Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    149s
  • max time network
    161s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    25/12/2023, 05:01

General

  • Target

    068bc34737c4d5bfca068a2ca6c7222b.html

  • Size

    36KB

  • MD5

    068bc34737c4d5bfca068a2ca6c7222b

  • SHA1

    89546babc3d88c77da3bed0345311a624fe916d9

  • SHA256

    6a9184933a711c6c0a5d1aed29a34a85e78f7f3a9f7ff1f37c379f86783f92a0

  • SHA512

    928557500d50f846c5cd77281d1f9bd58bc3152f6d0cdf29e0a68250eab75eef1734cdeba8fea9d5c7069d8e5dc712668dd900a968e90b685053a801bff83ced

  • SSDEEP

    768:YnKoZypD3JEqoW7/5R8M1pLzriT1/kVQFZ2Sgf:YvypD3JEtMm+pP/OFs

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\068bc34737c4d5bfca068a2ca6c7222b.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1996
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1996 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2248

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\070E0202839D9D67350CD2613E78E416

    Filesize

    1KB

    MD5

    55540a230bdab55187a841cfe1aa1545

    SHA1

    363e4734f757bdeb89868efe94907774a327695e

    SHA256

    d73494e3446b02167573b3cde3ae1c8584ac26e15e45ac3ec0326708425d90fb

    SHA512

    c899cb1d31d3214fd9dc8626a55e40580d3b2224bf34310c2abd85d0f63e2dedaeae57832f048c2f500cb2cbf83683fcb14139af3f0b5251606076cdb4689c54

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    1KB

    MD5

    700218cb83cbf9fafda92b29f06b661c

    SHA1

    3e7c58a54aea6ca36ab392ba20b838925c5f5d43

    SHA256

    c3a4af835391a875d6150a5c01461dab0e18853bbf59d6ad44b3cba65aa293e6

    SHA512

    2a7f56ed5b0c2f27e91854147a3d0fce1e33fb7b39dcd864603840950f5b7594972f9840db9533d26fcc941ad2da93d67b00a8e0f6fb9fc59061b3b1924e638b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\070E0202839D9D67350CD2613E78E416

    Filesize

    230B

    MD5

    3fb5d095fdb558359ee35b1899077210

    SHA1

    f37fe69404fdc3ddb50d30cb6568fe2c4007ae6b

    SHA256

    5789f9dbd4360fe03cf63af9fea86e7708257cc961a4cda1e36cc0ec93ccfdfa

    SHA512

    bd4532e4998f786ed725ef7b9802bf3901769d6cd57096c900dfe957e26c3048a07ee3592f6cc6c590a7c4d6ba18c139e72dda3c0645d1c0cebfed1993b2ee40

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e096a5ecc5350b9553172b67362fb5f3

    SHA1

    9b9f893d7fe2e975d0db2d79bf91fcbbb2b48c56

    SHA256

    52489cf8b8f4818e28afedc01013805404a5297eb26d830ddeec21c3520f68bc

    SHA512

    03624b77feeb893588dec8359a554673caa1e37ab2e0bfddf75e6aaaed075f5af1d1aafde27ef74c980f0af41ca148c654d4b1036afcebf01ce1796504f648dc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5cd6c1c2722a319067d245f5b0f5dc4e

    SHA1

    bfdf14ebe52e50be873e12ef3270df35fe5ea033

    SHA256

    e50aab35158b160f78856795167c03f93f8166399059d968be6085ef42dcacf0

    SHA512

    70183179d756dd7fb0f1c69a00d25e85d5a20d01aa133744d7ab87147f41dce5b37c41de6cd6b06f7c8c2306497ea6161917688c43cb43d8757ae8bef489faa2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    dc3312a583fc62b2f75748537bb720d5

    SHA1

    b0084820715dc4af704d54cc22a6841d696b5584

    SHA256

    2c7ae6cc58d0ed4800da7506c1010edc2bf1dc053ebe3479ae3a28544abdbb8c

    SHA512

    e2a9bdf660ee53b8c8c806d617ce236c44c2777b2451d60cfe55f7ca17002b34fcb582fc2195c143a9ad35d5cd44e9182f27e16870661eb0941195838fdc54d9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    09d0d818e474b348796b945c37bf9053

    SHA1

    b6936338bd265a7cc6d0ecdfc1b2acfadc037c8f

    SHA256

    846a19dd45e668bf6373b99abf7334317c48c30b48e05886193e28b9e82871c5

    SHA512

    7ed8072245a4ed255d8283814c044d05d474be128dd48e925510f80d2a8322bbf06bc5abb0942c008ba3f0446948298cb35a449b5abfc955071a15b8f0d6acab

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ed530b2bd4523da2fd2804534169ff66

    SHA1

    1a4f74601dd188bab4c09a3db9eba81ea99bf4b9

    SHA256

    4d080ba87fa7cb08eaaa6f4923c2f96c90f3aba00fb0d5e3665ca13c2e7cdac2

    SHA512

    d079a9cb1652b29933edc10fc2da8fe178ce68a419b25ed13e6172a5af452ed60972f9f32d8b4b27bd46634742a9b039c3fa6a988518bc9decb99a34f0090186

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ccf70ddeb2982cbc333050a10c5f76ce

    SHA1

    dfc0604cb00d29cefe733df0f0de4dab461cb3d0

    SHA256

    3e3487905f05315b9aab73a8ca39139580a9e20232d28ec161e734c35d25c529

    SHA512

    30bbaa61847c55e2d16c6be901117c1d0cb06f06a0094b0fdeed9fa8fc5794f12cc9d0df59fabd294e674e0c380e698816cbf25f08193b4bb12f62113505efa4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2f97da5eec53e967f26a5380f1453fa9

    SHA1

    2abcdd96e3b6c242c6a85d4846a2ab0c8f3891f3

    SHA256

    86af39f101972f46f790b029e3a254c74c8af748427e20f9dd558e9dba676d75

    SHA512

    3bcfcd29d33232a69ca49471d7f7594815b384aa6e3c7a3f4ee54512b0162e316cbcd2d902512c9908b003117f5323ac161b770f3490e6565ba24c08b7be192d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f2ab7c69364dffa1ac4739c9f6037e63

    SHA1

    a70894fd9244c923ad51bbb11d19a6f368f7be48

    SHA256

    c2ad6e9aa02c52e8d8efd82bdb663c9c549de76546621b278d44c6f0793dbc86

    SHA512

    2cd54fc13c8d8f9c423bf0fa27eea44042432a2432c1dd45bc67638a427242791bada504979bc90df999da8cf40c90f08a392c4b72e7e2898034679ad18ba32a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    32192efc8f2da0a763e421d4ffe5edcc

    SHA1

    3b6cafa5fef9db66a8d987a2217d529fe7a053bd

    SHA256

    c254c87d77ed2cb835ae7d75adefba5f5ee0946144148c65463607215dcc6b1e

    SHA512

    458186385f7e679fb9111f6497ab607ea77dbe0da0f2453361a9ab68b4430323f9903f9c62c063382c2eb13c669286438dcb53b048f077c54cf080154e7b1310

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2bc0ea3f66f4d1df223bc92890dd1db7

    SHA1

    201b9ccb47ba7aa53671913143e1480732d102b8

    SHA256

    6e75a1de0671b2553f5f286e505a7000b30519786c9bc2d13e3466cd1e62a514

    SHA512

    c4186627cb7af6b5d161d11187ef4bfa2dd77647de7dddc85ab5e8319c70bb211b3a2af927487a54e7e6573401c20fad1a0dacf712848898de78de6f22f7f591

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    411511b9dd9c6fcd569ca8ad1a2c365c

    SHA1

    012aa74c6addf19afb171245bbc986150ac08784

    SHA256

    862988ddbbb5c7cf42c9ba3204dcb6e4842935fad399fb46a9a29e75a5804a18

    SHA512

    4f66fc3778805b617efe54d94a626243d8a83b81913d6f57b63196182b8711ac1571274c5a46ca24b58131a7b0c4f5348864403b0703194d1ef298b1aaec8125

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c06be851239700c9e5e6c41a54b7f113

    SHA1

    6ac2583b20ee2c76c43fa92fbcc64197b6e27c60

    SHA256

    76e575b39b66813647da5ca33f5113efc972316b4f215aa91076749ec87cf403

    SHA512

    707fb1a49a8d1dd89c38a1d7298ea1239ddc03089bdc853b8388e7cc0727ab11845d88dbef0bbb5bedc1a7da81d3901a26a16676588e3d7ad3e6d21d751ea4c9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f98e06fc34408f6749ae183c2aec4d19

    SHA1

    68d79d384c079702c5fa209aaccdecd060dae532

    SHA256

    ed1cfbf52a841ef905cb705ecf22d7a37342caead6439556f78c9591b1776c9f

    SHA512

    2cc5dc0e354471075bc544518a268636e1f160822988af0ac6259fcfe9f5bdb0c52d4eed497216581a6ab55fd9bf8d4f0febf933bd3696018da6505e4ff0649f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8b95922b698798538e52e63dd67d66c9

    SHA1

    95a6b4af0a96ae8474ca60e3df0c1cb0f96806b6

    SHA256

    13368dc66a30441ca28ad0f9bdda31b995ab17a9f528171748a12e7796d4e4c4

    SHA512

    3900caa61352b2a19a72e2302b62a6d5478d3ef70242208a75f6400f990a4cf7df42a6c534467fecb541710a4e512e9b073d24163e64fede9e4375cbaa49c4eb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    71d94b1666de6e817fbe6c4a7917a379

    SHA1

    8a799ed4f6121fd632e75c65a777228b4509e7a3

    SHA256

    66b712cf519e9b6b75d40d09649bc9ac446434328506f8c0dd9d4f83136b52fd

    SHA512

    09b550c6206316fef01b833b88500ea7a2bd1dfc1d9a7ef84edfa7c1d6ae424919ab983ab3d57ed9e6feff67e93de402d00ad966952a1c51d88fc3d816f69073

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5bce741d88575fed700d107c30484b9c

    SHA1

    291740f096ff888e6da04f13f0363016eeeea583

    SHA256

    8df38ef0201559e838585db7ce18c6cb9432a920a7e36b02bd7768a4dc43882d

    SHA512

    ec9e77a7ce4ab625e47013b5a60fb4f90562573b8116bd5e625c3e3bf18439681902a95ba745989fcc8b7de9148d30d081cc5983f0f4cdb86e75907451e6fc85

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\E1CCB52I\cb=gapi[2].js

    Filesize

    133KB

    MD5

    288c5ba5b7001fe841c32f690f62cc93

    SHA1

    29aba9d8e4f7cbe25fa5e64b9ecbe256e51fc789

    SHA256

    c2f33dc18eae27d4e878bf837dd97f1bde5151e44b0271408535bb93265b8c52

    SHA512

    e375d41344a086d35accfb02bb1f91e2dd383db032af387fc3d6b1230057cc5e432e9b2cdd976e51425b4f587391d42f4d9d857c2e6f11e822a65edcb85f1c9f

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\U1J1BPYJ\plusone[1].js

    Filesize

    56KB

    MD5

    1944af3661da46249991197817b6cd8b

    SHA1

    f952df40ec79fafc7c798f37aff92878977376ed

    SHA256

    63326a1c4e0eddd3501f0a064b06a2708eb0362f3ae934f53145978d3d0799b5

    SHA512

    0bef19b32be337cfba179ed9ce4533a207cfe645d2e5fe0da9fadc7b01c72704fc89749670d1ac48b8d494675bc62ac089fdc4d8495979226f10828225594376

  • C:\Users\Admin\AppData\Local\Temp\Cab6D27.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar7FDF.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06