Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    149s
  • max time network
    155s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    25/12/2023, 23:00

General

  • Target

    41d34ba05511824de646ffc7ada8bcec.html

  • Size

    84KB

  • MD5

    41d34ba05511824de646ffc7ada8bcec

  • SHA1

    d4b2b8c1484fd2fbcc7974df0b666d7435ad124f

  • SHA256

    7f125de5b2e7e06417fcd9ed8d14c91cdaa1b3d29a9798e9f67bcd8f43a93290

  • SHA512

    8c4aa8c05c85422a2e7eef055326aa67571cc7e00c38fe69d7910a3b2693086c28f7b54d34ef04216bb5e271fd80b5645483a9e8f5dbdcd799435efc5babbd45

  • SSDEEP

    1536:ihqrypoEP3HMO2rkVcVI7BwjG1MzJqpSJEa1yk2ha1i7uH0L5VNnJCEBr:RO2gaW7KSyzEEJNIlcACUL5VPCEBr

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 63 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\41d34ba05511824de646ffc7ada8bcec.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:4140
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:4140 CREDAT:17410 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:4348

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\64E544B76338020D780BCC40A2A2B366

    Filesize

    5B

    MD5

    5bfa51f3a417b98e7443eca90fc94703

    SHA1

    8c015d80b8a23f780bdd215dc842b0f5551f63bd

    SHA256

    bebe2853a3485d1c2e5c5be4249183e0ddaff9f87de71652371700a89d937128

    SHA512

    4cd03686254bb28754cbaa635ae1264723e2be80ce1dd0f78d1ab7aee72232f5b285f79e488e9c5c49ff343015bd07bb8433d6cee08ae3cea8c317303e3ac399

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\64E544B76338020D780BCC40A2A2B366

    Filesize

    414B

    MD5

    6c8e54c0aaa97ade9728c8b9a028dc80

    SHA1

    a8a976889d1a86aa89ad0befef2acbe05d0bb84b

    SHA256

    6d88443606824c87f7ce0aa92b6755068bc3f6a827d15e75331f305ffa3af3fc

    SHA512

    886d1e80d2cab6dcc4d163b19cbb58bb32ef36f05a5ab20e2ef41185e3cd3c618eaf4adac4b9fb6c9a1810f0330d67760da20b27bc3ae40a06408f42686b7364

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\77EC63BDA74BD0D0E0426DC8F8008506

    Filesize

    290B

    MD5

    b4ea2ca4a30914f9bd2b8e58b38094dd

    SHA1

    77b4b5e683735dcc118d2db950865ea8c5f9d06a

    SHA256

    d7d8efb5f448782fa4aed42a9f97c69aa53f858f8d9f1a5b7cd7b35d8af02e28

    SHA512

    14e696c743a81d42ab216c71dfca6b4df964415c96cf1cfa25298b345e9c91119e9e837693f2f5778a8bec00e495e26edff7a7d6a395d43718d6acd26d9c6981

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\V08ZMPZG\www.dailymotion[1].xml

    Filesize

    182B

    MD5

    fcb8190f29e4373914c9afd87d808efb

    SHA1

    efc9fd004ac423878a32634c23655b343348f0f1

    SHA256

    b251d651b1259ed9ced598ae187beaf68c648d64c10d4351e3d7edcd0ead91bf

    SHA512

    7117e38f31d964c3d86f3bc6c32c37fff51e15c60ae50b7b58ac82b9df3070b5130576b7d3360f7971f84af9d2b08a908a0683418b0818a18e6f5958cecf80b0

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\V08ZMPZG\www.dailymotion[1].xml

    Filesize

    166B

    MD5

    c05f558bf02ac632894f436aa5a44fcb

    SHA1

    71273045f83d18cb67a6074a2b5551021418112a

    SHA256

    d4c082c9751389f64ea65ea5bb51d3da34d392632fbb4d1583abcbd29d959a13

    SHA512

    2de2634a90f65cd72b23e41c33364f1d55efd97172ee1c0cb5af40e172721d862cfa5f1bdc7177d039577e6dee85d0aac75dd73b3706944aef89af2535517da4

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\VersionManager\verE196.tmp

    Filesize

    15KB

    MD5

    1a545d0052b581fbb2ab4c52133846bc

    SHA1

    62f3266a9b9925cd6d98658b92adec673cbe3dd3

    SHA256

    557472aeaebf4c1c800b9df14c190f66d62cbabb011300dbedde2dcddd27a6c1

    SHA512

    bd326d111589d87cd6d019378ec725ac9ac7ad4c36f22453941f7d52f90b747ede4783a83dfff6cae1b3bb46690ad49cffa77f2afda019b22863ac485b406e8d

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\58G7K3A9\2377807680-comment_from_post_iframe[1].js

    Filesize

    17KB

    MD5

    c75c61b5fdbbba5aa4079cc95ce2773b

    SHA1

    ebace628c988b2d0559c0b64c67b3b84f20b479f

    SHA256

    1e39945d49f320560004db49c906c7bc52cc0741d6a6ab4ce1c8465c884dd7c5

    SHA512

    81b49ff228af6912fc7a79cb4a4878ffec7bd3bc8cedc803ffa4a974011fb2598d8dbb8ca62c3674b22f2c292fbd44c6a0e507b95e70947d09b3b7045472858b

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\58G7K3A9\640x360[3].jpg

    Filesize

    47KB

    MD5

    8b0924ffa30d506840c9cec377c87485

    SHA1

    2b1f1922683ad4a15b57fac95bbc15df38126fe5

    SHA256

    893038d08e6a7ded74a1d51c3b804fcf862643cee24cf6b93a89cd8aa2fe58dc

    SHA512

    7945dca23f87e11df3f203a2145d2eba0b7e4cf7766cf5a011cb2469147cfb4b43f8bf675f453d2f317f89657b9b91ca785e60dfe64a063f968ce2e7d157f590

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\58G7K3A9\error_page-404.1eddf5f45ec07dcfdb10[1].js

    Filesize

    1001KB

    MD5

    ad274fd268d09a8659377643c1caeeb2

    SHA1

    9c302775c3768f5d82462bb8661c326963d3ea62

    SHA256

    0f9363666f8ffec1e6ca614fa172e781a497b6925804ea006396aa1322567a21

    SHA512

    6a742cd5e92deefcb70765612736d9b2e557e93623beebf4d42a0993c14ea2938b1d759e1547d5e1fcb37e2ca3857f103b63b71399f6d4f50de1f210c9f2f7cb

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\58G7K3A9\error_page-404.ltr.css[1].css

    Filesize

    9KB

    MD5

    e6b67666a7756573a45a6839fca3761b

    SHA1

    c7850a634ce94bdfcba03cc0b029ddea3fde8dd8

    SHA256

    ed31e3fc1de7ccfc6abb8ad4a57d9a9c61404c7ae44b18fd1da95fb5bc85090a

    SHA512

    0adac044af6224734d31d08b009088aff26298fe90179c3ef9531ab60a2721215a6adfded7aecacb6e360ccfb41ed90ccc51fe128306440d6a5547abbf630384

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\58G7K3A9\sdk[1].js

    Filesize

    297KB

    MD5

    edd76892572e246b71a7c50dcbab3359

    SHA1

    e4cdfc3802132e59d7325e8fac37e667da7bb38c

    SHA256

    f877807b7537463ccdb6177e583b265873aca7ca3f6787c0943a154866c055d1

    SHA512

    9d979b2ffbf413abb73e39024d426203310c04e417b126182b800fcf9e7dd5ed5020c866861206667a6f174dd36b9742d4a60881a4aa01d791e62a82ded41b9f

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\58G7K3A9\suggestions[1].en-US

    Filesize

    17KB

    MD5

    5a34cb996293fde2cb7a4ac89587393a

    SHA1

    3c96c993500690d1a77873cd62bc639b3a10653f

    SHA256

    c6a5377cbc07eece33790cfc70572e12c7a48ad8296be25c0cc805a1f384dbad

    SHA512

    e1b7d0107733f81937415104e70f68b1be6fd0ca65dccf4ff72637943d44278d3a77f704aedff59d2dbc0d56a609b2590c8ec0dd6bc48ab30f1dad0c07a0a3ee

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\GUTCV3OF\640x360[3].jpg

    Filesize

    46KB

    MD5

    9da8cfaf02c60844ca29d50bb4cf6898

    SHA1

    43661a9365bdf79235a593f485503c0fc149c655

    SHA256

    f89d3e56db76d6746b8bef107bdad2f5985241e67607eca49dc5a7a453fce4d3

    SHA512

    d4ff1d868067294733d15b1675308b238a8b4e2b929fe4e3d61242adcce8c5a5ca3fd6579478c3ebfe362a79b57d74fab6052a68501871f9454858b8d561875a

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\GUTCV3OF\640x360[8].jpg

    Filesize

    53KB

    MD5

    d9c70b0dfed5848fc389dbd8d3c08d8a

    SHA1

    c82da5e7494d4df9e43266c1d5fb05d842fb7638

    SHA256

    a32c1185cfda23dd0359caaea85196c40cb60b96c5a6c2aade1133d8bac18c3e

    SHA512

    68576814457b2abe0e2da121e8aca0c2f1d36c77eaa1da8d085180bceb7a0d5985267c01d5be426459652f384d2e31d4b56f085bbe3c00139218bdecd980fd5d

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\GUTCV3OF\cb=gapi[2].js

    Filesize

    133KB

    MD5

    288c5ba5b7001fe841c32f690f62cc93

    SHA1

    29aba9d8e4f7cbe25fa5e64b9ecbe256e51fc789

    SHA256

    c2f33dc18eae27d4e878bf837dd97f1bde5151e44b0271408535bb93265b8c52

    SHA512

    e375d41344a086d35accfb02bb1f91e2dd383db032af387fc3d6b1230057cc5e432e9b2cdd976e51425b4f587391d42f4d9d857c2e6f11e822a65edcb85f1c9f

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\GUTCV3OF\sGrT9ysWSs9_t34896WOusE8LdS7rNyFrC7hJy7peMg[1].js

    Filesize

    52KB

    MD5

    d48d74adfc515a71970fdd0ebbdbf6c4

    SHA1

    fa16d2837d440b0d29b8311ef819b2a4d324656b

    SHA256

    b06ad3f72b164acf7fb77e3cf7a58ebac13c2dd4bbacdc85ac2ee1272ee978c8

    SHA512

    60f9683fb6d79a52713b301f853bffda4dd72944b4699eaa388be5a9d1cec929b2a21b584d9f11fc33d236438088cc5468ef1555c9e4b7dd816bdcc5c34022ce

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\GUTCV3OF\sdk[1].js

    Filesize

    3KB

    MD5

    3c598924ee0cecc96be7b0c497a018ea

    SHA1

    0e2b4400f7c29e727d03703e2f7996a5587fd0c8

    SHA256

    11b616810ef33f3a64067171673f97f819fa241cbe312a0bd4b2f998bee3272c

    SHA512

    174fe7e3cd9c6abd8528656d837988de755db3e5b258281017511c074f517bf786bc327a13ca494308ee7a4ae4e5c2fc06b52c1787fba3272bc41ac788ae263a

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\MCZQJD7V\2621646369-cmtfp[1].css

    Filesize

    13KB

    MD5

    9f212334462c2e699353dc8988690a19

    SHA1

    2e25d1abe33ec5ebf10e0a6b055e38c9671802a2

    SHA256

    2529a8451bea93302e41dc0fad03f7550094f4ef5ec4f3800f28c2639d5e2789

    SHA512

    58e906a50f8b654e79b242f1323dcb08773937f723d01caca4f675ce2091eb20caf2fce23a7a15443fa4a6643716662304d83b95ac7b7b64d588168b47ce9407

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\MCZQJD7V\3268835000-cmt__en_gb[1].js

    Filesize

    100KB

    MD5

    938d1a1cf454711ef01b70dc45abd1c8

    SHA1

    aa90b39a6227f96ff7bb54d70d90e6f61f5d21bc

    SHA256

    e0c01d619e2c7f076937e8015c85fde33b0af7f19961f5c4dbeb66ee24a433cd

    SHA512

    a7c591ebed1dd5196bf9d11e75856c5cf360f6d480b376744b013a584b663c7c5ba1771ab39fda7fbd37330b95a744b12d65a64a9d3a726bbdabbf715f37064c

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\MCZQJD7V\640x360[3].jpg

    Filesize

    24KB

    MD5

    9681e18c06c6661e95a6d9090f8f8593

    SHA1

    bfedf2b20a2055ce9ef6757a37bac6e63546c4ad

    SHA256

    f50513a9b6fbbc3041e6477bcfcc055aebc489d8db32c286f65e4c717cf7536c

    SHA512

    76017442095612d4d3302ca44fc41956e9af9b266d5705c1263a7422bf6ddcb3ff19d04ade5b5340a9c38b08c55a2f6e1cbbdb2a008413db0db17150b68de57e

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\MCZQJD7V\comment-iframe[2].htm

    Filesize

    319B

    MD5

    a0064710466d7cce2768eabf83ee0088

    SHA1

    a799f1da95bda545dd3333c0bde15c21a8153b33

    SHA256

    6b51d1bd1c25846ad13cca9d4ac4a051e95c7ba13b4813ceb95370903dc0f3e9

    SHA512

    522a03c2ac070f293d6722d1f5ab5d201b2b783c75004df784fb4cfd0faa6315ff310ad5dc84fb880b26951b618873d9474d86965bf1383f7755319cfdf8e641

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\MCZQJD7V\common.1739968e35e7902da9ab[1].js

    Filesize

    192KB

    MD5

    051af50e97cc41dd8495c62f2965902e

    SHA1

    48e6a3d6d6616fe014c378e338d41252dbdafb02

    SHA256

    ca9d03f4715094035eb98b780ba1f7704d7b527a95afe0c286f88e8c85aadb28

    SHA512

    f7a734ea9523649dba4b414106ee089d27024b85399bfcbe251a476fe6948416be0c6254fba5b025923a15763f856ae08dcc572c4075352976cbcba9c601bfdd

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\MCZQJD7V\mandatory.js[1].js

    Filesize

    226KB

    MD5

    433af997acffb0267315489d50da512a

    SHA1

    d5266006b4c652d2b82714cebd3e4570d2b1bbe8

    SHA256

    3e2ef8a8da537165ec93f7aa58f7dcc962b7477db87c5f7d6cdb5afa937430c4

    SHA512

    3392561484e0cd2172f979117ae1e2714c483eca34072899a99ed93ae5c9a8b4d77cbee469dcae4f2a3af460a2d8eb4c0ec92ac45d5381942ca438dbd0e7cd82

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\MCZQJD7V\ok6[1].js

    Filesize

    141B

    MD5

    83cb13af83103c0462f2887b9e2e59fc

    SHA1

    bba2c6f03a513588a6001980e7e11cfda068d2a2

    SHA256

    ae723359f13e5593e4c492c99a8d4751a3349efc137fb3ea701a991c4867b242

    SHA512

    dcc8381facf78e829897b4cf3868d284139afd54c834b86cc3a1ea11e9e9110d4552b4aa26f135edd72b4e40dde853531861050f017605ea0d977fa075ec950e

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\OO2Q27PV\640x360[3].jpg

    Filesize

    65KB

    MD5

    e473f9798cd3fc6180c2c1a91d44aef4

    SHA1

    6ba232756342de51e558e05ae5f37f1e2c7a00f6

    SHA256

    766058da4f518ad6440cd124c4f9c1a45dff6c3d5de379269568b79de303c84e

    SHA512

    23fa3567cd13ceac8814e313c1d9660afaa015ba9279d069e06b5dd83d97f4e6dc21f3ea03e7a0a182c6f3d274b4825e6504bd7db998a84bb65c7858ded44945

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\OO2Q27PV\gw[1].js

    Filesize

    310B

    MD5

    5441cbeabb11e9ae37cea79cf2fe2cd9

    SHA1

    1fb775efb63c706b523162b5553b7ec4ff7818d3

    SHA256

    6a0a6797ea34236cfd5bef993fdeeee494cedbd1a4cb42e0e587f8eae0a86ba8

    SHA512

    00e91b879b5b490ee79a93429b38384cc276869c0e42646f10f9064c8fc60b2d36c306e0dd50bd7ca512b81e80daf35c54411e20547114fb0f35152fc022074c

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\OO2Q27PV\platform_gapi.iframes.style.common[1].js

    Filesize

    56KB

    MD5

    f6140cf2e81a9d5b9bc96970fe1946f6

    SHA1

    e18cb20a08d0c13d44b72e36e9560aec2187abce

    SHA256

    68cc8a99c8ed5cc0eb3aa2146fd34bee0051bfd98faa3c03b83c78b4a12a8bd5

    SHA512

    1f61bf7228ae9fc1b36249223f4ca0675da05beaa6c00b28b7fff500e0527ee237d139eaf6793ece67f8730dfff0207bf945a848795aab7c57301433449a8acb