Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    142s
  • max time network
    140s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    25/12/2023, 19:33

General

  • Target

    384e82173aa8d5106ec64805322ccf7a.html

  • Size

    3.5MB

  • MD5

    384e82173aa8d5106ec64805322ccf7a

  • SHA1

    e8fe9d45eac4365ffb8760b34e76369b6a6a40aa

  • SHA256

    59b42c7562e758a4ec8a403812b17fdf3b8a0f3bd29dabcb437db25759edc53a

  • SHA512

    0780ec2042bed8bf2b97aa7f7b6f41687d26b036be6eed72b9ff7472d353180c31aab9e485e55381565a2ee72a9f58ca0dd70e74707d5f5caa99ca27a0466dee

  • SSDEEP

    12288:oLZhBVKHfVfitmg11tmg1P16bf7axluxOT6Nfz:ovpjte4tT6Nz

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
    "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1888 CREDAT:275457 /prefetch:2
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of SetWindowsHookEx
    PID:1980
  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\384e82173aa8d5106ec64805322ccf7a.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1888

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b2eda353f84506fd0b334cf9c3e3ed1b

    SHA1

    f90682c1a26740e7064f04c1e8eda4728ba19450

    SHA256

    b34aa41a0fb857eb5e6e104235a1d360b3fbe8e872709b8c3c6214ec71d23599

    SHA512

    8e0376fa454979cc521954cc22109f3c29ffb00673666af2e96c7cb76c7e808fc1425a73b2b5b7e1a472abe1155972ee9b02f3ae0b8cb4d22553f4749ce8fb41

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8209a776346e5249072308448b018c2e

    SHA1

    1234493e37d904dd9a6a329716fcbc026fac70ef

    SHA256

    c046d5324d3e4fe2865989d0b0f2693dfd383096389ded9a61c98419412b0994

    SHA512

    bc0ea64e663f2f09d92704578cc691b3f6ed05e67aec01d1eeed80aa7d4a9ba64995308babd2fffa3e5357fbfc18cd40314f77fbfecc10641e01d166623ea22e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0e375e63b3633f27cbfc639f4a412cb9

    SHA1

    132a777565932a3d00f9230e327dbea1dc2cccdc

    SHA256

    81a9b3d5df190cf6d3eb606452101487659ed63d65821ccba09735705ecefdf4

    SHA512

    e6aae2271db92cf9badf0561492637fb04e2266015b7b3c57ae77d4f9941a585cafcc99bb3dfbd15f238bed522bb3a14e4d622f466b5285a121349a5be52a422

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    785978b1d3776cfe29eb5df2cdbf61b7

    SHA1

    cf9f7bcafbcf5e2e8840742345e3b1da87860160

    SHA256

    351f92e9d1c2dc8bd3862194fb6c8341e798cdbf98d13efd6d757da5b166014e

    SHA512

    ad0615bcede374ceb5465f624a18a726d82be6d886e16da96a1257271cfa38d1b6c977e34bfc06f659252fa4c732dae8af55618d79d6f0654cfa82bdeac3e719

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ceca1a41be78692a4c16e97dff70ad20

    SHA1

    637bb1b1a7e0b994e5407b590eb0bccfb5ad02e7

    SHA256

    e5a8dc82406e5904120b176c2e1147402e2179e286f50a466e78ec21a3e1406c

    SHA512

    40b2ddbe8de90c7730b609c38150cf2003bf7a0bfac775c2db61cf535a7237e5f4e5efc622849773c7126ba8f2c08d034f4c5d5207119d0d6a6b744e1136fe1f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e5c0f1a5781f356b30be952fc215bec9

    SHA1

    c0ab59ef42a185b21046aff2f040e95f5a138f60

    SHA256

    69e3026589304b1e02ab26812a0322e6b3941d5acbb88180b20a7170cb9c0613

    SHA512

    ffa7d124f1eed120f347314bd05b879abe9bf3d5af96904404625a80edaf7c9d0cf19f287fb4310e9edd0bd2ae95cd0a95c3bac140a74e48fe62557a09a70503

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    618530a323735d0d5f52f449f55cd544

    SHA1

    e69abac02331c1227a1f95e7cd27a7397983169c

    SHA256

    c5517fb5658a4cca6e54ef3599cb5b7f48f3c243c301dcccf913924fcee44d64

    SHA512

    81dace1e249909b359697b422285c0f42908f5044aef9351e5c77956d9719bc347c6e2d60fc0a7661d1b5c7ccb52985e116d9029d7f6d2b40063a313cbf8bce2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f6a7ae9d844bf96c3d4af0f32f44d833

    SHA1

    118a3be2948a538c7e430370195cff9db43eefb5

    SHA256

    a27d9c3a83c3623836544e503a7876d25f48a3b5f12f32f1fdb63326fa4573ea

    SHA512

    d2aae3a4e7cdda2803cb987e304206b66a2d5fce5d69cc60a99f19543ee121537d713a27ec72e4906dcc13a1e7ee0aa08344c4c2375327bdaba71c36b36cdaec

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    24386a622e8f6e682bf7493d82633691

    SHA1

    625661f3697c998976a41da5299a1a6b1e572ed1

    SHA256

    0c9f4504427030c99bc976ce63bc8994369cdc466bdebf7affc54230141f92c9

    SHA512

    3bf854514e68d823911195887c9eb0a9e74e392a1832c4ad1fb4872cf8f983371ba19f5a0866a6c4a1a6736112ad28fe2a5a18b8df209d038b019e21066a2c51

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8ae6f4adc75d00c66307f5aa28156c0c

    SHA1

    050574682e643cb75a4de503b3372c179ffa4695

    SHA256

    9aea576d3ead0bb927cc7f11ea133836e52d0deb98bf9a2f0fb2981ab43fe100

    SHA512

    9624e69ae0603bc042b07cc761ec42c9efe411c78834f19fe8c09e25669c8d00bcce117e06f5aa5b925bf920ec665aeec8f83fdda1142a9f607aeabc38993393

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    52007039aa35d012a977aa25d95621eb

    SHA1

    a3b1efbb783159245d52b02dda841f2031e38020

    SHA256

    93e2ec6e4198bfdc46183c3185ab3dbb2bd063bb3a26303b98cab5abf4fe26d4

    SHA512

    35db04c115086416b482173528b0e7822bed7b439dffe8102e641e8f840417c7a711dc0743fa5a9fab2dadc21052e9bda066857ad30cee1d4ab62a26c4b9e122

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fd9fb282a40c1f2dc03c022d9b3cd98e

    SHA1

    e5848353cf12afb791ad3ecb5dbd32a5180a534d

    SHA256

    7a057fe6c3cdff804a94996371642c2f8a6f8e6b3a6816022be6e44637c0f728

    SHA512

    110b04ff776cfb819274c2a26c90cd49edd8350a6999e9e967d4f3d295c3a248d1ac2dc9bf71df6f5c9bca85ec9be1f33cf6bb3f03b4787f1b0fca85f374ecc3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    426e2039ecc9868834d1312f2a9c051c

    SHA1

    05ed5b6532f2954c6fe867c4f69277347d5aa7e6

    SHA256

    985bab493e160050f0374e326f8e4eccf39db07a7bed7749e27504c1074cfbb5

    SHA512

    1cebb801a1df43b2c19047d612f015547a718e449b5ee92a8aac67f8b38c20b34cf5095b93984e96450a25316320f26b01673898863b1e929bbb21629c470542

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f20b39bce3f90181189565b3632d5c67

    SHA1

    5a43cf6b1d37501ccb4f3fd0090c2296538b08f3

    SHA256

    a46196296f28e3d10c776bc4742e16e8bee892c445448baf2ca93255e6ff6581

    SHA512

    5d0cd18a734fe2f8699ae3c4225db74a6969b17dc8a37d0902d778bc2626094a407a7238330812683a4e4ac770b41f3712dcefe75d2b8e85f5a3f889e46e72ef

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c5c56963e138843104b50f0092e6258b

    SHA1

    5a2e428714ed95942c0cb63d7b2f6d8a1973f7fa

    SHA256

    d73aeaa4ecbc2b73116c7da8d523d9fab94c77dfacaefd92a1ef95ae3d2f2b29

    SHA512

    0bc7aedff9eb0fe082393518888ed2238d11d40cb859dd5c77ce1cf09091a9871d95785345cf3f77ea395a212a520a9f3a3b4e0c49ac3dd5f54d48837a70568c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7d4b0d13277dedd3ca893f38344aa202

    SHA1

    e1f80b4940cff5be40b311f8b2a6d22e511454c6

    SHA256

    e64fb7ae82327fa8cf8c952e02265d4746018a2e31f031c26b848a481d2629d8

    SHA512

    cd9b0f4a79d03ae71c30564f10d47adcf910417fb532a0f8fcc6b9e0ddc45850f2aa0926bd19282dddb0842b2802c9492750fd8827ed8099c97bdc77b1ae172e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cb3479be88320bcf8112c651402b8754

    SHA1

    7a9569157ac2b47d7c00e8435a577b721324b2da

    SHA256

    517e8934af9280afa46f5102fb07925458f8a059d8dc75ad88b5d8ba4da672af

    SHA512

    ae0069b2bb7db305b822018d22bedfe1a5bcdaf1e417b6777f509ba129dd768e5228e330027fff7c264248a15afc82d8a88474806de422996683597542caff28

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    77ed98fba8bca0b9bc0d664759a52e47

    SHA1

    ad43448b5e72c45199b93c081065cdf8a8b578d1

    SHA256

    63779b4198133f3a68d9759d21f963160c1bb0f3c39c40f707c6ff13ba879aa7

    SHA512

    cdb9a5079d93321395352cd4c1c6d36b97b6425caa17727d89e56d9586b948a5d935c28933a869fdabbc9973e1ef82480cc66e273e9f241fe9d89d28b1a91e56

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a8189c4bc78b35895dd8f6bb9c2c9021

    SHA1

    01bd5f9a25f7154ab1e1a4928f895ec326cf776a

    SHA256

    5eda64141a9633b494d766e30daf4db331410d420b4dc59419d6575eced62f8b

    SHA512

    9c0b2eb4fb226b3c90359ce1c7d2005649e8fec0fcf58cd0f81c9842aea698f6a11ceda2608d54afa12df68d28140058c45fb6dc1218ca41e9f0dc8f5ad2e9ae

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    949fca7c47ef1dc16e51078f4f4d1511

    SHA1

    55f178b70ec1c82fbccdf331442c0113605ac8f5

    SHA256

    e0b2e3acc92bb4ee081740ceebc7cac9f19677916debc9e84a9de3820b920891

    SHA512

    0d331dba8e87a64ff2126c6b75712073ac03d19a913d4eea953f252380bae99b47479e537950cd2b0cfbdcf4ec41f0ff3d28aa607a004c7bc57388612af7efd2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c444346af8ffef09782ffdb3c181f825

    SHA1

    49933ea62d9d1bbb0339de2998eed34b8dea6510

    SHA256

    1a28abcfa29b95b294cbe910e20e4b334762ac9d0ef74a668264f06b438c5c8b

    SHA512

    33d2348bd30ff2ae572f8827071b8df545b0253c2dc48e8a3d7f7edbd8eb1457888dabbbe4b7747dc00541e7615dce0d20d92cfe19c269fb87f17b3850c0739c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7b03476be3e1a14a74851d5574aed835

    SHA1

    66448573686f9aaaec99414fab9958f04b41131d

    SHA256

    f00fbf6103d7493946a1f9e4bdce37fde9fe9435bcf4535223eff0b96f13c803

    SHA512

    f51ce1e984d2c707eecf7066ed6d64429134f910877f669ef1edd45dad23c7e18682f9232c33de7e21ce3dffd35e19c01d428a81ef249d3aa35df1d67bd7ec35

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    34f671499f1b1fa4e44bef5aa2e46c5f

    SHA1

    48d35d1f6ccccfbe79be930e0955c576648aa677

    SHA256

    573b944762c5b58d5e4261196d47c7e46a762b87ab6d1487f23fd567707ed145

    SHA512

    f1b52f73c21450c2d3d8587d530562243ead8dc05fc4e7d5d0206bf270b1895f17330a9a005fc2d4e93aa23debf8e01ac203fdf1b051199a74fc64a9b515a53f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    54c1e298451f3c59a2c71a9e29f98d20

    SHA1

    243a3580b65d2a8f9f34e2849e1ff2a75e03fb79

    SHA256

    0e6d70399c17271a0901a66d8bb609ab8bb5e46ee514b322a0cf696a699a6b24

    SHA512

    f0eb502c0b834f1329b119b3916837480bdbaf9361aacfda4d46a0307243e2a3b3c044c04bb2ab5c0b3bc2b039aa1ee766ca849cd8d5357ba59df0054ab2f088

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HJ0GGVIM\jquery.min[1].js

    Filesize

    83KB

    MD5

    2f6b11a7e914718e0290410e85366fe9

    SHA1

    69bb69e25ca7d5ef0935317584e6153f3fd9a88c

    SHA256

    05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e

    SHA512

    0d40bccaa59fedecf7243d63b33c42592541d0330fefc78ec81a4c6b9689922d5b211011ca4be23ae22621cce4c658f52a1552c92d7ac3615241eb640f8514db

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\M2VO416U\jquery-3.1.1.min[1].js

    Filesize

    84KB

    MD5

    e071abda8fe61194711cfc2ab99fe104

    SHA1

    f647a6d37dc4ca055ced3cf64bbc1f490070acba

    SHA256

    85556761a8800d14ced8fcd41a6b8b26bf012d44a318866c0d81a62092efd9bf

    SHA512

    53a2b560b20551672fbb0e6e72632d4fd1c7e2dd2ecf7337ebaaab179cb8be7c87e9d803ce7765706bc7fcbcf993c34587cd1237de5a279aea19911d69067b65

  • C:\Users\Admin\AppData\Local\Temp\Cab933D.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar95B0.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06