Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    171s
  • max time network
    191s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    26/12/2023, 10:48

General

  • Target

    689424fe55ecd3f4a86136b8e8b4b3d8.html

  • Size

    57KB

  • MD5

    689424fe55ecd3f4a86136b8e8b4b3d8

  • SHA1

    f7a506544d628a848ebcfbf1cb873403e526d55b

  • SHA256

    e43811c920fd03e3ae63a3aef68a1a16a87b1ad1a79f11367716e37267fb451a

  • SHA512

    fcc97112e37b254b0b2f5ce9a4d596aa364a4104807442f078fa3285a8af1dd2cb4cb2dc0303c3bb68cafedd86546fcd6b8ca1e3241c4c827f920a9634029499

  • SSDEEP

    1536:ijEQvK8OPHdyg3o2vgyHJv0owbd6zKD6CDK2RVrol0wpDK2RVy:ijnOPHdyF2vgyHJutDK2RVrol0wpDK2m

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 42 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\689424fe55ecd3f4a86136b8e8b4b3d8.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2600
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2600 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2788

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c95eb2058159f6c85305c86b2c784468

    SHA1

    0aabdb4feab149fb17743c1e84dbc17cf1f68bc8

    SHA256

    39740e8bc413ee71b52d78f25f1aaa8e130d6c9e6bef735dd8f08aae081dfa31

    SHA512

    f7df514ceab89323e5f58e0d9ffc8d0648069cd56de3c29c3928b9b4a0b97e6b8b724e554c511d244d1f567f8a34ad7e36892648db19f28a7815acfdeebcd2ec

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    60d9d74f304a8599acd861c37f03d88b

    SHA1

    acf7be6810804311125c444fe499d84a4a5e530f

    SHA256

    9be610fe51f91c71529e1cda0cb5f5f390b1fcb2cece4dea254e185e64f9314b

    SHA512

    6492d6dd439d1fcea400ffec3d6c0f33c72fc38f381fb774f02a9ff2747496db55201b5e889391c423e7392229c257c9fabcb69c12ca937f1992f46d366301ce

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d71a5d712c83a9a0202a1ae8d4f7b44d

    SHA1

    34aa093a1d82591f4cc6b524b395f399441a49b6

    SHA256

    27690d9122b5ea3e30a39f1f0e7909fbf577801a6db072f9323a5f392c5cdc62

    SHA512

    39fbde6a309dfcb093c1ab4e9d32a228c653c2633a4967da20bdb99ad2dde2adb10d1e2fa7d1a63eb009d2ddc02e802fb27a1d9a45f9fdfa01c6e74439d18f82

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4e7000e660ee23fdff7ec4765744046e

    SHA1

    470381026eae584ed8286184334f2fe3f7184628

    SHA256

    7917a235947ea121e7d761db3a36e085ce02a10a709b149905f46699e7e72be2

    SHA512

    8bac1e62aaf272f1e0dfe980303b4357ebce2b9375bfd929e8c05d58323f27223fbb7ca25e384525b5664195f6dfde5b12e855db30161979ba562643a3362a90

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a539cb872cbb5c7b7452603e05e1e4e9

    SHA1

    87ad2b055c434ac057a7992732991581cbd1bf90

    SHA256

    d5c5b83092ef9b27055685446e7e7d1345bdf3f58988528093d671f5d139747d

    SHA512

    663a5b62c8ec5b5756ba52ffe022f2fa30d9a98d163cb722daaba65555416fb3a1ad1798d4abab400f0b6ba1e0810cadaa3b8892ccc16cc593223846870376ea

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2695868ee26840ad05700a5dd7263858

    SHA1

    6acaf8b3170a0f6e3ef0bae073acd54a895f9a6f

    SHA256

    64052f4c0550fdf55ef1aeb890b202a4ac5e986992422438d8fd74a208df3243

    SHA512

    1a27e5dc5f60214b3384a675086817438dfc78b15ab03404b9c9ad66a29ab46ff81751917cd669546dd2f64fb06cf99cba20ee2c397fc98844a14cdd1c080c92

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    61cbab81ccf7327bd980340ad184c1ff

    SHA1

    35456ccf30a7a94edf3a7d9d1968e4ace983a9e6

    SHA256

    a6517e7b152d3a32580e5004696e8d994349e24071eba5c4fb4f017983c2f868

    SHA512

    53fda8e7fc923beeab05a1cf9b44863bccbf0e4b1a08ec8d1b51a68cc916e60d2f8e876c022fc951fd583bdc5ec96fcd2c6d27f98c597b587cfb5ceab42c1ce2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    767496681e6e5f6a711d3f8588bfca1f

    SHA1

    f61dbdbd0da4ee1b57a8a2ac70dcc9f0a21ec6e3

    SHA256

    b93fde2a8f226b421a7162a668f0987e78d70f08a2cb3727a540263b70e08795

    SHA512

    8d6fb90a21f6d9eceac3b0c84b45a0b918c1ec88dc61671eb87b32188092b3122ea0f9d79f109dc96edd77fddd243b5e0892342f125474593dbcc8418614af90

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7896d5d9c87cfe806fd8c42ac3f856fd

    SHA1

    657add46b3cb181cc3b53a5a7b9ce5e6fb9a7d74

    SHA256

    ce164f258e5ba813c19ef2d78c7bdddb48a52337e3bfe76d21d7953c8fc015d3

    SHA512

    16a83a56e8f5076e24ec0e742d37d82acf877b217dad7a16945adab36605f06e1536613b3d729c000b7d82a3199d289cebb167b4430a3429356deef5429f1c4c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1bcaa693205ef2fa7a5c2102ed4506ea

    SHA1

    00f25caa83abb4c891ae71d541f70fd018bd5fd4

    SHA256

    a86d31bc43b5c21040ae5679ccff138e2cb433b21e26b800211dcc2373f87a19

    SHA512

    7010c31148c7a13290b9688bdc5ba64fa0f6252ba0074e352dbd868f099d24df5d13faefa2d08b467b80f542427ec74bedf6afc212ca8225e3ef9a2be0dcdfc8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f5189f018f30fc17ad03e7725c6456e4

    SHA1

    b3b4fc8f361492260123ec5cfdf6edea0fb98ef0

    SHA256

    d47c3860f2a7b07ca5e18cbd7d0001488d4970aad6e68cb4dc3f017f4d66d877

    SHA512

    95d7020836aaf54682b46c06ecd945419f899617218229b0e3c0b217a0c409090b3e10ba9c07ff40327977426e2e2e0aa58e39abd93ff621c77a27eefc098648

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fc5e0fc28dfb1254b022f7afb16405a1

    SHA1

    a9b38d067eaab537ecd83135538a67322ad1331a

    SHA256

    b708cc1f2c97b4a66b6c52f532f742322d91f6df80378f840f229d0d25e76448

    SHA512

    bba91963f86bf20afa5099640acbdc9948960a43cb8ce2bf5a3d6e96c432435be916eef5616f978c0e61b1d1967edccbe59b7c516cfd8dbb1e4aae1119f03080

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5bf07bae74ab8d64b11139702a561144

    SHA1

    2024fb0b711152871d7954cb25cb710dfd2e878c

    SHA256

    85f8882d61b984211714666ffbf9e3a611281f550e8c9f943a517f5132c43c60

    SHA512

    933e3019c003a161c289df00cbf6674b84cb275d7aebba445459931f6f66b752a71354196ec9946693c7828c05e587c598bfb5998261b81b8f8cf7eb4cb83965

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cfd1577ef1f6234d45ea111a8a352d37

    SHA1

    8243bb19a677ed7fbfe9324f5087e7dcd373db94

    SHA256

    8d3e98faf7413f32640808a4be94cdd96319039d8b3dfb1ff9254318ded708ad

    SHA512

    c6a6821d4755098c933d7646f2ede9411d96d7c295c6d11cf24e543d849cdd5aaaf357cd1795cce49b570f9fddd42cb9691dddeef89d9a64ef277a532332dbd4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bca186101e3bfdabba61f0e7da6f8be5

    SHA1

    39a731cc6c0b96197b292a296276a699aafd3adb

    SHA256

    4345d507019c85d61ecbb2dccd1c84657d0b5bda138c0e02befc0c6ffca585a2

    SHA512

    cb812c149546386faf5bdbd6f32dce947c835d7465898bf3809f6f7d5e82e90cd4c0ee950692d43a51a1a72f055d0f63e98db71208b8f136ab1d321aab017f9f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7d5eea2e931dfe2d52d3174df6a8753b

    SHA1

    e979beed69d13613f5fddb5ee6ed3413a772fe83

    SHA256

    e1475ee4b0e2e8d2880d83f79c81de6af4fafdd9f8a9e02003e579ab7818e60c

    SHA512

    b497170ad9f3aa920e1fcd6b5b986d59940a6d2b384be943bf097c5e4b2c94fd0692c80aab336488da4385edb0ac28fbaabf6863fc3d8f26f8ac096d8246fb60

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d2c7960eba0ffa46823ee0c15fcbf2ec

    SHA1

    c7d3a677ec107ddffa4ab1896987612485ed8318

    SHA256

    f7d726a03e49c5479345aa11cac3a48251d09034e7a0daefd5f08addc55797c0

    SHA512

    f535ff343d252feeae3bb7f68b860ba825a215de6749bb1965b3e2a0f9401310ffd3f2145be7aadc030b433b1f0a24390235821b78fd19dae0e06963016cee85

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    99d3529b162d685781f0d99f743051a7

    SHA1

    3e4733a12121c7e87da1f10138bf5fe07025c300

    SHA256

    39637fe2a67fea50dcd106abce5d04285ae9f17c4bc9d17400d248e9c7786a45

    SHA512

    4d0e3ecc75b23a8acdae7e59017569084d7d971ea25845da8052c5f4b9c96ecd7ad213067ffc0c6f8c6bd70a74ef28a311e9c8c8ce0c02004b4e48aabec53119

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a29f3d88b26c5b4f1251e58651b738ea

    SHA1

    67e477cd39716103bad3000db3c44cd41438e555

    SHA256

    3346ec4078a60e0ca6347561ae80094f8ca9df15e319fc6ac81b512f34482380

    SHA512

    8becf2684dcacf1da15059a4eb53bb2ca4e4797609154c772389890ef7443752264a1241fdde90f8c62c5fa7aa58a953b7edcbc4ce596fcf1a77cc05048a4fbf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b8aea04eb722282b7bbc5135475a8e3d

    SHA1

    3378f0583e3cf7fa61386ff251a320dcf80c1009

    SHA256

    23721a322c82a7bedbc875e0ed558cab14241b160e41af2849e3b0ffac367da9

    SHA512

    9b32ab8c3b2582d23e50b1524b14adcebc9d7c09a375d825c36509e2e0db149b531e677a50a82bc869cf69d53d1c1059567746f91bbb57e1ee6577aa77daebb1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a12691dd71920129427f158688645203

    SHA1

    4678617886280e3ace73a350767256a017309df3

    SHA256

    d20ca85ac82d1379126360d92531bf643b63560d37914d5f17a5c6d2f3fdafcf

    SHA512

    5d9c074c146a2282bca07185214d63e5cfb8168bd8b2f2a33d4fdbd6044e3d1f3ed95972e43b771d505c33e4d48b4b092fd8d73bdffb2f0ab560e2da251c65e8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8de700e203fef26990755fdd5e9366c0

    SHA1

    2dcbf6ca5d98e30fecd4de8f875e632dbea3fb78

    SHA256

    ea37ef4f5afab27dfe9bd0e10887dff494e2e96915b33bfcedabfa8af91af7e2

    SHA512

    e84bc08ee270b21d7ced217a11daef932f2c1cbe47a074590ede62192d93d4fbbe80cfbea08c4d48a28cb20d9a1defe14994e046c7a749857a85168134256fac

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\1YVWL6AI\f[1].txt

    Filesize

    34KB

    MD5

    3e47ef57df160664693a84aa6943a9c3

    SHA1

    2770e2c7f0b1f5d1b7210ec273d88f49ed5a416e

    SHA256

    a490f649cd5ef6c02a82668a15d665adc34ffc7a94979bc2edb89505df28da26

    SHA512

    904687d537bc0c935b6b98c2ff77d48a0f7b59d1f4380cd9f1113214b698b8e91842ed89272745779a92896c2a2866b67734f6eb1255e9c9fe54ccd0e7d0909f

  • C:\Users\Admin\AppData\Local\Temp\CabFAD5.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\TarFAE7.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06