Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    118s
  • max time network
    142s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    24/12/2023, 19:26

General

  • Target

    0d5fc689b40b9dc013149677ceb9fb9d.html

  • Size

    3.5MB

  • MD5

    0d5fc689b40b9dc013149677ceb9fb9d

  • SHA1

    a4f88d93586e5ad22e8676e0ed362308398e7965

  • SHA256

    c1339ab80c66293edfc542a9833c527f9de2fdb1e506d0cacce6c11efaa081a4

  • SHA512

    c97bb2d9960370bc8c720e4f6128feefde63c144217945d5769d6dfda2fc6f008cfd350d8eca7caca33c539b1ba055a6ff178d82a38bc73dae86467e7cc9d989

  • SSDEEP

    12288:jLZhBE6ffVfitmg11tmg1P16bf7axluxOT6NAH:jvQjte4tT62H

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\0d5fc689b40b9dc013149677ceb9fb9d.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2644
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2644 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2832

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f33b5a20119896adf685872059458f6e

    SHA1

    4610b860da04a41b6f112c5778e011ecd60ab34d

    SHA256

    18a4fc8d783818681ca758bd0e0f35c73fda8bc1d91b1d0697ef4ecde15e62d6

    SHA512

    97d8dc50f0253f1ee180ca075498a8303b089b3e07562c80642fc8398efd763ff06ef53c37f15f7621ca72a567586d6f2116cca25e4d80940dc980770dce3287

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f28f6581f71a5441089100f8839ad57a

    SHA1

    c1d64ab64a5b22066d67955411a164abe5c7cdfd

    SHA256

    661194b37d89ff1ae5f817c662d1f4b609245e143f9106f604dcd607f072c6bc

    SHA512

    ac0bff43d9dc80adb94b4a716b2ac94aa8e838eae0b644ecd4410feb2ae3d96a9a04059b5bb3e78deee6bb3bf43f5cdcf0be4d3f654b3908e77b6dd5aadcc5a7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2420702ed6e5cb5fc41550d4aaa120f3

    SHA1

    e26c3794ed611082ed0626853a255a58373130ab

    SHA256

    358028bccd7792dbf6b2e7997c598e2128fa14235ff4a1cf434c081a6a54fcb1

    SHA512

    3e7f240279742ffcee4a03234c7552873596c822edea856204da71c7e68685bf554899d8afebca3e2a220243348bf42b084bcfa0abb228b9606e0cf6367336c2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    eaf9066e0db3a95d1fde6347c5837395

    SHA1

    9ec599d4b09f166cf8002fcdc4fd05650af78175

    SHA256

    e9605fcd1b292d7dc82af2146237edafe755158aa84a58fffc85fd70db553097

    SHA512

    f01a6b2a248bd1f32d9d937fe1b3f7f5aad05be420be2597095b870c35c43e114e724094a1ed4256bf0ef5f16161326898a144ed8f53f9df9587eb6e441b1c1f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    51b615a5220e3035daf12e7837c60c28

    SHA1

    beaa534458ec752fa3b5675900f4329df5075c31

    SHA256

    7c1f267bc122e59dd5e9fb2420e011e6de5b2e9f17f4878c99c45fd091352d94

    SHA512

    377b5a09b6fb790070f833a855afaeded89021d4908d85efc6481bc438732f7e513cfad7ff9b74e9c2a71064c23237725dd303898a87006c9094aabb364fc61e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    03bfd31a1e1bd8553963bbf19ceeb4a3

    SHA1

    f5dbfa9376621898f06573639e232b74af53374b

    SHA256

    3f23e14d5821c9537a121d06a3fc15a119869d41c933e6d001cae66c9df1f924

    SHA512

    8206c0a1aef2800b8c9e36d8d27f122ba2cad84ea49d22ca1f6df3dda6c0ee6d8fd231bdbf4038d238abb448f4c1608409452060ecb5cba379deb5eb493a359a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e2ab22c1059b26db42f28dcab0801044

    SHA1

    a9d8afb8c4163416ffa2c181f29c0d39fd0e2c37

    SHA256

    d767dc7380c6e55b844b730f5d002206dbb351eb958312de3c6e1d929ed4bb01

    SHA512

    f4b7e69e13f39e806bb4a01c7165a2aee4aa13503fcf81de8f4c12c07911cfe3f50a90ff2e82d5f6cbad0bfa22cbbb037a20c44c3480bb2503084c0c8f783116

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    10bef0c739d0cac3ee342ebe4caf5ad2

    SHA1

    05a09e6733746ebb8e0bb3877894f4c187061b35

    SHA256

    065a02b4eb2711965883345a9fb96a4ea4016d01176b5b0477f193330e7a7ff4

    SHA512

    e3a6b31c2e714b58bffe691f4fa513c85c2b47862092ce25f375447489fbd090402b8d1ba30468d653e3c12dc64c5f1483eef6e44ba5c69e907eddc02c7b75d2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cf5c96820ff39f6636f0ec7c0da415f5

    SHA1

    5136f17791fca1b111fcdde8c2b1c1b8942fde19

    SHA256

    3246d6480e27e0cf7f2a76f1feaec3db0419be08c10fb68089c8682706f5a54c

    SHA512

    1e4e8748785642e0572b0ecf62ba5d5a44e3d2dec6499fa60f2b32e640e4d108a080f2bb2ec129c0978620a60eed3ebbbda75f6041be71e786a179615f078a16

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    65e922a922d40c03e47ba91534a081f0

    SHA1

    994638a033984fa6bfadf64abd8fde77a50ef50c

    SHA256

    11a79f58367b1f773ce2329a7a3f5bb2c5146c241c0b0c334a6f27c9bd61d240

    SHA512

    17a9f6929a24f9b344c7459c6f3c6f8a1e058a7a9d33737e55c5492c367568d5d2e4e726c85e5789c21eb1338e3bc47561adf765a78bed3e802102ce8ac4b2a8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d7fac72a44b61de1bfe130c05cfd7285

    SHA1

    2f8bf4829f8ddc24573a1e3957ed30d68c4816f0

    SHA256

    f441ab613773c8fe9155ba04c5f8cc4539df2df6d7dfcf4abf9e627a726183a4

    SHA512

    f4e6ef672f6219f2f4b609664c759dae046afaad1e4d62d39d7494632ad2dcd5cbb5fb2a41f43115c0a1682076b95bd54a301e31e79545174eb19e1f69d3e35e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    817bb07d582d8f218a35f9cd185a7b62

    SHA1

    dbe83810fd2b66f809a7f95aadfe6edfb389705a

    SHA256

    4a87107170dcffdb0fb4899237ea8abda5a142c8bf017b27eb99fc31f8cc33ac

    SHA512

    9a026294b40be1c56ec6e833e43bb018863d0cb5ed75b641355eb89b6a626e418d625f6e80287395d6eebd2b0ae8e2e7e13f544d3c3675febab3b98f26907554

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e4293bdafba95f49c55ae252374ae78a

    SHA1

    9d8a1387c50aedc41262e502f123500048486392

    SHA256

    57bda0065f74d252729045b4648a1cdfb0c7e1eeebdd306b43560db325d91449

    SHA512

    a85b5234c521dc9fadc83194500d1b4c5cc09d07c7ccff710276145a14e3db243d42193594ebba4a35a1fea1cc917db35921a26445c8cfc18f5871788b819775

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9efc1d7b57214d9d7a6b9400cbee05c5

    SHA1

    c98836f944763f79c99d3bfb148d82d1952ce51a

    SHA256

    db016ccd2690d20d26ef949cb3bafccb60ee4f7e31c9532c37b215527d1f403f

    SHA512

    f511c75ab8fa09e602adbab4967c3ffc4bbab972add3b727489c2791ad3d6e023ea8704979f877764417c0f57a28eaa4fd5f5ed4dea3b03264fe9ba3217a0efc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    11a321629f58454ccae773babb00570d

    SHA1

    a5c6fdc3955588cb2a139678b439a8e70cdeb15d

    SHA256

    dc03d6617987c99db2384adcbfb2889b14fc73c6831011540383a83f66fabd92

    SHA512

    9c8681d0e1d4a6fc912bf06499c05e9f435fcb15aebe6243332d20f92aebe32048d6f195b33046ea5f46f9377185248b2ba1090b39ee2dc00ea82331e0955318

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    57c0ef5c3537058a4b9276ec981080ca

    SHA1

    09d6bdc0f1193c2c071a47c8aebd8505bc487010

    SHA256

    3f13559bddc088f83442c0e189440935d0862dfdab4215558f7f06c758f1564a

    SHA512

    9eab0baf35e1ea1687ca651fba1b71b03a6aa2b7f5b1c17ba2c470123b85223d2cec5b7d424e0030c8cf4a46004556f0ad57762980cba6d782c866b3f5c0a18e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f04b8c8458e7fcdddb2a16c22984e792

    SHA1

    cdcdc94d392c8fcc512e15e208948996fe606648

    SHA256

    20d9bd622540514802574702b1059e2aa21548db48398122d4a89360db267cdc

    SHA512

    55356100f74e827ed3b7f65be44d0e914fc4730194888be95081542332594ef5c944f7e83d2f11ec0c6b6ab7b906e79885ddccf0d91a3dbdcfc605c12a8a3503

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e7e9141fbbb00d5fe96431935d8acf7e

    SHA1

    149f1598646a530d375a489cb8bc0360f79f01a2

    SHA256

    1269d0a4f707b49d70d904b8e7d18fe07e4e43ff4a68fb91a933a5f2b596f5eb

    SHA512

    c2ca791479639f2e795a20083a6ed895434d84ca9a5584b24723dd7a44880c9bdf6995f80b037908053fa43884a4aec60f92f46747a075c48820f0b7e658e2ea

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d03702a0411fa4a0a08adee139663723

    SHA1

    3a84b3b054de672e374c73cf4d42858584ab7e1b

    SHA256

    46b78c9581aa4b432f38c3529f7765e7e222ebccd6099de5a4ddec84454407cd

    SHA512

    9e984d5f1772ef9bbe91d90f4ef93eda13218ed3c2f61bebc1d2de4ac077993a121b2e5981251078fc5c97841f5fed1a9b8060383c55965b026042ca441faf31

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7c9a8bfa77c31a2fbf5fd257cb5cd94c

    SHA1

    3c1ddfe463a4b72d0866d97d332614f3f81a3e46

    SHA256

    aef2ff739dc132975bdf2a83d7315e458bcdcc1ba48715a6108ac8b23b1f6bcf

    SHA512

    22ce36a36f1d02cb7a2ccb6a0317f5b52e4851ca6265035266c43a294519c3f1cf44340b80749b315258d8f09b9055f3c5c7c81b3eaf5c2eece8065e89130bc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b149a3117ab5af16521b5f64ea56220e

    SHA1

    a5f55e7c84f8666045bca2eec614973089b34180

    SHA256

    2632b9495b3c14364c1b4a635356ff656f7b2294055cee301ef8b3bd4d6a82f0

    SHA512

    87388d25c632b51f149afc38eee8b9d073f87d4bcabbe463a6be3e0fec1b25b97b81d3e275b8989883c06c89e5ad5efac2e47da8d5186a044231ff139ae14506

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    07843963566aea235aff6a07605eb610

    SHA1

    ecabfcc69510b901685361b088366cb5bf2f5218

    SHA256

    9a8196179c05a2de4a6e516f799d4827c54a572fb9888d8bbc116cd53b1a813f

    SHA512

    dbe52b886a6dc99eb61fdb7ae5bbf53caaf71e1e6efe54a3ed15e294fcc48fd4511d20835090a32cc5f1e244d7beca3251ef7c773b062e6447a858331d656f7d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9483439eeab12a361ea48e073084d5db

    SHA1

    6360a339e7c7434bdcfcd976256cdafbbac9c63d

    SHA256

    b306c8e08152d04caea90762558cd56468a588bc34422ef9deb91c6d0d8a693e

    SHA512

    ede86e18d30da1deb0d83642243649fc52bea61560414d5e7d46fc3ad806c5cf854fb2086049cea1ab03b7d18d9d3bdcada9d506259f220a4ec9c1941a207451

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HJ0GGVIM\jquery.min[1].js

    Filesize

    83KB

    MD5

    2f6b11a7e914718e0290410e85366fe9

    SHA1

    69bb69e25ca7d5ef0935317584e6153f3fd9a88c

    SHA256

    05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e

    SHA512

    0d40bccaa59fedecf7243d63b33c42592541d0330fefc78ec81a4c6b9689922d5b211011ca4be23ae22621cce4c658f52a1552c92d7ac3615241eb640f8514db

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\M2VO416U\beacon.min[1].js

    Filesize

    19KB

    MD5

    dd1d068fdb5fe90b6c05a5b3940e088c

    SHA1

    0d96f9df8772633a9df4c81cf323a4ef8998ba59

    SHA256

    6153d13804862b0fc1c016cf1129f34cb7c6185f2cf4bf1a3a862eecdab50101

    SHA512

    7aea051a8c2195a2ea5ec3d6438f2a4a4052085b370cf4728b056edc58d1f7a70c3f1f85afe82959184869f707c2ac02a964b8d9166122e74ebc423e0a47fa30

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\W79VKSP8\jquery-3.1.1.min[1].js

    Filesize

    84KB

    MD5

    e071abda8fe61194711cfc2ab99fe104

    SHA1

    f647a6d37dc4ca055ced3cf64bbc1f490070acba

    SHA256

    85556761a8800d14ced8fcd41a6b8b26bf012d44a318866c0d81a62092efd9bf

    SHA512

    53a2b560b20551672fbb0e6e72632d4fd1c7e2dd2ecf7337ebaaab179cb8be7c87e9d803ce7765706bc7fcbcf993c34587cd1237de5a279aea19911d69067b65

  • C:\Users\Admin\AppData\Local\Temp\Cab9713.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar9736.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06