Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    119s
  • max time network
    132s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    25/12/2023, 09:01

General

  • Target

    13a0bfa3f8097cf7938bfc25a4ced68a.html

  • Size

    14KB

  • MD5

    13a0bfa3f8097cf7938bfc25a4ced68a

  • SHA1

    ba3c8169b26d3e4c14e776426d2031ac241c1333

  • SHA256

    b2b54198df8b1e7dfadd3ab192437f5d400c9ae9bfbd2ff44ebf1c337641ecca

  • SHA512

    1f05dd7a9ecb74e6c4e74c1f25241337f23a16d3e97ba18ea3dec089a9f30102335b6a3a260bc969130962116fd457e45bf3ec28b11acb1b80d772269e5e3277

  • SSDEEP

    384:kvulqTH+eTyvfa0rpoX8SToxwH880kqrqCnXfDr2fECg5jGttS:XkTeeb0rGXDvIrjrN9iu

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 38 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\13a0bfa3f8097cf7938bfc25a4ced68a.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2172
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2172 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2180

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    cc9879c3128470a3ba07798d6c44ed23

    SHA1

    97af73f8d7981238f2c2f2728c03b736d39d2414

    SHA256

    fb94fd53c967e5dad5d756183b96150762e43663154855d82ccc40e0581321d0

    SHA512

    1ecac030fafc3fab8f9e3df2a2de397a6ae0458c0e87b4ad9c5a570751cabf7538b26e0628e40ba56a4a1d50de2c7773d29d7c2bb20ceddeda0ead807835aa30

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    41f37c91eb5ecb1b944efa284bd938e9

    SHA1

    a6aae72c67c488105050cb0ce8c573fbf564c485

    SHA256

    ef5b0c37b70b65bd99b52f7082511240c1089878bf3703c964da5363e8b858c6

    SHA512

    2405885917f7724b9ecbe42eb4d9b6a40666e0530c5260008b316f20a28199b596af80f086040298f3a6ad62169c80cb107e6164c88b84190f64a443c587d065

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2ed69b177db05d1b3997319deb4398c2

    SHA1

    76715da9e0b204cc51fc18452853e031b6856834

    SHA256

    c12ede34fc82a5a854532cf729bfeb3a8b2772c480148866642843119d00dc85

    SHA512

    05c0c7140fd1a2aba8c840ea87a3968f9a134072a0ec1975fa55381f53957de1ae7df359f0d9bf97a5ac32a43723d150553d2ee2c200063875d7e50b62293a94

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e52b3526e4fdd09e707956480760ccb3

    SHA1

    2aec6b64b08391f5e5147c340f6b3070646c56dd

    SHA256

    e375f74006b081bbfd32ada0fc384efcbb7d677ea11f92042b98c011778e11a9

    SHA512

    4ecbe91e6b028cb668853863b261746f3e6546c18ed2265092e9b7781ee5fba063da914532f9400fd55a299be0fd5bb21bd32dce42a82b4978bc0ab165e1b581

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    52e2926bd35c6f226be65b7ba886c1ae

    SHA1

    f635cdb9ebfba4d2be92641c2d03da7a38fb0bd7

    SHA256

    62b935769cc56dfa6c25ae08e6b832b673d9714d30c93eacba958741b60ed7f5

    SHA512

    6cf364305adde6cf95c789af252e1cab6809170385469df0d80e36e6c6b8c4e69e17e4011c976dfa1ecaf9087b7b35ff36a4e17943d8cb8db0822095f456e9c6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fe37add4623795c62e7ba019167af30c

    SHA1

    2f62f980090667fc1ce360b4cfb5770f9554dd35

    SHA256

    c7604ec489d9859e479e00111db372b438b1afa8550a1793ba2688a73d7116ad

    SHA512

    28bef65812aff85f562e257508190ed3222c9292be9cf0e397d2a7d24f63c2dc7e83513dc28aa614c089fd8325d885304bf6b856396a908336f4d6cb4fae9579

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    efc3a8e8d25a84628a953d2a6850b40b

    SHA1

    395e0b8c5c79bcc7634deeb6bbbffd3d845ca83e

    SHA256

    8893991b547ca4d8c91c3a3378254d75ed942be6ee76dae1819d13b0ee82488b

    SHA512

    f977a70b020c97b97e1053f46c372cb8b224c468d3d54b39c5fcbb5e799f1df3ceedb9c1bb62f447d2cca07574ea43a36b0070b53b5f2d6c077838300f42e85f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    250249fee6dbaeab35ba44ec9752b23e

    SHA1

    df2c5c73f9d364a670f6703be0ba09d5828b104c

    SHA256

    ec6d9c078e772384a7ce8c9a061d5a5608f420e6f03612a8f028ff7c7f10e174

    SHA512

    c7adfba9ce5589d3c9ca5f566f209b20b3de27a849a356e1e02988926ec6b719988f3192287752a461f40db103131267614729dee7dd72bd559a96db5a0077b5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b1b61fd1d047ca83124122746451f4e8

    SHA1

    c8c22af3162bc65d6d0ab68b5384a8a2b33d43ae

    SHA256

    a58af39ae6d446d4e5d741dd451715ce6edef80a03690b47c877a1d8970bc385

    SHA512

    4fc69d359e79c88344f2cb2d4b7bceac8ef50446db260c671db4b5c20c4723620d6794853399361ba5491c22cc2d19b063f2b6dacc57230957b32bd98255a52b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    469a1438f1113ad4d59a6267c204446d

    SHA1

    c181d46c0708c123b6c35f81b897b74107bdc805

    SHA256

    51c8f5643c67105a7024c997cca31789fb6cf8704cbad9f5144f65c0fb9343a1

    SHA512

    b04d3d6c55f1e2717acae1bd1eae8ca70f780f8ae6410ee9867f56baf127ede684d1717892b6c24a4d9ecb617fffbce23484440d73161b99e5b6c9be8330c68b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    071931d913fe45cff6481f7aaef71904

    SHA1

    0e0ff51ea579e7d8b016302b32abc28d04cc2ae3

    SHA256

    cf73893d708aac435366c2bf9c6b7f51b7e9211e28af5a186d400ca47c5e27ee

    SHA512

    148220c3925703819cc1757d886cb87bf5fc1825455ba3e61487eab651a0dfd38921b188382723cf8f1cf196e12fa1bd55b1d8152a1a50f5a5887de07e9c583a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    34f979372a6b9580ef78523a16b40d2d

    SHA1

    7f2ba1d5c5f6ce9d916de28b30ce08fa5a26df88

    SHA256

    f0947aeeace2d5e4aad54090b4b63a505066355ef2bf003c0eb2dd628efc59e4

    SHA512

    62ac5e10fb7f85a2b0d2a22fbe3d36943d390e7c2b9d02de5ae2ca2d05efa16eee6e14748f7ce7daacb98e884d760a83433d6a48d4ab5ec0775d1019cb7c55db

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    03ac6b457bf8e49318fd8c01255cb4b7

    SHA1

    11fea99b36857523a0ae33da396e5529c748ff8e

    SHA256

    8cc87d9f9f63ffaa4eeca54e60912f66d7723da5ac6f3574ad5c81e80db911f6

    SHA512

    582a83b4d8f1f0f44788220e5dbc733cb33b256c4c39b1758785293bb7792dbe04f18f5cda3b4226893aea24813fa0df1cef248c26aeb2ef4d01a0a73a816aa4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    a68dbd109c57f5a12c65476b9afdeb34

    SHA1

    745750efb86c3047ff3d098e1f11c27bb285e203

    SHA256

    d7d269ec0226b31bc97300a30c0f2b1276e32bd17beeb865739353fa0c29d407

    SHA512

    370895550553e5c42b256d93c78ee718ff23405e6f587dcced11b8e3ba28c9eaaca752c2b3ac184ab4100c2ee3cef22a5e32dbe006b2e8cc73d5d0594e332a70

  • C:\Users\Admin\AppData\LocalLow\Microsoft\Internet Explorer\Services\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico

    Filesize

    4KB

    MD5

    da597791be3b6e732f0bc8b20e38ee62

    SHA1

    1125c45d285c360542027d7554a5c442288974de

    SHA256

    5b2c34b3c4e8dd898b664dba6c3786e2ff9869eff55d673aa48361f11325ed07

    SHA512

    d8dc8358727590a1ed74dc70356aedc0499552c2dc0cd4f7a01853dd85ceb3aead5fbdc7c75d7da36db6af2448ce5abdff64cebdca3533ecad953c061a9b338e

  • C:\Users\Admin\AppData\Local\Temp\TarFBF.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06