Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    122s
  • max time network
    176s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    25/12/2023, 08:29

General

  • Target

    12105bad4d95d8c770ab952a00eb6b51.html

  • Size

    3.5MB

  • MD5

    12105bad4d95d8c770ab952a00eb6b51

  • SHA1

    9eccf4158ad2057f7ffbea0e9654d197a2bcb361

  • SHA256

    2347b821fe7aa8bc79a2c2ca09b58526ef8a5fbc620d0f4e2df3634d4546222d

  • SHA512

    e0e8e5826ec78188a7d1ca6aca6254e082e47556aad378244c016d91bd3da192a7c0e1909be5d9d7dc2c296466f5ea0bc2d2c17c84f9719c031ce9a849001350

  • SSDEEP

    12288:jLZhBE6ffVfitmg11tmg1P16bf7axluxOT6NAq:jvQjte4tT62q

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\12105bad4d95d8c770ab952a00eb6b51.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2816
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2816 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2772

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a8657cd50ae595728ab9f5bd33ea65dc

    SHA1

    84f94271529fe21b7cdbae0a7f4adb2f36f70a94

    SHA256

    fbaad12f21faa13f976179cdcec5fc74045c658f84c042dab1360397b920fb10

    SHA512

    e9be1a3dee20c002cdcbf5ffb54e8554a59b51d976091a438ab8a56f037609ea445eeb504a2e39937a60d66c9ef8188d98d58c864dc2fb52e456f5e5f1a1eb3a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1ac4becd956fe9e9bde8a54c53f11620

    SHA1

    9478df2894ebdfa70e284db0b25c70fc19be5a07

    SHA256

    08374f8a9fb24886cb1c711b9f8f6d7d8aec73c1ca843e33ef1cbc814343dd58

    SHA512

    42e05ed7afd40ad2e462e9d1d09fb9fdd1a3ed84e95d629e8bdf83b515999e667d01b5204917228ceae62de25a603b2907e72e6de8cc18b6a2ac3fc1316afc51

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e933ce4f35afb6ee627da6336d34d2ff

    SHA1

    c5ee508f26f333d5bdd8acc9cd45c24babfdf4d8

    SHA256

    bebea38a26b3c10e16fe2e9af4b1a9990d28f390f9106160dc89fa0f5ef18f07

    SHA512

    e666a76589dd36029ffeb5a888ded74742065aa0e52604104bdfd9dfa7c315a5c8cdd56a4b4c8b02663b77b36408bcd33a4f476f6c7830dbe12ac485291e1944

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5ae52bc05c1c91575cc980c89daf1e35

    SHA1

    3421bcb9f1ce427082f533ca9db0d7c143e81093

    SHA256

    762f644e532902eeefb2e486894455904b35fc5cced4978cc5c03db51550ab57

    SHA512

    c09ef35af98f17c04891ab1e05d082df74fb2af01114d460dd1ec6b6f5f8ac5af1be72aabcc13c346af739e7747871f3f6c61b60590cae173d32b548cb342fdc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    98b7207a22043787a6d2eee0ebcb99d7

    SHA1

    2e9b0bc288d82bff3b6ad570a4d56434db93b5e9

    SHA256

    c14ba85c58790ea0d88dd5530412fce34a43f7663ac0416644bad991607f1564

    SHA512

    e5703f9a72827b6b6cc1f7df211acf359ec8d60b2d26abab53649764b71e49a1a4a29dc7dee4f28ce51361f73bf9f3173fd019399bcce43c043cc6bbd76268ed

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    147e0c8d8d03c4a8c209b69fe7166216

    SHA1

    5ee528ea64ea8119a326f7a1755fe3d79c4327a3

    SHA256

    94867bd8799d1958d33f2cde07f9e1b4a6d9c3dc6e22f0412a12670ee41f9e48

    SHA512

    32594ab8d70ea20ab839f38f472f44a2be89a62ccd97adbf011e305ff70548b294cce4bcf80f6e9954423c117f8f2ee0e94a08e69e70ea304d36513fbbb86e07

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    684d74e86f19490909bb3c2d54df0025

    SHA1

    a6bbc6d0215da377c09d430061746579f5ae3cec

    SHA256

    1bba46fa79ee978afc8400bfdb5a28145356a5c47005201a324d3b0ee901d424

    SHA512

    bad071ec7ba41853e2f7566991a892dabb463cccff3e51baa9a3aed825ba4dafd7e6244ab224dda61526d3168a750e230662bfd4f77a5a62ac1922fe0cad6e5f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    22c137171b8fb81d508919e1ad7782a0

    SHA1

    c6d567f3833974b63abe8ef3e48103d32aabd41b

    SHA256

    62e70ea687c4778a0a58a39ae8c8c5a760bf60a09dcbaf90c067a2f966984790

    SHA512

    46e11e95b23b9b84b76e142726043e363d679931da20f4157fc7bd664646b15673f907308ec73f1ea02567426b8a864c280f2c2bee23fb75ab3b7fc5b8d5e482

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    02e9ed730dcf59f0dbc49f0c3de51e99

    SHA1

    cf0ace6539f749f4b09701840c2189add7eb8fde

    SHA256

    a846234ccffc74d1ac2deb68b7183eca56af02fd972be2974644b73ab05da85c

    SHA512

    aa8a8d127ec642d37facccc3eb0cc7f31c588b64b50364b798ce45c3d70f21c8249322c6cfb458fefb1fbfba3efdf3e34759bc1cba15140a87cd6036c7c25239

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    84c53c2d0125f08ebfc48f459f957268

    SHA1

    c7df57bbdf5a3d01ed0ae08c196c442ca75c1365

    SHA256

    9fbb33ddf848d0dd2f8c9e8fbbee786f7bf35e6406a451fec91bb97a02a982e8

    SHA512

    993bbc6dc41d00b0b7a6c1b6398780151462872b11fbb8d45e77387b192a0c03086fed368ad521f784d607dce270a56c88ac29dca381d8c49c81c1ff2b163b70

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    92af90bedb5640128c04c37a8e598588

    SHA1

    9bdd3700424461d14e3f35227cd6fc19a2ea2918

    SHA256

    22bae5cf8f7993732146068ca994910127a4908f11e75148f506e7359864927c

    SHA512

    05c57221bf30028cafa06662b5c1ee74d8542a615dd7d08fad08d32f24bc8a739d6772788da20216212ed1196981ebc78e12b60090123d64be23991ba8b75ff0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1e55d46f2f732404fbd5e2e240cfbebd

    SHA1

    0386f97718100ef9a61457936512431a48764c30

    SHA256

    c335338bb2e404b47fcf8135254d4459f50d28dbbf598ceb1a3e626b9dbdcd28

    SHA512

    61dd66ecb2eb00790308cb7f9a440ea7f7f043cb903efaf0f43410d8a57779a961424ee1ca96409efbfda3f012ee1750c010bbcbe77d0b9fafc7bef41f3c7e95

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0bc00c450b8a88eb4b4167ee4cfcb307

    SHA1

    05bbeaf7c10f314ec5fa498fbdb59866ab0236fb

    SHA256

    28ca296d3005944d933ebe2d6e128af82c114663fef26bc442a3000a7d642256

    SHA512

    63b2706b71eb5725d20cdde04304991384893656efca63d12147420aabcbd50dabf207e7313f20a4aab47746dada6c0e3428c1126dfdea347d45f79f2deae3e6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    74bbbf23bc976c82771ffcc3022e572e

    SHA1

    01349c6551c823f5361c66a3071b4a82a3438c3e

    SHA256

    c9d8068840cd58a1350303a490f52245602fd2f1c855e9d9578626d89856ed31

    SHA512

    af82e3449aab4a9bec6a21da807b4452d0765ebf7cf1eb4b831bb53e7d424015422718e35645d0276d07ab8f98430e1f5c387a0f4ef7a13d730e0555be1981c3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3a3598a0b16d8b20b30abb4701ca80c5

    SHA1

    0066a8d0d69157bd9b842ed162ec3680c339f46b

    SHA256

    175c37204f35ebd1a60349729c786633e4cf30eedf7a398019acf99767848fab

    SHA512

    a910ea8bafc502a56f159a6e9f06d7960cfa2c7c92ed555018b9df6296ab9918158cbfa29b1dbc33ec24159e00ce052eda34c7630717200175cddaae246370df

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7120e94a5bf9c627df0d6acd9737ef13

    SHA1

    c9ca66c1724849566977ea6d651fb8e42bbc228d

    SHA256

    985d4e0158b8d1deecb725d002e537304c626046e557a433cd721f5bd648ff8b

    SHA512

    96fa7189b1679148a1d1403e827209771b955ac03a2632c2f1c8ab17c4fdd05f3fdda0f9a177631fe4b762cba1287e65dfb1f8a221a08bc03bc8801048686ace

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6a351531fddca6645a54b353438dfdff

    SHA1

    6a7220cc388cdc62b73ffc6228fe03da6f1a3bcd

    SHA256

    8776a163de00bff1b9deae9ade4f74af28019396424d2bbf30107953265b7a91

    SHA512

    064c3f9443edda3990216033f2fc378289b4f8bd03d8547816303ec612a2e4267bb80250faa4dbffdc1693986550b6cba7aa97b828c93a8e8c0aaf94648ea726

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    04f5560eefbe65bf3ccf2140db9dd6de

    SHA1

    c2a2af113351dac2d5daf565af2b78dfa2ad4cd8

    SHA256

    e49889fbf1f71b8b47cd6e34d15a839ccda144e548e6a09603e259ced8495d2e

    SHA512

    d7758d2483cb143968ce043dd2d111e0b9198382a65dd3777d0dd04d98c2562c649fb7ded04a41933ebf4e7698ef5fd8d73d16afb76451dbc8271695d976ad9c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c1b690cbdcac9fe2c9ae8c56a8ece448

    SHA1

    d05f658259c49bbccc36eddb086a07233c27ac77

    SHA256

    db89657a0a8d19632a91529028fbb86894375f9e953b7fb1e3ab9aa927661475

    SHA512

    59ce41dd3ad62251feaec81c03d2d75506889f757f9a0b82661fb228be3ccd42c5c508ac30b60decb684b3d2e3290a6d7856bbd569fa4fd865f6fdf81f8df9bf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    aac5d376fdeaeb9a8e931a7e402fa93e

    SHA1

    a4a4f7fa9391b32064276ca56a76aaad7b795551

    SHA256

    32811bd934c8d9388ab73aa67a80ac3a820b993f7eebc8c37a70d1fb57ae5390

    SHA512

    836ca90aa6a3e9ab8bac86777d4709850786c83ebafa86a09ad7e65a8c3390e13031ae906ed579d552944e69304aa49916b6b7553b06cd6b0658fb7c942efd62

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8e6c39d057a7dfcd830dc194f912bee5

    SHA1

    a77a31796c035657d6f93d59ac71176daa648783

    SHA256

    b4093312b093bca84271a1b223acfcf3dc01d82f0a77ae05446a3c4cf8b5be20

    SHA512

    1d7a8b5ad2f126ad15407244132fb04391dac23d8722ee9ebc93f4f54d7f187a3858c8557232d829dbb30ab34a865e4c905646c2695ef9837cd56078fbb703a7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b58d439cdb05f759d01f4512c5f44ad6

    SHA1

    9570b48f55abe7102e341e9e35fcb5b740ab2808

    SHA256

    94c540adbfad1c89d7a16b8bdb7204b9eeb904838035ac5096e40bb4328e1761

    SHA512

    9cf928ee1b1f7c7df53ed9fc32c842e71e9e4f5203d79d6e97e22eba56a04a38ba9f149d3dc4448d8e1ee49a84a22a3ece56456d8e98e4b5d461c6b3643074a7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    09e95d6a925362144e0c6d080cc9578d

    SHA1

    acaac5d676854a240bc4da521d5d2bff7edd6135

    SHA256

    7451c8d16bad7bd54a56e160885d7bfb5f7ff9352067ba84acf297b3c9915486

    SHA512

    e8dc539dd89b4c0442465b6ee5a00aa74ec28e7cabf55336dbb39f6dc51ed8aaad4e0d4d3edb6db93c17f4b98c3397296371f652a9087b592d6e1dd074edf878

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    eaf0f41e2f70180aad8b1060426e7978

    SHA1

    ceee02a1925294d56ad810e8f719a9fadb64e40c

    SHA256

    30318e49c6ef9947d2254d3562fefe6f443dd754c252d607e1e73c6768654301

    SHA512

    19ebf448ff1627af08db550a09340aa6799bd69f70f98ec1dfc6ecb1ba616c87540ffdcfeee3f992e64abc22b90fc582e6dfd436512b47f7c7ab626bdcffdec6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e646394fed3e3262969dae3880234ccd

    SHA1

    1355d37166937cbf0ab6fcb04fb32f7575d78235

    SHA256

    1467835726358464074d721d88ce32c6ce9f1c718bafe53373fca448280edbac

    SHA512

    d7221e733cb1042cfca99ff86890f0b32f9f7fda8ff79678119c3a34e61a1573266a248a00a4d45ba474a929107dbae40ec2bb070440f024db810e27c6f220f3

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\LSNXCBKV\jquery.min[1].js

    Filesize

    83KB

    MD5

    2f6b11a7e914718e0290410e85366fe9

    SHA1

    69bb69e25ca7d5ef0935317584e6153f3fd9a88c

    SHA256

    05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e

    SHA512

    0d40bccaa59fedecf7243d63b33c42592541d0330fefc78ec81a4c6b9689922d5b211011ca4be23ae22621cce4c658f52a1552c92d7ac3615241eb640f8514db

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\M61DDFBK\jquery-3.1.1.min[1].js

    Filesize

    84KB

    MD5

    e071abda8fe61194711cfc2ab99fe104

    SHA1

    f647a6d37dc4ca055ced3cf64bbc1f490070acba

    SHA256

    85556761a8800d14ced8fcd41a6b8b26bf012d44a318866c0d81a62092efd9bf

    SHA512

    53a2b560b20551672fbb0e6e72632d4fd1c7e2dd2ecf7337ebaaab179cb8be7c87e9d803ce7765706bc7fcbcf993c34587cd1237de5a279aea19911d69067b65

  • C:\Users\Admin\AppData\Local\Temp\CabE258.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\TarE259.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06