Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    136s
  • max time network
    152s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    26/12/2023, 08:18

General

  • Target

    5f2f959d5e0098e6b6e364c2090e6821.html

  • Size

    23KB

  • MD5

    5f2f959d5e0098e6b6e364c2090e6821

  • SHA1

    bc03c6d5cbdc532fcf2126aa6bba4c31552b315a

  • SHA256

    ac835f8b72ea197b2dce62d50ba7c1471be3d7fc915f56a72203ae7f87ca6905

  • SHA512

    49e82c81fd8aa5b46445e51eacfe4bc279894074a86ed0a3f8cce7295339f7cb2090eb222be08d05aa15dfb520b784f47f39fb202c0b94c3c500fb6084da4123

  • SSDEEP

    384:BkBpWcA0IusqldEwtuxHZtJJTEOj+WjT1JeTs3ohVcBA:6IpqldE1xHDJdZj+WY/cBA

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 34 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\5f2f959d5e0098e6b6e364c2090e6821.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2612
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2612 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2232

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b129d9a1292a9f9a08910a21ae1038ba

    SHA1

    de0fccb7cc82db3339d6256bfb22c21f5ad4a084

    SHA256

    84f46063f9f4d28dba6ab0620d77ee2f0f0d98e68ff93cb944ccdac233e3edb7

    SHA512

    3f5b26e97c0b7e601e13daf914491f2dc7435dc2273144c58621a52fa3ab69da38c96e53987042fcabe4851788a45adc5dd9667d2e767c92edb350f744172797

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    edd935116caeb835ed6badc22da1d025

    SHA1

    15b3f0856237162db4bc24249d80b06a5a954baa

    SHA256

    5998ec3f75b53b299a4f7f6edd0f0f2fb4034a54d1dc141a469bda3ccfbc330a

    SHA512

    81eca4d3b6e529af2995fd20bd55feab55bfa8814fcc63a7f359a8901b2061780382412bde6c3bf8941224ce7481544baa0327b1ff184e509a2de6c7754f2ec2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0d96f758bba566968b9fbb99db138553

    SHA1

    97bf0ef5d25f76c6bd1fd236b9e932a96e327d7c

    SHA256

    7b88564557eba83646ef1721a7724793fccabf545acfa6811b49c29ae0f492e2

    SHA512

    07ddddec9139d0d252b2094343cd81186df43fe52b6d2415fa6e948839bb2ba08eacfb7e3efe5f53bf13e8b41732637165284a13459e40de89648f3b521d128a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d2d78994bb5ae596893c3aa1777b1ba1

    SHA1

    450ea422037d79ccf9e06db6bed391bcf58884d1

    SHA256

    78b4ac5b72039b7d30f4f2e2be63932f4042081e8a3e4c7eb5a225e3b96caf8b

    SHA512

    860a81eee051351581b012954b34298af44cb4e19e3ac3d7868352b41006d8e8c36ba20a588205b6a610e01b0666b82a11ddb66b373ed01d1313ab9e47e9e193

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d71c5d7c6d8d1e2c6aa5dc33e7cb0c8f

    SHA1

    504f2556e6db86aae3f1176d12267b7f09b9bb4c

    SHA256

    47bb309e975db0c10cdbbec19de8f5c3a7310ecf58c498bccaa1e1f55b24aa38

    SHA512

    3bc39df25b4d359af1daae3db4832988fbc2bf83bfd7c41e7a450d00b406e2f0cf5a16808429ebccc7f18d9b1024c0383a3d533eb787d013bc95a747a99778c7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    95ab775d20e94e0f6a31b5b9f36b530e

    SHA1

    67f33a35e71759d5ede71cf55ac51ff5f316faa1

    SHA256

    4c81079196ba17ada93a6f36f436d689b4b7dc784b279ba84fa870f7b99a8adb

    SHA512

    abcf0b9baa275e0bba50910df503fe5b5c721b20c245aab00f519caf61dc3c3516bae8317acd25ca8b33715159f53cf759451c63d15b220e2a0e98b5056fe3d5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3d3e6d3d7b239ca4a28ede777ece2b5f

    SHA1

    bab5da8b2be08e91ac4274d1964c90c974c3f518

    SHA256

    2cea08d510efbeda524c4d431a98c250b544e213aad4a708f706fe02f08a595d

    SHA512

    e7db2a75b2e368750c5ea0bed0efa0659898aae6f0144135e529073e1f2432d77966b4e447c9e54f9223675b45209e32b6e3c68ee07ab6477e6f01a5ed4153bd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a3c86ab2050dc5a7fbb4d90fbeb187be

    SHA1

    63dc2f3e7068c49ff5090b49216d0f899966af9a

    SHA256

    a31da0e5582a93554c4b8a3a66add334e05b70f72e025e7f5ad4ec93d40afd49

    SHA512

    576551766ffea8147877cfd8ed763b9b88ca0531c1ad60244acf131b2ba320ebbc545668fbc0b8a46b0f4123d327f023c2dafda65a288f792bad85c999fc8c37

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ed159698143f8ed815437973168a5e8a

    SHA1

    7ebbe5d9312bebe5df0b0b1f58b16de4c1275d5c

    SHA256

    d38b175016801135d5c4b4e42b106d47def96c980e1fc27aba447415f3d7b7cf

    SHA512

    709b310da271352f27d5c7191176ea318d5d387ac591d8614ac8e6dd7ed0fe04726751e04875fcaa5d481b3ca094e77e10561366643d6943d5284d8aacf28d63

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f9f84c673f4a62870b1063686796ef17

    SHA1

    4a38cf97103da37729a8c94906f42332c1d4d705

    SHA256

    72077c24bbb56423bed7b05f8ce9c7a89309026e8fc4d027c61885276f5bcced

    SHA512

    6c4c0522c7c36066e0cc08481e443a7ee1ff971a54e821e8747de8491e56f1446f9898ea9ef0c66571a7023de80dcfdaef5191018c940c26b35ee5e54152df2a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fdad6970d0c27f72b9b320de49c78a20

    SHA1

    0950b50cad8f88da13bd9267f72ee6eba3607395

    SHA256

    542c700c44bf48011c2ba10673072c94d5e4e699bc23720bcd60a079105271f3

    SHA512

    5a94e473357773beddd54db92b9001296987ff57993c2980fb288168d2e6244ac06811639eff21ba5117fbb6cc0e161dc5c20d71a739e4bc0aa831db2090452b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    58c752d0126cd0be5fdc7b354aae49e0

    SHA1

    edb93c6e885ac291e3685b6e0541fac3858c31c8

    SHA256

    c60c26e4d00514aee410bc334ddd134e9a2b31d1ec88be2bed19eabc909fc314

    SHA512

    3a79b181cdb6cc5c16c5fc4172b9b77b7ce5f1a56b4d8ec2b6ceb589f1a2b8bb8a54f96d045e8d4d45a9a15d8e2f4afe651d0b9b67b8ebefa11b5521d6fc80dc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    53f639c97b1aad659faa4d5e7c2f3d0c

    SHA1

    021b2ef8d080648d6225667595b05e769cbd97ce

    SHA256

    936977d4443189281ca32d5b0143625bfb4cf03d3bb27f48f8d02f1c1230cc88

    SHA512

    2a5b84b566d94c79d1a2f0a830077158419d7e90d15fb8216fdb729561f673a1155a3bada4a28d172181e72a0232e63467219d98ac8e6d704f3be79f25b2fd87

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e43473dca2cef920e6f9cb8a286ef7db

    SHA1

    fe3c1ecead5ce917771b4a8d5f814277b8d817be

    SHA256

    ba14989f4c42d54e8451749843d931749450ac65a095078f230371c8bfd47d06

    SHA512

    846cc3f4cdcbf07ab5dc008fe97207264b2e663d18e8b9bd8af41ef529ebe1110a13d993896ff1ce9e50856ad7cdd83016e05e8219da9ba4c28a49cf7bc69dc7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fe87a5ca09432121c57d549b56a0372a

    SHA1

    55cb172f8c33e365b75bb1d3940414f656a58c16

    SHA256

    9309140b61127c70c4579e5d4280730e63fd05aaf4197dcbe0f9cbdbbfd6fc31

    SHA512

    b511bfb2b790b7fd9bb8397f9f777668016f7a1160b40bef5ede0bbddc45402913dbdbe2dc211cbbfbb7f43ffd8a39598d1d84e24078ee44346c80ef47ce647e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d4ba86d0ebe08aa4da39aa8372bdd5f6

    SHA1

    4621a448e6682940976f5a01ee096563ddc08f5e

    SHA256

    a7811958b84ab37ad16aded9e7051dda2bf67c78bb52fe2df19226f2081f9bd1

    SHA512

    00484f9af68bcc79a8db7ea89a259c55fe7aabea7129267d67720b0e1679b364d41b9b96f035d22c5e8afb286ef58107c841204eaa0d2226a9507e960ff931f3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    182105ac88fd27cafb3cdb70ce520d9b

    SHA1

    18b66e912896c37a4876b66d71d91c37c9fe74d9

    SHA256

    91905317a51da2caa2b9e771e59e30a3fe16bb90e4759ec0f995853d6d4f84de

    SHA512

    892e1d944b757f60a39d17f1cd0db2b5d69b291c7eb1c752a0fcdd71b2cbbfa53f94b2298bef1e6aa5a9b93d2775760411d2ae826cecd0995c8ba889abe5135a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    88ca837606396ca988893e2e22a6051c

    SHA1

    78ccda61a4ab25a37ebff35f0630ceb5973b2e7b

    SHA256

    432ac1c895db0c4d47524ca9d3a579571eec62fa69e6645fd76db54516fd70b8

    SHA512

    89c053a28c2dfd8e93a88391d4694e6922191db98d53df37b7e2d25ad9f9d4e6b6b37d449198df2033e2e6058092ba9c5db59607abc6e1891bb4f21c68f15833

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9b16f21439580e0c0d6d1178510b6b7f

    SHA1

    056fbf5776a234446d039af2dd4a6ac6d51714df

    SHA256

    217c240e0f00f32e099a06ea34b877b007f80020f0bc2687d36d6619993ae06a

    SHA512

    da96fa00d3963276c3c3a41c60756ced5d9df04e889debcaf6455aece30944cb4ae478790379cd1277e9421b76b0d0f52cc511c7f014649a9fb7db351dc22f49

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    07339cba38b81e04c8fb0cc5ce6608ee

    SHA1

    27ebaec4887b0b508bf1960339100be029da84f0

    SHA256

    846b6aa85730e8bb57609f9de46269f85818b6ccad2059b96d6bc62032987c3b

    SHA512

    5fe76095e37e3f2f2b9a47812c0bb58ddc644958b3db1c4700e09fecffd47729d696dbea877e9d394e9f4b434dc3c97112f717f3f1ffda9524f826f6fe824856

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    dfaf20598e8b64023a1d9fea10d64806

    SHA1

    c36cb62163d7a7812b71f50482d6ad0048827802

    SHA256

    604975b766b8c0aee22bc09a9260b3528b83b69e5d777f495cf681577dbcb124

    SHA512

    257e44ed2f60ded1f129af35af9de739353582bc051cbb0b492534c8bdfda3f5e7847a23fd947b540abcdb103568c6404dd0dc89c5206ae577e74b010f335825

  • C:\Users\Admin\AppData\Local\Temp\CabA565.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\TarAF76.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06