Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    143s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    26/12/2023, 12:11

General

  • Target

    6d646627d314354b0717b6f81c8447fb.html

  • Size

    11KB

  • MD5

    6d646627d314354b0717b6f81c8447fb

  • SHA1

    2cf1dff2298f5bf54a823a4f21ae81d76f5c0522

  • SHA256

    e67ec95d982902f84dbf0a3fadf48dc7391d7d064eef2a23223fac676881c9ff

  • SHA512

    fab5fef2ede7a50149ed6c1cd3f35e221602e0db6d2b3d48638f9cf1e0a3f20bd576b3392ca47fe2549051181bb3f3e13e00b7cabd22807173f3469ce4110d0f

  • SSDEEP

    192:csz7PWAYS/XgSXMMMnfLCuowPmIm3PHb76f:cUWAY8XgSYIHS

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 38 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\6d646627d314354b0717b6f81c8447fb.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2232
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2232 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2224

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    dbc73ed2913924bcda4f92c383dcc58d

    SHA1

    35d8cc140186a9156d8c3c1ab44d4dd8d7e9724b

    SHA256

    9360e88bb6cb724dc7319661e24639e36f3fa652445df226fdb5a91ed0d880b3

    SHA512

    6a721e59f85c502f2c729aa2a44de61d4ef2229dfdee45636c7c2f0b38b3e538a37b4ba32ba0b3989822a24d8f25dd09588c81051dc564b009609437ffb1517a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    35a487f0f2b83b37b8235ee08bf07805

    SHA1

    fd7a8e2150fff320b414a83137bec01dde79a58b

    SHA256

    6cc9e4645b645ec35f91f39227c9fdc26b8deb4aa52e2d42f7a1440378cd240d

    SHA512

    0956ad94cd92a67c1009874d847c51fab745aeba2a56315b005f1183f40e29934d0719cdf7f07932a26bd64a62414e2c7b0ca6e8264e2a5d4f417f005736c1b1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    dc007a899cb4ae28f42c9ea617664ec7

    SHA1

    44ba446cc58ab7609e2edbf3d2613eee25b51737

    SHA256

    92338a81bf7b6a034341e4acbd4f69a2909977a31f0991110982d4ee9006a5a6

    SHA512

    4de7d2f600969f25457321fecce4ca7d7e430590244423a79cbf7d41bf06577a98213ee2c0dd67c54d64ffd380fef714c687341838521fce14596c5839d2911c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\Internet Explorer\Services\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico

    Filesize

    4KB

    MD5

    da597791be3b6e732f0bc8b20e38ee62

    SHA1

    1125c45d285c360542027d7554a5c442288974de

    SHA256

    5b2c34b3c4e8dd898b664dba6c3786e2ff9869eff55d673aa48361f11325ed07

    SHA512

    d8dc8358727590a1ed74dc70356aedc0499552c2dc0cd4f7a01853dd85ceb3aead5fbdc7c75d7da36db6af2448ce5abdff64cebdca3533ecad953c061a9b338e