Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    138s
  • max time network
    133s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    24/12/2023, 14:53

General

  • Target

    025ccceb4a6485805dc9fec2811fa156.html

  • Size

    53KB

  • MD5

    025ccceb4a6485805dc9fec2811fa156

  • SHA1

    8f17867b70260372deb3d399522da935145bd706

  • SHA256

    e41b315f7eeeb58758b618d3a9ffee94abc934ab2072ad9d675b3cf643a0a06f

  • SHA512

    63496e0567b9a5c2aae682b32443f0ce9c4883aa342ce7ccc5cfdd36b6771685d1dba897b73fc57652196db67a57528bc1682b85930f992d8af79a89166f8a34

  • SSDEEP

    1536:CkgUiIakTqGivi+PyU+runlYa63Nj+q5VyvR0w2AzTICbb0o//t9M/dNwIUTDmDq:CkgUiIakTqGivi+PyU+runlYa63Nj+qk

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 38 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\025ccceb4a6485805dc9fec2811fa156.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2320
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2320 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2332

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    b7de86cbcffc9e8cb6171f436be9a63b

    SHA1

    10e79ca1293a2fe9499e3bbf1af0fc9e6a32afd3

    SHA256

    6ecfcae39ad813c37a5af8eb4b8c4e2376c8d760106bb9986f7b8bcdab0d632c

    SHA512

    2c82d0c2acabe2e8539570d3a1ea2fad8bb2355e74e7543477f05600179130cf9fcf4f8807050cb54a155db89377cd900efaa4bf3ce22a8a4854cb0e9280e0bb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    982899b1fd3b55fd3ae1dd9805a4d423

    SHA1

    30e2b89577c9d8175f8ca408dd045292779f690b

    SHA256

    f87dd3caf7941ddce5004ed81e3a5df59225f7df74756991fc6b36114b36973b

    SHA512

    611f1d67621f9bb25bf7286a07fcc82e32aabbd97f653be09881d9c4eb4fd3a413ba8e2a10a9577cfda92f18e106021ce32996cffe90f8e00ba3c298552f215b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    85c89ef6a2832278c8715e24fefadcc3

    SHA1

    120e27bd182faa2beead27ef60cd3be9efa8c77f

    SHA256

    6e34a8e2e469ce6e3e23bf7374342719a0406b980f9538148b2c706eef754197

    SHA512

    5e347f524a6f7a13368594f9a8fc809cb1ff1671848c504f28a68a409bde15b50258cb4b0eaaae16a12cae77bdf0ee98d7571b88a7419681cf7399f661c6705e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    91163c6cbcb4ef879c0592cf4602f0bc

    SHA1

    3511aeb4720df802b47fa779c293820671a1b79a

    SHA256

    2d08a097118ffbb0afc721661af0886a3fc0b915c254bec3829df73b4fe349b0

    SHA512

    d5d70dc2976619a7e88f904849ef780e3dbd1df7ac864019bf2f822841bd44371637bd45d18a449503f8bbc344c5f7597c3dd03740491b81dbb82b41ef2b64fa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    e1c30d19cdec1d1db2022640d5b84710

    SHA1

    81cd4b1bb0818c3ed5bd81531b74d918414392da

    SHA256

    3dcdfd690b2ba28f6c93f4a60a8ae650c3d5d1c964d8045f2fe878526540c5c1

    SHA512

    9979e1a1739a1a588fe641396592139054dab26afad88d22dda921b8bc42acc9701aaa53931acbcb6914a864508031cb7cd7c89ac2767af1a208ce4720ec4672

  • C:\Users\Admin\AppData\LocalLow\Microsoft\Internet Explorer\Services\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico

    Filesize

    4KB

    MD5

    da597791be3b6e732f0bc8b20e38ee62

    SHA1

    1125c45d285c360542027d7554a5c442288974de

    SHA256

    5b2c34b3c4e8dd898b664dba6c3786e2ff9869eff55d673aa48361f11325ed07

    SHA512

    d8dc8358727590a1ed74dc70356aedc0499552c2dc0cd4f7a01853dd85ceb3aead5fbdc7c75d7da36db6af2448ce5abdff64cebdca3533ecad953c061a9b338e

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JBVU6USX\style[1].htm

    Filesize

    706B

    MD5

    67f3a5933c17b3ab044826d3927d0ba9

    SHA1

    5957076d09bacaa6db8ddc832b4fd87ed8f05f8a

    SHA256

    97e800f4836b7030dd58fe6296294b7ff5ef1b5eb0e88353f230ea1608d2bb64

    SHA512

    03ba224055ffdbf32b7eea30c764dc18d66cc6d8707dc5fafab74e155b0bb3d4d691c5788b033a68f05299547297125122778fa7e3252f93e7343d918936643e

  • C:\Users\Admin\AppData\Local\Temp\TarCDFF.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06