Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    119s
  • max time network
    130s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    25/12/2023, 00:46

General

  • Target

    1df879b1dec97d9e315375f9f05a0b8c.html

  • Size

    35KB

  • MD5

    1df879b1dec97d9e315375f9f05a0b8c

  • SHA1

    5160a84003e81be8fe2659eace2e466c2bdcf057

  • SHA256

    2476440de2e1c7e49d1e2b3535ec3274b147f9b2423bcffd765a4e4cc05808bf

  • SHA512

    d3605d2c3808c0fcd1e37a2f32ef5083bf02a2e8d63af6e7654efe202817262a0d2e787a43913cfde782ec728b9f74a6fa629897a1710404833e70d8049e8fe8

  • SSDEEP

    768:XDDqyc/Q7vGs5UD7VesxmLW23TmrQFG1N9Gnqr9/TTh:XmEsxQW23aQFG17h

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\1df879b1dec97d9e315375f9f05a0b8c.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1712
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1712 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2248

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    99a0a16b18f749e8c3dcceeca20524c4

    SHA1

    5f73e2a2ce809123c0e84ad9c3e4d011facf6408

    SHA256

    947f3bc511dce4f9c86d74d63ba1edc1692844f5db9dcb46d6670545894ac81b

    SHA512

    3e1ad1b504b4df24c7de493326c041bab11393ae8070f84ec6fcd4f116a278229cb4762f4e4d4e005d97b6fc67f48096f2099f7ecb829f48597cbac00a5984fa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d010b76e7cefc8ca2b463b508a287b48

    SHA1

    6e3072f1d5778d339aaa08b0e418b16a0ac75dba

    SHA256

    90c0c1eb34c17d35e472ab3fa708eed8ea3042d58b8978908de19db21adac1d2

    SHA512

    25cc48f9ceb7a15c49f9dac77417cc56cc4a8485accebf2a025c41f35fa118724e45642c5c837e42f85f3d59d5d86b5d0391af8c7804d2205fe0e728671885b2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b324550723a256d1aa33d5eeac790fb2

    SHA1

    b54ff3cafaa8b22a0177bebc8e54f945491c6007

    SHA256

    2c7276d1753ef9072e13427c7d32fa8b576be2724bff88de4545c768ca118b20

    SHA512

    85d4d2206a0a889787d3f10167ae321e68ece9929d8a1e61a9a5d97c9e26fd856618d073851cff529b2f91d7e396362f5a4a1d01a3b161ef6d2a0f3cad07031e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e14fd48aa87ab797459888d211935028

    SHA1

    2a769bf049e49e22075fd6077866a06e5ca43514

    SHA256

    ebed7f741c5eb3782278674a496b940955e4145699f4cd416772296a903a22b8

    SHA512

    51d3dc81130ff1c76a7bc4933b8c51dc29db71104c525d45eef9795fd534aa3feeaef538aae680a383f9522fd098f594a914781f6a61a052e448de250e534f00

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a6eef583ec5772784abc4d17ed461a62

    SHA1

    31f2ea14cc533f24b3bdff638bd48daf3db3a86e

    SHA256

    f962d3b0b982ed525a98e63f57db36924f5a2ee4cfd5b02d0a040386d5b4fecd

    SHA512

    c19b14d805d86754e68003d4dc6300fedd9fd3fe72f323251abde1ac1038d878f55ee479cb0a771ecab39d25d7adfff6ab1ea6a893c099f5864830bcc3695dfa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    990050c82786a12c806eb92db12cf9d8

    SHA1

    e330a204f2c2cfa5b795f355f0bec1faef1fde9f

    SHA256

    7b9bced9124dc7fdda1ac137ca9f2ef98bc8a183816e879bbd199fe3ec2056d2

    SHA512

    dfdef0566a4064a6d1c6f34c570c95492bf4f4d77fef34a1e86d3868e2207aa5b2f3b420c990c67865c28af8bbaa4d1349e93a9bdd356f404b696069e21b3ef3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d51765b82ca30dbbc196f43bc5f7b4d4

    SHA1

    f8a85caece8220d62b88648f0e9f8262758841ed

    SHA256

    349beb83d49a072c3663a2b82ee0d13a6a8f66ad79c09498b18608c18e8330a1

    SHA512

    91791c547c915a71a46640dd11cc4241dfe52abf25d0b6ee01a5d5b00710cb9a91c0651a689430502321ed4d43bedeab326ed4ad1c346f57efa89378a7e836eb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f04a98ae23ce22ef450001a31ad19cca

    SHA1

    99d5defea5249f4905b7a1dff995298a72576d28

    SHA256

    12457a5cdad4e20623d071a987f23037bf5d2a15bb90c82824f459feee031a97

    SHA512

    b028c2c6898997e931e15d92de55ce2fedd0b7b98af8e61b3fc6605ed755d5392bed16ec7309dda84e23dc6573c7ad25ca3e3b4560d45b4df0c98a9b13e6129b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fc062250b79a9e46b57e22f73d551e02

    SHA1

    c19985cebc95d42e76b954ca16532c882e9c219a

    SHA256

    abf8d484d5af73014c14254037bd97f65075a0d23a678bed1040df7318b7bec4

    SHA512

    25b5a01da3273d0761d1c6a13c05332b931bb6b20773e4d2928199eadb656148a996c02f6960d330f179016b34ec96294e299cb0a47388da250569c7c74e0141

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d0d0407aef875932b1c0abb624124b3f

    SHA1

    39435612d3acbec71cb9edfa67edd2058083e1a3

    SHA256

    85ae972fe55c956aa4dc4387055d7a1c77f338474cac69af855e1cafeda8360c

    SHA512

    edfe77d6c3031e5e13fbc721910f4f81d8a9a54f6ac501510fc77e8b050b94f3e1ee2a2fb24c8e89d50df58ee51d82312a429ee418e6f528e3bd5da7baa6a098

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a111275fb0739306ae61825713fe54c6

    SHA1

    09f0cb92275a19d96d48b82e34d2742770347732

    SHA256

    f16fbf0652988454842fc4a984c479f3353259da4526dcc61dd636ba317c2250

    SHA512

    5de0b314a696a105301fe316e06e133652290283158d2a3e42dc4eaa5b626c818abe8938ee39f15cd883f5a43e4fbb4f7c0cf37f88932d1041306a7816052939

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    89fa4eb51f51f0c4ca8a31165510d820

    SHA1

    6a1f3e02cd9c7cc27219b44a5ac4f4d5f41938c6

    SHA256

    619d6ca986768cc295cf6eab38248cf03889174cf58d6c4f9adaba67115d4a90

    SHA512

    20d05156606636285e5969311e1240f2f11849d7404eb45f507bc10e3d55ba197a1b0a2ea16c406f4111227210a5922a0e3fe2269ebfd2c7e0011463508feb32

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e5e0e527cf65a54e8533c82bb909a2fa

    SHA1

    623be828c56f5f27d432c11413dab2427c93f024

    SHA256

    0675490e41b2cccd2b1bf7f295953673c0d1195b6ddd5585c1a38ff74629d295

    SHA512

    695bd9c90a27c100224aa34e4cd38c579b53fc924d8ca8096571418c02584a1e8ad555c0efbcddc2d32d242a458d56415a4d23aed0d2134cd5bac16c5d421862

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3c130e3214130a16fbcd36b7cc00f20f

    SHA1

    162d8313bfa4df521dadce39e54f029bcdff8700

    SHA256

    c71714424550674fc7c4c7d3a4a15a9adf0ded809628c02147725fe7d5308fe6

    SHA512

    5b728de3a4f922a88bb2994ad6384b370b5a9a38a9c579c6d3b3ee49b099cdced115f2e9471812c2a0e53e579bbacc6ace08d078209cafeb51df6b61f6ee43d3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cc0e86f47ae14b6a655718eddd3eb360

    SHA1

    0189647bdcdb3ff168d87693582b89fc279ec32c

    SHA256

    486cfefdcacfc740710b0dec0524dd4762e7a2682a455f120e655c9aeec02bbe

    SHA512

    164659db37a178448255f6bf3beb0f5ae716ff34ccc6c55544897e3104e6de500195d9cf75acb5f16228199df547a780d47e244dcc9969484506b5fb7bdce512

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    de82476059a3399d80418088d5399362

    SHA1

    25297eea3545d0033798eac60ef703389434e4d7

    SHA256

    35691bd11893d892a74a3897f40f4041e6f8262d6f04a751c9c6655cbd73205b

    SHA512

    5bef1f17d52820fcf461615d79651aeef0ed72cfcd31f15f8c175d7d0ff6a7b0587530536b4fbba33206618fe6d8be1b8a8a18a298668fdba41b07810cc553c3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e99ecbf9072ab50165cff6053a624697

    SHA1

    893b8420d1dbbd0bf9d8799e90d93a681c4ddd0e

    SHA256

    62a3151179a659a60d781b6d4063a9dd72972fb393523453d065892069231d90

    SHA512

    055fbe3367ccee0be0851319183f917629c156c212b2c2d84b5750269071757d429ad37aa116699c279075abc5de04ecd356b268ceb971abb975fe1e892243cd

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\05ZIV8W0\25JVKXAQ.htm

    Filesize

    101KB

    MD5

    6f666063fd8f8933917f8b5a43b4853c

    SHA1

    5b5c0cb6b4565d0c54e7453043b6ea874f50ad0c

    SHA256

    0f326631dc7261ba5f1ea300a3d33fdee903cb787d80b1017ec336b084bbba24

    SHA512

    f291da4149f2c3c8656aee65587e01c0e66227d61446314662f8f3d19fd4ead941cdc5efcf36303181b897d4ff065498fea380075dd070ca9fc96228f5c8a666

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\E3F2LH07\WYF2SYUA.htm

    Filesize

    180B

    MD5

    8a24eaa89d2313d781071be7621cb1aa

    SHA1

    ff4f1aa01260ab8276e504ce960fc4a6dd8f9542

    SHA256

    8bf6d5bd5a64d79e79cdc9b43e6af11af767cf2f8b2c1c7c22c9a224255e452c

    SHA512

    588b8f84e07b58cffef489b9dd7a9097fc4e5b9afbf39f760563c0c8b13427c11dd9e11c4e6e307381ffd927b9bf4dbb214d34ea5cf00b0a5b81831924c1e1d5

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JIH1AB02\mootools[1].htm

    Filesize

    169B

    MD5

    9527755784f5014d2c94dcabdf6ae892

    SHA1

    941126eba6b0b049b4a09fb846ebd943e894e068

    SHA256

    5b111ef9f2dbaf8e8870567dc8e2302efe2b0feb9d4ba62ce74c1039ab663523

    SHA512

    b2594aad660b1c19393712a06ea66e9820744e945d38064062dfdb3de0d6974bab42cffef60959916136ec2650c7aeb61a23bdb998292c93ca62722d7fe8fdb7

  • C:\Users\Admin\AppData\Local\Temp\Cab3738.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar37E7.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06