Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    122s
  • max time network
    126s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    24/12/2023, 21:51

General

  • Target

    13e48d1510b8df2cc9cc92e51182ed02.html

  • Size

    3.5MB

  • MD5

    13e48d1510b8df2cc9cc92e51182ed02

  • SHA1

    98a8a53cef94226f89e590a1ec2bd631c2d4af7f

  • SHA256

    d49e7afef9c4302a005a0c29227d704faa98e6732b04ba3a9c0bd03f6726d388

  • SHA512

    79074c19a70265567ca6f0fedebe27394958ebbb4467d5b9450847c5ab726fa7aabb7b70e54fc939e9e629e022bfbdc8980bd49f0781e097069dda7b31566b27

  • SSDEEP

    12288:jLZhBE6ffVfitmg11tmg1P16bf7axluxOT6NAQ:jvQjte4tT62Q

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\13e48d1510b8df2cc9cc92e51182ed02.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2040
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2040 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1732

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2bc1015bb383953b632db33fa8759586

    SHA1

    ce36446a77913e297cf9e2010949f01c74c86e46

    SHA256

    f1389564b2b2a7c7c118f159337c4a8808d8866525952bb6c85f450476b44e52

    SHA512

    9c9a92ba36ab4c897ee4ad542f179c790af847255708e0c80761883ee4f85662530b0a9dc46db3b09c0b51c9cc92696423aca7b8416c9d4a7568ceec7c26aa64

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5a432d5e1705b566e897aa23c68a890a

    SHA1

    fb89304a780b0d902bd4332532a286668adfba8c

    SHA256

    2b0c55df6fb573018d4172b9456153cd2746935890508921dd5430ebd73af57e

    SHA512

    5886024a078d9dfffb5b0e884e2e8347aa63abc8502afbe5c7318e671710380eeb2bf7f9f36343a3ab16dab709c8ef5c1c41ca5de26539c97df9f1a478f3cd22

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    45095590d478c6326d41db77a6d8f2a3

    SHA1

    10828fec9e2f1e4ac34bfe7e0d59726a5cd8f88a

    SHA256

    7c448ba5b81ba2c7902e4699a25d445d64af2b8b458d46f928b3c289e48fb6c0

    SHA512

    58829a95340018247bd6cacb6ee8555fe1666a285f04c963c8d2ea6e25414e44652569dd4e6116ddef3478dc02cb7c9ca896271535b8350533940c7eda712d3e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8a7ebe0e193acb72f9076d1b09f3de74

    SHA1

    37be4131f9d8dce4b37effc5435922202208c7c2

    SHA256

    4be2826bca3845939185aa8b63f234ae3181be672e8004aeb35f5666412b1e78

    SHA512

    5f7cc9fc7ba56023ba3db9ce0d371098f7b1c29c1aa0a4cc035a6b3e6221b246ca62e4616796259dbffa49b71611364490a1a80f9b572980656e73457acf26a2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b0c47b7e9b48e5247f94a2ed4dd41814

    SHA1

    8266b74da34fbb03254a0bc3fa715a777596d67f

    SHA256

    d3392d4ec52acf4ba41f8f6d43ccb8a7c9b5730a6e6a4914da7ea46a111aaf19

    SHA512

    da1a5f87d150a77ac87b0974e895fb2ae6fafdb1d9d3a91346e89a420a42f4467d30cc887c291b15ddc4f43b8c90a7819ed2b069f871a55960a8bb7f0b94e766

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9aa546a1bfe6bc4bc489b091d02e5ad6

    SHA1

    90a2cdfd7e781ae2af0fe0ed9fa0ab6397f04f25

    SHA256

    d670f4d11a67ef4995a0641198a9bef7bae3fcc912e885da1da9894fe381f2b5

    SHA512

    850ac201f906be5f4fbb2eb527735ba6b4b85f7d4ad6d0f0476068e28ecab939fab9aeca9d40fb4175c709dc0f9229502dfa6cbe5eea3fab77e79f5e52296561

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2dced1dda8689baad1d84bdfea1e4249

    SHA1

    5d03f132d4db3643eda80943b91356080cafb1ab

    SHA256

    0a737ce8c565c1b398bcb6ecd335c2f8705bd24d626c220c6d8bac4d7c612b03

    SHA512

    1085bcf3ae7b5d8d03d3993a67c56344ebb013d0fcc36776610c65f4c316c98477a24dc38a502f9d314deae55a9c6d53eee61f09db8acc88dc031ec74da2a007

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    478c1416da45196d6cd6b603f4f8a7cd

    SHA1

    7798244a246ad94a1c704cc4712b62a4abaf5572

    SHA256

    501917b4b30728bef13016b5e9b44f972d8c4b00c89548bcf460c3aaf2a4a6ec

    SHA512

    f13ac615f173278213519270367353a988cbdc31b629ab72384d2c681519d963c9fb1c3203c8f64c1d16edb7f913705a2054dfcef017fecaba8a83d19a5bfa98

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e92298de5d593d3c961c9a63fd9b68b0

    SHA1

    4f4fd0faa6081a7085868e1c1f8c4dec58621f72

    SHA256

    7ba18a899dd30f1c30ce28abb2ab0c7c4bf4a529839f8daa4bdbfc3d80b621e1

    SHA512

    85f7980f2ad066ee0c8cd2166d5ac5d7aeb14e9d4a94f5954c04d49e732d548b73298935375d52ab189449eb379e6f9d4b67183e3d238b9799e722160c77c0b1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7b96c824252f25fa74e987b7344bf222

    SHA1

    473fc546867d0bdf0eb0d19ac29df1ce777775c3

    SHA256

    96c8aeaaa2aaca5f2e367e09b545218099b4ea9a618e6db55e171ed04d973e86

    SHA512

    8a2ccea91f3821338017f26c38b816033680c427bdf95b7b27a36bf704fe2f0b4357de78d759a5553b661535793e49ea0206f63154db84166520563156e8c1c6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    048787cb5be06f2a3669892408ca7b09

    SHA1

    b167071decaccf2135c444e97c78bca5dafa82d3

    SHA256

    435dc39199d97f91e4ca880f666776c2462ed5890bfcbf01721995aef90edc71

    SHA512

    1968a480248dba24bc70c4f1d69bf18b210b4adbb4a9c1321c6e0248fd221546565f70f25e5902c57afe634510c18c580256649a1695af86049b3400eb64e234

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3bc2170af5922e691e620452d8419928

    SHA1

    4eaea79412f179ef853ff49049013e01568c7a64

    SHA256

    e0d52539cdf5ee3ace5442fe0c5a093459f7b4ceb65cc15b9ec19b21668e40e4

    SHA512

    cf2652e0a2a1c85f0e2fa77e482aca8ad9e3db9e7ffb8ed1a30fa6b5eca2e01e8c2e12c4e7193e958ffc1068659cf936d9e5fdc32c5049906bec6a3d78ad2419

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b6b2a80dfe9f7674772aec12b87df7a3

    SHA1

    b1555e62ec25ca561f9e0eabb307acc6571cb70e

    SHA256

    519472b1c69ee17215d1870090f583c0a695c0677b6f76fe9ea27dbf4156100a

    SHA512

    b8d242dfe1b8c4e8120d4215de988dd7044f91133aa4da47766967c3653529a9f085d3fb72c07aa3cc78664fedfa22fc5742e9be7dd3f967c38a25c1ebf33aac

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    28c3e5f55558249e333dfe542e94a73c

    SHA1

    67574dfa1da9289b84f752f461c02a63fd24c9b6

    SHA256

    2d28925bcb9801dc253f0006e3859386be8497becd5529e749054994cc56f668

    SHA512

    e6eeb14b0a5fd1d8ffbb4d9a2bf3e0432f22f447d1cb1351e3360a1adf02bbe0e265e84dc369a5202726b086d45c7a99665292301dc009abaa0343a487971f96

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2427369fa85ce1506eb39c0c22c370cb

    SHA1

    90ccc81cbf83498c39e8e71a17b7f87c9cba2c7d

    SHA256

    dc02d07122e505607ae81cda3dfedf0695bc88edc400159b32f433e9f12f4b03

    SHA512

    eb59df744c967d251ecc22e82ca8ff8fc7306e8723cf884786635da657f82b44974ac288e1f708e3b491d797488519576e82a6a9967512344958b1ce1aec4fb0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a943c213c770cfd1d355cf78422133cb

    SHA1

    ed6737d6d7acb3d8b793fb229cb352dab715de1e

    SHA256

    8e20f213f8525b18172819b9bd267c05faaadf0d28ba084c5a9b58534225362b

    SHA512

    5c114443493b0efc5efb6de5b51116f06c380f33a9e6e2402a4aa4115b3e7e7b0f92d67caf8ec1a97fb0ce48429868f0d3a5effff8d1b63fdeb1bfceab28e8b9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    31c3b156578e307d7a332a7105efa102

    SHA1

    a22f7fb2d19fffaaed646e2b4d9aff6ac7d1aa45

    SHA256

    53d29474f2457733ec4af67af45aceeb7f5dcac4a80a64a3e0560f424036493b

    SHA512

    d3782f9fc6649ea8a898c6c305564da331bdf1ec4f8153c4ccb7d8082ee8c14ed1d20e227232742504b114deb2f9874dfdf62bce8019295e858296bcb8089773

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    20d94b9dd2de4973995a7817f5acf8e9

    SHA1

    ce30199da702cd24196ca42d0194d1df622103ae

    SHA256

    fe8b7b757987854a0575d871c9a8f6144656d9f1634ecb6104916de5788272c1

    SHA512

    d5050bc7a5d223fa631f1ed06473a139b319e1b94bd374aef9e102ebc2a2dbc8be3e4af1fa0959d25b3002b0d7160f68a429166b4fb37b95debbcbd1963991e2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b22acc1cf7b0c93eba7068b5cc39cfb2

    SHA1

    0cba702b63df7623122376e0acbe1858b2a91ed7

    SHA256

    8624ee89f15b457ecb7c0328346ca2697e4159393eb62a467d0678225def8443

    SHA512

    75858f8874ff9e77cb6068f7fa5d3802e665a8d387464b510fa055d5f15809cc2945940cd2a079411b89a450f0e5bf035cc62eb21d715d1faca41d44e42e2c15

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\E1CCB52I\jquery-3.1.1.min[1].js

    Filesize

    84KB

    MD5

    e071abda8fe61194711cfc2ab99fe104

    SHA1

    f647a6d37dc4ca055ced3cf64bbc1f490070acba

    SHA256

    85556761a8800d14ced8fcd41a6b8b26bf012d44a318866c0d81a62092efd9bf

    SHA512

    53a2b560b20551672fbb0e6e72632d4fd1c7e2dd2ecf7337ebaaab179cb8be7c87e9d803ce7765706bc7fcbcf993c34587cd1237de5a279aea19911d69067b65

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\U1J1BPYJ\jquery.min[1].js

    Filesize

    83KB

    MD5

    2f6b11a7e914718e0290410e85366fe9

    SHA1

    69bb69e25ca7d5ef0935317584e6153f3fd9a88c

    SHA256

    05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e

    SHA512

    0d40bccaa59fedecf7243d63b33c42592541d0330fefc78ec81a4c6b9689922d5b211011ca4be23ae22621cce4c658f52a1552c92d7ac3615241eb640f8514db

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\YV6H14B0\beacon.min[1].js

    Filesize

    19KB

    MD5

    dd1d068fdb5fe90b6c05a5b3940e088c

    SHA1

    0d96f9df8772633a9df4c81cf323a4ef8998ba59

    SHA256

    6153d13804862b0fc1c016cf1129f34cb7c6185f2cf4bf1a3a862eecdab50101

    SHA512

    7aea051a8c2195a2ea5ec3d6438f2a4a4052085b370cf4728b056edc58d1f7a70c3f1f85afe82959184869f707c2ac02a964b8d9166122e74ebc423e0a47fa30

  • C:\Users\Admin\AppData\Local\Temp\Cab4BA2.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar4C80.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06