Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    118s
  • max time network
    131s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    25/12/2023, 14:48

General

  • Target

    26df716b4a59f04d445c4c971bb0619c.html

  • Size

    3.5MB

  • MD5

    26df716b4a59f04d445c4c971bb0619c

  • SHA1

    5a457e71b1f0f3f6b8e27d201e2e152335a5164e

  • SHA256

    cf50ee8a3e617f98fe1839f3f860caa6d7fc6365bede9fe9210ea72556f5e00b

  • SHA512

    b36f50355d89402d7fb1ab4b318ac609d6b6a77d436d2372c9d994c59614265bdfc131cca8a3de69789eb5e3d1bb286831ce900197bc86c82460ad210ba150c8

  • SSDEEP

    12288:oLZhBVKHfVfitmg11tmg1P16bf7axluxOT6Nfs:ovpjte4tT6Ns

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 38 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\26df716b4a59f04d445c4c971bb0619c.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2344
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2344 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:3032

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    7becbdc7e5a465c3880394704125b789

    SHA1

    452f79a01936e31818708f49ad87ff78da6f98e4

    SHA256

    9c40504fcf7645582b28afb925156e36a85ada295b80f0c968ff8a30988b29b1

    SHA512

    d1d30f1347203cde55a88572adf433f9c97d1e93ab2dedacb04e4a4fa7818deb3a656d69f747f5f3efe08869f1f6f039b5da03317a8c148a8e1e2a75c8e68c2b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b0349e0c0a180e2841e92e8839f6f55b

    SHA1

    c859bfd20920890c47bc1b024e6f4193faf43e55

    SHA256

    95f5d6a4f495f31dd3c2c03a49bf834e3de76c85846ee1906c292499bc1288ea

    SHA512

    399b5cde18b5a434377354c4da9cd70063ac195f126ade72a2ae56305143d7c927d367ab50cf44f33f31dca7bc940e21ad9f90c28efb645694ac48922cff2779

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    092abf22bdd05c097ae14becda482741

    SHA1

    50191997e4207b053e96363585f3c2e0b0e9fc3a

    SHA256

    1067bb90237fb7a06b95c140ed66cdbd16fcd84b0f24262f9ead20b75075671e

    SHA512

    c87b9cd7e044850c0c85fba3d6d74dfe53589273120115b112dbe3c574a15fff043b31494a901572c736dc6e8e396f1e27106e2e354c95c6a625c6807788ccd4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    295d06ef87fc636f2cb8118db4f33da9

    SHA1

    edeb03cacc1ba4c573931cae4099ecedbc4b3ac4

    SHA256

    29661f0cccc7b0112376c1263cda0e0d175c9b9e724a6675e0534cc76424d10a

    SHA512

    a0edb956a5b5b8e3951606ab0b5ea6b76a427860bfd66ccd7b5de770b0e2a45dec889b6956d3af0ec1b831a2b30ab4d637a8ca2fd483d24132219b95986f20d6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f8cabd68be26f574732529f6a1162a26

    SHA1

    c78ce50ffa21db6804bef8bc59a658eda7fcc8cc

    SHA256

    822a51524872b5d258a1c260c0a7a9a5299c7b3dd7cfcb900401c8322bdd01a9

    SHA512

    05efc24d7f3e9ecdd3d9ad1d31a727b568caada5e2befc2f528b8759f12e9a74aee4349487bc63a738722b92d6dd21fc77de3a35c422c1d77f850d5b01afa90a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f27dea4aafe21274785f430ce862b176

    SHA1

    a9c00e1f9228fa41fa95bc01ea5305fe1a52ce2c

    SHA256

    0f2d05fe33b4c76e0a2ca44631359520a04dac73bd442e3ca778a965fb68db6a

    SHA512

    62fac257f9453170818be5fe5138e5ceeff6d9cb447b8fcfd3870f67f21afee9ec2e5b91ef29e632b36d5f50476d26dc662e46ae99bf09eb3b5a0a94f754adb8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8e059275c05d66bb3c44e5ce5067999c

    SHA1

    f6a96b26d8fae827125d6c3cbd51492e58ba9fb5

    SHA256

    9f397729f427a9157e96b7d6b040e3fe180aa2cde70bbf71daaecc1430da81b7

    SHA512

    00fd55457b4e66d519d25e1465e1d21d9719e37cccb81dd2def1340aa770d59e23af2a1971c715a05f0503a2874e397b053bb3228dcb6ac1b8d7d306b9a4fd10

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    50ac35c88ce8f529d8891beee5313bc7

    SHA1

    5827963db9b233f8baad76592165d6af7cccc62a

    SHA256

    157b9dfad3fae7cdd076f3e767307d8650e651989dc058412945505f0afff124

    SHA512

    ce6fc0b1bd590297f5df7ca1e5dee8f5774f1f75802cca63d09c5f025e8a9c8299fb49f0ea868aef7f4be2fa2bab6c74b4e2c7f65c77a3a77d433c6806dd29c7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5516dc19d1f39c6dcd40a9c541371fd9

    SHA1

    d6d7f2745562b35d7c1a39813b7ab346e14811e3

    SHA256

    cae0f43bf28d1fd1c4685e1a261ea4a2baa42079bc62555f7646e2d10ed530f2

    SHA512

    c879b6db3e03d9a4f2331e5b07ffc436959ade1c4e4dd14fedb882c57f5b96c2bf8e21510359fb765194a72eb67aca1fa07f5b8b7f79200396e13ec729708faa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3aeab7a08aa7f1067d0d338e8a8c2438

    SHA1

    e9b313dd98f04d6fa51b5b8eef7436c89193e5e8

    SHA256

    7c89707750e752e31c7d03a5903605fd636ce85f7f78caa64ca70837c688ad9f

    SHA512

    a3e310b92126b12de083c7f037295ff14da2ea442cc13685c3eddb186030410f93382d0327e29244d90cb91bbe570374e905a198d16b7300f2da8b9bf6575d98

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    979729c26babe1d707736a0ffff72229

    SHA1

    c2fcc5087e66e8322b7faa24daa23186d833e152

    SHA256

    18f198a7b1089a13d3605e7be2257deb865fa87c9c6b764c73abbb45176042d7

    SHA512

    2539b773b89adb9778e3df70d34c9fba0afe2751a44939ed0099fd18fcae9518fd84df454f47ea23ed9e82cdc15da4455c90a134ed6f3c0b125e762c3ce2b85e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2b9eabe1bb4a55bc65288bb36bd112d3

    SHA1

    6e452ebb0ec78a0f5a41e930401ecb0bfb0ea401

    SHA256

    87854ff92c1d0e83958b08d82ece7cf55d856b0be67955d6b74210c126eb1c05

    SHA512

    4ef2efcc64fedaf47226029297d5513bb53810ad147e41d510fef75648f8ed96fde45606cd1a58284d1764c8d4080325cd734524e4bcd5e071d1b102abc3feb7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    73f10063f336526591650a69ba4dd908

    SHA1

    e88af204a85e994ea9344fd42ac41d0fdc211831

    SHA256

    ae335d01c59e99cbfc00188d3fb9e64f64b3810fd55d4c23aa4602cbcae53a70

    SHA512

    0356b1ac0be74896f838a5574857d6a8ea6a4dbf89dac79bf6310f61f1e81e5dec67b71f17f15730bc45120338642adbea0982e9b3ee677468bc36a91072212e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3ddfdd6a283235367e8ed475fd278892

    SHA1

    55342f325aa5ee4fc8cf96807d661e01bab9a7c8

    SHA256

    812c07eaca6a766d73ecd459fa439b2c9a633232efb0d8c3d9a0595fadee245e

    SHA512

    69a7b225ebaf65443fc9bf30d703418134f96d3e948d09aecaed856df3d0348d959eaf83c73db09e1e0c120268008c4c02a04dc4644c3c2503f72e66ef085cd4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    29866a77a28ec31c3a96e6adefb44649

    SHA1

    0bf4e269ca54295917bc6919b025048d82bfa1cf

    SHA256

    c99de46fc76cc76852b105694ddba93587292b11cf2bd5574ad76fa0ee0eb0fa

    SHA512

    b54a79b59105321d3e498f9527c6bc561472a69552a882b392869118243413ba6d4920949e4694e902eb4280794b0e667560375311060388538c145b992b8299

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5d01a797a27838daffd611fa6d2ac287

    SHA1

    38971ccf747d1b23bc57377275de64ae7a88cc79

    SHA256

    b627cdf9fecc0f98fc6ff95020b4372f0b4d1299b80019d7a4c1cfccd5ed1f9f

    SHA512

    687aa53b5ae4eafe01dec6c2574a3beb7c4005d8c87c388d95870f5980a00c272bf45a71313ce8cd22a350024b29bb4b404d624081f23e3e5a5a6ddd2f71906b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6da72a84c165549c6dd5cb16de726111

    SHA1

    6848896475bfa2e4ab49359346aded3c1d412f8b

    SHA256

    e62e00c067ed31647833c10b2520f83c5a52f5716050aff57b16de9222bc03ed

    SHA512

    532a4cccf3ee9d22b5a52c92b11c90adf1910fcfff2ea4a2df4fa178a23a10ea6fe7f9f56ac107390973f9ae28d869691f3612806b82dfa0d41ec36fe7b50d4e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    77c4437d9f6340fe84100277b74a415c

    SHA1

    91ee39f617016ad3be925337997881517975fee4

    SHA256

    f54f0c64763a881ca16b32b0a7b9d7b41c3a89f2ce92fb4471fdab74bc0dfbcd

    SHA512

    2f7e0b6b87232d48f11b0a26d507bfcad47dab5255a26b89c2046edde61e8143ae0a420058c469dd6e3888de527b07983e94ad8be89b97cc527fb8ec70f729da

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6b8e41a4a6f708d0333da65c50cbb81b

    SHA1

    8f31f4209c8aeabff01de032124bb4dad3be7691

    SHA256

    024102f9aa3fdc4adede8eff163be8cff376f91b2e45a9f9451c40efa32a4f50

    SHA512

    3d2113bdae4de6e98ca8e6b852c703ae61e79e7d830361cbd24657f05409f3c8bcae2ddd93851413f08415c1aa9e757daf9274a4741547e749063f834a47b970

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    93a2d032fccdbdc69bd9d78efccf686f

    SHA1

    e07c95982fff3089a630649d556fbca7b318387f

    SHA256

    b67088e745c57a206454241dd7187e4ed593a1e0ab1b401e42272e634b8bcca5

    SHA512

    c4667752572397fad2244f03a0d84af4c98b2e3c56181a3be7a758e3406233a542395ff4beea43d34927c758779fe4af3c07a43b100e06f528e5c26340de9fe8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7e4361640221abe9bc88033e044e35ae

    SHA1

    be69c125552793411be2d3e26c969c6c65d99d6e

    SHA256

    579920180ea76f375aaaee9904dfe3606b4b63b0423956d8f6a21cca9c06f299

    SHA512

    48802863ff5fee75dca3c45affc0caca9cf193265ecf9e5da02e2d776d14653f77dc2956090d634b23e950dc9bb202bf1217e6d0363a2aa7426aff80068e791a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    acec8a2f7aa8c5549bb4dbdbd6587552

    SHA1

    faac62ccf56c8b816242b32b392835f615fded40

    SHA256

    de9a09a7766ff6a842a5d2c801e438acb22755f6071b0c951419a0d2aa9eb1e6

    SHA512

    8bc0e256e82c450a63a24164ff5a28cb0b41aa34f9947dd15727e927726d89e905fba499deeef88d18b86de1b44858af1c706dfecd21b42acdcec8e169a84df7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    871c91ee35fd2c7deaa1d50aef280453

    SHA1

    825cc8268b126175456005f3aa8c728652979a96

    SHA256

    3e6a032b8cbe55383b7f332950fe5a50846bc8769495fdee0eda5cf26204b9ef

    SHA512

    cdfa995c90b4920869b3fe7b86f24e3466efc534688c8563bdab32cf66b304a5c345541af5837d3037a9309eb5838115ce2bb27d74928d12f2e7ec7a5ddc1c58

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3d1450b12fe99c9a3bb12fcc6a37518b

    SHA1

    72de4cd8bfb02211ac7d31283cc6d51e5d9e1ed0

    SHA256

    38ca81ccb07dd51f7a4b51eaf4a8a42ccf2cdcca185efb11c991e7589cae0f31

    SHA512

    a86a14b72927da255e65af3a7f4ede7a1e0e5d54cc028a18195ac9c938e0fe39359c293f7ca50169be3b1d18788e3035fe303ec947ad07d2371469197e5b1eb6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    849d506c87217b6473d425f33d0d1585

    SHA1

    cc4f4f6bf8038fbe1522533ee4fd4e62cf3f64b3

    SHA256

    73dadd4b85a279356de665c81e23440d7e27cc8734c5df0a1875d4801bbd5015

    SHA512

    bf5c8559c57cc155287aacdb16dae105e9e7ac98519a09e239ff39ebc05cb2f0ad0f2a1cd2c5ac9efd1412be13125c0404bea629aa212f67a9948635b2748ec1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    2062159a3747aa01489f4ca71d8d6458

    SHA1

    5413bd2be455c92dc1a5bbd7371e5994d06113c7

    SHA256

    d3638b1a4e310ea7c2e9b01c6baaf453e5a73e3f5db57918d163a7ac0b0ddb3c

    SHA512

    96c0c11250d22ee2c274263753d7de833aed62775fb3a3c3fa5961901b3d626cd19d8a7aa836712d510e2e991b341c76805e3e440747e379675d2b80d2925d94

  • C:\Users\Admin\AppData\LocalLow\Microsoft\Internet Explorer\Services\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico

    Filesize

    4KB

    MD5

    da597791be3b6e732f0bc8b20e38ee62

    SHA1

    1125c45d285c360542027d7554a5c442288974de

    SHA256

    5b2c34b3c4e8dd898b664dba6c3786e2ff9869eff55d673aa48361f11325ed07

    SHA512

    d8dc8358727590a1ed74dc70356aedc0499552c2dc0cd4f7a01853dd85ceb3aead5fbdc7c75d7da36db6af2448ce5abdff64cebdca3533ecad953c061a9b338e

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JX6ARQNH\beacon.min[1].js

    Filesize

    19KB

    MD5

    dd1d068fdb5fe90b6c05a5b3940e088c

    SHA1

    0d96f9df8772633a9df4c81cf323a4ef8998ba59

    SHA256

    6153d13804862b0fc1c016cf1129f34cb7c6185f2cf4bf1a3a862eecdab50101

    SHA512

    7aea051a8c2195a2ea5ec3d6438f2a4a4052085b370cf4728b056edc58d1f7a70c3f1f85afe82959184869f707c2ac02a964b8d9166122e74ebc423e0a47fa30

  • C:\Users\Admin\AppData\Local\Temp\Cab1C09.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar1C1D.tmp

    Filesize

    99KB

    MD5

    dcba882ecfe393c84479d69904b5641f

    SHA1

    d8c4c8d9b84a7384863c5ed55dffe8b0cb6eeaaf

    SHA256

    0bb478f5e0a1a8ecfb290b5b264b793b8c61cf1ed9b7acfba8c61cafcbe0d224

    SHA512

    9f7d0fa3ac5cdaeb28ec8a8ce0862a67850e4fb939d68894111a458633ae4abace4f0669650b1d156671fa075f0683b18af179d8dc89c1f39347384d8deffc45