Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    146s
  • max time network
    149s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    26/12/2023, 12:11

General

  • Target

    6d75132cb26572172bbb4628c811d3c8.html

  • Size

    17KB

  • MD5

    6d75132cb26572172bbb4628c811d3c8

  • SHA1

    c3a11d8e89d3359e2c76c0ad4cea849288b0af90

  • SHA256

    e992c8b17f2855c424d9986809166c4248f74c00b2f5934707d27da2deb27f26

  • SHA512

    2215b7988e2fb3266778bf868bbf1de6ad56e91cecf9f9a56f07022bd9935dd489cc92428cbefd76b34ea1cbbc051914ce3ddb62a87e580bfe0ae698b7673439

  • SSDEEP

    192:fGIYxehSN5jcKIym7l958HiVnmJqrg3Xlx7QWnbM/qNiR4CoBLIX5lY5OOI46z6e:33ccN9Wp3LBM/qckIJ2bInDLaMJd7E2V

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 49 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\6d75132cb26572172bbb4628c811d3c8.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1644
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1644 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2220

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F59A01A8B782D93EA6991BC172CEFFB1

    Filesize

    867B

    MD5

    c5dfb849ca051355ee2dba1ac33eb028

    SHA1

    d69b561148f01c77c54578c10926df5b856976ad

    SHA256

    cbb522d7b7f127ad6a0113865bdf1cd4102e7d0759af635a7cf4720dc963c53b

    SHA512

    88289cdd2c2dd1f5f4c13ab2cf9bc601fc634b5945309bedf9fc5b96bf21697b4cd6da2f383497825e02272816befbac4f44955282ffbbd4dd0ddc52281082da

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    aa735070e098f8e0f6b0cdf3a61f4e43

    SHA1

    dd2428e1a45ff02d8d7dca0a0acdf288053cdd12

    SHA256

    0e34941f3b6938516284f35a99ed2a097e4ae9bb2910e1712576f9323438dbc1

    SHA512

    8e8e39bfe24adff882886b230ea218ce457de4bf34534094c88f6139dbc61a7846f4f1ef24a267ff4b53271d09a10eaf0b1435e1cf996e333594a31a41f10ea8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a02abdc3afc001c24e2dbd81661dea52

    SHA1

    71a392c06e13ae31bb6f6b68912342bac55f7677

    SHA256

    d41130fd235e63e805e266f1e27c1b5f80c1b89839c13d21fb85e6ad220a2146

    SHA512

    e5e014a3d18b75ec839d6b866436d8a189255d5972fad2c887b5bfaac33d619e7c65a732c3f137b332d6e22e8726cc101c70ec2018a6e85190dabff493dc9e11

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9c90211841b4cedb1151ad24944c08b3

    SHA1

    8bd00550f910ceacc0858b8806d6627da0e01a3b

    SHA256

    13a487596164567de1f9371feb22bad3a0be2038e385e168c80bf796c07e41e7

    SHA512

    43f0b55c6c75062fa996810145dba837b3e94fd46ef98e830923eb4e99c69ab4cddca2927e26c7f6a4b20236948fc4de7536c769a84daba7bc40e46204427945

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a84e6aa5a1a5df72feda0ea54ca67d78

    SHA1

    6c68a4700ccacd68a9f2d02a9bcc833cef54cd9c

    SHA256

    95a588a985c8103dda59d74fba5810b7edd52a5b9f345ed4146b866d68bef52e

    SHA512

    b11055f58c85a3633211684fa9cc1cfc2000db7d5b157e81324c34d71a5f4687a676ca6ff041bd8271ef95bd37921139970806c57c87c717be0510daa31f8110

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    de4b1e7decd2cd4775809e232ae74b31

    SHA1

    d4d6652855c799828bdff3fc177f73efd32aa150

    SHA256

    f93cbab35f2a72021c794ccf469d6bf3867802d0b76fc3973fb3f82ecd89d99a

    SHA512

    d6d43d9de37d32972a32a3c6ce606079110ef1024b4e5abfd9aa00283c3c51aff6d2e8d9473f21d16d5377f5a0e1b1846d00a8ba2cc629e7dd433c178cdff370

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ec9715913acbbfb49bc3b0647ef39f11

    SHA1

    19f5d129e61229b4362c5c819f127693f39b2a02

    SHA256

    f77856c664d7eea1962ab7c713cbcb23b37d41fd0316ed259a874a7e10d555fd

    SHA512

    c33685c6dde6a0dc1288c11b7785900aca795e16332049243d248e40985ccc1d801627cb29d0c6697d2f6d556d6ccc297140e0fb71492298c1ed42d2c1577e83

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ea39e675577e42ee6ef35bf20899a336

    SHA1

    5190a68e90e75616944406cb9345f8b4bc754199

    SHA256

    b7b542908b4b14f7863b1ed3043f469d7529dca5b013666cba532def56bdc606

    SHA512

    aa4711965f42e4d770640e8f83d2d48eea82b45e06e19ebbd7fc299fe213363d98f8e1f814a0f6623f7d2047ab10192108c36de9864f51e47bded7e4b31180a9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    28bee529d0b6c04a7d26da57d5637f69

    SHA1

    7dc40504a2cfa50007b0ac518cf40d74e1ca5f18

    SHA256

    e096a3c1cf6fe8a964973d58a07fb6c4ca52e7f69e9e38d51b6c4f007a56e7cf

    SHA512

    d91880b07a7c685ca230e4fec2f360901188c27ef184b42a29736fbe3de8b2e77ad16d9023439ce31bf41ee720de5900a882313b0c1f627681479e9f239b6cd5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    631366829020d53cf0ed1da7fdd51b36

    SHA1

    fe9e34d93f65cc0dda3d2bdd225a6eb0150d1c39

    SHA256

    87b07b9751fca26f2eb0bb6204d8473990bae9eb7b48b7fda82246ed7bb462fe

    SHA512

    5b4ddd6503be6e55f179c5dda3a2515be6d71f8943deac8b97794069861c8c11ee781e1976f757930bef105c3fe85a6fee50208836cb6ecbfdde170e00b6ec0b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a60f3b7a0d00c520a9f73e9a21761723

    SHA1

    6a3ab0f5f2adf3f8cf8806b35fda815adadbca57

    SHA256

    12529fa3468ac17d8e20e7e69dafa209c10bdd6f370db6b67a1530c0f7ad1f75

    SHA512

    80fe4ce823b6154e87f243fd593e86d75aceaa5bac1c80f93559e4289f82d2a0ed3bf4029bea74d131c3c7a5a7143adca2f3c105ce9bca6c820276ec4f42d434

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    382831b4daf3f62fcc0f9a779a633665

    SHA1

    1a2775478ef2630617754d4de32753d113b00a53

    SHA256

    938046ebb3ff5d0d1de9dc964635a5e96dcf95712b1e69c76be48339ee3b15e9

    SHA512

    2b8c4026dba86ac774361fa850677bdd140f78addee2dc13f73ffd5186fe43d9d17998995f82c149a2ec14920fcf683f7f5a279f298bc576ce2fc294caa038e2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    47a82a5294e3ab342dc57b00a7890fab

    SHA1

    5b7d60bc94299b4045adec26d678799ff7fb5367

    SHA256

    70dae9d9ae5f3e4e739728df450b26918600a6ea9d5bb6a8ec8d811d05663827

    SHA512

    a209ef7aa52fedf8e2180d2a4e1677ca3171dd234cb35f19820b2198d498e656b4225694f81ee6e045b7d26d22e261047d8728f7dec863728c53c92194ef50fc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    82565cc17b5aac32a5653a65f7857d60

    SHA1

    d733aa5ceb06f47e2d4651074a38e67dff40b0d8

    SHA256

    42720259171fa1231197b9e4078255bac52166d241494b0768f2d21c9138e96f

    SHA512

    4b79427461239bc6cc0b64a714046dd57d7c8e5153de475e5ec0266ff229a4dd7da7e9c7b0e25a45107a54e673755f52b928aab94748ce7f09e81cd65cc198ff

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e51a7a40d5f0a2ee9e95fd766cc79e2b

    SHA1

    8b92507d8b84b2d76e438cef002625d6f8f1122a

    SHA256

    6982978135658b8ae1d49f0a41fbd128bb09d35792ae1a8045044b42bd8f470d

    SHA512

    02f9a6cddb214d934719b642e7f597121ff42d46596156568b96d5bb74099ffe6ff007555533e40a43b57f3b0adce4623bbc3a310070cb538ae0616e110246c0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2daffbe137b485be4aec23f7c34f2592

    SHA1

    d27648d47f7e6f7ecf0cc8d0fed7cde246031b95

    SHA256

    7825c84d6229c7d443a0a540cfa27905d2a8ef62adf5e6d275e3330e62bad026

    SHA512

    c56149741694e2c9dbb308b1ddfe06cf237459ca511db8c979f703c3f3fcdad546e0e6c0d055e934dde1c3bde5e9f973d1fcbdf9aa52f2d8caa7333d8efb902e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c35336c0fafa05b3a890efd809f66754

    SHA1

    5338b40d46bfe467da7a867e25ddf1cd5609d40c

    SHA256

    709135a8b69fef8c1b53f67f08d803e1f8bc04550634acfdf0a648e4530fa76d

    SHA512

    c9a9d551f02fc58f6ff85b04ccb81480172f5e372f5c6272d117f168696e7ac3cb48f6b4517dff61f0fa83c05e8e8fafa42d900495818d5bca93a704b2a25ccf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3c155a21eadc9dbb811acabf0d6add87

    SHA1

    454b2d5670d80520f46372f49b941836159286a0

    SHA256

    d6aa277260a5c919af17ed395e855bedd78dbbd9896fa7b663709239b007f911

    SHA512

    11ba0f4df07d07ca30b809f73e8721fb5e28d3733774d7407b4cf3eb2b0cfbee6bee8c6ba4c48d3ed96de557a7939dcd9bed8fd773bcf100aa20f18156f14ace

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    71baed4714a9bb49e5bb8d82c4baa327

    SHA1

    67e6f48f0286f49350fb377d0361d3a0413cedcf

    SHA256

    dfedca9d7c0829eaa709ddbe74552379f70b08609074878907dd72fcead29b62

    SHA512

    a2074efa46afba734f2dfc2b822013daf094158758d51088c2424151d4b864ec271115c933dbd20780297bd1800a503a5a90bdb1d1c1cc6bd256bc776df9218d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6c2493cd482fc850e57fd9452982c5f9

    SHA1

    cccfa080727787de2e4465d1ecdbbe6d8c17f5ee

    SHA256

    616272d3e6cc6c76ea8dd5768190684713f2c841191959e37a40ca156f042460

    SHA512

    57783dcd65bb0d4cd16e162fe783c3ce1c50f01b21540b443b96b5b98dbe7f42b6ea828df80d7edd9a07a502edb4ad12fae6d166257b7fb659edd5cd3d3d68ce

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F59A01A8B782D93EA6991BC172CEFFB1

    Filesize

    242B

    MD5

    df23d11fd5e01623fe4535993f3eafe3

    SHA1

    564bee409f8bf4b5213bc881e89de04369c00b66

    SHA256

    ec010d49b8682dbdcde8262eecb6b8cd238ff1c87e984eb2860527661b20cfd0

    SHA512

    49f9a29618d6cf6a1f8fdde02867ecc6972615664626fe9244ca37542ad0dac13c87d8d0bc7658e474144ec149defc61d3f8aae5069f261694c5ef00704eb54d

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6IJYZ6B5\styles__ltr[1].css

    Filesize

    55KB

    MD5

    eb4bc511f79f7a1573b45f5775b3a99b

    SHA1

    d910fb51ad7316aa54f055079374574698e74b35

    SHA256

    7859a62e04b0acb06516eb12454de6673883ecfaeaed6c254659bca7cd59c050

    SHA512

    ec9bdf1c91b6262b183fd23f640eac22016d1f42db631380676ed34b962e01badda91f9cbdfa189b42fe3182a992f1b95a7353af41e41b2d6e1dab17e87637a0

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\LFLWQ602\recaptcha__en[1].js

    Filesize

    92KB

    MD5

    142508e3281a4ad21aaed8538f31a0f7

    SHA1

    c2429e1d5f3aaa8d78d3d93e954c8234ce5ab4f8

    SHA256

    9b747c4aca20c2ca80f923790483c26a21bdafb6dad938a0f5be1fa97cdf1ad6

    SHA512

    160170eb86418de45687b9d82960290fa3d0de2aeea07a1d2b61ab1bbba6ec9b9cd74b1f184109a9de472b2320d71f0b9b5f1067a665f632dc53eacb3fec50c9

  • C:\Users\Admin\AppData\Local\Temp\Cab235B.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar236D.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06