Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    117s
  • max time network
    138s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    25/12/2023, 09:09

General

  • Target

    13f99cfd655b9e894cdea800d4b3ebd1.html

  • Size

    10KB

  • MD5

    13f99cfd655b9e894cdea800d4b3ebd1

  • SHA1

    5f91eda4d495f6e2e205c3b1d6d2a4771d758895

  • SHA256

    e3531a5f327bf5037aee255e2cd1750ee0bf21b7095ce00a0c3c15abf99c3d87

  • SHA512

    3b02730983b8c020316335bd1c942115152d9661cbf0e0402d412b9044f70c395622e9730593825b029c4d929adadd5f565cbaf4addc01f5978a119475abe983

  • SSDEEP

    96:uzVs+ux7czLLY1k9o84d12ef7CSTUnGT/kvsHpb4G7Om2RrDLwtlVHcEZ7ru7f:csz7czAYS/6aEldfmPHb76f

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 38 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\13f99cfd655b9e894cdea800d4b3ebd1.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2336
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2336 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1392

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    367bbd265b06c4cb91ca975c3fc7ef9d

    SHA1

    33cc732ccc2c7f04dcbef372b5f9e75f26c94765

    SHA256

    12c4d12036f2d66fe7de5e8e2a144f0960efe40522e0db50ac342834aa674f57

    SHA512

    fc350e78cb3d175ffd0e6869ea8e370e10fd20d254a3a4f6c9cb8a63971561793dadf70e0c19099c11ffea5e80c9b35c5208c47aa857c9d47e46d728cf34fb37

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a3ba3d7d1110b06c8d78174e7d4e3f3f

    SHA1

    cc0174098ffcc842f55b7382f9b65c12a12ef6d6

    SHA256

    d5313c35b9c0f5a53b691066740ec5dc0e64a73eba8ad4e2ffe0a0527901e9b8

    SHA512

    251c784b6cf90bb2396e129b0b0e12f61a9f94eb352a90c7416edf702044d210024a189edad49bd259c06b270515c1dfb6dbfd4b0cc0fb949ce69dd409b030a8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    efa0e1969a8fa22087aa12e902c99064

    SHA1

    61a3a76bc640ed0d8314dc7b9190cac76f658407

    SHA256

    f8513f9d1f8f022eacc012499ddb83fa9b255a70db3745b093bff743bcc3d9fc

    SHA512

    c902b5bf582323382dbf6b571a34e2c1242acf20c71e97f9bda7d1e6d539412cf4a4f0a90d769a0503259947eb0798b0ad0e746ed674dc75ce818eba39f726ba

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ee69d16927f9930d2c5ccd7db903d76a

    SHA1

    3927774ecf12870410fb352728e01916429a2a6f

    SHA256

    a47c2c3e736b71439c4401816122bfdeb9fc42b125c80388010ada5a355976d6

    SHA512

    77dd465ca505f8d279c09ac1a758bbb82b737e1bf7005938976d26957008a79346ec284ec62bd56e7c9df15803d39c24a12c2d9168edb605993ff5da12d03a70

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    42abd720952447b10a9e363a7c0e873b

    SHA1

    048a0a5626deef21c68cd5d980a5466fa505a77a

    SHA256

    a8a6963d92193a684d630d17bb95c9088f8687343a53d3ae1804e380285370c3

    SHA512

    a415cebe7add292bc8ae173339a168a23b1c0d695b527c05ff5273440ba00c4f5c443a9e8215bf3e6e4a52f27706317608e903823801650c6374ce42211924fc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fff72844e23b8ca5abd4322071ad05ea

    SHA1

    f1c76051fe029489cca7b7db98d58a8b1bdf1a38

    SHA256

    d563d7aab5b1ab30be03e7e54f58d2708b17494ec1f6b8b612f66b18b7b0ca4e

    SHA512

    a5d8d6887fe513dcc7e89cb7e9b044f58b7302e566aafe0abc871922019ffe1574c109a0695f44f00aae92ee1d171199e92f45a503807d54909651820248d6ab

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    556a29d0327f78ca7ccd79e936f944fb

    SHA1

    830b35c5bb8ced32e370f5990b9c20c7b3aa2593

    SHA256

    a8f55af6630de502fd4f0aecbbf775365aa46459e896c42b558259bb76b5d6ad

    SHA512

    d552fa18e12c05c3a2562b57e2997ccff1ff3729fbe44917ccb71f3ca7bc74d9fd4c1761af29091053292796f47f3e6276b0231e44633f94d3ef47177f3d4798

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    abf5fbf229678321a0732bf3616b474c

    SHA1

    a153463283d66d6359e1162405fe3bce4ec8c0f9

    SHA256

    fb94e5a2043b4095b570b9a11a9865b486e325a032ff2aa3a0f524421f4e7aa8

    SHA512

    f40968c0da2aeb077a1c3339e60fb58fec4e8dd983eb7c6d4bc1f08032a47f099c7695e546886b7a4053e0ee3d35abd1bfd7a167262c9e5bae919c5f165d54c4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    eb29710f0a1defe16d4bd6a23f7ffb19

    SHA1

    ebf05440613e10e111c0693bf1176fbd9a524113

    SHA256

    15215c2dfa7139d8b7866fbcc6a8354aead9069f4159c7a827be7e37b8eaf81c

    SHA512

    9cd8c0a995ee74cdbd6e6ed5a2e888ec3d7a669766c7a9000291bfd56740d657a7e29122157bb946a1818843c3ac1e278446d6694e89c7ded396fe05e4e9b706

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    287baaf29bebde50dc0efd9cd0817150

    SHA1

    e61e4f0fa405c70f1ed84d49395ca42bc493ceb8

    SHA256

    6ca132a7f3e62e7b69a684569563ca2791c60bd450849d59591ea467e1a7589b

    SHA512

    2a8fa0a4000915d67da0b682c4b6aed411bc2a19c4763f946c9f0a230120eae457c1ea54d2f516a626dde2b0c96619abf97ae090c5918f9bbe11497a537deae6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    67080c7fcd05b30286784da487c650a3

    SHA1

    f57492988507bcc5a427d71aeb245a15c53a03fe

    SHA256

    ab7e37aa575195143ff7112355c057eba3cdfdccf1bb0a6d9f55e155ac1b6634

    SHA512

    a10d82072fd84e94a2e411116398c848a762690eb7c2647b43203b99ba82b24f6b7256af8927360eb903da81500d585bb2d2732c2e235ea756b917b9d05d45d1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    453bde371ccaf1653d8ba077d79fd892

    SHA1

    acc29542a5075f85c4a48a10ec00fc0b03db2ce1

    SHA256

    22d5f4e88be9a084e8569915d768d6bf298418619427389cc9d7d27734354774

    SHA512

    719cf6bced8a1d3f93f4a869ad2b7ef2708fe1e915913331ebaa3ab147493a84054118f7a5d32f8eb540ed59919f73974b3162ec7e868105b048a496124182c3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\Internet Explorer\Services\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico

    Filesize

    4KB

    MD5

    da597791be3b6e732f0bc8b20e38ee62

    SHA1

    1125c45d285c360542027d7554a5c442288974de

    SHA256

    5b2c34b3c4e8dd898b664dba6c3786e2ff9869eff55d673aa48361f11325ed07

    SHA512

    d8dc8358727590a1ed74dc70356aedc0499552c2dc0cd4f7a01853dd85ceb3aead5fbdc7c75d7da36db6af2448ce5abdff64cebdca3533ecad953c061a9b338e

  • C:\Users\Admin\AppData\Local\Temp\Tar5048.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06