Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    12s
  • max time network
    135s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    25/12/2023, 13:15

General

  • Target

    210709408d0363f755a2a04534ae8c00.html

  • Size

    3.5MB

  • MD5

    210709408d0363f755a2a04534ae8c00

  • SHA1

    9891a7c0e66c6520a082c3f3784d29e7bf423a46

  • SHA256

    6962f2ab774d726dfaf1057b3d23e6ec909bfca161987ccc20b3fde1691d6698

  • SHA512

    c1aab425b654239017d7254dd30bbb82094c90da5729804d2c9688fa50969ae69952dc2d4baa5e38f755888e9521452d10a3a92b7029c3e2983888ed7aaa7e82

  • SSDEEP

    12288:jLZhBE6ffVfitmg11tmg1P16bf7axluxOT6NA0:jvQjte4tT620

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 24 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\210709408d0363f755a2a04534ae8c00.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:952
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:952 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:3008

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    6fa2924f92f3142d98bbd0d393f14137

    SHA1

    9d00d9c6c45748b04ae93232607a3bbb77ed593a

    SHA256

    bd97742c14bc9c5f5e64c4615be6d9ff9eabdc044ac30bbe0e1450b44d624c4d

    SHA512

    833c0408fa85ce96fe654a526698b283a1c9088c25483e3cd2e23bd2a1dca6c9d0903879c046275cff801dee2f70e6132d30c35540633bc890cb945af09d7ffd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    febf4f74948042705870fc91f011a45b

    SHA1

    deb525ecfaf80e55492e159a865630e2d6f57ffa

    SHA256

    f2894b7615e1946183854bc7b9127da434a7e6e696d1f3d45bd9f87e58754eda

    SHA512

    5af0446198981a4eda783c81fb54761bfb20c407874f8fd5f34887a0b6a74c7b0c511a1f56dde5559483e4e730871d5cac1dcac6b6465a3bdc8f7b203acfbd13

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0916e5cae40c1264d480038f2cef928f

    SHA1

    b492ff4abf5af5bada07ad7a096904cd52785fa6

    SHA256

    046fa0260591b596e9f2c8c74657c4c1ab2d43490b098aaea8f3f20f6734ceec

    SHA512

    bbf3737e64308e3eb4c6e3bb92a9857df6c5591577dc04ed4c1dd950358129a8b3b43d48b4a9a619a481a17d4d1335d0e95397aa08020523b49b653d2dd942cb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    27267d1c1200401af689485486448ff9

    SHA1

    572eb40ab7fab664c2bef14bd551bc5469fc20cc

    SHA256

    9361329149e1ba111c6f3ee249eabcad14be82650b49ca39cfed5ecffefcce02

    SHA512

    120be2e4f52ba6c1c74bcf86cbdd9cd676ce6cc066f515b0a60d036085d94a0ea225f601393336670f1be30d4dbce7908e669391512cc70bc100626451d923ca

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1728f43a33f5874634953675c69dd6d5

    SHA1

    d78fb701f43b81ba8a2bca03813ba056a9d5176f

    SHA256

    ad61cc17cfa03fa5998fe87431583985385ca556a2eb4db315c06dfb873756a3

    SHA512

    e56e10cea1dc89b85a9f926cc4b6bab7c0b7f86f96d2068a30bc27c5ce60d5ff9d60a24d94730c404935119cf93df4ebff21b7d267d5e269f7df79f3ca8b17c1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f53cdfcc7e0ab9ddeed439840a213348

    SHA1

    705471f4aa1f33214bfad4908fa4ff8b1df793af

    SHA256

    443fbcec6ca229e975dcfce4a2e203d026b2c80a89c84a43298a355b02d558bf

    SHA512

    655c0764b215cb185584cc48e1b05df7b423faacb702886747595e2d76a0f3c0a583ebb1bdfb47db0d42bad387205056a0b7cd8949cd71fea950425e110e2c67

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a9ed0540fce3a0ce2bb01b5716444175

    SHA1

    312b729d3bc69e85c00aaf585e27838fafd1f394

    SHA256

    d23d7a9999e9636153880bc102b76eb025284714b1e3c99f7dd3bdae46bc64e7

    SHA512

    b1a2380daf6de1da0f61ee89467d6881981f82fb514bfd4fdbe2ffe89cbd1932c2a27149b52c948c9b47d26e8d377f18b14193c8bd24bf812ad2a73f7f9f3672

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9f8fabc4d5b968c21b3fe63ad1b2d044

    SHA1

    99a031e4aaa91650ad8005278ccca7bc6cb6e99a

    SHA256

    ad8915b6ceb80108c03ff8f9e0b8c2fc0a0cc7a848575c782aea1778f7eaa52e

    SHA512

    9519f660381396e72ec8461a7a6c39bea92ea60fda13d5524250e97d4b12d1823c44b4fac62c43517c2135ec1e7073f5e76f288e057222926d58be31c84ab42e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b84fa55ef01aacac5cd94822ff2eb97e

    SHA1

    d645f7884a6aa146db66024d2a97d4d0d96981ef

    SHA256

    2d80778454a36ccd38b8012fbb31fbdd8200e8bae6c6dadd28a5e321e1a6e35a

    SHA512

    ff1c5f7cd480083337376cdf096e6bc8ac5c20ca9288dd5255a4f3b3db0e459e86d93293edd1c7735a0dcf15387a951385d9cb7d923f9c519be7fe28f9b2cdcd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ca49c943f1023490862e8998ba716497

    SHA1

    f49054a566f8d2ccaa02c0b4790ebcbda9fda924

    SHA256

    d3f24d5880ad102e2c940d602942c0ff66449e02c74af4a8b30513740726f17c

    SHA512

    2dd386e83fbd13202c3c061868913039cff1fa66f2fc0c80d87ca1ce4c8e35bd9411e1838edefcad2f6851005bffc49e1a0465d26642b6b5140c97d95dbd9a3d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1e8d467bdee03429f27d7a88e46fc083

    SHA1

    fba85538903654c992087fafa1c2911425e15950

    SHA256

    ae9e945ec611a00e0eb7da6de2726a072e0a253b8e2d20001ea1d798069add1e

    SHA512

    cc079c4873221fb14bb0b79adfdd767470fcb091d50469f421c7a6c56d5baa0bc518e92f9bf5c41faac9fbc75aa5ef9b2e3cc994efc89ae010ac6e91959b1bb9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    575257d60eb01ef6069d7dde2f04ac52

    SHA1

    45e8ab817c675457918c92bd69cfa588d5fb2e0a

    SHA256

    d3114e57a323eecc5960a4a775a6d0667283acf02e0521551c2ef2c03edf8632

    SHA512

    8f0ab8ef13fde7a433645319e9a59dc5960fc7b72cd756472235bd826fc33a6e59267e53fd50bc34c69abb10596138fa5c3cca2a0944b1de77afeb4518a96e0d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5ed6d878143c1f58b09a45cd600a4da3

    SHA1

    8357dfb140215462c46707532e5740ffd04d7d3f

    SHA256

    b06e1cec25e26ee9f33890c9847798997ed6f5768a79b9ae2499cb2b5d6dfd3f

    SHA512

    718b45c0761f187da995bdbc95017c919d32645daa747ccfcb922f93444856502ee5f6e07dce5ae925e04efcfd84091f702e6f7bdbc196dcbb72eaf06b269eda

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    05a165f132a8c3fac2f6a10b9a8371e3

    SHA1

    746506234e1f3cef0683dfa1f7fb648a52547417

    SHA256

    bad3247aaf0cafa9a8027c89df7e361cfc4740a1d66cc48a914be61cbab002ea

    SHA512

    089aefc606343617881649d4c9cd7a31d7d25d7329483e310d6838173ff918c7c617a1e7d98d430c4e9116401d7038ec5d2a4706e2955bfe7471a27b509a5ad9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e7d4f35787dcf0536fb71ecbf6027b43

    SHA1

    5904b254121a056bbd0f0412ce5b04c3abe16f98

    SHA256

    b26a17428c5827ea3806c217300f905dc043b6fcbbd2788c0aa7715e34b7d7e8

    SHA512

    3eaa1226ccf96dbba8822b73c3a4a96e5e8bfe4b6e53ca04a396137ef77f9d22f822fb43e0c05cfce631c785cff21a0ddef46e6d35b5541e2c57141471eeda0b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7e0b65b0992841a602bfeb355234fafb

    SHA1

    7aef8a89e4de5587aee1c2aea26483b0d2c985db

    SHA256

    a133d836c9109db2109e979455a150466c95beccfc52c1b090cae460f67c3289

    SHA512

    0710036627a309f0a12c2957a8ad6919e0538d745289ad1a9fef60130e6ed6d814399df5a7aa755e792e610d20bf56975f9468a4df5fb848df2770182582cab6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7fdf8fd044d109b89534f64700c44513

    SHA1

    27f63f567ae452555bcf0c55adc31ea60124af65

    SHA256

    cbbb8353163294c19b5e0b30194e14fdf1afecf80b95e89f92eb6763b8fbbb5b

    SHA512

    3e98c9178e70d02514581bd6988fa60207e2f92d581987f5c553ffbd55c1bae5068f9578854fddea5f2e330eff09c6752ac60a4c203f5112e3355b707f617cd7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2d9b28f02e54d1c7ce9b2bf6e552b5a3

    SHA1

    d27baa377c4c33672edf916f6358d0201508e3ab

    SHA256

    048cf135d51b32c9ae57ff5c293ac37b099ef8371bb71c150c4f982ea0632ccd

    SHA512

    91c00f22a0b743d754f076609e0651b59631e172ca1cf5d87ae9a22ed64f1a3f16421169699434e1c8968e230c6ac65e34331eff9f42cfd34ef0872db71daa3f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b7b957b05326d397ea56ee4b89102f0d

    SHA1

    65f244cc9dcbfa64a5ded2ceda0933977b327d03

    SHA256

    3fa32d25899f5a400f2e74b3516d358776860e68e9466fc4e424bcab8dd025b6

    SHA512

    7df0083ee64ecc5074bd65e98b3146a152cf03a3ab8091cab663d835eb027623cb8bd1371d4bf6fa4c2ae1a4e102f756a88a9ea6e40218c599c16d312571e143

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    78e9649b1ab547dda9cc953773d31f41

    SHA1

    1c2bff3d3e86b5546bd28ce6132a8c78e40fa24e

    SHA256

    ea40c17d0b4124cf15ca93fd2dd61e931bf2bdc9ecf9a25472d3065bb9de7bf7

    SHA512

    e979870e7500da10c7573c7408c4cc44d5757a7c128620ca178527171bd6b2b35973dbe77d9cbb389c8ff14f91993e10d353b477b69dc7a8c70a38c7fbff0983

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fe3096b51d34fc950c0c8e3af4db2dcd

    SHA1

    bf8bc01f31b5e9131de651f19ec6dbc629fb0387

    SHA256

    6ccec5097fad53e6b4dd010680aa4dc4cac32d288227fc3b1fe0bdaf44dbb049

    SHA512

    40168011502617192d138e1f3e59f70d3406f7a33304311c5b963771eef4db0faca987104772c1ba7cff779bd1400e23929a6a11a093ebd0b4df42f62c7db19e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    3c5048c8752d93c73cfbfb69c67f18c4

    SHA1

    242eb8c7784aba2727c4e8817b7ed1a04b248130

    SHA256

    183032f0ca3953cf6aeb9339ebe31a85eb16a42ae77d18b012cc0d9bc7b29e2d

    SHA512

    f17460c6aebf6114d04e246e01b65ceef64862754a0141b073389ec6a49c3f25efa844a1f3b995f797ef715e4f315653b0b22d9de2271a00ec5eeb1861008ea3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\Internet Explorer\Services\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico

    Filesize

    4KB

    MD5

    da597791be3b6e732f0bc8b20e38ee62

    SHA1

    1125c45d285c360542027d7554a5c442288974de

    SHA256

    5b2c34b3c4e8dd898b664dba6c3786e2ff9869eff55d673aa48361f11325ed07

    SHA512

    d8dc8358727590a1ed74dc70356aedc0499552c2dc0cd4f7a01853dd85ceb3aead5fbdc7c75d7da36db6af2448ce5abdff64cebdca3533ecad953c061a9b338e

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\CG8Q5H33\jquery.min[1].js

    Filesize

    83KB

    MD5

    2f6b11a7e914718e0290410e85366fe9

    SHA1

    69bb69e25ca7d5ef0935317584e6153f3fd9a88c

    SHA256

    05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e

    SHA512

    0d40bccaa59fedecf7243d63b33c42592541d0330fefc78ec81a4c6b9689922d5b211011ca4be23ae22621cce4c658f52a1552c92d7ac3615241eb640f8514db

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\MYW0JBJM\jquery-3.1.1.min[1].js

    Filesize

    84KB

    MD5

    e071abda8fe61194711cfc2ab99fe104

    SHA1

    f647a6d37dc4ca055ced3cf64bbc1f490070acba

    SHA256

    85556761a8800d14ced8fcd41a6b8b26bf012d44a318866c0d81a62092efd9bf

    SHA512

    53a2b560b20551672fbb0e6e72632d4fd1c7e2dd2ecf7337ebaaab179cb8be7c87e9d803ce7765706bc7fcbcf993c34587cd1237de5a279aea19911d69067b65