Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    122s
  • max time network
    152s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    26/12/2023, 06:38

General

  • Target

    5a21aada89aed564de6e35a1592cd59d.html

  • Size

    91KB

  • MD5

    5a21aada89aed564de6e35a1592cd59d

  • SHA1

    6d1bc77e2934cfa60a47585004a6dc449a64fe63

  • SHA256

    7baf7bc6c7c34c6016d8819eb81d49b82b3b95f5a251ec8338c71b360b7b53f0

  • SHA512

    842d6e85fde8c76ea8e5777b93b11bc9951269051c3493d09727412ce092850d7210126ef8b7729aaea33bb0b07b9d1aadb1a2c3d8a1ca87c031aea533046389

  • SSDEEP

    768:OfayHHvPWloCUO8ewhEHWgXbG3Nl9R9IzCAyAaNQPfM9Lm2SmL:Of3HH2ljUOaEHWAG7AyAJM9LF

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\5a21aada89aed564de6e35a1592cd59d.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2304
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2304 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious behavior: GetForegroundWindowSpam
      • Suspicious use of SetWindowsHookEx
      PID:2844

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\070E0202839D9D67350CD2613E78E416

    Filesize

    1KB

    MD5

    55540a230bdab55187a841cfe1aa1545

    SHA1

    363e4734f757bdeb89868efe94907774a327695e

    SHA256

    d73494e3446b02167573b3cde3ae1c8584ac26e15e45ac3ec0326708425d90fb

    SHA512

    c899cb1d31d3214fd9dc8626a55e40580d3b2224bf34310c2abd85d0f63e2dedaeae57832f048c2f500cb2cbf83683fcb14139af3f0b5251606076cdb4689c54

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\E0F5C59F9FA661F6F4C50B87FEF3A15A

    Filesize

    893B

    MD5

    d4ae187b4574036c2d76b6df8a8c1a30

    SHA1

    b06f409fa14bab33cbaf4a37811b8740b624d9e5

    SHA256

    a2ce3a0fa7d2a833d1801e01ec48e35b70d84f3467cc9f8fab370386e13879c7

    SHA512

    1f44a360e8bb8ada22bc5bfe001f1babb4e72005a46bc2a94c33c4bd149ff256cce6f35d65ca4f7fc2a5b9e15494155449830d2809c8cf218d0b9196ec646b0c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\070E0202839D9D67350CD2613E78E416

    Filesize

    230B

    MD5

    d3855c8c39fc773966f84aecbc8225ff

    SHA1

    aee767ad569ff3a7d10fdfec35c0c29a7fb9a59a

    SHA256

    50483ca5d5acaf9a6e100bb4ea2b18916afa9f4d9da67d4460fba63fe56e40d7

    SHA512

    04904763146cd98a1b84ee17b872927bb6951beb96bceaecea751dff57bfc4c6953ea14f21dc9ce7394b8517c9e17feae71e3fdc1b875aefea146a5411b7af40

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4423de85c1fbf520dd80a7b1c5725d0e

    SHA1

    0668419013127571cea4ce78247e39a386b74580

    SHA256

    91d2da26bfedd4eae1ca8df33a9982d74e4022c55682dc2d43d93db3a8acd1e6

    SHA512

    e853db5f757b967e3c0251f0ff7151205229741b4dfd301dbd48ed08064d3163d1a5665ce5277b6cb2309bda8b4bffe9a818a7561d857acba6054f1438a58056

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    dc1720f3129cd192fba7bcd1e5a1c186

    SHA1

    eed73bd0e0fce5deae092e29d3b2e7f0cbd6a30f

    SHA256

    2f8abf07fab5ec594aaf8eb219fc3356a4a2a6aab64e0fed2fc8695fbcbf294d

    SHA512

    4962fecf825eb032c37b888e3d782173ee922b1875ea2e8305f710b2c43849f64871a651985a071086dc7c8721c4a6f9b414d86327b13e79c8e916a3401f15cf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f7535a96284a703fcea9d6cf69febe86

    SHA1

    490c1062f52e8562d0a8d924d0af485ca45a8892

    SHA256

    1a9d95f1e8f4f95e48648be296a79f631ba0bc2bb8118367d1788d75766a7db5

    SHA512

    024dcdfb4c4137a0e00fe3dea455f7f01eae868acd5f5fc5f659a4715d5cad590b7b702671e1655690cd59a057c3a2edbbbd97c7e801f8ed8e61e66d4958ab29

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ccc76d790b530b3c042d115202d8a76f

    SHA1

    bdec026c77219439198b71c6a8526961dd2e7ae4

    SHA256

    d65d63f0f41d199cd752d87c389dfae833f7bedc74ee113b56851070b65e0615

    SHA512

    e385f50dc5244877cf5359ea843b95fab0a1e52ea5dc3656e66588164ec3c39bb33d5413b119293b3fb233a2f55a334496a1574c2480dac69495e4d2c6cc6300

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    70be9c60f56f4dfe42856072b0260d2e

    SHA1

    430318a7d12bebb81f983d0adddb0ae0a8371a1b

    SHA256

    fd2ecf52080c0ef688153b80d5e033ce4e6e86a8f830e8ea961752a31a759764

    SHA512

    399fcb75d3a30c927199a9b7f666b80c8b0efa1ea4a06c77be4e50fb8baa0ad466acb7b0709222d7eb2dd4ca8140bc115f50a38e770754ca7885e77cbc0706e9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4532f67a1805d93a2c8b498088ea35cf

    SHA1

    50467bd804d3a82382c30625ddb3268cd3a612ca

    SHA256

    776d6445949f081e6f9b86dc77612285698f98170ca68d11627fdeedc90da401

    SHA512

    8fc7157a573fef32758e99b025a9642656dc56de232878aefeec7a30eae1729b595fcea3b5015705af4ad4c6ebe33660d6cc418f33dbb3c154ccb299392b81d3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7494a23d784e88067d23615b177d7e56

    SHA1

    35d5f1e7dab631dfff852d05044c88d204b239d1

    SHA256

    a79c3ba940983159c67d80bdad25aa75a1e51a6595fe211cc6e2b8caa6a158f1

    SHA512

    87982ccea1a45208759c3c095b35169fd4aff6dc46fd12045cfa7f0e4ab1adad48fdde0ada796ab2966cb11f0a94cfa68feafe59642b3db653103ace3943db53

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    11e5102699a9867242a6e00b05948844

    SHA1

    fed5f0502e6c839d9895daec55b7c3198848c9f2

    SHA256

    689bce6bb68bb3380c65f72163bb1e68b7160bfbee0975673f5e5373e9104a1c

    SHA512

    02a6c6972bad74861eac2a989eca4c51f14784ae129214cb621f0e4421c1bf8b3ad01c805193923974851d3fa61723728ed182bf31cbedc9d897ef295ef35a65

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c81a115b544ae31c4d593a6333ba1c61

    SHA1

    e784a0b1aadcbd4c065a036e6ffe5e3bad80d47d

    SHA256

    fbdf39c73e620a98e47dff2f688d8e216402924905d0b477a70ea74df44d567e

    SHA512

    cb294918b8de9e4653a3548e23f4b1c3be4cc6b3f986e86e06520e157c0075d7493ba62f714d03496a372589f229ef6bb93d0f18c86d75c4ab281c86e53d49ee

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ab14c0002a85a433828d7e9f64e3ffbe

    SHA1

    6374913174fec72d224fdd602e95158b46353290

    SHA256

    e491ded51d2530d099a4050fc0cb82058621b8f88eaf4ea30c2aba2c87beb8df

    SHA512

    5b4130e6322e02da528334e0111ec801cdc655aa1071e2d7ec3187ffed0a9e396fce1e78ccf2c5c8ba769654f577030cacac22dcae59b39b6bfd19015354d241

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ac14b9bc8738b6f056ec2a9313fe2d7d

    SHA1

    3d400a59b01fc3b0a3859584c0fb0b73cf46aab3

    SHA256

    11d675f0b51535d7e5dbdca0c68c19f7af08affad444632aea2738583a54c048

    SHA512

    9c1bae498eb8b9414447940a7cc1b65dd30507da12fe0436bb756e60b01d93aff487c73f2dd7c801a1df764e4ffcd13666a166e3d5446bafe2ca8445fc2ff116

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ede327e956e2e242d02f81acbbe1761d

    SHA1

    1462a622fd4bb5ad7c694424a76451030958b72f

    SHA256

    25aaac4123b4f258d5d788991d367cf4f4162ca7def089deb72c84b8dbd67d5f

    SHA512

    948ab2dd81624ca4e21937f872fd5b0c95801c2e3edfc79b08f872a410e511f721bc04ebc67eb2e82d72a6d00f08d2b5f37e2caba3968e8ee25cb35803e94561

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9cb1c43f52f67c5123c63e4b9d66878d

    SHA1

    a54f9b0ea3163146cdb3679fa314a221f6af60ca

    SHA256

    ba68aaa4bcd030a5257491414cf96dfd1eb707c43a81a31dea3e72f807a3ff1d

    SHA512

    e6f38f849c8fe44a3f07997d49b7eb0977f654627fcc883ae1fa5cb923d0db01c27b757a36184b914b661cef8857f1da2409d2a24218f8485033c9025d65652d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a60c10534959ba9bdbe98d6f828431ac

    SHA1

    30a08f6214be83f5f016332845f56791d455238b

    SHA256

    54051fb8a6f307843cc61586e4ab5a77187ac737c7d055b21455f0c4b966d5b6

    SHA512

    d0869619d179dc8ca2639ab570e14a9bb111e5310d5623cd00f06f6213f434d86afdf4f9c7265adc3e2367c3c98e27c0925032c033cb8baa2fa9ca888a9f0abf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f0e998b138102536296604e536d5c71f

    SHA1

    5656b8a064e2423b4316dfc406fafff528509a59

    SHA256

    827b0a6ec68610b04c7e2485783be258e8bbd48653292d24a5b7afa06653ab80

    SHA512

    f16f0a3dd08b0d6615051c01ddf740ffd461756305a02178f62dbd5e6956261d3513e8258d302fe28126ae85ac31a43e7a94d419733a0510f197734d62e490c1

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\53STNJLW\px[1].js

    Filesize

    346B

    MD5

    f84f931c0dd37448e03f0dabf4e4ca9f

    SHA1

    9c2c50edcf576453ccc07bf65668bd23c76e8663

    SHA256

    5c1d5fd46a88611c31ecbb8ffc1142a7e74ec7fb7d72bd3891131c880ef3f584

    SHA512

    afc3089d932fb030e932bf6414ac05681771051dd51d164f09635ca09cbd8525a52879524b6aa24e972e7766ddf529484cc1ec416de8b61255435a89ba781f8c

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\53STNJLW\sale_form[1].js

    Filesize

    761B

    MD5

    64f809e06446647e192fce8d1ec34e09

    SHA1

    5b7ced07da42e205067afa88615317a277a4a82c

    SHA256

    f52cbd664986ad7ed6e71c448e2d31d1a16463e4d9b7bca0c6be278649ccc4f3

    SHA512

    5f61bbe241f6b8636a487e6601f08a48bffd62549291db83c1f05f90d26751841db43357d7fe500ffba1bc19a8ab63c6d4767ba901c7eded5d65a1b443b1dd78

  • C:\Users\Admin\AppData\Local\Temp\Cab9974.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar9E28.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06