Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    119s
  • max time network
    140s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    25/12/2023, 23:26

General

  • Target

    431dd0e077ea6f3f9f9ac1d896cc490b.html

  • Size

    3.5MB

  • MD5

    431dd0e077ea6f3f9f9ac1d896cc490b

  • SHA1

    56f5ed61342484847af423f7ac501b59d85564a4

  • SHA256

    f670843a8f193acecd442e9ce4d687251029ebb3bde5962b90e37e32a64cc41f

  • SHA512

    35de5792e57257df3527d83a61fee28d609367719e7671be4806705b359a635ce30ee3f1ff4a6c2d450fae8757fe3294659e3ea09b79d193342540285e23d1fc

  • SSDEEP

    12288:jLZhBVKHfVfitmg11tmg1P16bf7axluxOT6N1+:jvpjte4tT6z+

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\431dd0e077ea6f3f9f9ac1d896cc490b.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2232
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2232 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1728

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c3723e0e954a8bee53b38038056fc36b

    SHA1

    905f4cc7e504a1d398063dcaaeb86fc6f04f96bb

    SHA256

    713e7cf343c24f2ce0cc4287a201c53dcda87a0ff4c05ee2f7b28764dd14123a

    SHA512

    98c2d17fe4cb2f90a4ce930f551469597c5abf0dac6fc270a746a0c3ddbc86cce19817be4899877774b621ec7e16d6bafecc3c49f713457b44167519b29c173c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    835f256b08b0999505483a34dca4be00

    SHA1

    7aff15eb0a90e24b467566e3c12795cdf38fdec9

    SHA256

    4ea911b99364237fda33348101e40942dea319719d23f258b0f3c9c9c3ed9cd6

    SHA512

    a138c7bb39c0f8707c6d99f673fb50ece36240923a98ee5b433b78f903a06f8b6e27dc1432ae61a230130f433ebd0b1e885fc3ffb1e8671b3874394634921fdf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    918ac0c48740ca6c063c7c715fddecfc

    SHA1

    1e731bcaf96487fa7b757ae75c63e85f85f51797

    SHA256

    1daa50b90ccc1e79938f8081494d61d11cc90f77beee64b37b2c80a0a1c2f112

    SHA512

    ea1ffe8ab8c9e6e9ff956c16756d01206fa64f29976a0c443d99ddc0370b3e8bcac23dc4da3ad9fd6ea7376335e788d65b942f9c94559ae129760031035aa683

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0bd391bf502952feef8c69cba117df6a

    SHA1

    2855fa29d6a75b925b47c8661c61360fa085542e

    SHA256

    e6b78d1be1e232deeac5c4ade531d6267ec3044bf58a848295c42506bd47cde6

    SHA512

    e6fa88cfa426f90990397ea112ea57701829f1641474e909db83135723efee8529786a87a1054638829af0a9f607dee0251d98c009e85f3b669194a44dc9aa6f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2b3bdb57ffff4be6dbea3f7e73046f56

    SHA1

    2fa6c6ad74178bfbce8b05b7cc4ba9666bc66df2

    SHA256

    e4d71b5391defee32ae29801b17e9d985d4cae38146e95bf6f6c35b67b9170e8

    SHA512

    3b4c03b0f7608305fe175b612175acae7ba4b053519f23013fba7fb923d0b8ad77217bdfe07de0461d9cf3ee5ca6a94714183172fc61e28ec38a87829931bb90

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c7939eee190dfa8d4114435c4120e2d9

    SHA1

    4f4f616408625828bd69bcaf42de1fa0b10be5c1

    SHA256

    3945aca3c93bbb2604a8ec94a3eb5180665654777072de488d361292b65d8273

    SHA512

    2ea79ea999954e72de99e082410302d8564758e0c378c05b3025ae0333266b26d0daa2a75a0a093deab4ad7df5b583bfb65184a8994ca48673bbd0be478d6920

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8f209322b34a274c45e1a68463935e96

    SHA1

    eecc7de84e20a23681ca16debb444e819965c3fd

    SHA256

    a4d44454570101b994b8b8761abb110f4c81696694842547144943046051f323

    SHA512

    6cf08736c76736c5ba04a4972ee882a0a222bf4610ad4073ff86d0e64bcf3a59b39f7a18fd22122047f38de5b7b854b3443f313a27f93fa1eeed11ce7bd47023

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    808e713651fb8b543aa67aed6ec15375

    SHA1

    8f12fbdd42398b33db5b81c2a81c4bf31acb1686

    SHA256

    96ed7c87d8a156521320a2db90e91318fdae03dbefac2f0fe27d274a25d69809

    SHA512

    fc2f20ed80a69dc19fe01cdbc3de8485c885d779ca15df4c9659690949315828cb6527579a1f35b1bc9515c2b8f41f2ef33442a00d81236c47a0a29f697c9f5c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e903c22101571da8f7b76fb27d904271

    SHA1

    914f9ee30c5d377b0ca6919b5bceaa6fcc02015f

    SHA256

    c587826c92cfaa0dcf326d8cd2d8cbcf935c55456f9b3a20ed683613c8ec06fb

    SHA512

    e31847a844f1c138cdd7eee7c0a69390bd4582d47c9ca8b53a51d5980b4f6e3eee27ef929de9ea5a0975182237247e2bc41235ff69c48e3f70d6b62ba123e74d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2811ed39a78222ee78a4699749b3086b

    SHA1

    017def1b8f5c0cbb455a797d07d04f70635f05b8

    SHA256

    33bf4accd6a471ee2fd563c115aa919f9cbdc41508aaa1ea00bfd13c8bb4916e

    SHA512

    76b4014850673ea8d963ef68ea635b0ec7cbd5d0ab79f28bc7362197bb7c5df914c69fe96a8282f8556a7b71889a862f02013b04f7051e8883e756ee25d916cf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    784b3df63cc7aa1bbc6897c6a8e0f2cd

    SHA1

    19b7c7128fea3316fdd4d73a5054667ac0d59f55

    SHA256

    a9ec7fc9b46d5eb74bbb34ab9ed7090707ca9426163e09b200598b6d0289bdfb

    SHA512

    2d98119dde09d4b1bb6d4ee73103cc32e66948513980e1654fa3bc227d4c2ee78fa5e6bf7d54d923e1acc6aa99e625b87d61b211c0714a6b829fd80ae03bcb9e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4740aafe35f004bbc72dd638049b3905

    SHA1

    8472db039f217de1043b89b52df8d08f370a91ee

    SHA256

    17c3eef0ad43f3c726accb0a9eb12a4de1b8c4decb8355588bfab14589005e1c

    SHA512

    779f333d85f5afdf3408a35ba489e0209b93afd4733879f2f43abe8124f56239fa8c7144cd5bfe4683dd2da03e9829c60017f0e8e3399e96461ff17f2b7c9d05

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    36834c7ceb714b0b756c6a596c1fc6d2

    SHA1

    84957cc043aa338255fb44fbdd89716a34e5d32e

    SHA256

    6d644a5b73beb30c7e3ac2f1126b6029f5c3ceea041c6b82acf4359274a37035

    SHA512

    885f1dbeaac117fb3e5d0e89f0ae1d2337a0ab33b18debc56cdbe2489a6b63218ac8833bfeade505c022a2ff9bf6448bed14aee4948adaed025a6135418dd3bf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    35ca845c5e202bb5d4a4a8debd298b85

    SHA1

    3e68908491d62e9cb3050c467ce19f7162ee32de

    SHA256

    be6573bcab9e589317b95e6f0725dcdc171867d11ff7fbd846e3f2d1052149cc

    SHA512

    446686a197c2dae2cc01303be7fbfb3b7555c1be3c725fa7a303ab052332fd3c793e74912b03d20e53170a687fd45967c46c1812a80cd2eb4d9041603e77f6cf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ebbf0e0e9c6eb148331b173037d211d4

    SHA1

    b4ce4cd8b4c0bf5e0a900928ded1c2588c903e69

    SHA256

    d193a4461501ab1717b237b3216e89af0098024f04e9d934a42ba2a8e5f51ae4

    SHA512

    b9335ea56aa1cfb9dd085f114c262e447dc85346f39d9b544767386841f259ea0ce46fdfd54ca0d80c99e838fb8ca40d3dfdf8176cb6ad34e4fb581c0c445e6a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6a4a8f199e9da4895d760c941df901d8

    SHA1

    8a2b729bf868c6ac84f108338c8ffe052cee953b

    SHA256

    1f66e0a0ae79c9e1f7161ec209231ccd7fa9ad71620894486563905e09552e90

    SHA512

    125e5f0239fd4f31c621c64703dcdecbf65a49faf60d46c2986e9fb339bb31429e5ccbab0aa0c5651cda920661b7e73cc7df8334dbb6bc4eaade8b1afca5188d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b7674420b7ba4207f3253c05e44b75e8

    SHA1

    e078abc2bb59f489f8bd8aba74fd6be00af0ed06

    SHA256

    4f94e03414a3d0e3b317d47f59573ff828120e9bee4ee997e1cc297bad5f9a82

    SHA512

    145d30d0f42e8432fa8486a28aab1f5b8cf7b17456851e47687bc66eb9aa5c58ae3e80020d39eec586c7c77ab3cc5f8c38d1f3b1db5077c04bd6df436c67cc67

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ce0f27b289ff3e337572ebb333fe1fe5

    SHA1

    44cecd1d9f3a123e80429621eee4e4b743e38107

    SHA256

    d9c4fc23f2d83273a0ae298ae5db3ffac896a491e355f2d2c8557b87fb538cbb

    SHA512

    429933c0e85ccc99b43681745075ac381993ebec29689e303c2dd22b28f458846711615bf6703e29a201a8692b9b5aceef307782ee5ccee013461ad66361bd18

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f6d615bff6fe1227f2c068138f8dc409

    SHA1

    42e537059400a5f3467aa8cdbb37ca7ce34ccf52

    SHA256

    78048f0a97cfde74e5e633003f2b457223e06fcf523eb36144ec4b2495a97de5

    SHA512

    7658a3b9e352a9c2fe03b6285813faa3435001e6f01cb9b7681bb98bafa7bc9731fced9682c6762a96eb341c7c38fee4788957bbd9d5f5b7d5df84c39eee3891

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    41d38d344dba71da770973dd3c53d56e

    SHA1

    046ad9e3c0984a2b5e9e9559c14f12a8ee0b3ff2

    SHA256

    29cc073b1b3c89f6d4f37760f74544fe292befa610c3c62d527926c8ba9eb44f

    SHA512

    7d2502f176814be055ec038c5615dcde0d326ac5ebdbb208a1085075ad059af27ca2b917c5bb033cefca5e044b35ed98e69881ad534c37e23e1992c2229bdb3e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    df956780d6e3da9a39b114647f2345fe

    SHA1

    2f6e9a3b55cc13b0cd1f9022a3bb8dfcb20bc1d2

    SHA256

    96125b1e8e6b86d0e14d9fad663036f112a659f0633087893003f863d0c7e6ee

    SHA512

    10a4afd1c4334b1d3c9de9bb3ddaadc1cf307bdcdd1ddb341880e6df58a82d0ee69a45c61ed5b4df39a7bf3ff4c893ce5dcaa1165bcbe10faa1105fecd010776

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\4R90HQQX\beacon.min[1].js

    Filesize

    19KB

    MD5

    dd1d068fdb5fe90b6c05a5b3940e088c

    SHA1

    0d96f9df8772633a9df4c81cf323a4ef8998ba59

    SHA256

    6153d13804862b0fc1c016cf1129f34cb7c6185f2cf4bf1a3a862eecdab50101

    SHA512

    7aea051a8c2195a2ea5ec3d6438f2a4a4052085b370cf4728b056edc58d1f7a70c3f1f85afe82959184869f707c2ac02a964b8d9166122e74ebc423e0a47fa30

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\E25VF8N4\jquery.min[1].js

    Filesize

    83KB

    MD5

    2f6b11a7e914718e0290410e85366fe9

    SHA1

    69bb69e25ca7d5ef0935317584e6153f3fd9a88c

    SHA256

    05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e

    SHA512

    0d40bccaa59fedecf7243d63b33c42592541d0330fefc78ec81a4c6b9689922d5b211011ca4be23ae22621cce4c658f52a1552c92d7ac3615241eb640f8514db

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\YT4IJQ91\jquery-3.1.1.min[1].js

    Filesize

    84KB

    MD5

    e071abda8fe61194711cfc2ab99fe104

    SHA1

    f647a6d37dc4ca055ced3cf64bbc1f490070acba

    SHA256

    85556761a8800d14ced8fcd41a6b8b26bf012d44a318866c0d81a62092efd9bf

    SHA512

    53a2b560b20551672fbb0e6e72632d4fd1c7e2dd2ecf7337ebaaab179cb8be7c87e9d803ce7765706bc7fcbcf993c34587cd1237de5a279aea19911d69067b65

  • C:\Users\Admin\AppData\Local\Temp\Cab6692.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar66C4.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06