Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    135s
  • max time network
    129s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    26/12/2023, 14:50

General

  • Target

    76e570fc36f71c368ae7028f466adfd0.html

  • Size

    28KB

  • MD5

    76e570fc36f71c368ae7028f466adfd0

  • SHA1

    979f98ceaa5dbe15df40866010fd4cdcd643fc78

  • SHA256

    d347c7bb78903bcad2326bb1ab3a50132cbb925da40c6f9f922500f04bafb792

  • SHA512

    c13b87310f3b991ea827fe9bbfc8ac56fda9739ad9c07639a85bc7389da54f0ce95fc3bb076dc8878be260fd7126298c18719a1c598fbc83dbc7e9ffeb8dcef5

  • SSDEEP

    384:/fszja24OeQ6HE0L7XIzvUJ5wiBPsbssRsbvLnfRGmvuJBmix:szja2lpm7YUjwibvLnfRGmvOmix

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\76e570fc36f71c368ae7028f466adfd0.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2212
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2212 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1308

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\B2FAF7692FD9FFBD64EDE317E42334BA_89854CA6A0F0936A4D2ECA78845CEA25

    Filesize

    1KB

    MD5

    f38c37b84cffab9182d75358dada90c0

    SHA1

    a44c3254eb463f796a3adecebf9b36df988b42e5

    SHA256

    1ed25eb71539071b3e56b40fe98089768becb0d7dfc3c7b28cae1bcb6c678434

    SHA512

    c1a42ddc3101216af84d043695cad4ef1cce299d54d87611e302e32320d269cbc66d55fc5e5feb2f5f6d6f00e5ed8a3713af023375561fde6aa37278d9083c95

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6c0b70261604567572205e9acd4f8312

    SHA1

    0a30466101bb184c882ffaf230ccad7671a113c0

    SHA256

    503dacb1aab700d8c1742c17e934b1f3bfcc245119b20264874d95ab1864a612

    SHA512

    192531130375a03c646c0885161a81ecc6a1046da7d86859e51908794f2f2f10ef6d63b17a70488ee279557863faee78aa7a30cf3ce9d4dbf0a6e1e8ef6e4118

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    af47516914653e1e94f517a90483aca6

    SHA1

    3ed4fb348a723a65c7958016258dfd94ee965130

    SHA256

    e9b7d5719728909ae148f557ec1cddcd37d3f0a87aa000ac254c5c8763561b15

    SHA512

    7746668fca34ae624e4fb7960b6edf9951b4e1759b9518e6ddbb45f0c2c2f8e8e6e380dd87f8d2771d46bd02c3ff04266bc488c62e80494715c461a0fa5f6808

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e039d1ebe2b6e868581d3f51241b2f9e

    SHA1

    9368d9f753229afd8c34a9f7986953c3d17c27ac

    SHA256

    0a70e9fdcaa9870d641ddd6e346664df1e7869fbf3a83b52bf9f07a2584b8cb3

    SHA512

    f120fdd808490d3d3ef3fcfe1a61540e2201ac53d4e9f0dccf479fb761c17fb398d3a412d5041ee3689eac9cab5a949bda4d5e22408f11c6c5dd9bd257bed14a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f03e1eee34f0043ab16a6bc526b69f91

    SHA1

    3a0f3032d0257f401593b9ee8d6cab62157ff4fb

    SHA256

    390e3c1c92b836ddd65d5f14aaafcb1877000f63fe0e433a9d5990e5bc23acb7

    SHA512

    f27851413a4cde05cd252cfdac9a3992344014df6e268d7c61495b2d22f45fb362a9dfc785f219f89bb83e3ac4832e42970d311be98dc9c04c286d9d65112ec9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    08e4b673c301b99eb224e34b772f68de

    SHA1

    233b5de231be52dd3a542a2075170360c67e01af

    SHA256

    8bbda8d80a1dd91cdefa88c63dd710797a39a1e92d10ca740dae3b900425731e

    SHA512

    64ea14a2ce11c8200248b3d29c76c9c20e3e25d8bde5832bc1b6fba9eb88c902135f0c91040896705411be8292ed99352edf793ce4a6f344da922cbd6ba24dc6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d33153326d36480b08d160b9da4d0ddd

    SHA1

    66fc2c1291c8399ef74b527dfe4cb8f76fdda1d6

    SHA256

    251fa4f75e402babb9523bac7a6d84daa3f6f9ee0082b79c10e45d9fc6e3e67b

    SHA512

    ce353f318e5696ffc65d0ad0f42b6fe1f7d87ab391170eb24802c343f6747f88a8f3c0b8d9a7aba13d66a14f8566f6e35d6364959b6da946a85abf9cab92953c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5b83c26f7efcdc4394abc655580fe688

    SHA1

    3c77d52f724f8f4b4c7760294c7df810df9a9233

    SHA256

    1c7d6bab070b3c5bed482a9bfb6627ba0c347270bc2f5baf4550d05513218c7b

    SHA512

    169a5a0b4229557fc9e85290eb24c626b64cd6198fbc46f63b7a3ccfa24f9157a63a19308610e8849a2f7bec429f36ea8e8d6ae8bed32c27c20ae4ddd9791981

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8a604193e6150a2d082f4356b6162369

    SHA1

    bba70c5f5a7833ea094fb86384aac92a4e585692

    SHA256

    1e1eed99080a15645440cf2d9027ca1a0f4318cf2ddefabab686eed7f42373ed

    SHA512

    56ba99522b674c11c05ba65d230eae90d515f786715fea09cd4daa42ed30e26dfb16278b727e59564dd2ceb0c1acad53e8c79855adcd0f53bba86bdf502af30c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cd32752aaaa8339373425f732243b231

    SHA1

    dcbde9f347e60a78ad43f8a102b4ab3aafee0a15

    SHA256

    84a9f74da420d3f88ef67aa13c85c7059bf2ded592df653338e20053c90a1b88

    SHA512

    30b4a53c0be20fae9adf9925d215079cbf79360e6db4181865dc30027fd2141db4ce53bb524dc324a3cbfe7a6094fda6905d8a38031edee05cbad7d9d9b4bb5b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0027b33f18114916bc421587bb3e826c

    SHA1

    eda3265d8508954c0142015fab911fa0442dd977

    SHA256

    2ff86b9e939646d74f5c214ee0498ad92799f18143b44f692cf90d756b1d5764

    SHA512

    b9349f343d8a5e68ed16ce6c665abe90caefbb6fdc3f2eb7bf4c2a191d67554c8cbc53b0912111c77ca9d63215728b262be8d175b914cb48d86111cdf26b8a03

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d4d5ef7e56c5fea740184d2cc734bd6d

    SHA1

    73a2b6b976b49ef250e9f21d7ee681995646fb25

    SHA256

    aea2a00749447c06752b0883ebfa4f74d886c1c7fe022cf23b26138f37e1fd20

    SHA512

    37d98e6040c8b8b1e72d87b969f96c96eaa8ef47ae0493f616f8efd7d3af628324cc9467e40ab7cc4d676e9dee4af4432c0a699dea81c40bcfb3f8b6283a4f5d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d92d17db5af44ff1072e8cf7ebe856af

    SHA1

    98533b432fe36b5032865c788524460afd2e5df0

    SHA256

    493f656a4baa791a9d159abcc035b4f21f2c9b22726314e91081b7561a4476de

    SHA512

    0f07ca98db193f2144af3f66f2abdba3cd864aba589a4de005baa487bb2b4d8df7613cc29abf4b43d1dfe573c4de5a9277854c03e095f58152b254409b8a2583

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c41bea4432aa206808b6a441e6a012a2

    SHA1

    8563a6f2837dff44fee0c9a0c3ac61f292d8f0ab

    SHA256

    4b48ff2f494e8033a9d70b7bd487db2648f98034c9a110e308aaab2f9942d335

    SHA512

    5a000cedb26fb7265826101be8629e3ecee21b2af8db9a4002e83fb5310f9bb30543f5f54539349746050e68504cc15d433ff0d11f74ed3bff62cecf3ef410a7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    918995da7ac03d64eff88dc22aef5933

    SHA1

    dfc6380c638f842875718d3c5111275f2cc47979

    SHA256

    9faf1dafc8223a00c82e826932d18a4a0c11b0122b9ba7101050d1fdde51129d

    SHA512

    e75a6bac52fdd2780f7c45f52a0d3fec55bd55087cf872b0c95a3a70cd0aa251b0c360c384044adadce693e1590767b58dbedc9923d46c5994c02346ad14e960

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d09b536aeb80b891d3ebcdbba559b550

    SHA1

    e4b87d732811c15b2d594f86f80cc9f2dd85fd36

    SHA256

    240662e7d5a0d18c8c4bff4be70816967a9e7257f52cb88be277cfd873935b59

    SHA512

    4dd5fb52ab70f70704847b4a9d8b350f5dea90630b2bbf580d204547457fa321a2a7b3d3d3719a28b024e3b02aecafef3b89f4f5a2a5e15177d7075a2d845d4f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9ff8b859103e06c28b5c287e3df75967

    SHA1

    7afb85cec5b3ca4ab395ab885d1dccdc77ce58ac

    SHA256

    a204039bffc9565848c24c2e26730de722cfe9c7ed4ae8a6e9821fc800b359de

    SHA512

    593f019a1b34c82704a086415e2122caeec35758cded85b384ca52757b7b1fe5deab9250d29ad013d20c44dadf40e18f11477dae9cb25d64a5840fb142c16c27

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bf5a2653b78d036ba0fa0117f1a1075c

    SHA1

    f69423bfe6fc8021f09a87c39013da46cd7644c9

    SHA256

    71969e3a0e906d2ae80a323211dde1efa937bf4433bf9d4e5cdd2ffdd99b3530

    SHA512

    f5ee22211f888fe46e53187675dbf97a5f88323a7d734a85022c0b0400202b8f475edf990aceed72a84e4a221d78eca834871b3ecc28d83ee1fb01d68f464a32

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e52e52ae5cfe9381fc951ec7f6ab5d0c

    SHA1

    2ba35a9c37d82085923c580a86e41c0db0be727c

    SHA256

    466c27b9c421bac73077504a4ed3bf47997a6495f5c5a49b5cd0db517e024437

    SHA512

    5aefac9fb5ff1b939b799dc8fed2fcd25f2d1f850de7037b3521ef6ae1a2d7ffe41684fef9d1ff2cfa5cabeb82c1e269500f6eae6e0c06d5438863dfac575f75

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\LFLWQ602\522efc7f1d39ad9c89887abc2c0e7f6b[1].htm

    Filesize

    162B

    MD5

    4f8e702cc244ec5d4de32740c0ecbd97

    SHA1

    3adb1f02d5b6054de0046e367c1d687b6cdf7aff

    SHA256

    9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a

    SHA512

    21047fea5269fee75a2a187aa09316519e35068cb2f2f76cfaf371e5224445e9d5c98497bd76fb9608d2b73e9dac1a3f5bfadfdc4623c479d53ecf93d81d3c9f

  • C:\Users\Admin\AppData\Local\Temp\CabD7A.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\TarE29.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06