Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    239s
  • max time network
    263s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    25/12/2023, 18:54

General

  • Target

    36000647114e408da6d5380e7b28ad79.html

  • Size

    53KB

  • MD5

    36000647114e408da6d5380e7b28ad79

  • SHA1

    93430c2d02dead8f0a9336d4fce8c7305d88eac6

  • SHA256

    e43634402c4835f72d39f1c2f264e7b67c0a42322866ad005fd31f5ccdfe43d3

  • SHA512

    c59ecc66f60f1ceac66063f4b5dda58c6b9658d11e581bbac5be87b80e08f011e6fca92234c0c01ff5ea89ada45d0eeda48208d99c0467aca125619da7c19257

  • SSDEEP

    1536:CkgUiIakTqGivi+PyUlrunlYZ63Nj+q5VyvR0w2AzTICbbBom/t9M/dNwIUEDmDd:CkgUiIakTqGivi+PyUlrunlYZ63Nj+qK

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\36000647114e408da6d5380e7b28ad79.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2852
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2852 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:668

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    65708725c402b1c1e28b044ee492a5d6

    SHA1

    a66a614180c0b83b851fbc1afbefd53641b7c551

    SHA256

    16ce07c662f2557a2db96f945668e6c3bbdb327a207dd865f470c8c34d441fb6

    SHA512

    17dbb8356d75bdae9f7dbd562ef99cf2ff9ac299b0d6d9bea50e45c0c3d200f27005227c7495c1543e8b1b5c033ff00f1bc3d9c540e339606739afd5d52de0de

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    19c39b313aa01ab976b84c7c56fcbc77

    SHA1

    7dd7f6ab3c0933a606dd525e487cf61829b39679

    SHA256

    f167e116012a57be6c52b59577834c2bab89993f2b92259e40cfb3484da02e3a

    SHA512

    9016358669cae2bb43e6dae9a795ba5aa4ff81f2e24b035bbcd4c948450506862601b8b27e5e7cd727b9bee07747c0f57636307a67e12ecb68ac246fdfedfcac

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fe2a89f79febeabb051a559247126753

    SHA1

    e4a8ee702096506b70aeedbd31256c91a63db13a

    SHA256

    3137e16d4b103cba61ffc0c688a683972468baddc97d4e920eb76e5b55fc90df

    SHA512

    0af4fe5e453940d315a66860871cf08f6ff2075a712bc57ad083df4db1ee9b5c6a03e21b2897f58348e1c54cc758eb84f2aee4a7bc4862b7610d6d2d0c8e420e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    38fa6de37b98ede012c9d21e1fd8014c

    SHA1

    ac8384e2e7716a6babcac71a113af72807fe6b0d

    SHA256

    192869e12c5309656b10dee9adfe7dd0d83c5f6a738988903baaf27131563a7e

    SHA512

    0d4872ace6bd3c4e7f2f1ca5674c69a930c4021662418867adc55ac3286d12531b9452e918e43e019fc9c619c81bf1c5d1fd24091ce1b61249fff0a2b7ab00e7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    50e854f0aeab02edbd5125a4b9d3a13a

    SHA1

    486e38d99e1b431cde36cf16cce7db9bc9338ba4

    SHA256

    5a890e21cfc66c02874b873e72590891f66eae5cc0028594047116ad67dc1eec

    SHA512

    ded1de8ca86d1e094c6a1519185a06e9a3e62a929ab552acf045ec7596072c30e274da99bf7ea4200b7856eb745e8db67c58558e835edfdb3ce14f41b43fa414

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c82c482405f0bafc2c037860eb33cdc1

    SHA1

    3893bcd208f248dfafcf665519968b256c131596

    SHA256

    4130df7dccba280ae9a4cacc1d803d3b099e89ac5218cf31c84d92d5f348b5dd

    SHA512

    403a0b98f0c5ac49a8c7be7e63dc23180645307fb2191aa166a782248f04b5ca64ef1ada99f77b85f4955e5503a23af3e82f7b5d7a5e50af585a8202d017b6d2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0a8a6cd440982a507796d6b5d45bd084

    SHA1

    62b13ab64079aeb56bc32aad8c60e2678f9f4af0

    SHA256

    1ddfe1520d5833cd9af5f080c0b5d5de2ea230634e55382497fc819a239934de

    SHA512

    50672b972cd66e6a47f1d03e795fe449bfdb9934d351ddc300ab695a7045eff82c4003630e64560afc357183b0ca38337d6d9c7014daa797d89ab27d363becb2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    64beb42bb3bfb318e9634bdbc6be1f2a

    SHA1

    6a8e686aef3fc08bfa0012e132e25d61ddcbec48

    SHA256

    64452661bd05c3ede34edf99ad56f6398c27fe394937740c55840368d0331e58

    SHA512

    70ac8f8497fb84ce905fee6e7f06f70428ab1414361eb20d52e9e0855793f11b234635f3612f19721d0a1f0a53ecc83558ca36138ba94afdc655f6f361fc5d83

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    14b35f308c744e95777d1e0b8e3a61a6

    SHA1

    7776ce7e935dbe462837178def5c4976466eacbd

    SHA256

    9ab078d0dbd0bd901cd7f298279091c792f796fa16b29d5aa2432a082ae80f3a

    SHA512

    b36157ff9304af5a44e7fe2b31aa3c928659c669a8376d22c4b5c8ed00d60320817ddf0f6c52e0f7a5ef1e0ec14a7f8a3c1a1397b2b1949f0b1b733b6d9d3b4f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0e46e216b19a3ef2be83fb0b768471b1

    SHA1

    dd5290cd60ac12471b746686a1e36ead6cfab9f4

    SHA256

    aa4793d9676b548c802817faec9269aa2d1592801d556aac6f99b97c6431f4fd

    SHA512

    85a9d508f7eec76f5bb31d183a3c458209320d75f9bef170f64b98ce3668ded21634c645d3164d90fd7cedc49f0b1764ed8602f7bdd1cb03c05c59930c867b4d

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\1YVWL6AI\upshrink[1].htm

    Filesize

    706B

    MD5

    67f3a5933c17b3ab044826d3927d0ba9

    SHA1

    5957076d09bacaa6db8ddc832b4fd87ed8f05f8a

    SHA256

    97e800f4836b7030dd58fe6296294b7ff5ef1b5eb0e88353f230ea1608d2bb64

    SHA512

    03ba224055ffdbf32b7eea30c764dc18d66cc6d8707dc5fafab74e155b0bb3d4d691c5788b033a68f05299547297125122778fa7e3252f93e7343d918936643e

  • C:\Users\Admin\AppData\Local\Temp\Cab58D.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar7B3.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06