Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    122s
  • max time network
    165s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    25/12/2023, 15:36

General

  • Target

    29c2fd89c0b086e9501bf2f149687e77.html

  • Size

    17KB

  • MD5

    29c2fd89c0b086e9501bf2f149687e77

  • SHA1

    549daa8af8684662b09a0dff15849f3504ab9996

  • SHA256

    51011c874e312fbbcb6c213ecbbfa4cac3744285f0d306c3b798bd4d2f22aaa6

  • SHA512

    8d1260c0a3c7920e36505cfcdd57050e6a365cae2917a684caa88a1fd6d9c2c1bf6d6c44d47bd7b5f968f8c2c215220a19ddf4ecde7a4b2390de6143695664ea

  • SSDEEP

    384:jRmSJ6cxRVz9LYqsF2eZa7ta/X8J8FIICQzyjVVX6zKg6gWnMjBJlX:+cPVFZsF2eQ7ta/X8sIIUVX6mg6gWnM9

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\29c2fd89c0b086e9501bf2f149687e77.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2112
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2112 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2656

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c98c65f6ac42bd9dc8e91b9f506b89ff

    SHA1

    470d8b9cd30de924dd4b2b3ba582003aacd0f515

    SHA256

    ac330993f369b5d8cad94a4d047a2266e2897af77052fa8ee29b2c08ceb903c0

    SHA512

    de434fb874ce6d90cc8daf59bd6d7b215e3f31e7779db60ddfd2c564a7c66d30636114e322335c804f1d068f1b3c75aad7d3aa6b00b7dafcd81c2f8fc80c37b8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    203213109295b92c9a591cbe41aeb432

    SHA1

    d012ebb60c5572ba2520666dd471caf8fd01c545

    SHA256

    33fb8c4bd704128d5e312569c3cc1f6057f42c2ecaef6a66930008ff62264aaf

    SHA512

    20102ea641dfafc93a6a8afbcea53f1580f2c7c7a16836ae442a7e89e1ff084df927e0befe14d21df004ec694203b021073aaebf9b197348aadc3c02af1237e5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f921a93712db5c52e057bc973b098ee5

    SHA1

    6b9ff325f1bdd6d0942d4914ad73eb053f4ecedf

    SHA256

    e7d8546070752383c38a7683c0fe643ffa3777ca657ef7c9fe2dd59d60d66606

    SHA512

    2c217e632b6e5eed74b19ce3d00ab535ad63037bf6cae2799d456e8d5a2088ac82a3a7cc6c4d73804df600bd588a787d8c6e0ae7bf834f05e0be57fd32cca101

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3c761f2d77a05346535fe47140f7a273

    SHA1

    6d94fcd33cd06bc9ceb98693ee093af7d0559958

    SHA256

    6a158fd3861d9932d83489981bfa402960458cb44661ad425c3af0fe3e362496

    SHA512

    6971c012c812ea1725d14159c2635b1055ff39be84e0f6f7e37baab955ecb5e41224bcfb86b8c1b7bcb023573c383f83897063c48e3fa317a4fca71dd39d1182

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0df3080d960d96092d2df93f517fa86c

    SHA1

    16bc8c1db12b3e5cd00f1046d7aefb461f3410d9

    SHA256

    da944e9fdccc13aed47ff42ec6d9bc97d4dbf3382bca633530db2bd2ad74510b

    SHA512

    06d27d8626e4bbe1ff080a662c20c8a277d93b55c4dc1a4ca76a95192266b755be474e6bf522d239e6987dfb68a08d4a1d6f74ec1e25da1e9f1737bb3d2bdfa2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e9031c674b2761bda7fa03e5d497ae74

    SHA1

    d410f7fb278c3c76971ffe7d5d5ca9969e1c10f4

    SHA256

    2d2e2c7805bc2bd3f9599adc5b966ee56c040c79dca92e001abdb1a185bad478

    SHA512

    425f531b47445d00cff6089e0546ec63cbef90c19a5c30c94af873331fde9ccd10211f65aae24058bee346cb8b294f4b9cd8636a374e33a3313468ee21ccc599

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    52970d8cf44f6567ed6683a348d2de00

    SHA1

    3933b07f8fd0a9ad7e300d7b96206c1d0578ad82

    SHA256

    411fd03e66060d32612a444b84d049930c8540f3ee10fdd3799428339039fcbc

    SHA512

    7edf940127046d9df400485100c6d1b32f0506980f93d54d8d3d40f224d3ced4c6a399e732e22fcb3a74b9d199a97ade425130bbc3a70da33554bc2ca4fa83b8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e8d07e18d1146d2da9aa5756adee64b3

    SHA1

    0927858b1af88c41f5da4b0592159f613c496e8f

    SHA256

    3c3d8df2963d5b20583307b5a85cf2c1f205a3286917f889ed6e10561d3d8a00

    SHA512

    9786f46e0ba204183d63250ad6f6a2809521b6a86d8baae6d4df553db9c6f6d21f03282243f5e98e61a66495fdcb414748051bce3de666f4fcb437af3925511f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fea131185e018374bc1f7e070ccfde1e

    SHA1

    27b816c735d563c0b85ea99dddd92129d7e0cef2

    SHA256

    657f3143c146ca6c9306c9b92594ff36e086392be27569db4d282bc69f954d66

    SHA512

    92f39808e9fb2ff0d577c898875bcb687d7f11548c7a93f1f36bf6bcf84c6ee79f86e923551e7d8b72cf24cc7d56b720e25c5722254c49768fd37c38d22f05a1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c1f2ea98d9ab72257b68c9f00a811cfd

    SHA1

    2eb8c1b26e6447dcfc444245aa9d873bafc224bb

    SHA256

    f689aa760bf2fc8d4ccc8d1f202c0edd9fb9fe19a7c52f2fe3da17b4ac11ad60

    SHA512

    a8c279a74daa8f09500e51c46c97da2feb4291921f6fc9c14d0087dc94d68f7d32c7314eddf11e10b897f13e540d644c1a68863f1635e4ad7f32c75f8ac93618

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c69316e5c10906405abc2d2e79718083

    SHA1

    36ca68106c13ee82a0879d3bc5f659267a979565

    SHA256

    2e94057d3970fa44d237979b903b52d0d9c84c5fbbba6f07acb660c073b8ac8e

    SHA512

    67a7144a652cefae593abc5ffecc03aebc7321c945a1e4d62729e045ad06b4333a65f15966833943cc73cd2a19851e2f0bfe4a6e9f3af6f5f89f9683be3af839

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3168ffb3356294af4a57bee2ac01f64e

    SHA1

    c6a087a84e86803af52aeeec78047858a6813df0

    SHA256

    1d49921630955d56e4d7142f007b147690d4aa2fd47d4820d6f4e0520a973016

    SHA512

    f34e44f206eb0b07ce3b9510bd0ced1e0d117e76afde980e3d8782932688c7d75e77e41cc949c1644b260d8d58eee821bf3392edbcc13e045ebd6b946b164d60

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f471f5bf501716e1b5954cab591a36f1

    SHA1

    1eadbd944e6ab635fea6ffb43dc87796b5db0aab

    SHA256

    cb7432dda9289671ffe544c0d02c2505d2e7afa2e64e36f7d5a5be83f643f3fe

    SHA512

    45611dedf00daaf29ad5b028db4de4d10c926aaf17fa64833632d90054045182633d698339406e5c028e10e3a0b40cc1251933a7ae0765a3e1eb5d0489b3ae63

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e3a4116711e774295512a264ea886e92

    SHA1

    0c226167122f23998952699e4a702f6e948d9e27

    SHA256

    2774b89950c590621e984ff81325aaa5126672b42622db9649657ae190aef69f

    SHA512

    c54c61df9ca2adadd5f1e54c6a0fb3211d2f8831722118c421b9eee47e91f9703e7f211ed8fa8cf4e5e377058bfad10e8d1edaa04e34749195490c9b33ad027c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3b48c27406f8c34321c13e3595c8fe5a

    SHA1

    0f2ee36182f5742b9bca70deab67aaad1c5bbbd2

    SHA256

    19c2058abb88f1ac896e1683b607ba415550a0472c5cc411db615f4e42007777

    SHA512

    6db53fe9c8ebaea4ea333eb98a7073ff678c387eaf4730f607646f468d28fd838df4b82ef346673d6107b57354a13168fffb226003ec32f17b86cbadb6706bab

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    faaf180226956c6c8f9f16a691a3bdeb

    SHA1

    94c2feddeff6df427c1c4aef978c0498f5d95ff2

    SHA256

    11ee8e9ed78071d8d7a950118e8a8994234ce938318aa40e425c0b453ec00075

    SHA512

    68cb6829d5d034bce2e7e52079a6b1b10e952a11ac6d593185eafd838a64a05ea567e462e675d437c6ad2961d7b37e0b10c9788281dd30a1da16451c96a09570

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    78e26e35bd840e35a43bb1fd710a450b

    SHA1

    9745c75815d9b356d8507eecf903f1131186bc81

    SHA256

    ffeaead6ce5d2e8a41c02835e3b048a75e1981c42e2fcb30a3e4c6db2d4b5ccb

    SHA512

    20eb546846bb011c0be0bc418cf204e78939727925d87aaf49f412a1625f7586e67385cb26e89fde5bedc41db75f71143525ef9e83b0c0bcc0e1bdd697f1b136

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c6633f4022908aca684c854fde4433af

    SHA1

    d2f05ff40e955a37e42e74fa59ece052f3657e3d

    SHA256

    0c542efdfebd8d602e947932deb5e755c432e06f274299871d00d5ddb9ad912c

    SHA512

    06d86e7473f9de32c0f4b4938d310f7f7f56fe4fbf4832462c082c7f3229d5a4ce3db25afc24dfa1009d296b2f8704cd3f551fbc899cfd3657b3475f19a0b96e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    32e1545e90f55a86821d1426c4b7c608

    SHA1

    99525183ebe243f08a9f13589d8253899c65b06b

    SHA256

    bef493338e9c70c95b5a720ea3ea8ed586f5ecce3d904678dde8b9a910be92e1

    SHA512

    d5a443d53b6f95f8f00756439a9b07e7a82714cae15d8983ebda02a6d0c1b07ce43f4c9a16bd4f2fb21ddc3b2e07d92b5ac1bf07423a71fe711b443e5819ee63

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    84873e54de2ef2aa1f78f0eeed42ccb4

    SHA1

    c043149ebe276f4a392c1bdac9d1ed309a45a17d

    SHA256

    4319f688d61eb0f3b3edeb70f184877b0e3dbe800a3e6f508ea093e33d247bd9

    SHA512

    99c10f56217c753ae37d53d3dfc8075225e17ea6ac3416ed0019f967724776cb6006810c79ecc5e0ac3fee881397ff3746ea4e7dcde50a9a31aa258ec23f26f1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    39802005b1d13803c5d02521aa44d881

    SHA1

    51a5abc22fb5af4527e21807e3a5a49f6762b3b0

    SHA256

    c1a6ba3598ce5481fd6a5a730e8b224ef803d08a327827c263983ad24f3f4f04

    SHA512

    0565fa930ae949524f931bf323092daa9600b698fee09fc4285c76153346691eb2402dd7e1240e6a279f7b376fb5c16fc9af7e9d2f9e7283bd71a93585ec949a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8c0e9d1b8587520f18826b023eb4fee3

    SHA1

    3400f1a5f1179e8f568d42eab87e100bd4f1f3cb

    SHA256

    de135b1f3d82215917ff648e12c308cb9df80b8dc357fdffc44f20eb93765f10

    SHA512

    b1923c1ef26d2d0b6770c61de0896ca21a8f2dd81810fc3e8ceb2cd8f2dc1f142f7e8756822f2d82c70bc251c18893b247036238d56f633dc83e321c191cb508

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    74350bb8ffb6cae1481f24c9e00a485b

    SHA1

    4dc90400469adaa552b834aebba3417d94f4ff72

    SHA256

    4feae36e30395bff4e570bf76aa00ce0c2ed9f490950d3775ced1e941bad8a24

    SHA512

    10f7b73a4d2d0c27028300f5fd9e0d66bf3ad08a22d8be168031f9c2f8758356fd6cf2ca47b58c4ef9a277e4d2852811c566c4fe3a047b2a77a5ed4cf7c12992

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8e542ecf9fc7dc88f395f80407d191be

    SHA1

    ba9c22839f46acf5d0d7e119256385ed46bbfcc1

    SHA256

    61b0a0f900da474abfbeb7267670798f22053a92a4a8875eda5f49b7f08034e4

    SHA512

    f7c039c8922252767d2eb25f21083e0f8a78dcf9bcd4516a8b20f59989bb3877e128af8133b14f3f98779bc2cd187f9dff8c335496dc6da941550eacba2d7812

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8ece12e6288d5410e76fdf0a7f2b03f6

    SHA1

    b483a65046a2f5f983df3e00e96cdb6db17242fe

    SHA256

    b554baf36533730f17c94b61d648e23a412d2b50685c8164c0da9ff303ee3a75

    SHA512

    793deb32f038478ac7eb3f46ee5470ca553ad83537e5687b5a15981f2fb9b2b91f9da9e923e49dfbe62b7c8bd717d284321fe51eba3f9944c550c918d27e045f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    58dae6334708fe5f92237f50e0b99d9b

    SHA1

    e0db0303aaabfaae18a083cfbd082a08f544d080

    SHA256

    2fc096538cca7b9f65374b68e02dfc84df7c8c7ac242035ad8416c6ff9e8d65e

    SHA512

    a51f6b5808d0c77375686f8e9ecfa35cea73b7373090059f0f04881322eb3603d9faaeab5601b95239257864787380305c1d583567e3afda8383384a946af17a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    137038ea67c48d7a508d394b72baa5d6

    SHA1

    3522072e1628aac1791ac0eda05a4317f68287c9

    SHA256

    f6167572b4215b30859b3c99d9cb0ca8ebef036124e04c7f560e938af02bd441

    SHA512

    68b2c49151f122995ce490ae625720f37f7f55714da46d21b9ddb7ef449343f83a35f29a6e4aa2bba9a0be1bbe6c985c8cbe136f7e0ad635a9b69068a763d01c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ffd3681a984fb0bc8ff8e04ee159aaee

    SHA1

    e708ba2dd4fb3baab2d3087a8cfc1193436a38ae

    SHA256

    373aac5b683f2b8c29f78bdd5e37aacc94385dc2f19042b6050e88753cd69d03

    SHA512

    2dd2f56d1724826841db7c6e9ea314c024388eb6dda064995c5250cc53cada31e9a86fe71c5830b2a35164d9f1b86e4d9d10f4fcfc3aa8a628e8b0c439098e25

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5ab805f2c5ce924e63884e3edc735265

    SHA1

    31a412d6cc9757e4ad70d3db5b37da590adf8884

    SHA256

    07e951ba4b6810d0dd017b140cc63559397f619aa407da71f2de6d757a97e5ff

    SHA512

    30864b9fdf543191ed4f62c96c97ba17a805b23a38bf90bf1c644eee9e212a15079e72ecba5821ea4597735ef9d292822018d70406fab364078fb5cc5dacf841

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0c027efc816e2c94aff3de6ff496325b

    SHA1

    8c19020219cf8cfca3029053a2f12eb2af2a428f

    SHA256

    ee87f34739d1a50a996858c8e0e82519447d3c49b038e6e7799feba35ce4210a

    SHA512

    2b7de51737be5ba42ebdb708ef32ff54efbc6c519c5d751cfe0dc9c51e91894319fe7f5ce4c900c930c2e2fe4437c2993cd5263ca64f14c372d1d0e619ae25c6

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\4K0WM73A\frontend[3].htm

    Filesize

    707B

    MD5

    1304294c0823ca486542ba408ed761e3

    SHA1

    b2a70fb2d810ca13985882e6981f33998823e83e

    SHA256

    3bbe72f3baa8ec61de17a1d767fca58704769684b7abe9161d0c4eaf4c8f0982

    SHA512

    67430e967118d2b2d8a448c583bde082bf512da88eae75b0501ec5a6c2b0bf46936306317bd3ddd956c5c6e01fe0c7dbed43927588efba06c5f84d8a557f7b8b

  • C:\Users\Admin\AppData\Local\Temp\CabABDB.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\TarABEE.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06