779174f161ba4373510d4f6ece1292a2062735aea25e7d0ac9524057ce0086e3f7dca394dd35cc71722fd2e28aebda93958283fc3fbcb35ed

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6IJYZ6B5\cb=gapi[1].js

    Filesize

    133KB

    MD5

    288c5ba5b7001fe841c32f690f62cc93

    SHA1

    29aba9d8e4f7cbe25fa5e64b9ecbe256e51fc789

    SHA256

    c2f33dc18eae27d4e878bf837dd97f1bde5151e44b0271408535bb93265b8c52

    SHA512

    e375d41344a086d35accfb02bb1f91e2dd383db032af387fc3d6b1230057cc5e432e9b2cdd976e51425b4f587391d42f4d9d857c2e6f11e822a65edcb85f1c9f

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\FIEDGG3E\platform_gapi.iframes.style.common[1].js

    Filesize

    56KB

    MD5

    f6140cf2e81a9d5b9bc96970fe1946f6

    SHA1

    e18cb20a08d0c13d44b72e36e9560aec2187abce

    SHA256

    68cc8a99c8ed5cc0eb3aa2146fd34bee0051bfd98faa3c03b83c78b4a12a8bd5

    SHA512

    1f61bf7228ae9fc1b36249223f4ca0675da05beaa6c00b28b7fff500e0527ee237d139eaf6793ece67f8730dfff0207bf945a848795aab7c57301433449a8acb

  • C:\Users\Admin\AppData\Local\Temp\Cab2464.tmp

    Filesize

    1KB

    MD5

    1f1a3b101012e27df35286ed1cf74aa6

    SHA1

    46f36d1c9715589e45558bd53b721e8f7f52a888

    SHA256

    7f0b1fe38c7502bea9c056e7a462ab9f507dd9124f84b1d4666fb7d37cf1b83c

    SHA512

    d6f6787de85049d884bf8906292b0df134287cc548f9f3fadd60d44545652d55c296ed50e72687f776f0bf6b131102b4bf9b33143998cb897f21427fbc8306a3

  • C:\Users\Admin\AppData\Local\Temp\Tar24F3.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06