Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    118s
  • max time network
    129s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    26/12/2023, 02:50

General

  • Target

    4dec7a317159124ecfbf2b59ae01d871.html

  • Size

    3.5MB

  • MD5

    4dec7a317159124ecfbf2b59ae01d871

  • SHA1

    c5a0a7e8572f525be0d5cefdaabf24605b445fac

  • SHA256

    d86ab034cb010ab4403cf6bbf4594a18e5435eb8b1f3922893b16580c5559839

  • SHA512

    2655976121d1a026f3f63749ea66009a6970700b394fb769b83aada3b946d2b96086c44c227c075d67f4d3a8f6f348b11d24d6bab4b7b3f689f5111be9426354

  • SSDEEP

    12288:jLZhBVKHfVfitmg11tmg1P16bf7axluxOT6NGq:jvpjte4tT6Qq

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\4dec7a317159124ecfbf2b59ae01d871.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1336
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1336 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2064

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c8785d3726800d6358e280518ee636cf

    SHA1

    84d31e42a37f6cdc69483dbe11270845b724e8fc

    SHA256

    921f1cd617f7236e4d41de8fae8acb1a9ca21a35853f9ed0b5889bdf9dc55aff

    SHA512

    92274fd079966e0f108b154d094c4c79ed085fbdfcb37f0a6faf7f068562482f3acb781931fee092d6a6f33c561c3a4cabee3be95af1a1e5cb1a40f8e2de2355

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6701a698cc7aa38e5f65537cd2a86a34

    SHA1

    50a3bf1d77e83485ee4297345a30030e355351e0

    SHA256

    c3aa0e68337af84e07037c02b98e94e51b7945ca4516e0b46ce3a429f29b4ba7

    SHA512

    607d99781e8da59257caca652055abcd7c22edf01dbf7be342f08ed86e69b440ca5079974e2bf4480e940db9e8f78c699c8fde30917552a7940285365fbb4351

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1dd9f6c77cba11d66e81425e0211014a

    SHA1

    762dd17b4244ae678789d3bd2930afb49698bb47

    SHA256

    3db131021bb72f9bec1b09aad452f13ab1d771b4deaee3759b5b28fc71101733

    SHA512

    bd943aabbc981fd90b6b22fe333ca15e88af38f59ba15286f20b0dc99ceaa82c2e4ead26ebad8b2ae2cc955f1814193902d4645bd6dafa9182b2e1fb14fd0be3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    40fb06371397dabffa9dd2a4e7c9d2ce

    SHA1

    944310334a211f571cc7e32373a4e36e6450dbea

    SHA256

    8aa791a4d745118b222a836708b17a16e5612f876ac4ee56e1bacec0b1432449

    SHA512

    dd9a130d56974a81a2d0f1e3f665bd00e37dafe0ce70fadf076e66709af62c73cf9b79203359fa4dcb75a4c2fa4f898f1e7f2f2d109f6fd7061d8f52e93971e9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6547d3d03774f3a7d2b8b43843a999dc

    SHA1

    32dea0f8352ba22010a0dadca596c647c3bf1b3b

    SHA256

    83a25622e71f1735b96daaf5a00f43a2099e98db29cb9ec563df21dc0250ebd7

    SHA512

    a4c29e57923b53a5c68bb3f00b9e2eaeaf81f3d33b69480e0f7b8d4b84ad26374cf53aca70a39ba392f31627ae5aa0291d3dc7fdcbe5acf37a1b73107b24c906

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    11e0f72df583b9267bbdabe28f4c1cc3

    SHA1

    9b28181218e7d88e54ebca9da01b6f349809189e

    SHA256

    f1b9dcf415d7d1fe3713848d470722176a23663e4bc9bea4eb54ab3302157373

    SHA512

    ff44208b9036bf20abf0494c8e1e002c18c08ac3529febbc75ad1a32262c391a06cef1f7a0cd376d7d43a6fa36c185aab88d7d4695a64b1b6f5ba327ab6f3ba3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    10d4d5f9c3789cbe5c1e0cba4a28bf6a

    SHA1

    b2d6854b419fadd7da762da0729a5c07f81580d7

    SHA256

    9eaa5b8e922d5cbb3098e762c2377c2d8ba4b34b5cafb9c02ea1a29f47f28c0d

    SHA512

    cdfc151e65c5db6638381d8e3ab066c8edab51a245f8c809b4f4f7776bac036ebbc3d525565a16b19dafa0e5e256c8565de2d52505b223d141052f8bf111a6fb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    af99445176ca623f4b1c18bef2643f9f

    SHA1

    75437c4f8781b866ad278dba0182150f137992fc

    SHA256

    87cee0e61a853a82d7134e528dcfb7ad5c0ed061a60fdc7df75d984c7625e098

    SHA512

    c00d573cdf04295b422a682c1b16f8280278c84f0ec00eab2dfb630cec4e00fe0aca2bccbc4ca2b60d6a32af67d0967afd957c1350f309626bbf86781a023137

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    21c0f62d5db65109963014b9ea5753b4

    SHA1

    43d7139f67a954df6023ea2744902bfd4053eb5d

    SHA256

    f5213a8aeef79e2a905b90d38801707963ea2df68c518a39d0d92bc9fa6e254e

    SHA512

    191d57532af3c9f8b67f1f3822baade546b8c0b62349d02463623c4dc2ed69103156c8ecf31ba4c3779ee9bfc711ea159d9fc2cd88202652ef9fe01d166e790c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a6a000f090ef9f55b8f8cf046e0aa02e

    SHA1

    f8bcf7375a2e9190812d22ddbad59c5eea594e80

    SHA256

    819d36a55362e9dfd868fda2bfa13eabe8eecaca8c7d5c80ade51b8362e3ca23

    SHA512

    d439140b46bd991f1a7102bf9489cab658b79760cf1d47945b10dc636d8c9c64db3de2248b16dedd3ecb877a43180030f00d6e364cdcbea56a31b140f0a07fb7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2dc896f75e49593d73bca7420467c2ee

    SHA1

    0639b508b467d229ba1930930ef68ed44d42c9d2

    SHA256

    47f775983e4b2093a95be8e821e09c59fa8f82eea5b7d81675a1f98f34934b04

    SHA512

    e58256618181d7387ed3deab074725b1fed1c64a19008346a7f8f45a2691c89387511be5c376966711db435241420f967ac346d094588052f04c281749899aa5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    420c56c77ace5ca9a27c77b9292fccbc

    SHA1

    caf4eabe85d18a6562f237b49f328018c2ac7bb3

    SHA256

    f1e18db945d36771f7e389e86c32ab60f36b2792d53cf8d534bc92eae22424c8

    SHA512

    8f5d6d497f3c775dc074609c94ed7527676584f99eec4a2e3c1ba8e1b4d48dc29a3a46bd5c1d0764127ea8cdcd01ab52ee4eea1655593928ab58401e94da7258

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    75a0225be2576faf3901623b43f6f94c

    SHA1

    71e4dd250e8fc84a667d5fc0d2396b995be9a220

    SHA256

    67b910dc49c7d8a4b11f844f14a12527d82f6a95d00d7569fde3768f228436b1

    SHA512

    0a2230281722bea9910cacadd594fe1a3c995eba951a6a9203ddfd62321778f3318520392c1a232b77b9023dd25694b92ecce65090b98bb1142e6f84e707a256

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d2b208a17c622d2e9eaf3ab37c270323

    SHA1

    dd7de92962f4711e4aa76ac265da2872297e42b7

    SHA256

    bd5ab77570112899828a075246c5bace44c57c3b47d23bab4316bcb9a8d08f70

    SHA512

    94f025af0ca45aedf60483d355db21d7697e132c3b889d5aea87b32227c608a02b455b072daa3d3488d51897f105aabefef6a67847a0cb330bcbda30702c577f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8995a5d7ad3edbdd2ce6e47e279d6cb3

    SHA1

    5835c0607960ab3e47ddea8679ec5d1733ff08d9

    SHA256

    9d4761496511789c03d7dbdc8b34e8a5391c13822ed3f88f584d775bddc89697

    SHA512

    ad717711d7adb24babd0e128c18effe06daa90d490f54017c0355505afc00d53d11233c409057a018e8fefe591e4ef416225f997f52e7282c07bcded0f4b2a64

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    614a4b236521566acffe5c3ffe8102ca

    SHA1

    91d93095115756e7f382b331ec9086e5cd6d9abc

    SHA256

    cef787660c8254f52c4d607958bdc80474098aabc518ddbcfd178fa4ec467450

    SHA512

    78a3a3aae1684a2fcd205fcaecec6d1032510a5e5665844505a6e24053c9ecfdc33b3a17ae8a1f6079a7ae62f48a2ac59a8f00ac188509fdebd8f717ecfd5613

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    93b153bd47e468eaeb1cf14845c9ce82

    SHA1

    9d722a12a2f31655fd55d47d36391c0ffb010225

    SHA256

    25c2aaeb225e789bc0be6d317324a9b7187ae166cd33273390191ed7f65bab59

    SHA512

    f4cab13516b432b6947786c925c4dfef74296b10178b683a9f80e846c0e89682821c268aa19354d11b595cd37326bf01bef6a6ae070c7299750e91c3b92d0bc1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b498b16b32a8f0dc5d946c02e24ec050

    SHA1

    d304ae3547833f024cb6df9950d535ec2ee499ae

    SHA256

    9e4ac0cb13dc1a7562d4b16cc4206cbb894b8845e0c41b4493340b6459350f94

    SHA512

    a70d032119217b63376fdae106a46766c908d6e2b83c03dee00192fd3a7f3992887448a3b445367aae0973eb417680ef0f7f7c57044f2f23e13dd3fdceee6650

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a60ffab8ea0ab2fbdc636b66330174ed

    SHA1

    1656ca2591561a08693a294293ef5e08e39ec602

    SHA256

    d320994a302778a8c8825bf556df7872f1bbd874e9c3273f34c47d4adbd9cc91

    SHA512

    cac39a0e945ea0ef4bb2ceff488a9f6af378c9d9ae7439eedd53e06f4d4b3adb1b55bc1556e64812f59fbc8bd09f73ed7fe4839860a7a7ffc7caa9922b360485

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f414e6309432de30d82fa62b69fc714e

    SHA1

    dc0d04c5cf893562b9a5de0e422251f2238066db

    SHA256

    f6de4d122781554a1a71c27274378a5580b6110b4e6240b81354c6832d483f7e

    SHA512

    dc9da9e6840f59d1f204b7a4c503b5faec419c6182e87437745e2afb855d047525188e7548e9ab07f2b703231b698a017e525ebb4ee2f1b7f6d3abf349fb5948

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6IJYZ6B5\jquery-3.1.1.min[1].js

    Filesize

    84KB

    MD5

    e071abda8fe61194711cfc2ab99fe104

    SHA1

    f647a6d37dc4ca055ced3cf64bbc1f490070acba

    SHA256

    85556761a8800d14ced8fcd41a6b8b26bf012d44a318866c0d81a62092efd9bf

    SHA512

    53a2b560b20551672fbb0e6e72632d4fd1c7e2dd2ecf7337ebaaab179cb8be7c87e9d803ce7765706bc7fcbcf993c34587cd1237de5a279aea19911d69067b65

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\LFLWQ602\jquery.min[1].js

    Filesize

    83KB

    MD5

    2f6b11a7e914718e0290410e85366fe9

    SHA1

    69bb69e25ca7d5ef0935317584e6153f3fd9a88c

    SHA256

    05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e

    SHA512

    0d40bccaa59fedecf7243d63b33c42592541d0330fefc78ec81a4c6b9689922d5b211011ca4be23ae22621cce4c658f52a1552c92d7ac3615241eb640f8514db

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\LFTKP12M\beacon.min[1].js

    Filesize

    19KB

    MD5

    dd1d068fdb5fe90b6c05a5b3940e088c

    SHA1

    0d96f9df8772633a9df4c81cf323a4ef8998ba59

    SHA256

    6153d13804862b0fc1c016cf1129f34cb7c6185f2cf4bf1a3a862eecdab50101

    SHA512

    7aea051a8c2195a2ea5ec3d6438f2a4a4052085b370cf4728b056edc58d1f7a70c3f1f85afe82959184869f707c2ac02a964b8d9166122e74ebc423e0a47fa30

  • C:\Users\Admin\AppData\Local\Temp\Cab234B.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar23EA.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06