Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    186s
  • max time network
    209s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    24/12/2023, 15:38

General

  • Target

    0415788e17a8ff5a89cb305a8fbdbb1d.html

  • Size

    57KB

  • MD5

    0415788e17a8ff5a89cb305a8fbdbb1d

  • SHA1

    32f69941c36445e893280526db9f297e89353105

  • SHA256

    e868dea2eb5c9304b0d04a22485d328076b1f6c2b3d8fc285b0001202d13151c

  • SHA512

    e0f0bd443431be381e9e5612ec1e897018fff210a279f6b7e2ddb0ae50272dda4141f2626739c505109d06c148b89eb820a72d073f73096bb2947b3038ba184f

  • SSDEEP

    1536:ijEQvK8OPHdVA9o2vgyHJv0owbd6zKD6CDK2RVroL0wpDK2RVy:ijnOPHdVL2vgyHJutDK2RVroL0wpDK2m

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 42 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\0415788e17a8ff5a89cb305a8fbdbb1d.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2668
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2668 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2552

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    de22ab64e7223cba41b3c6a0b04ec5ac

    SHA1

    0c39172dd64b79b85bb4d543cca2ae087c34dcad

    SHA256

    3c131b99a73c4178f288a46ae999578cbc4b6c554bb4c24482f6d45c8b884c53

    SHA512

    960061c1994aad03bf26e7257daaddb81c916baabd603dfc2a1b8744a1793b9417caddd450d1490d9f9f0c1ee8c701f556e9d43eac187f3b3bb9139ccf080200

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9d414366e658117ac023ee774c79aeb9

    SHA1

    e1b548b3f07046fba5722e6475262a39a996371a

    SHA256

    531dfaeba2142af04b363ef101770f8aba89b56fab46a24c634bbfebb4357bda

    SHA512

    3c50d22359879653e3a9c7a6cd5b3ee620b25cc9d770c9667a8ce556504ef1f1ccc2378d5c52c6ce241ac5e339c2a9d8fbdc6bb64ee2154599bf9d7383ec10f5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    35cd958d38d84af56877000875e2b4e2

    SHA1

    2ac26147c31089d1e59d3af0e53bab8f36d46404

    SHA256

    7b38676569dc6e6a3a8f0fc37d0570fd036152148c1e85b023f0ab5b5b30eb99

    SHA512

    c192f5c1bba035a147f61417cbba59b78996c16186e10b691eff73aa94a99f988f2c48404c01a3fe4bb9ed86fa5ddcae99e518daec0ca1e11e0611a8ea4cdd02

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f91b70ae2841e359b4b6eaaf099f3a8a

    SHA1

    2e73c3a73e1c39726a68ff75841d4575332490d0

    SHA256

    323f595b886c350cf10abae069ddb6963b1f5274d7d648a1b20cb63bc723c6b8

    SHA512

    04a986f97aebd3b9d404ce481062355f9ccd99f05212ad515cde460c3eaa98b53999d4247be98606c3a0d9cd981146dc8dd4321f8b2f1ee7f7833db557484216

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    671877923488b20a2167cfbdbc55071c

    SHA1

    acb920de3c0bacf6b56ad829c74e6a2c35cc7945

    SHA256

    2c02074cec7ffe1e8786a8544b51c5c58e9c661e81208718d2ed6a8434d669ec

    SHA512

    10a15ba81e3937ee3553fa514c2646ef6465d7b0b5c67711e8079c326cd43de3796569005171711344ad0a4c802683cb3337f20ab9c74e3d18598dd1402421bd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2ea8c8d804f85cdf6fa3ea685ee7711f

    SHA1

    5b5cc08696f866f9ec2548a71efe4de2ba3d1f97

    SHA256

    92fe0fcb7d835a9917fdf05b65b081a44b0db358d63f91fa889fecc5e56714ec

    SHA512

    060e48bdb2630ad4cde581678822e3ca9d16352720b1cfa5ec2cb93444bc5c3147f3847e13acba4e6cd124d30c4e41044405b802b55f7c210f4eb55baf67ac76

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b567800006ff8291f271b37b509afe23

    SHA1

    30c23bfd8ab9dba162c873c9463118e3d912c2db

    SHA256

    cd65f50f3cc6627d892aec6e60aca5d7638746954da0e48551c2352775d2d865

    SHA512

    069c49b73cd9fb6b698c8a09905ef5187c87698dec99fd8f053fa64d22283d6dc6a7a82f87634bbc0c8710553ba5793feb84cb09531f6b2c3479e2959a0f2672

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1f8e9c08a9828bdc18effa33ef5b473c

    SHA1

    1f392578da5ed3342b276e3a5b2f43e589e366ed

    SHA256

    1baf394d40c2a1c28dd583d01c6dabfc5b371e2562c29ae9075ee311d268e6d7

    SHA512

    421290566a89258aa22eaa315da2d2f7f501f0881bf863241488d1e330836dec034ce9473c67e1e89efac6b48e1c20285a84c9736f5a3352eb10353c15926619

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    24e850a3f129616a6228455ebcb78e60

    SHA1

    3e617635dc0331753b140d3fa1fe1ff6635ec58a

    SHA256

    eec99a9dfaf9384e2e12bcac7c6d10a0f3485d9022f9f6b3540b20ea9c5b4048

    SHA512

    9c49a5c982d5b1e3b0b33d3b967c172d36331f84b120feab402f2cee5da2a079e6de2ffef7dfee9303abaebf2d203f84e66482df5a0c5e465beb3b54ff4e3e82

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3d6216f0169b106b1a3d46a1e576e2e7

    SHA1

    1d72a785d1bbadba1ac5bff1cb06d9b200bd75e6

    SHA256

    e69667c40197efa3be93af84a6688d9f0eed38e925d1bf9274deabb6918b9a0c

    SHA512

    581f3e4028ebce32de39430bed398d64e68ee551dc872c94d477f053bde7ea2052468acd4cbefef9da1bfd69e4075024ca6c8fe964b38716596d7d52107c1059

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b875682a40a683aff88afe86955645c9

    SHA1

    54e980c7b3fd92f2ad4fbbf0b34213397204f39d

    SHA256

    ef0bc94469ded994e802d6723c8fd633c863950cc9d7441f9ce8e3f7036797e7

    SHA512

    9ff1a022d0c999aec358cf09cfc53375764aabe39353c56b6210bd5014b582829e71ea433e59efe9eabbeda46accdcfdbb508fc68266287e1b3816dc89f33223

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    04f295e6c4e4a78208fc66bc9760bc21

    SHA1

    f123665cc21d29df765e650c55c9bcaa7438778b

    SHA256

    5aaca985d1a3847d0002a80bd1bfc214f2ee04b13234ca104c8dfdabf584b291

    SHA512

    002daae605d842c7fbbcb9f931ebf6635aa5dde1862f708864aa8774d8dba92db00667d20a48ae07fa82d4d768ac575c75d345a01dd303e831c4b049c1664b9a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7a582af09fedf14cd3e69dbb8298dc22

    SHA1

    a3660993bb7f4e26851f975a48b4af363280bcb8

    SHA256

    13e898505e0205b5dad04d4933d6edab30046e89e619866c5f50f0f4f0b02547

    SHA512

    3de454414e7298ed22b3880784e98ad9579daefd4f42e231816d3bb3a60eaaabc9e3a356db72600835cf747d8f4cfb44e7fec5598fb173a1db262ce0e01e20cd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e78d9b5c813bdcc53c0136712de098f7

    SHA1

    be4f84853133afe7d37fc3dc63f0488c96cb8cac

    SHA256

    b923ed683dee547522126790fe3bffe6834a1291008889c4c8c1995508ea2f47

    SHA512

    f968ece71b7cf05dfdcc8bed6cfb38da4c814bcc6770f627282456fda9f8b22e06581ad432e437546a009fdbc23e0a91d87faddd7d5cabe949652397efe5f63c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ac5b557c9eba47ee23200425238f68b6

    SHA1

    5d8f117b604be2e9bb48c48820197e0c07af6815

    SHA256

    a1cc7854d00b1a041f203d4192680333550fc9e0db2d002ad85d5cc91689e964

    SHA512

    d40c11e6e5c56a56c185e682b047b75fabc398590c9aa181307ec2a83e4bdb3c5af047193778534279b372be1440559331750def5965f3989802db03129129a0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3180ef4e77f416065f6e9c6d3904d416

    SHA1

    b5600dd93e19b052b0c20387b150dd1feb7856f6

    SHA256

    d89aba290f56846ae0a4d152a75b34b283b5ef7a9d0fc461ba30a30a5d45f952

    SHA512

    fecdef9168e4017382e0de1e8076e2a8ab14f38a34d66e751975d9fff1d7b56e36215235b4c61210b86655e96c8113ad4768212a9e436e342a4a1562e4a4fd0c

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\1YVWL6AI\f[1].txt

    Filesize

    34KB

    MD5

    d854bbb2246d993bd1f8687e79493f60

    SHA1

    28fbae93bc5e4e99a6c905fdda488be72057c307

    SHA256

    707248d75606cc53aad966797dc2cc86997d1ea1a74b1c99b9191716600c74e3

    SHA512

    ba4e7ef0a590c84310fb36ea64202cf821058eb7bd52ada1cc9fefff544b7500bf54a8ee43ce80b6cf8989071b0deaf2bf9a50c8063c192f24063f318585c3f2

  • C:\Users\Admin\AppData\Local\Temp\Cab739A.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar743B.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06