Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    119s
  • max time network
    134s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    25/12/2023, 05:44

General

  • Target

    08f96a59478762c01043fda0e4e5bc40.html

  • Size

    119KB

  • MD5

    08f96a59478762c01043fda0e4e5bc40

  • SHA1

    eb634b2c11041f52d2466f610722b6294d34e37f

  • SHA256

    330639f0b1652496bc66aca2c7e0503da98a1f4b14fe35b45eaa70b7d95c027f

  • SHA512

    c66018d93b4e003bf53574412a4ef9ed73919e45b2f27de7889b484d49f3bd11c8d89a769bbe5d600c4798ceeaa1701740d170748fe47664998624c2820a2232

  • SSDEEP

    1536:SMacWkQrtLV+ndhzqCzC69FUxjXkoMbMRZRGdAfNvm8oRthrSaQoAEu50kpdA0Rf:SbL+d+dCgd+dOjLV

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\08f96a59478762c01043fda0e4e5bc40.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2100
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2100 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1080

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\070E0202839D9D67350CD2613E78E416

    Filesize

    1KB

    MD5

    55540a230bdab55187a841cfe1aa1545

    SHA1

    363e4734f757bdeb89868efe94907774a327695e

    SHA256

    d73494e3446b02167573b3cde3ae1c8584ac26e15e45ac3ec0326708425d90fb

    SHA512

    c899cb1d31d3214fd9dc8626a55e40580d3b2224bf34310c2abd85d0f63e2dedaeae57832f048c2f500cb2cbf83683fcb14139af3f0b5251606076cdb4689c54

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    665007cfaf7d0c1a80b663d503430f6c

    SHA1

    685850e61a38b5f81a3cdcb67cd3a1e40db170a0

    SHA256

    6a8661a88d0be53b66a75e4c364825540421d7cffc3a0e9d7aaee104821019a2

    SHA512

    3fd84ad5b4b33c099a15d01070d3f5092ef319b3aca249e7aeb0acac59e6b3e83f00ffee9d93d7aa2b995190b98e10ab634e1086ad9d699e2362b58a71d03713

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3aff38f17b34b76dde673e336224d483

    SHA1

    a31653b1a89ee2e5ccb3b5d11daf2c104d05d7fb

    SHA256

    b3917f8861ab0be99696a0f4d818ed0229e84b2d2335115a9ff679a3f7ca7a75

    SHA512

    9e84c5a2f7a970bdff807272e34513b761344e985150afd1f27b5ae003562e89d1ddd91c9e15cf631f2404c05e3d8d473006701a7cbd77c5e29fbd2ac39378af

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    982c1336bf450cd056f26b4b4e424ab0

    SHA1

    83e1376e04aa41af7da92417480b851b4bde7608

    SHA256

    ce4a6d4eaf788b7fead250411d3d82b124af08e08d760ca02971f3d9819de61e

    SHA512

    cd75bc0bd3b475ae01489989208ef1d0bbda09cb60a25cafe26bdac8e3244cc1994b95b950425d4b6de0a2ea42493266ba1f41cb8c2bbe96ddf4575ea28e5722

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    09584ef5e3346605a924c3d829133fd8

    SHA1

    bdd5d57b0a164428431fd669b8b56909e412364e

    SHA256

    8970d9a15af59d4931609ab189e402af84ba9fcaeb6dfa0ec3d34f173a544a6c

    SHA512

    3a82455503579469211ec2bff5b5963c720638c36939c9671689a17b462380001b3b2fd883b564fc63d341d2eceea7582fb4d08922e5990633083b2805d11a43

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    32f9440825936f1836cb5e23d272efbf

    SHA1

    81439aacff9d343c7f5ae87c95a907b37808be7c

    SHA256

    abe86c09a709e627ad4b2e2e37d739dd76b5f0f1e78b0123ddbf042d7b8a0f78

    SHA512

    370cd8d6f7fed150cbb38c505311f56d5422ff54f57ce97aaa2271bc31270de560ea884d70d3372f9af10e2516104385c882997a874bb513266f91f65b955717

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ba4b945d9256ef27d703ad3681f58da7

    SHA1

    c1fc8a2911d0009cac71f2f10c00d0e775056d5f

    SHA256

    4ca66f5913cf206ac7bbb40f332658661a5815e8ec9f5759eb33c094b57f0bff

    SHA512

    4ebfeb5dc582b54d4c365b8d339700a32ad900ddaa1b9606533bfdddd10b42258acd1d03613335294f7c69f0069876f27aff3b7a871b576c91155b8ac8d19cfe

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    99cf53a6b5d2ed9735168f23c493aed2

    SHA1

    6070992351595d25fb498df5fdad9923b64cdd35

    SHA256

    bad7f573730e517752b7826cc606d4f8bb5c38293b271fd0801373ff6d255863

    SHA512

    24bf8c909d99368c2dee1803c84496da37aa75c2cce2c9a892a939ebd2db3eda127eaa951407925664e9a956243b0db0094859968dd5bacec8c9a5cfa28fcb94

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    75b8c8e47a34364a6cef0d1f94e7ca11

    SHA1

    55e6f5177cb265e472b77712f013b16801200af2

    SHA256

    345cb47eafb83c95e46890a9078549ae462267cb14d822a449c2687b4b7086c3

    SHA512

    78f952ea153157fd2a6c63a12c3bfba35c2bb841d34262ffadecc375892ee617c053157a3fab9d74f7ed06ee6079a12d15d8e55650f551f20c9bf27b49702c68

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3463a9bb66bc5fbdab4ecb90c378aae2

    SHA1

    f33dd2998bf4869d3ae32675aa235be77e82b996

    SHA256

    158e78880e0157fbaf61f1e7a39a06dfe4fa2a14e3383804ae958e171a4b2f21

    SHA512

    28be0c6a423e55b13a7b7c18cd8a5a8654813fc7839232b27162684a4c79fc8c17934e6397bed7265d76b0929a9768ae62e04bf18a49a2d8a9b61d7dc7665ed8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    25fe7effad1bd827cd3f4cbd6fa0aad0

    SHA1

    cb3f9952641ffa0fd70a4336e087783e8b876584

    SHA256

    294a54ac76f87ca8309283033d35e1fc95de987a1e4e2d2e785706b60472906d

    SHA512

    95785f69e0ac7f1b93bf3817aef3ab133f41369bea6b63f7a77fac30ce9ce0c367d25b8305561ef8555fb5575e59c1ae134a9f6e0b7343727e89acbf90a0d039

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d28280b2fbf41e499991afc8b1a5f31d

    SHA1

    7c1716da41aabe169eb2ff21190808370977b240

    SHA256

    2199fead04119f33f916e67c5860b25791028a2171a510f6a83004bbe7bcf1fa

    SHA512

    a57b3313e36711c7e808cb0d0064b6eab4cbf944217d3e15a1da8f5c02b32d41e963553ed624a8cab24cac643ca387e8da3ed7282f8804898393a427a489ecae

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7508f50e5aa558dc606ea731cddec4a8

    SHA1

    de44b95c1a81924879e4ae60c11ccfb51cebf285

    SHA256

    48733cf58947d82f6e32a9f92f7ced582913026f60da2ce42b77b5c070dea3fd

    SHA512

    ce72b271e8e2ba60591ba3b5f206b69c776651230f36d7bd041af27a8fef92afd57fb8c79ef3337519815646f5c5d5183743ef8fa1bf2d9228bdf691946c96b8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    df7f09715ec91c0a1c62dacd58208655

    SHA1

    70643235e91139e8fe7795dafddb36f605ac60db

    SHA256

    3bcdc1e560a43e271cca26cc8081e801924ff27c282706c9f2a91c0c6e234453

    SHA512

    7d66150c16b7e20c4a632a2045bea5997485b150a94c3a239df4e70c366557db7f7499ac5f792571a36e7be2668db16f47cd468e3ca4cba9e26ffc79497c83b4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b3a940d5fb19bd4304263d052c27fab2

    SHA1

    512268be781dfffe25d9a260203ef1ea5a853b92

    SHA256

    f59d109620fbcce8d8e151841042062ec3cd53bb4dff658f8e3313e3a6ae849d

    SHA512

    1cdb71350525ad5ede1e4783ae371e3f41469e22e98114c91b03c21b0f56cfce763f431214951be41e2b7e5636d8cdbb97eb7f2a6f489078ef82b8fba4d88242

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a11549cd35c3febeca65418db164982f

    SHA1

    ee36dbe9785f733e8f83e97300e2b431f6abecbe

    SHA256

    32cb473fe40b675f55fb83221aa8f21b38a3e73de8c1cdea7995987048f0857f

    SHA512

    047b26ff0a6b4619c692b2e543f7313208453b1c9113d56093479df9952e989c2fe13b24e49adc19b26d8b9f5e5503f3f6ef177293148b48984d7077302b5cad

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bc635db5a4356e37c400e18060ac7fe4

    SHA1

    1b7d13457c48d01b7e87c7ca7504d490e075cbea

    SHA256

    9fac4f4d0d719926dc7fda8aa8a10ba4cb5af2d72422884a077c324dd4851018

    SHA512

    d15d8d7b1f62d6788adabd055076453c23941ac8aeee7bc7ea0b217e441cb20b168e83ab71bb3a7f2acf256b99b7c054023343cde8921da6980aeab5857e2312

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f0e4e12e5d2077011227d6bd362d7e0c

    SHA1

    bb0ec45ab0792c396c8da5bea017bebb647d911a

    SHA256

    9e362d030d827422079eaffc234f90e51c7a55fcc9c1a2b68681d17c34e7ba9c

    SHA512

    18b82d47fbf4f6265a970350a8b0082d6c90f852a4343a954f7102a11bb1fee85eced7346163a8259fc35a4432af84b685c4fc8ecd356b83e16942fbe4ba8de6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4d18a99b4dbb829200aeeef48c213958

    SHA1

    eef213af1ac9390699427679d549966e55b2237c

    SHA256

    e66f83dabbb707f921de1666707baa1c6dfe4112a54ef3def5a09df8f4f5ea61

    SHA512

    4b1147ba47329e7307f9994ddc9c3752c17ebbad2933f30f2146816080850d1fba3548f3d7ecaa4ca78f5f560c5b569faea02a09591e1dc18e1f8c5174f182b9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    532dadcdbaa0e5151f1914b4a64c687c

    SHA1

    484f0ddf6f2a37b72a93ceaec6d77d2f4b5255c5

    SHA256

    3861aea0e3b83222d00666bb62e16453aac7d98545dc8a66cf9f5240dc145cfc

    SHA512

    b957be940cf5685a0ac866bbb73c4349778800a90b85f6dcffd15bd2218058f457cb9b465a41363dab34e852cb0b41a706bdc5cacff25220aba48b1a96b91858

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1b37a7699de8e5ea0435ead43b5ae9de

    SHA1

    4068e74ac6e31659dd4d48b515012fe0b855d2d4

    SHA256

    17e52c8a02d5ddf127288c19decbd58d6b25b0a1434797cb2019eb1dd858924f

    SHA512

    528fd30266b7ea8391158452b59ece2202ea3ee6355691f2bb65fdacd5b758ed05d886bc1d6bff59d7e32a8bcf88f09aaa38bfc84c2e857ae799e889e1dd9a05

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5209f4fc45b4dd7cb8b7dbe70774d45d

    SHA1

    fe66478e10d0debf1ffbc9074abd48c2b982de5d

    SHA256

    1e64951206bcf4f4474e30fc8d79a72fe10949b75b34eb9dfe8edde8d3857aed

    SHA512

    b20aef89dcb7955843dfabb1764bc3226648a4723cac1fed51d1e85af90128c3747e0554965d28b08433b2af66ebbc07e0fc4d9dec67390a3e7a99b479c57052

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2b2c4fb31a5bbe89783be22db9a0cda1

    SHA1

    6836483151649669c5711712f5f1f3867379faec

    SHA256

    65180380632613973e07480be0ea8434b6311941a2d72885e7310ad70a24ad52

    SHA512

    3e479f3cb640293dfa21820611982bd209076e9c6ebc74d9933c747d907f4f0bb1d2c3631ab2d0553720d1e39d6795db43842d33c93285a99c8c6e183e3e4064

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4daaa421ef145eab693a595c1a91666d

    SHA1

    d2dfc6da86700f34c4980ac38ab3512c1fc432fe

    SHA256

    815f5a02ad939908870ea8af6a276d3eb50e96a775e19809ba96b947fe53cd45

    SHA512

    e41aba6ff8600727670b6044dafe0dcddc41e7a336dc6d0ae1a891461843e1e64aa6bee7a40adbcb6815440f52aa82a02d654c41aba44aa26dfe9a351bdb480f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2901d47d34cb8ff3d9020f966dc22f3a

    SHA1

    c88e833442a8002abf40eb948c313515468c04f5

    SHA256

    1b6d0d072234aaf26eeffd6ed36956e68037a58a1bfb0a77cbe94c999b88af27

    SHA512

    45a45d0471a406948eacef6d5de2b62a3571f05a745225efb9856582e61a2d476490d574211cdec52adf5526aba679d29deabe61a68ecf96477865ec4c999280

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    df768a47d21e8967f613afba00399b0a

    SHA1

    a1571b25dd376a56abe3aaaa2a1bff2a141b7577

    SHA256

    7cdf839b454a24c4ff12b27b09af66012d2a4069f325723684eb9ea3f27f3a80

    SHA512

    0928a1ea3079262f5905517148bb1bed1f20d4578072fcb489818450932708a8f68883decc368275d850813f5e71435a44fd09420cb4edda455b7a50c09712b3

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\53STNJLW\suspendedpage[1].htm

    Filesize

    7KB

    MD5

    29aa4561687b1930bed51ec2dc9b440a

    SHA1

    b48b568908e71db5553630e52ab50a9b1f7fd1b5

    SHA256

    491ef0108d3ad070de8b2652a62707e73963ffa6e27d72d92f6217842245d9c2

    SHA512

    6ff3afe5de15000a7ff36217361d12e2694abbe3236be066d3e673d6ed69348af6af5f0f7f673d793cf7b0ab8940e8a29a7d2f94d7dff66f48f4c5ffc77c38d7

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\M2VO416U\f[1].txt

    Filesize

    173KB

    MD5

    6663bec4193bc87da96a1ba86f7d08b2

    SHA1

    56e688e3331e3b26f87691857f259acb8b9da760

    SHA256

    2fc5bcb6ce358b798f30171c3b3fe7e76e340da135bbcd1b7a0af8f536f1e43e

    SHA512

    94ff67d131506f33c75153982bc2f40e12c2657496fc75f0e341002bea5d5f6da562ff8b74b7c2f815620adedc20b2333b063fc20d491efdc4ec08a265fb6f3c

  • C:\Users\Admin\AppData\Local\Temp\Cab8F28.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar8F2A.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06