Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    118s
  • max time network
    154s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    28/12/2023, 22:28

General

  • Target

    fcd2791e2cbe0f26247e59c3ed110419.html

  • Size

    3.5MB

  • MD5

    fcd2791e2cbe0f26247e59c3ed110419

  • SHA1

    65f3cec68ff97bc36bd125b8ce22387521d3b40e

  • SHA256

    f6df78f7f2da54c975e2d1bc0582a1b3d6bfc4610679ee462349197e704151f9

  • SHA512

    cb36496128804b42f412db56c1f066671ecfeeadb4ddc33c21d2ac2e4162c9394bee5b5bd5863a92be807c66e5d7184152bdba304546182bef6970e4e7a3e315

  • SSDEEP

    12288:oLZhBVKHfVfitmg11tmg1P16bf7axluxOT6NfP:ovpjte4tT6NP

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\fcd2791e2cbe0f26247e59c3ed110419.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2192
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2192 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2276

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8d1d90f37bd0fc70307fd97f505e20d9

    SHA1

    1a1e5d0d7460f62f7102bab2245b4301c280d30d

    SHA256

    c071e8e0a8f7fc8134f84264307d71199b972d669e322cac59b1b0485b05c1dd

    SHA512

    b066646d705a8543676dac086d5b315c12e8435718ac41755f452508e7933e8674705f5c11c9acc1d9a4fc5fde946bea8148067479f76e89f34fd7fd1db454bf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3287225da334e992f928d9bfa69fb777

    SHA1

    243623e559def741b5acb509b6670e9c835589ba

    SHA256

    84ac3db9af9ed3f61f515d9c647f917f7ea823c10a9bed8117e56915e83984b3

    SHA512

    7941a8a506d4f5458e4668c7caa0b08e5e38adc761f705e5613dc9f35b1d341177807eb30bbe296f8744c107246b85793d51925f587863530678b75e643ca26c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a192c0325c16ef78e53f5089343acc56

    SHA1

    78060d770682a45c54a4eb22497675e6881bf53d

    SHA256

    6db2bae0c43ef53fc8f12e0e5565d7c9bc51edbbbf2b3e6b3194b96239e23655

    SHA512

    c6632c8e2b9f746589d51b48c545df197494fd6b89377957700ef90a3bce12f08fc69d7e0d72569b0d5804ab171bee2787bc1c9140d0afc70d35e0a4c43e9550

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8992924f608276c927d045a891d04d77

    SHA1

    4ee51ddf047a3a8256dd5898899001decb3f9b27

    SHA256

    db47eddd9e91b10e9ab768e6fee8b1326550d31cc2119428f3ad33cf98c98f25

    SHA512

    77f3f9e4fe70a2042a29adc131de3c8f5bbce72cc0ccca38c90133cbd4def4af1c265516cabf566298855c310ab2752ccf7ca087b91a330c53037005167b3fee

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    475487ac84047c16d1dd6b561a0e1bec

    SHA1

    376cccd78f45d36c00ba568cd56770ea87f03b3b

    SHA256

    2f5a31510196495e52000285b544c08f8f8f7cc904a43e755b9d8b493c846a3a

    SHA512

    6b385198a03a209650c4dc65d9103f63d0879e166667a4c57f4e8844d82e7d60fa8566602ae42ede5e044a62c875c5f65663cb35df974946a29e9e9d90985980

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    db168fc0ac74ececed3a85b8b9967935

    SHA1

    0185978fe3a12037b804cd9e9099fb8ba94fbcad

    SHA256

    d913f42b0a61cfec80a11c68a1a8d1369ec771a2aaa0b5abdb77c8db63b2f15b

    SHA512

    3f6087dd4db2cdfab94bbc268440411f1c88c8c4a61bb8c1609be8e7f0910ee36ee8ebe96c1b250128b44f7384b681869024f72309372f8354c54c01761c68c5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8c844d686de68e90f026ac1204a72aa7

    SHA1

    42529f6c9ffd997ded21cd40446bd92bca49cc53

    SHA256

    e86098fe4dcffc3386623cbdc92be8f088e1c87259f9db49686c9f251449090d

    SHA512

    8461ea1a84c7ea6717025f028125d7ddf10f2e28f8f091fd0b7e453d7a0fae8813ea33b247cfd31f971e70cbc7b62e0204f91ecd15e1e2ef88eda34f7e3f8d90

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a60446405842248b5149f3ed14e738e2

    SHA1

    eafd5b19fc0ec84afb53c202ec897c51f54859b9

    SHA256

    ccafa3ec91c278194db6e7936d5aeeb9f2e4e6017ff6cfd6cfd29fee7b958e03

    SHA512

    86e242777f321c1a46018fbd5302e290aae705bc9903759c7bc1868b7cdbd7e81bbd6296bc1f032db63c812c61ad61868ece4bfc0bf4796347b106969c3709b8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    abaa782924728651d9e616ff2ac75475

    SHA1

    81a044096d8ce5078d7bad3ea140bacdd62954c5

    SHA256

    8a427393b0486dc1be3c951aee95030484ba1f2d2c46c058ce8f66c76fb33dda

    SHA512

    5f9816aa08fedf30237e0b61b18b7af2fe72dfe681378373431c8604f268b29a254f95ae684fb9d95e5580e285c2bada65fb15f5bd97d92d0eb1039b8f74dc44

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    44073ab5b35be3d74b9ffbedd63a4af3

    SHA1

    3c097f61fdcc4d798f62635f564e576e2bfd9dd9

    SHA256

    31a9380e9d16c1eaaafce13dd5aece7198701660274a2a9351488e3332ddefa7

    SHA512

    2b4a90e25c9b1b16a00304b1c8ba68faa516aa7cfab99ffda28023b2c62f87155e533a558bbfabb7ed438153ceed0ad664817e52118f34ed075392d51a5a7a43

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4efb190dd2ef777f7800b1713177e2dd

    SHA1

    0b6afdf37ab42c85847ba1f1ea01c10a5df75969

    SHA256

    8134adea0d6977f9fa2788bca469fc673e1d751d8f8da4c3dd6462fc6bb1df15

    SHA512

    cbe5b05514913f5f4b6a83c7404f9ca9b032cb098eaba8742a8822486f9f4295c3fd9996ebb4df4f02f173997f3d868d1214324f0b06eea1e37aee6c5bbb7b57

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    31d859246ad51ad0cf706238d693fe8b

    SHA1

    3001c7582c6265dc2757d0f2f154b7da14a54fc7

    SHA256

    eef9d5e285bd25e08735261ed543edc38016a8da82d73acf615166636aee3740

    SHA512

    50957508f46b0205fa1607e1b3efb205a73b934b905d61d3faa370314ad3d2cdc708034b32631c013cd9dee001462911a90106e6da501a41a0046a29a67e8ca1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1b09478f71ff3ee3b37937b6ec217883

    SHA1

    5f931778329e9b6a73a9619d81ef47eb8e06fcfb

    SHA256

    9aa09bbeb8609ada01622a211b7216e68d5312cd6d4e436821a5a57d3833a2d4

    SHA512

    2196bde9a7325809a676dc4c7e0e9edd84af07f522978fcf9d65cc24bdfdf8d7d0ea000288ede5ac8e3816f7c38eef29d85381cb3ce86dd199c442679d2aa301

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f5de9b2eaa288a10f43070484cbb733c

    SHA1

    ba1e2c3758d406e9b6af8dae545cf5a90c697aa8

    SHA256

    c5ed80b061527f2bccfe0271b82ed4380d4c03c4a46ff233d6d76e0bcdc49b5a

    SHA512

    fccb777aa4d6ba7965b2a6cb3e0c607dc2b11aa416b237a9de104722764c4561fd9d54f7b43f2d136668c5ebb8ac6af4e628325fa8a3e674a59e816898a46ea1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b53e516aeaf2f5565a7c04b8a29dcb40

    SHA1

    007f7fd2f9fda102c5bfec05caab070212b8595e

    SHA256

    6409566f9f9997dc57d075ee9a8d9f7757af38bdbd31882f016639af8b21c7b9

    SHA512

    b3240a45ac63350e45c3dc1bda2e8f0f8dc48685b2815becca0960b0c788b9303f08c2a83936609db8cf11438d45249b5bff8984c15b76c29b85c53fbbff49b8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f2fce618b05d9661cfabbe6186bf4763

    SHA1

    9a3552617f2b042ff7ed34c42c4f99eb6d10e561

    SHA256

    d1d5433b426a420bea77052f0da43114de83e6b63dfcc87b573cfca23f5c3dde

    SHA512

    6a8f4aaaa333dc65d7e1d69d2a4f6eeea2aca86a61b5b193383c365ec65add68b88ca42efd73d8556f794c9a5a2f148f5eeb1ebaac657e884cd9ea0b65272bbe

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5d206ccea196c3bf6e0bf24f28222e0a

    SHA1

    847dfd7bb56c260d3b2e7d2c63d4fc9c233dd68e

    SHA256

    a1409fa91992ca69e3b97ac0b21bab1e29c786afdb146bcb16cbe56db8cc9c28

    SHA512

    70d350538e6a97437cce7db269b4ffa117ae933aab8618f56749d745d4a82fb48abe93b9b5392ea30f48dd5cdd85f3e37e095f59ce4f815802462326c8d14a7f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    05bbf5f77fa3a186078b39b5e1b05887

    SHA1

    a949743769d8b67ae293e1659b4e5d41143e0ac5

    SHA256

    21dd6b151de84ce44ed3fff34d780728355fd079e3a1cda596371a80158dd618

    SHA512

    20a7a0da69979a2ee8a0eb523b3ed0a985a123454e5260b9cb7925c90e33d22b93b54e78844a43b63131ad41ce90e0723824142f9b3bbd6c4d058c6241231f50

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4a1ebcb2b29cdba8f1ddf345e20351fe

    SHA1

    438227e02ed38d8521c9de9a5fe54df8b334c3b5

    SHA256

    057ae494e3e72ebde5b8397955759eed9e53d6a59befcdef5db9f6c9d1649ca6

    SHA512

    c5757d1b418d53047ff8137003fc3e80919bfc07f0029f636018edd448a5ef4a0a3ad945db55bc273632cea7daee6586af028b4a402ee54cd407468548eef49d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c37930cd8295074d76ada3f2fe742f3e

    SHA1

    68fc7980848e0c0220c24e919248bce16ea52667

    SHA256

    1d94c7c4642882b1ebf385c51553d1141ed610257943ec372685e44a9b68f782

    SHA512

    011880cc0600529e3a39f16e01d86e31b1ddd8133d7f0cd7e74ce1c0fa424cc17cdf44ba1a209fbddcab383a77ffa84ff5a3eed9881c7f941bfc528f8dfd9e92

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\1YVWL6AI\jquery.min[1].js

    Filesize

    83KB

    MD5

    2f6b11a7e914718e0290410e85366fe9

    SHA1

    69bb69e25ca7d5ef0935317584e6153f3fd9a88c

    SHA256

    05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e

    SHA512

    0d40bccaa59fedecf7243d63b33c42592541d0330fefc78ec81a4c6b9689922d5b211011ca4be23ae22621cce4c658f52a1552c92d7ac3615241eb640f8514db

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\CTTGCPI6\jquery-3.1.1.min[1].js

    Filesize

    84KB

    MD5

    e071abda8fe61194711cfc2ab99fe104

    SHA1

    f647a6d37dc4ca055ced3cf64bbc1f490070acba

    SHA256

    85556761a8800d14ced8fcd41a6b8b26bf012d44a318866c0d81a62092efd9bf

    SHA512

    53a2b560b20551672fbb0e6e72632d4fd1c7e2dd2ecf7337ebaaab179cb8be7c87e9d803ce7765706bc7fcbcf993c34587cd1237de5a279aea19911d69067b65

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\L6MCRSFJ\beacon.min[1].js

    Filesize

    19KB

    MD5

    dd1d068fdb5fe90b6c05a5b3940e088c

    SHA1

    0d96f9df8772633a9df4c81cf323a4ef8998ba59

    SHA256

    6153d13804862b0fc1c016cf1129f34cb7c6185f2cf4bf1a3a862eecdab50101

    SHA512

    7aea051a8c2195a2ea5ec3d6438f2a4a4052085b370cf4728b056edc58d1f7a70c3f1f85afe82959184869f707c2ac02a964b8d9166122e74ebc423e0a47fa30

  • C:\Users\Admin\AppData\Local\Temp\Cab956C.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar9A13.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06