Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    122s
  • max time network
    134s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    22/12/2023, 16:10

General

  • Target

    ea0c9e4e8c369a233f11295c9d984e1f.html

  • Size

    601B

  • MD5

    ea0c9e4e8c369a233f11295c9d984e1f

  • SHA1

    dcca74c333122489d3c8909ed2b3b030f8cbe876

  • SHA256

    f99b809ccb1bdb6b1c5701c387f4fbc4334c4360747b22d1d6006968dfda82e1

  • SHA512

    90548f2c5ee74f6d04c0d426643cc9f1a0f89a8f8e56d4b2161dd86426b60ed4e08f995d66ba75375f4e98f36c4398686bea7a7decca667c92cf385257969d95

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\ea0c9e4e8c369a233f11295c9d984e1f.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2144
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2144 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2380

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4988e8e3e496bdb935573b7ccca7fe9b

    SHA1

    fc984241f400809961bf184e212c3c499f87a84b

    SHA256

    570fcc54d4c9d52ce9256f6c044946170a81a35f84dd41be9c6de8f8fa710bc9

    SHA512

    bdef634981c65d9964cbb80d488cb95047fee46655abf5cbe8d0f383e41fabec30bc52657c2674378a08625eb82b6295ab0b41dec83014b0e4975a56e311025d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7ada6061113e4698377d1a48c2f16812

    SHA1

    57b01060c0c2d0f0fce21073c2b9e1bbb413994d

    SHA256

    289f62f32e2b80fe4cf655c68cf6cb74264db32779ae2886c629ec77f117716b

    SHA512

    a8ede4ca17faa50c831c4fc710182b52badf24d0a1faea35fda24b675584b3eb15dd523c471a6939e1a549d1fb49a258d3465c86f074976ae629e830f178b5bc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cb6bdf5ada8b704b6fe01a2b162715ec

    SHA1

    0bc0c0c61ae466087206cd154ebb0a7c3c14edc9

    SHA256

    4e9dcecbec11c1da96d95b04a7781aa0acc0ea57f770119f28ca0b828792895c

    SHA512

    787ccdb0413de3d6112ad7090201c834b5069630e4e8f7bdffc1b30185ba4b1454b62ea6a6c5d354fc5064a8faf7a2882fc7b918d0d4e328b05907c6d5d60dff

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c3ff41ba515d11dea2711a864f0f4693

    SHA1

    674120e5ae65efe390a1226b83f76a6addc04924

    SHA256

    87077d000bb8f158f55a49aff264ca0e03af6513e58ce111f24267c08f4fb0d7

    SHA512

    97af907fe80da3674bab47d1729b66290101fd2d6c2ebd8e64458443d4a6241148de23446aea7b44663663ea49c0bba4b0735ea5fdd7bd468af8c2d9f3963309

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4bac12ddb135638487e43acab2f1c099

    SHA1

    838ce3357b6541c953505f7f623603041cbe07b9

    SHA256

    a3b544b100a03acd4d026762ff17b8f4566e14eb480aa83ab00070e513730837

    SHA512

    6f2a3f33ed31871f3d2dbe89dbc7d2f9cdbb9fa2ab78cbd9577dfc31fb7818aa74e915fe73e3dcd969880aed9820922751794886615f2512be7327342f2005a4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c3c4f941549fc8df7eb1b7a80b1af824

    SHA1

    a962f97672115b6d380bb9c92c32b285a2d07b58

    SHA256

    3855b4cdb2b715f30f9724af77dbc42697e4048950bb3e901dbe2feb7fcce478

    SHA512

    c4628f47dd8e953b45c1f6824d3a2d1ea0375da069f07cc394ca0e55b67b435e0598b121ace4ca4ff8ea3573c24cd5b7eb479fffc24c5e59e46a1b791ca8cd22

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c86b700dfe5e2eb4a75bff345f55bcb1

    SHA1

    2cce57fd05045f42dd9540e318c1347b6abb5068

    SHA256

    658c37eebdeabb79c31736f7125676bcbafae3550ee9807d1bec549fc6d4e0cb

    SHA512

    7068639ac2e8b9c6ca80007bc34ee43c9f5c284a1d4671068d03a6edd1772479dd1215b10332a97824d0bfbb303f335e53e1e4da7650dac7497ef2dfa7c55023

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4c721cb1d40433cc427516eafb0e2531

    SHA1

    b2eed2faeffa65b135c3b60fdf7a973d8e37a69f

    SHA256

    696ef79e820078bf94555ad39f07ce6ef74b029258f392cdac4bf22443d6167a

    SHA512

    21e8381faf0cd371e4ac0925abafa985f72c1c5d514f99df3072819f149b523d28cc1a4b04d63f6cda4d2c1edc4c6ec071b5b1d8a3300b199ae8284808d3df8a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6d9f61497d319b34e6451f89f174ce8f

    SHA1

    cc8eee1812dfecc49d812b7ed0d2db5c5c8459e3

    SHA256

    5e2abbff3be7a48cbbf35fc5b74fe82db93fd0e14cb539c26ece1725c73125c8

    SHA512

    6d4b482ed28a56919b708386bf4f95625130ad8d170d3e1bd04e262fcf5257396ba718d39a78238122ef6b35f65ebeb929b7b9a868131049898a07b9a3027e90

  • C:\Users\Admin\AppData\Local\Temp\Cab6144.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar6656.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06