Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    117s
  • max time network
    149s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    24/12/2023, 18:01

General

  • Target

    0a343f17f9940eb43c38c465a7b132bc.html

  • Size

    49KB

  • MD5

    0a343f17f9940eb43c38c465a7b132bc

  • SHA1

    8b62a0b3f1a735ece839841aef2f691980aec50d

  • SHA256

    978021c4dfed625bdb5c7b0641115718e34334bd68afc90861b2bf1d2941f131

  • SHA512

    ee597e950a1763456de0f5dc88f98a6eb073af90a832694dd25ada97d7f10f519ecec1909727df2ab3b288de036f9e0d0975aa578c25db0eacee506158024cdd

  • SSDEEP

    1536:PdhXPMlmvjIM0/V6FKKKIAdwz9bWicBua1nvQkGHCn:/dvx0/E91Zb/0nvQkGHCn

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\0a343f17f9940eb43c38c465a7b132bc.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1164
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1164 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2680

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\103621DE9CD5414CC2538780B4B75751

    Filesize

    717B

    MD5

    60fe01df86be2e5331b0cdbe86165686

    SHA1

    2a79f9713c3f192862ff80508062e64e8e0b29bd

    SHA256

    c08ccbc876cd5a7cdfa9670f9637da57f6a1282198a9bc71fc7d7247a6e5b7a8

    SHA512

    ef9f9a4dedcbfe339f4f3d07fb614645596c6f2b15608bdccdad492578b735f7cb075bdaa07178c764582ee345857ec4665f90342694e6a60786bb3d9b3a3d23

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\E0F5C59F9FA661F6F4C50B87FEF3A15A

    Filesize

    893B

    MD5

    d4ae187b4574036c2d76b6df8a8c1a30

    SHA1

    b06f409fa14bab33cbaf4a37811b8740b624d9e5

    SHA256

    a2ce3a0fa7d2a833d1801e01ec48e35b70d84f3467cc9f8fab370386e13879c7

    SHA512

    1f44a360e8bb8ada22bc5bfe001f1babb4e72005a46bc2a94c33c4bd149ff256cce6f35d65ca4f7fc2a5b9e15494155449830d2809c8cf218d0b9196ec646b0c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e7c06760c9a73e3f1714366fe5ec57b8

    SHA1

    23cc9a3a0c76a587735668e7582b853452972fc2

    SHA256

    0590cf7fe7c14e3b743257e0276afc8ba915f9db7892133810aa15bdd35cedea

    SHA512

    6566a2add040df6b40e7d7699f476352554cbf53d0e35f4a4f2650d5c010270d1a675188f69b5d942f9a0111c8ddade46a5b5d1a7bb79b0514b740893a578a19

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    41dfed20876f99e26369e2341a6090e6

    SHA1

    58b4b3c09645bb127a0919080a1ca6f58734eacc

    SHA256

    e4828745a13b9e7bd736d0530f4dfe8845059975dc1bea12e3655ce2be131ae4

    SHA512

    6fdeaa9e8f44745b461b403515f60f38dbec4fd99e224ee21faefe57987f8d3ecd852e0a9477d15d885c31805cc8f9c7f312b150bed1fe6f3b00fd43ab969888

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    59e1bd4ee3e2658e3655b3651b4254e7

    SHA1

    955f8fd2c579c7a2cfbcc83db80a444cbdba9cb2

    SHA256

    150c7c5ea9f0265c0591252c2bbfe5e9149b87df8997f2775826de2f386a440e

    SHA512

    b8e563664f12fa633255c67c456880e58548a73c29652d74f388322b4c9aea08287a612fe1b00b554fb09190049fbb4e3d42155ce4cf583e679e001d3d1f2b7c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    106b42fd958f15d8108f68ef2cb1b3ee

    SHA1

    9c46c773c5ab0f69cddadd651722ec5cb51418ce

    SHA256

    87d13485f52036163e7523786596be149f875bc8847aa2f647db75d10a3185f4

    SHA512

    261385f29dcbca010c5dd050326a51f356b7b40e5dacad610934fbb99e027271adae73a1ac8430d9f413b8c1799aa558ef579ac9bc4db7b5a7004558ead29409

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9e8c0427356ac25134b5618a253419c4

    SHA1

    7d15a264a092827c0230ef818ce8540600005fc3

    SHA256

    2c3087d1830c5895970e768e1e3e505a78075870a51a85009ce89e25c3ea4a4c

    SHA512

    f5170fe96e1502ae3c28e6ebb89403140a02850e794fc78714520d5e773b685540ed8ebc604e2fd4abdbc38c722bd245a059f515ca48bb36c9d5104192fd5284

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6b05475b4e20518d9105587f9028f852

    SHA1

    43e5b12ddbb2e063b376f1ead31395a27ee3555a

    SHA256

    aeb42b596612b22cae94696f5b0704811b188023a5754fd94682f25b4f9f1a00

    SHA512

    c2c5a8b1fdcb374518c79749db1d0419e1a31bb2386031235da208ded22af93d65ec72f0e5cef9cd49139404bacba2a9359f6e98c64d7615690443cf81c30dbd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e52bd72f35287b1aba6550d782a83142

    SHA1

    96f2a8b00e39b4b70521be4b15d18c35ae7b4945

    SHA256

    40d0a67a77f94b459314f515f35e015b405270f5548abb5089f2541fedca1582

    SHA512

    eeb2a87619721233ee5b54f1cbec56e81eb58942c35306651edaf43189a8b317fd84e65e6f1622eb59f4f03e81bbade40713b1bca9332c4965047616e1057a47

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8bd60d84b0b09dc73175015587b7d4e0

    SHA1

    98e6c5646e709128447ecd9738a732af7e62e66b

    SHA256

    9cce3dfe1b0cda824d31dd27d9b44aa7ced0dced0e47f5be6d69d809f98737fd

    SHA512

    9f0209e05c3ec9efd5d98106a003a1dc10d8cbbea2d46073ca8e7e62f6f9490de63b6c06804f6ffbd1cada3e5cf5de51b394369c07dec4c5aa7b0522d05b7a8b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    69b787fb033602cfdea03a414a8ae839

    SHA1

    273d133a89817a79a62448962fd31f3df14795a1

    SHA256

    3278316ac3ae4cd2a7de317b82222a8f0514958cb15875b3810a7d549eeb11c1

    SHA512

    cafe02f84a4f6f624b3388a6cf97eab1f445dddd3a06d30bddfff94aec65ce39a16e66c10280e5a4fca8375e3c484be8d9f522c7cf1b238cd709c37864705566

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a20215379b3132825e5472da66fcc8f4

    SHA1

    7461bb2d2ad7973b3db25d3abb4692c9819aadbb

    SHA256

    8708d20222257dd4f8840f81fba42021a226dfd0e71dcbde4c7caed975d4dd87

    SHA512

    bdbb2ce3537a968845cee27b802e0160cb48b559c4ae8a10c35652dd582864460c199be81b720ebc969efc78f37b858f8108ab516d749e6d01553bca456a082f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    34c9835a2dd285dc40efb206bfce869b

    SHA1

    6c61177dff24aa25d82d671fe363818a59e8d5c8

    SHA256

    bb749a6259bda3484ce1fcdce7a047f790b63f74bd82b77b8afd35a5b779a3a0

    SHA512

    fd34607379aa7f7ea87ec50172e2876825ec46c4d6fb480a36b471097f316712cdbfa15e8a882951aa2b5e2b6856a691c4c894aa039c287654ac2dc8d3a47905

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    40f89b67ebe9fbfcd0f2e62a6a2f6a21

    SHA1

    2adab1e512839e2e515eecbd61ec37c32fddf30e

    SHA256

    8c22ac81e2cced40caaddf858e02cf30d83c9801ea7006618a9c895f735561ce

    SHA512

    7796babcacadc2c5bde901054ff63844bbd5a177fd389cce76d7b40de0d08463c5eec21f881e5bb69e5eca1507d92deb0bc7a0ca48ce415d628423e6f3cb3b52

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1a9966a81f9f06e1db1873fc0dc3f9cf

    SHA1

    6874a9faaabe38bbebb39b68dc84fa0c8701eb22

    SHA256

    96adaf453cf46dcb7631325fe860c50c7160219ffddd67bd319aa2d4223edee5

    SHA512

    eff69ae4cc358e45e80f25216288aeca06497489bca9682c22d495eb738292e262a95fc6d6525a9c037562209bad1332bd00cbfeb716f2bf05208e0ce53d188e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    463f4d4bc16dfff9a06f429e7b12b48b

    SHA1

    8e30c2f852f265e8e8ec5d213b0e5fc1525a8c4a

    SHA256

    75cae5f92fa4108ffde9e929dc090baf3d5eedbf422bb174825ffd12ec725689

    SHA512

    83c009a823e8afda266c67c34da474cde6c9573a790ca4f9358b6b78547b0dc856bb08b2ec8f9be6b35664941679391ced4c8da37a4b7f81f40e0d514835dc4b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f6d593692e55c723bbae8313f68222cf

    SHA1

    b8d5cefa3fbe45de84d3f0dd3123ba4e7a174817

    SHA256

    0d4ac0dd66d18ba968bcb19361a4507171daba0ffa38a5e98783441bbb23656e

    SHA512

    b7415e7b858eb87627e3ea722d6f8f45f8ef136fa863a9be83a7d9865d8aa29e0d9a54498f34b812423030d8e50dcb2ab2c2eaf3f33c6b545456fb28669241a7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9e3508c29be39dab1855ed7e512b994e

    SHA1

    db76696cdf433d5e6ac68668e27f8102ba5e45de

    SHA256

    b5c55aabe04ba8eda9d274d36442ff2101172c262e3ac8fe0b6c6a0ce6876884

    SHA512

    c3987452d5b37d46a2595c305e3f685f0fa1ce415a48173e572836cc277b22cace8125e5b337a28bfe462e0986407c033a8c91d91f96d31563bf65d14c50f435

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9151e79490247f59d0bf8b5104f0eb54

    SHA1

    bb3e0b1ee5774d4bf38ca866945381d0ef54db42

    SHA256

    2803445af897472e8cc7b91f260c30bee4cd38f8613aad7c7a3c236b160d8dde

    SHA512

    978ba964b617f216b55e41565f406e3e42607e5d586fdad5a4db7076f66f67f401711856c05d5281fd0641766e82d71f09df6d733b063fc6107b490ece2c6414

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    dbc79c35db284d76fc1765e0b6b514a4

    SHA1

    b70abb77a5379f68aca2812fb103ae4ce690ae70

    SHA256

    20904aeb0c7f8e6c4a5e5eb3e4196b10258813ce35c73a28078c64fa9d0d86b2

    SHA512

    46d7868b246a28a5a1e75073c18000a936783f2e6a7d7ec8f6a03c132da4a874446aeb69a1d882e191443fea0fa2c859ec6456e605f8aac2d226f09648482dc4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    025a8110b47bdd90911f8941ec7f9adf

    SHA1

    eeb12cfb231f971b2351f7a2f2dd42f5e02828a9

    SHA256

    05e441df11ee6da6a21dc8ef48736d7401685862ac2aee12ebe603e2bf75dfaa

    SHA512

    f0c0587a2582bc0914ff39358b8f3538bd8a2f6f7be72ee6db5ce095603458e765acb7165ed538d990fbdcd524fea4a5cabbe970f66a650e2d67842d74b38451

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    df4aa394593cde3c7466b690c8c86a10

    SHA1

    74c9d5aa89f7a2abf6e632dc893f0fbe1942effb

    SHA256

    da6ce2e0894338b8bfce9c8786261fa5aeff3901533dd9e4087b69a0abc494fe

    SHA512

    632728b52f9e33d5d36b2da554e8f09c6c2b2863a9571e7abe7b2ef919d2da7308af47136cb565ef3b880c7a6345d9a3e218f937e0e29f761e57765c550a4ac6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    40fc874dd309a132207023f0c1f9a884

    SHA1

    7b1e4a10eb98298ceeaf9b597ea559494a004754

    SHA256

    b67099fb17cd7f9fddbbdbfeef469498391e3c29a6d2ada5f283f82bd6ab4c2c

    SHA512

    a23ccf626470b43cda3bba0cdbf4578d4cd4213ba294ef82feb066d8717d0a6d485cb6483b875b34d20e9bf52fa32a7771f335138e23e1143446985216ff6d62

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9b1730e5f657fcd9f32740a436d885a4

    SHA1

    011dd45ffffff54675b652ef8034a12bbf5d6cc3

    SHA256

    8583120fe1e4fb52e3c0fe028486657a5daa757adb6f0131abfb53ef2696c37d

    SHA512

    4c2258f2cf6c02452b3febf9e83ae72dccf1c5707d5ec4cd5b77dc0d5776958d62c5aca4267b040966d91d22e3585a3d9c3f1ca4d180ed53ec78b6f8843c4215

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4a1bfe5a8a63dd25d190ff2c45eb3fd0

    SHA1

    af602ac8383277bcd8757c3e17f09b731589bc60

    SHA256

    814ab30bfa8279215f35cc338459c7ef76b67202810f1d52b9bb0f425645da95

    SHA512

    5d439605c1b8432fde0b83d1b1d11870e127e754b8e43fb087db5c215d8f1ba0f757e1d3c4fc8c47600169d177b23b6c3e440072794884ec874e0ded64e7baf6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    54156d75d54d2ce56106eb9efa2ee76d

    SHA1

    3827d62b13c0c6343fcf3fa48f5fb2b5686692b6

    SHA256

    647cbe94d9c75d6a0a9f0f02c550135a3759552792c7e24e090b4662f63ed036

    SHA512

    3603c2da446d5d40612442db0d9cbeb8867f1db9fd7df16fadf036d12b7febe2bfab9cd74495e28ad6b4ff4d90957aa8cb7226d8249f25ef918f9d33339c3059

  • C:\Users\Admin\AppData\Local\Temp\CabAF06.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\TarAF19.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06