Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    144s
  • max time network
    163s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    25/12/2023, 13:43

General

  • Target

    22aa65618df52057fb04b54b34715393.html

  • Size

    591KB

  • MD5

    22aa65618df52057fb04b54b34715393

  • SHA1

    987a04321b016503b522ab2e750a1f41fc3d1760

  • SHA256

    6861a5925947d10099c3770f913beba0d919e2e25becf9fdaf2299796f5fbea3

  • SHA512

    7055543d21aab357c113209ceceb398a0990408e26e6183c287a80f61731d292fc178f7e63f32e49b417fa9058db51ebb3d46065f80f593ec0932c1f9870cefc

  • SSDEEP

    1536:NsPuhuTFpcWjeCOhVwMthUeWg/ZIs4k7s9SJ7HegNl2bGEM04jlnhGDF+soLM64S:NsPuhuTFpG

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\22aa65618df52057fb04b54b34715393.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1252
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1252 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2420

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\E0F5C59F9FA661F6F4C50B87FEF3A15A

    Filesize

    893B

    MD5

    d4ae187b4574036c2d76b6df8a8c1a30

    SHA1

    b06f409fa14bab33cbaf4a37811b8740b624d9e5

    SHA256

    a2ce3a0fa7d2a833d1801e01ec48e35b70d84f3467cc9f8fab370386e13879c7

    SHA512

    1f44a360e8bb8ada22bc5bfe001f1babb4e72005a46bc2a94c33c4bd149ff256cce6f35d65ca4f7fc2a5b9e15494155449830d2809c8cf218d0b9196ec646b0c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    375d2e095ef9eecd49f5d4964750d303

    SHA1

    f2748ed670b6014298a8896a893f60dcaf9bd972

    SHA256

    0c92995cef5482ecef0e241042a3ce29bec28413d7f89931bf408c3a09d5f34e

    SHA512

    aa4da279fb5e0243f91adf9aa8fb3ffeb6ff26a47204e4ba43114878bef0f7e2c9a39a050829913fe8c73bf61c9a08e2bf6ebe0ffe009090f6f99ea77fc53fd5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    17654fa4f2fb2cf2d7684e22b596bf79

    SHA1

    06081b42d9b317054e1448921970c24fa92ecc0b

    SHA256

    7f78ca65d8abdd75d3bc1c85ed2dd626f6afa9b38cf7f2188172fab994e4d093

    SHA512

    745be973b5b244d4c680f327f7df4ae88b3826112ed24d9bcaa65b33a179fb30ec2679926abdd73e66cd55bc18e43219c0bef4b716e76a754e7f84cf9d6d76e3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    18802b3f8cafe788106a070efba08f58

    SHA1

    f9f259e66ce9154dc341c3debc06e361a4a24431

    SHA256

    d6379bd99f397cd49f11c260db1dfb8ab64945333a9d18b8454cbfa3db02e7e2

    SHA512

    7030a4ec55ead4fea9277e39c163754c7a1617026c6f97f0dceed0a53e25a0d78227160528f6124398985aa386e8fab3293848888549710bf89e475586a7e5fc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    eb3c3c1029bdfb38508eb647e4b9ac09

    SHA1

    cc1a8af13cfc24ab48311b10736723e0595416d4

    SHA256

    1d85f97336eaf103ccbf0204919c39c6832af9be87595dad332a4043cdbf618e

    SHA512

    bca605c1cd351c8397aa1bd6ac6ed6e56010c5cb736ca589cef9ab1271c4e7c5c25576323259df5a42ff2a51b1ad99548ff71e7f26cd85d7c6fe697c8190f12e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    51da4e9b2e5cbdc43caa15af958e4629

    SHA1

    153a668468f0af71550127029fadbee08cc406eb

    SHA256

    30393d36568ea04d0c93f2f43b20c503dfd93a41da142b1fa8b3586d5499c9ed

    SHA512

    23582f1487ed803a806d8e38c31a10699d843d65fee5e6d0730c91c3ae9378eef329aefd7fcb7a50bdeac06757b16f403e1f5ea7b0f73f85c0c5b797bfbbd4a5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8d66e75fac97a7252b722fc4696b588a

    SHA1

    20166e15cadef37eed098333b1e14606235016eb

    SHA256

    bef97f9caed78bc3b8b1396191dd46b36b902b8de89233037ec3c6df62f54d92

    SHA512

    f54278709b1d59ebb3bc8cfd5e007efe459af5c1002c96705961b7449168cc483f47f4cd85e82c298eef9c2ce563ff7b86a46c5560ed4472e25b3ab6d5996e37

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    230ab17e26b6a5212d0ea5fe6a6e8373

    SHA1

    a62e9aece160e8be685e4a11751d4968fcdf378a

    SHA256

    730eec1507ac25f79453d4e90911d2c0d7b832883e30687f43a88522de024e6f

    SHA512

    ed1a25f28955a858dbdeba2aef20671ac0adc129141baf86d55f238d4de5de254c92e8cf04da6a44ed45b80bebab047ee0f7b45db518d1200e82304e51cd606a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e6adb9bfcc0f3236c4e64275a90d70a0

    SHA1

    7dcf3436ab090c737b653e09203e7a8d848384fb

    SHA256

    ddf10bff575e3af936d95ccd53d745329bff509a8125edccc7021e4e1351fe6a

    SHA512

    6df16e08c846d8c594b984d94733d9f5c66df205c8cf9b3b8c88a949dceee941deb9b097842ae27da619c27b1baf60114fb8fb80bd3e9035a9d4ac63e46148d6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9e121a4d87b7dd7bb093191862b6d461

    SHA1

    02b2e31d8987382becaff39229bddb39dd5af797

    SHA256

    5a4cece2ddf9c853dae968520d335a827e14d161d589df2a6461e32f83251d2d

    SHA512

    a1c8356141f37ba8b17a21e37124859cd19df7cbe8cf211ece9c94b3874d552a58fc4dac4e059bbabafccee036fd06f6219c73bed51a3ad7392f4a78b2fac524

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ebf8eab739a27185248c343393f2796e

    SHA1

    f9d6bb02269605fdb5ba20e2e06a413877700d3f

    SHA256

    0f494c20e3ab39773f9e5ef87e07202333fed435ff343551d5ed261f57e7eb22

    SHA512

    5848f8e04efec9d80dd4348ec8f3595dde76317faaed7c3e3ed0ef56f9168201be78a8465298a73b796ff9e51b9a53ba97f172ddf6134c55b44ebfe4b421b96e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a7f29f7d5af62b90e142103b2b7ee5b7

    SHA1

    9ee3bdf8bb708ee0f3882383caa67e1c72bfea7f

    SHA256

    66245f87db05dc24d3b915c7a485d33223a6a77e7bbfef9165432e2e7a122bd4

    SHA512

    ef943ac68412e86090b73b8f6ee1491a3b63fd4fca851770c30ca3bc4d6213e9f433945651d59376b5fdb499faacc7d51cfab74c1b647e07656a029fb30e51cb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    36dd0fffd3de3ba55d8ada79106422ed

    SHA1

    51b99b55a5f980274a108d46a39e1adb2f427bce

    SHA256

    c5b27530d28e2ac03bec59a20090bdf050b3ecb5369d8767aad35f8d8ac8ce2c

    SHA512

    24f955e363b5daf4033d10b88450357c814bbaf6839bc28fc0081687c545a40b079e59e18d72a2a544ffadf5fe576d2672183e89f28c41a2788090cd31eac08f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cae32a7880df80aac882b40447fa6bab

    SHA1

    aca5c29650864a184f090f8e97d324e3733c9bb4

    SHA256

    89a7f83f4ad348fcdcda3b01a69b042921490596bae6edb94fdfe5c64eb9657f

    SHA512

    28096801cfec26637bb4d497bb757ac1347d2883976345b7f260931a536b35e09176cb2b179a82f67dc1a7d8cb35e11c4a905229e184cc6316179c14f2425d1c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    02500faefc69f24f31a18e83c87a58ca

    SHA1

    7f4608052d1f876521d75c3e4b34ee35ad3653f2

    SHA256

    e1d13e103962197d439f7cb084e2955122b73942426468d9d478430bd3caa801

    SHA512

    69c4aa094df5b08a198a5883b0d1fcbe0eaab769a20439fde15af39c872cecdc1fca62303f99baa4f4860c791a3bc363318307244e2d6b4515515eda99889c14

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6617c1b46aeb7fa74717d7f6d3e83b97

    SHA1

    17ed98e1e80206cd9b904c7e87eee93de45f0cf9

    SHA256

    a3c8b5f5a5d23c4812367ddc68150593fb7b9265c707635e0b95e95924de04f5

    SHA512

    16d30cbac7311d9c56aec4342c4a05bf4e48fc883a0c8e304f4b5e68d78a22e44308eb63e0a865065e39f7cb3cadbc4b7f12d8d2e037fdca8583898ae71ff74d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    dcfef8ef0a298fc8f0815082aa7850f8

    SHA1

    63579fdecf6a795e4b814347325c587f5bef598d

    SHA256

    d343486daac9269f94905919fd2bff5d93f66cd033bc9fd067e002a9d2b52823

    SHA512

    9520e2831d93bcb18eb7f8dbb95e6dba4f00f38459f09b4954490716fe04a7a2965c0cf72cb6b8916f09ae0526bb5678979631a0fc57ed756d5400b4c4a758b4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7cb582d809e0aaac62fd96697c2b6c90

    SHA1

    d344f737dfcb0d3b3c5b042383d0a0115fa7bb9c

    SHA256

    3b49d36081b289c39c32be89f3c505e30f7537dfe5b0ab8c0d3c947ef1401ba5

    SHA512

    4f93dd6a6dd6b5f767566dd08fca1fbef36c308c8f56f11a55b4f4403198b984a80c33a2db7fa8123a1a868e03fac8cb79d288a4a43e2fab362be0055ee3d607

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f1c0ad7c3b475566f1635bb382429c5c

    SHA1

    049b2e8213f851aac76faf6be88f2b7a8dcd2f12

    SHA256

    d11c2c0c1645526ed2edea97153d696d1276d426f38929de100b55cf1a8daaed

    SHA512

    588f4243c096576cf0f3f6c24353a764ce9247738db7f1d234c225f66bdb777655d716b7b657662dc27bb33f43f33ba55dedac84ba616f962b3fc04e98778017

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0e62227cfa10b9438f4b57d1de6b671d

    SHA1

    a391fe7bc1c6e3ffd96390dd7ee2bbc5679f9304

    SHA256

    e7ff1697f018cdcb8e50a77806b367345573d195c7b38ded44e0be7d2b351824

    SHA512

    5651ee67017cac83971d961708cfd657693c4ba52dd327d99c7c85de76d89c5b9dcb9adcb0a2ff53dc987d5fb0f6e9200127b28eadbfd829680b5a11d8203af5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ad5f079f056994d7b6ec8a39d635645a

    SHA1

    e31963784a141d8819b17d74104e671396312eed

    SHA256

    75667b0a42f8e13c5bd78ebf3a143ab9916d8c7a9629e6d9c2275c1c02693d9e

    SHA512

    095eda59e43fd93db7bbd42e880a59a54a5a90375981dd9356323f3a437b46a45e610c089820997bcf87b59d7b547786c6f6d3471bf0bc95a42498ac0fdb19f0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    58b4b1479b1561965aa95a183824c366

    SHA1

    12cebc7b20b734bcc0b469919950decedc2988a7

    SHA256

    5bdc78e3e1101b2a3d0e16bcc0a624edbc571d1a220d9222e2109d6857bac79b

    SHA512

    23d9254508be39aec5bed0477327ec8577ca690ce1179d6bf0c0d66ae8b2d94719d899be66ec8c14637df006470eb4e5d50eea36a9f1233de0df871fe5bf9adf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e98b22d5613540ddb871eea51f69af96

    SHA1

    b9bf93d4c93a18bb4ea4c894a11c6b983023296d

    SHA256

    60588693b54d6e79144320576ea228b5afdbe72fcea66e3e0db1e7209a8c81da

    SHA512

    d167cd70977325b1f36bc5635f6b909cc2b6db242aaaf010991d606ee418c18375c9d474122880de42d0e0fcb6dfa848f2b9cf7b7e7a5b84fdc294f675e2de99

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9c5169309dacba2d505ff63f45046fa6

    SHA1

    d3aec7bf46202a04a65bdf4db8ac76747eeb5b9e

    SHA256

    c6ca3c774eef2db31720d5b9604bc362b65c19b0dc08e47b53c697e0d1ddee2c

    SHA512

    00f4589fbec94b833317bf31ad9cf71501bdc01f06bded6dfb36a3d27d91b71f72204122b7701f7d46d5232f941a16ebcc34fe3784edf05c65b236525dd5f23f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0047e06dd0dff3bccce5726bcebe2e2e

    SHA1

    132260fae360892d3bd6ac7698dee9f12655524d

    SHA256

    d2e5624ccaaf4297f5cbb1a607860bc2467b0c3179322ea2ac14393162d66f83

    SHA512

    dc5b71101a609b3d0d3f9e7fb847f4e7d14557324f6c9dd96bd05cb45354ccd05796750826b3cfa7029644d4851e6f8a818226eabaa75d108e8d41e33e5415a1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    584f4f457b70d51d103cca12c45b0b5f

    SHA1

    7289e2b5f68c2f45633e50dccb631a992896d7ed

    SHA256

    ea4c4c744cd3fee729f58455b855c6db66915b81cd309038bc81a1356900e944

    SHA512

    8ae21198633f6220e4055b8d9db65f2f0bfbcf02856387185d1cff1f1c2e50714207d9008b1585ab9c0ff3f802b504153f6f4e94f252eebf3bbcc7f1a7fcc099

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e693ce625931d2a21fd4453d61e9c678

    SHA1

    1103ee397a50da60217587d6079fac60c605a6ad

    SHA256

    ee77f2379789bc672a772e27358c24b32421361a44c350c871dc997650171d3f

    SHA512

    15f1385d8a85298bd5af7cc9616fde71bff5b3ce6c61d460d43b327c99f4db797b6fbef4e07f8bef79d12919d0e9365677859c6f61507e04dbff8f9536770104

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5e86e456ebd16b8dea6c7117c45be5f4

    SHA1

    c67e82d75fc4b74906e1230ca0615464b695eb12

    SHA256

    af1dff35443264129c186f6cf7018d84a3cee2d9f1c480dc76525b746c7a624b

    SHA512

    7a1254eafb972776d5edcea498c256b36d43602eb1951c738fc5f088148e95f1938e31b75e6aef1a704d6f7d86e3dcf7485834345a62c8f42eb44a163e36e935

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8c1f42505bbc0af71c2aa3dbc0f551c5

    SHA1

    d3253a8ef8e9ca65746c1a457c264d385eef6402

    SHA256

    5c81918bb4ad65fb50095bb825f6edbd55e081c743be102d3c119524772ad383

    SHA512

    61f82229fa82a9809b7d6b154eb76be044ca7300563480e0d00e7dfeb0ec7f832e955ab8819f5f39a8f7394e4a084c5eb9cfe353f4ef3d2695413bd463d22095

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cf3ef1099bcd73861e6cf48d19e68c92

    SHA1

    3d8a7c83b86972ee3825e721fa2bd01fe06d6eb3

    SHA256

    eb045ef6739a8939c75fb383e42e996457c1232c18f3cee4dc4d461b87599db6

    SHA512

    3747c4f234389cfcad01ae47dc2610a6445c9a8e2f63d7a4f6317d037f3545a2071506832b03cc652f4552ccaa8c6a3f18eda9b6af47760071288354e21b5fab

  • C:\Users\Admin\AppData\Local\Temp\Cab6615.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar6676.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06