Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    141s
  • max time network
    152s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    26/12/2023, 12:20

General

  • Target

    6e09399805fe2188e0248365b868cd89.html

  • Size

    190KB

  • MD5

    6e09399805fe2188e0248365b868cd89

  • SHA1

    452578826f8de97b5a019983b21ebe963a2e9a0d

  • SHA256

    96daeeabe370ad9000a59f7c970b5037652dc48afb73a299bed2634c9d943e2a

  • SHA512

    85953b6b14d0c7e5d4a6203fcbbefe69a0c262390a5ed4493dddb70902f5a71cb082fab205e31a5d499f7fc18613da163cad57ff71e04ae6e053a60552810bc1

  • SSDEEP

    3072:SEhkyfkMY+BES09JXAnyrZalI+YNLn4Ezdc:SEhpsMYod+X3oI+YNLnBS

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\6e09399805fe2188e0248365b868cd89.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1888
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1888 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1980

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    807ba38b3d21e38ad65804ef722f7254

    SHA1

    4dd1a004abfc066e7fce2d7114f2254b47a03570

    SHA256

    49c04da5c554d278b30fdfc20294802ef9d5eef61e725bf6707dbe29ffa4e764

    SHA512

    596e9328ac32342a1f1af7f2d1140dc3bde4dd916678f6444ed712790b027aba023b36be9a3cc6ea781bc0bf913503f3371dcddde5d08171d6edf02aa4c8f780

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9ad844975c32df1c9e55f9b8f696824d

    SHA1

    89183f3fbc4ed478d4d5d9634b65a5217eeb173e

    SHA256

    8eb79ae85ed216af324b8d2eb312fe3fab2d0e36435bda73674ab5d59aeb4781

    SHA512

    f68953836bca6eb3142735452186beac89a9da445f40bda0f192ad9d71be501f42c194019d4f09279de1878995e28d58d61115742b3080cc242633b302a5914e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9acecc2f11196e2e847c8e86fb667363

    SHA1

    99abd7bfbaedd9f049fa44ea7e6a05bdd2307a13

    SHA256

    9467fc6d76b6ec34e8dcdc4eda6335ed7ff81b30155a63a00e82eaa5587e5b09

    SHA512

    997afc74bdf963dd66fb8c3d594e1e1cb3b4d176bd02f52d671e956e2c4ae9d849414d94bd56de73b234d1c368b8a862ff4f8ca194f20e34e932b63445792c24

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    663f511f352112903007e31f28fecaa7

    SHA1

    f6403f8448769c3fbe418a94054a96c32c39e8de

    SHA256

    746e59086dbfa6c410f014e8c0cac0279de9fa53924b92049dcec05d24b60cc9

    SHA512

    fbb6f3b4fe6c298076f2f395f969ab260549bd2b3a7b9f0ee210f795766b5b10a6e2a29adb0dcfd41f606f703f3f1f42698bc985324039cfecfbe5bb748bde97

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    93095be6d524be6f2e49020d697fa893

    SHA1

    ef49c383985011d4ae4d4d8ff45527ab1791c25b

    SHA256

    fe8bc413e7ceb3da0433557cc219cb78a74b430b3602a47625aff236ebeee72e

    SHA512

    319a54de0f44067311beda6f36e396fd2989c1310771233a8495cf998d119d59a3ba4d3c3d0019d6226ee1812a1c9934f9b3782d482060e812fbec9c22eaae10

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0904540f1a65415abdd648b62d8764cb

    SHA1

    aacef4598d9ccecbcca732755cb24c00fa3dc074

    SHA256

    ceafc9ea5a80fbd6b9ff5004187cf0f2fb3341c2e5ea4fb2386841fb79840536

    SHA512

    ff43a8ece746d4da8dba33ecb680fe0cb2781a3849a834fb494cfd79cd67fb52535c39c69d80dcf4f0f444a74208d6445bc63b9f71e96fb9e4ce11cc1706d1b8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5784901f0589a266a5f6a439c4a69fd9

    SHA1

    667952f526bc402872597ffd5dd8c800bbe24651

    SHA256

    2e0e9a1d9499c27839ae56d72e2566670a55334c01a8b5f4be72ab0720fbfc38

    SHA512

    7b359adfaec7eb32d4ec85bee418196927901c5a2089de7cf2b8783a6fbff6c585f17d83889e99adf40e9a0eb450feeb80ea155b1faf33720cbdf7c5e8b26b76

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    270a058c7ecdad0f16e77c7581add82f

    SHA1

    9aeb6599a8239c6f40b24c4b79d1fcd430d40db6

    SHA256

    a493ea8645940fc18ae3bee49d106ad7ced32c3c37f7a9bcc2574c8a97ac9ad0

    SHA512

    2e9205e7e445b3d8f4385cd70d9e760c3936faa4f365bbf7f7000adcc38cf56d143280309deb8cad7fbda65ab4dd38a5b66b484d0d96edde122e4e25f21bc8d7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c98a479b0943cf8dcbf3bbdcaf5890a5

    SHA1

    3695504a8df2b69ab9daf568386adb601d4ac085

    SHA256

    ce196efc8fc79626564eec42b56901890e78dd8ad5a85fe516c88a8216d7f5cb

    SHA512

    e566d43cf61481aa14029a749356e9d9fe80b739cb0c871d31f1d2a4b191bb0bc1d962e69bc7b444739a48210312cdfe0096c00ca1e83682a0f8805bd25b4462

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9fb4f6b80f0d955acd14b9ce8d47a48a

    SHA1

    7ae92335ad487ff573fb82d356f5229186044ba7

    SHA256

    b59f1bd169cbfbcd0cf6b7b528924f15f42123ea0008cada5cd403e057da32df

    SHA512

    98e783faed3dd5b8cb29073a36016c2cdeb197d79dc847db60eb6f3b20f8d5557aea9d2d02b0344b67e5b22077a4b7800e6b9df3bcdf71aea871f3bacf03580d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ccc9928edaac001cf277197e4a42792f

    SHA1

    ebb4b12b0f9725d9f1bfb6dfa1e5f911ae52fa9e

    SHA256

    2f5441e254c2e2801ce373a9520049002a945061938c1dc7ce1234dd4524be8e

    SHA512

    47438eea7a6c9d96526a9a0e347fe75735a05770a380240da0b6120aec8c77a8395e662b09c8d72b81d3b64205f7149e2c92076d858104da12d7dad992e486f0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bc33f7d87eb15359ac824e45f811c5be

    SHA1

    216b6d7c9771c2dd6e2ab5c046ca04a69058992a

    SHA256

    02097d1072123d4b86a2a5dac9643a021e0e760a4abd0dd478c79ad10b7bbae4

    SHA512

    619fc9ff0db294baa9646313636906c46b45d1b640dc90346d80957c709278204942dd56efeb55e465a76b56017b042b60ab39ecb08ffd468ea580045254b75f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f2c300cfe2a773d08066f9f5b42c358a

    SHA1

    749d036a7fb710754921148a598483ecc114fd79

    SHA256

    5e0449ae8012b1b0bb17b9ad820dfb0cf801a8b183d14b5273143dff5fbed8d4

    SHA512

    a1a5827a6aad4666868c329f6c4e29d24ba1746541aa0dc169c209c92a5e7b31a2c14495526e999c1151be0d35321dd0f92181b58c0a703e7fc92364c9891541

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7bce9a221c80a58793625f493406bdff

    SHA1

    057b658aa1eaa7021aeea0e549a27179f394eede

    SHA256

    859a330b944dc4909c7453668721100750e6292433caa99b5866bfbadcb6c581

    SHA512

    c15e1015bb917412a29a3b4881f7dd00d6a038102a8d23eb5adb630195a5596e4b670befc072500a3e6c16572d5666fe3531af4604947757f24105404224d7c6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    651e40d86efaebe93446a767d4c80d27

    SHA1

    065ac05c3c187838a072e56035954ed1161bcd2b

    SHA256

    d452ef3554eb9ad6e457736d77d1f4336719fdb53f9b1028244369d812976900

    SHA512

    08d60699e8174341abe26865541bb05dde1a94273f17bce6faf946023baca0889b6193dc8f6a57e39a1e27401a1dd51c228486e032e16346d142280a951c5e66

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2584d67f0bb912c4bbb6d174c1fb45c8

    SHA1

    99bf8c7671f8162fd617b59141ef13090f9828ff

    SHA256

    48dc585dc689020f29428fe217963a5a54efbefe3aec9b08f66c745a52166d99

    SHA512

    f17b64dc217e372014b4918f56b860b1bf686ab1f464fdfc5fe2a041537f6b096473c4d86cf470615cbd29695e441f4a1a60915348afa8af1ec720ca2ff35c61

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c7dd84f28b7bb09da3898cf12ecb041f

    SHA1

    3876d6953e10f960cf11d691ccc572635c613b33

    SHA256

    ff14c2826e710a82d35c13c95e556b9184bfe7483240b5fe1a25babbe36c1f14

    SHA512

    eeeb1b220bb5d41bae209f7f319f54c6a55c209c9a96252b4aa60ef43a38b661007128a96d2b57409f0006e8c09d0cbd37caa3aa0bd065b6212cc1c48ee2295b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    430201a1ab58b8ceec4c8a3325f88921

    SHA1

    27e38b7fa635f5eba973d74c5e3cc5c8c7f80e58

    SHA256

    182244f7b6da5e777fedc5efd92e9481a327f6ccc2a26938e9d4262c843a3056

    SHA512

    cdd983622a84a403f6e9e6f4c50e9f0ea8fc3293d489f5e196ed1942f65c8096d1ff3b626545667f6de6b0cee65462f1d0b6dedbcfbb93cbe6628e84928669b7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    73d88f904ecc8f90926bab5d74195122

    SHA1

    d42ed78be64bf7603914f8aed81a69b1f2bd8fad

    SHA256

    93d3fe8332cf0e5c5665a25ecbffaf8db95d668315cf5480293b9337fe27f4cc

    SHA512

    890a307daab1b9e1b634ecae8045cd8129940cd52f73c96972912424a7ada5978f6e2214b21a1dc75794983f08c839f4a5d14690dffee09b1c9a0dec218ef683

  • C:\Users\Admin\AppData\Local\Temp\CabA6D.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\TarB6A.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06