Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    120s
  • max time network
    145s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    25/12/2023, 12:22

General

  • Target

    1dfcd1474e2fbbd9c645dbd7e3f6b17d.html

  • Size

    3.5MB

  • MD5

    1dfcd1474e2fbbd9c645dbd7e3f6b17d

  • SHA1

    828627c040f3f5bb8eeca0856f9f07fcf98e963d

  • SHA256

    9d034ac81dd83020c394d7358d46706ca7b4c3117a7d74227088a58a261784c8

  • SHA512

    76cbeba82795eba7d1e6c22b388e7a14ec2c185cc2d98f1b6da5d3611f45b77185ca458327c276111d23468b9aa8b0358475b6fd5f457803f36227a50844f4fb

  • SSDEEP

    12288:oLZhBVKHfVfitmg11tmg1P16bf7axluxOT6NfH:ovpjte4tT6NH

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 38 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\1dfcd1474e2fbbd9c645dbd7e3f6b17d.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:860
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:860 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1584

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    e5beab67791758c0c73a2ff7e65ca123

    SHA1

    784b4db438420dc035bf2686d9bedc4bfdd0648f

    SHA256

    13ee2d8006983effc9789f125ccec01a2a58e4ca1e7edd039af4308ed0c05108

    SHA512

    490ed560b1ae4971cefd0a00bfdb955a6ecb2b8c79b042ef60a4b4f0baca3ea4ba8fd9043a5b0400f3c88296cf05d325b94b91680ff36e8d95441a980dcf0837

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bcf019015b7be97f73287029685cb9f3

    SHA1

    fe5f9b64a3cffc6a346a064b1f3286b027476dbd

    SHA256

    88242d061a4d918a56e3f8f40dddee976a257a963236f36f14d489e16718163b

    SHA512

    7b9c654543990cc80d291dae75a38fc043c6e408821424e64ba861381a55df0528bf6a8dfe39a983854a3b26f632aeb63ee6f8bdbe1411b14b8fde2aad85f799

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9ff259684f695eeac8133ced674f80c9

    SHA1

    7e2a3cc8c9c6f56068d7c2c15502ec0a55724fe2

    SHA256

    b22b7c0e9005d858741a97d1d98fbd6e4621ae57af5fbb3736358a6ebeddc543

    SHA512

    1fb75492e20122bdba57e6b150a454e286f1ca589815411ca498466edb864677af39240d8aaa184d2d80d811d7cd92e42d1eceaf60053136dc2667154b9d33f1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b459cd583b9805a1f14e3a0e57138b40

    SHA1

    c56581538f12fbaf815a54f122177f32120323a2

    SHA256

    8b8d62fd7724441f101246c20d60af0e85cd7edd22a0e6d346c29ff30452cd28

    SHA512

    699b5c0f2f12465bf93c6900772612216f5437fd8c345c152a5bc44fc00568b711867403150ef6e264f77372716ae11314165823c2cd8eac6ade36e017940e9d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    97a14e9f32ebbcbf8ddbbf23c1debf4e

    SHA1

    feb53a137b4e511e7c9cc1b28d1593b24e0c3651

    SHA256

    bc93cd705301117e961863d818e16b7d025f80d7072604af4a233ab6ed1ade0a

    SHA512

    8a447af997bcae7ad76aa363093b035d00c98220bcb35ce76ed6dd0ff6f7d2320dba4a350384539ac0a5bfda1a606d0ccf7195e31e4d4a44311eb88bc72d9351

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    832c8e8b0d8043f18e82453181a90f80

    SHA1

    ac24f0e871857777f154192b21d3eea256fbbea8

    SHA256

    ed84fb6938bda3c273031c57bef3cb299f848ec682e1fa3cccbc582ab04af766

    SHA512

    45cf9809d6411f460ef07eb2b5c912994934c6691e9b0c142c23200426ffaa3e52d98a0369734a0f0d5db84ae42f8b3e8a2baa999ae3d04958b4ba1a3cee3aba

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    17c207a877340f3e641f9842f8c727fa

    SHA1

    3e97d59d53b0af6c69afeffd31099e68053058f1

    SHA256

    d52fa313e6cfa5534fdb2d7c598f9a65615b2c0bc87bfa89c722b4211e093e55

    SHA512

    010fd92138c17961c73e717ec743e08d0af66cca71867e35977a80adc534f01f0c0939905c26fb7f285efcfdc856188714d8cc2f2f1af8fe39948d3360582e31

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6672140a81a4e46496736ab5c7baed8e

    SHA1

    018f5bc7a5930e3e2eadf377ecd533412e1f4966

    SHA256

    b4b8694af141068dd8da2c1141c2c97a18cd428b634a7c53ff03797b8bddb83e

    SHA512

    c50433c9bd2d60c9cd453b03fe845cc5c68e7228ed2564854549164fe038eaf2e6a8534cd039c843c72042e389f1ad05b8523e7afc7358694a917b7e98585135

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    acf56b5106c1e9ce68757ded790e6e1a

    SHA1

    10ff941148e3549f598fb72571053c028c8a6750

    SHA256

    e6507895cbc2c898b6ad8adc3bafdcffa393bc387df56013fba525ba793672f5

    SHA512

    66fcdc48f9673a467227adaba983126073839e460ceb6e9dc8f5df974fe210e72e19bdbef46b13a19c8dae067015684130c6f64c5eeacd859a2d9fadfcabbe1e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1ccac7e51b704cf34c8f317ee7e1120f

    SHA1

    a9800469f8ff28a42ff53ce6d59171b55fc32140

    SHA256

    2312bf53fc579a8e4c5f74bfd4297ee839c7bfa14588bbca509b4154cf3e6d73

    SHA512

    a695f02ce65963cf50891941072484175a5e85f41a679582dd99cb48697b97e9fed2830f2e86f35187056075b5aee01b84e1a38fdacf2f3cc65a8e78fd627e65

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9e8650f877d127e70005c326a589b60c

    SHA1

    888a27341b6298def330d4e8a1a59ed337bc784d

    SHA256

    58299443abe38fa68b97ca43a9de70f07b11802ca6162408981d9fe900d0cf8a

    SHA512

    55cdeaeb9ec6e5fb5cbf7064a4026bcd359452986a634f46206359fa82f28982e9d773a2ed7733f6e949c9bd28eb8b62cbed6f78ba9a911da8dce3c7231b3017

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    750b448c0f883b705353b126b940c8cb

    SHA1

    01d082750385a7ceaf500bfea87f62874154c016

    SHA256

    de66b586e620c0fac83dad3be825c47d1237b8601dfbee288fd322a583f8a272

    SHA512

    e724ff6542667ee6022b6d3d0e1febf5a8b6bd14bf0cec4365d6906aef4a8ec5f8157d6e6fe0eca9b015f39c8a8d85cb12cbc1c97a642bc18392285754aff9a6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    585c819f24749483ba61e0164fbce284

    SHA1

    d36b4cfc5cf0b26ce6f5ad62fae37e44140d2e22

    SHA256

    7fe4b22501d355ab09d8ddf6d37f2f499726b16cf981de3bd3a2127f5b53598c

    SHA512

    941f890f2de4fd512ec5d5d5644d48913946cba8b216c7511ab58bf622542e551e4998e2cc3439d1134e63564b134560adfbbd871eaa17f32accd295cd0d4c71

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c00d942ee024be7311a80c88ea993fe8

    SHA1

    b29bb1d4849d7d0dc897b84eee2669cce2e7ceab

    SHA256

    8e21afd99f77927b173f7443db502752e062ac96d6722fd76072693ac619740c

    SHA512

    77a16eb4e70182586420302073e5b81830c5145e52c19e589b1404cb940dfa0ab1ced1013334eef14b7205dd617a416c65315ccd71ce762ed92c34796d2a1b25

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    72c9fc34937edec77909f2fb6ad95108

    SHA1

    c107d8532153a2f851905e3bc8256ce360c018f6

    SHA256

    a7cbc21cd66ce6b7d559889dae3a38c4ddd2a94cc4146318d094baa206e2de22

    SHA512

    1e4f3264030e2abb6131f5e4b741a55a093d9f8efc55a9e9a7ae396fe11e5e848a6db7ba8b22f6b1f8c488f5bf89d783512b522c9f3205211cc767988548fa87

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a0fdf0d7246ea95a0b1a64875f669981

    SHA1

    696e76b833b6037cf9ca590ff6b82411818b7bdf

    SHA256

    bbd872d390affd46bcfda14ec217cc89dd433dfba8e447b075b95bd127198ea2

    SHA512

    22467bedcac6f0bfeed71955970b75e0839390f82948ba8ba5b7a70e108195909f32b509ca50ed52a42427ae7250b0c0eb2abb9db65481087132b28b6d99d927

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bd33ef39c5c85c4514bab0edb14c5289

    SHA1

    0382116889a03e51c211b531ed27a147338d5668

    SHA256

    db5c43cade7941e640473f24d01b24b3bb5eb3ffcfc4f08e1070cb2fa0075b91

    SHA512

    b99c68f18fb136af595d365d89ffefcb7d8b3e0019d770fa8e8b885840bfb9342bd177a2be7975de211282a8500dfa02197cad1e960531d5b6d0059ba118df17

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ad266e51fb0680a6c1583233aef4f261

    SHA1

    b838000b9b8163e6bae8d323544ab1b0c40f1239

    SHA256

    75d25b001651dfb0b37d0a096ef3a0cc2ca4060c54c3a651c253f83f788ce0b1

    SHA512

    ca746e93dfe63d4a5175a602913096ed4432b7186e2e7f99002bc4997c3df0d98b82cd34fd6a1ace6b247c43e8230bcd9b11883a516512b511c31253be326847

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    094b7ea118e5ee09086f94d98d2e6ed2

    SHA1

    6491b62d682b7be126dcfd2fb05aa3a77e2daef2

    SHA256

    f63181a9a100e7a0cfc4ac1209a5acb1df31082b5c4be481b9f5cdee085f078b

    SHA512

    cb77760b7c13477fc75d72971a639c5a5640ea6d62079e7951435f812efd7c2e47d930f6341ff936f5890a224b724e1add761e5d2725b4514b13292baf2face5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    869fbe5e2df57f7079654fff5dd93bfb

    SHA1

    3d3faa5c7399ea33024af49e01dc9611eca98a1a

    SHA256

    848c4e51ae528ef77dfe29b97cebefd531f4cc86bb0a8754c218d1e306670971

    SHA512

    3a294195c86c86be1a8ac163902f8c4f63dba88255dd95fb753836abb69838c92dd20888b263b2212ad0645980880b846ef41b4218bf918deb88b3b7f62f06d9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    cb7ccd638e62ed0e26dbec867fdda015

    SHA1

    319616d1b082aff4096b8b1e8885e53fae5c8f7c

    SHA256

    ea218a310a26a9043513ba39593f186a37b1b6ffc210dca3c38d78aea6062dca

    SHA512

    e2e5e6c244339ce592be8ecd92814a122b5ef90cdd5988a140e6f17af774e473403d91eb07777f084c7fe8435adc7b50c7e207f82045128f56af37c7aab8707d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\Internet Explorer\Services\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico

    Filesize

    4KB

    MD5

    da597791be3b6e732f0bc8b20e38ee62

    SHA1

    1125c45d285c360542027d7554a5c442288974de

    SHA256

    5b2c34b3c4e8dd898b664dba6c3786e2ff9869eff55d673aa48361f11325ed07

    SHA512

    d8dc8358727590a1ed74dc70356aedc0499552c2dc0cd4f7a01853dd85ceb3aead5fbdc7c75d7da36db6af2448ce5abdff64cebdca3533ecad953c061a9b338e

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\87OVWFD2\jquery-3.1.1.min[1].js

    Filesize

    84KB

    MD5

    e071abda8fe61194711cfc2ab99fe104

    SHA1

    f647a6d37dc4ca055ced3cf64bbc1f490070acba

    SHA256

    85556761a8800d14ced8fcd41a6b8b26bf012d44a318866c0d81a62092efd9bf

    SHA512

    53a2b560b20551672fbb0e6e72632d4fd1c7e2dd2ecf7337ebaaab179cb8be7c87e9d803ce7765706bc7fcbcf993c34587cd1237de5a279aea19911d69067b65

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\E7V33FH9\beacon.min[1].js

    Filesize

    19KB

    MD5

    dd1d068fdb5fe90b6c05a5b3940e088c

    SHA1

    0d96f9df8772633a9df4c81cf323a4ef8998ba59

    SHA256

    6153d13804862b0fc1c016cf1129f34cb7c6185f2cf4bf1a3a862eecdab50101

    SHA512

    7aea051a8c2195a2ea5ec3d6438f2a4a4052085b370cf4728b056edc58d1f7a70c3f1f85afe82959184869f707c2ac02a964b8d9166122e74ebc423e0a47fa30

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\O80WFXBJ\jquery.min[1].js

    Filesize

    83KB

    MD5

    2f6b11a7e914718e0290410e85366fe9

    SHA1

    69bb69e25ca7d5ef0935317584e6153f3fd9a88c

    SHA256

    05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e

    SHA512

    0d40bccaa59fedecf7243d63b33c42592541d0330fefc78ec81a4c6b9689922d5b211011ca4be23ae22621cce4c658f52a1552c92d7ac3615241eb640f8514db

  • C:\Users\Admin\AppData\Local\Temp\Tar1CD9.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06