Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    139s
  • max time network
    138s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    29/12/2023, 18:24

General

  • Target

    005bd25e9809053b027dc2566356ba13.html

  • Size

    18KB

  • MD5

    005bd25e9809053b027dc2566356ba13

  • SHA1

    b66dc3659d24a1edcd67f5bfae604bba7fc1c36e

  • SHA256

    a7898522741322472ac91bc027d83a2e5548bb8e4610ee01b720b5092faeb305

  • SHA512

    d61bfbfe797d3c2ab06ddf008e16a3c12a34d98cd70bb0cd4d4078d045f86e1d088fc9aacb6dd56580c2ceadeb098128f8e3f14848b1e3972fbea59b09aa8647

  • SSDEEP

    384:VyKzCDWobI5EnqYNOulBinbO6bqD20pKzCKqz4J28W:Vy59I5Enq2Inb3bqHpfKqz4J28W

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\005bd25e9809053b027dc2566356ba13.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2004
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2004 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2140

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    52cebafb271098485cc96623fc2b2a86

    SHA1

    7a75ef7b5dfe8c9fddcf9871fabce6f3b85e96cd

    SHA256

    46a7a7d6bbab1b0ca05052b6c3acbc82e431fd0dd9e0d06ad088ecdece63e914

    SHA512

    144de0f32b71f97ff2d18291533f1e1846837696265adab04a75666cad22013d480d7d98e79cce818ca6612d7e2b3982406e4dae791b6d9dfde8fa33de8f2179

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    814f3d1b3c9b975e7cfa3c5db8de2c90

    SHA1

    844c64bc9b2409792bc68e96d188612a81a02ea9

    SHA256

    d70df6777ff9b53affa1e1964701271e674bea962ed685ceccfce2698bc8b7e1

    SHA512

    3c5356ad362979a8a9257cac15e795145d14351b5524700c5337efa2357bbc83760c40faf4e2241a9914ed9baa0a69baa8643ee65da07bc8d0f47de18775a505

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    634a500a9fde419c3d44c53e454a5b69

    SHA1

    0c6131047ac2bc1f31f690ac8d1fa4a61b1a33d1

    SHA256

    4553e7b2898c43694a14dd2f94dd6e01de9f62518c4122150b5319542fb67a08

    SHA512

    6e83bf29b1c5bfce37562a6904e5076e9f324e8c7ad92fa06e47bb207513adf2a7c3f0e6f32e350863e16532bcee9be133b234fc8654a7ef24d4b8fdd74cbb54

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    050d53543559e58ae19181712257d3b8

    SHA1

    d1873e1854f75cf4bcba7a3e2974bb3ba5121bbb

    SHA256

    1227784aec94bfbb1a77d2dc1d0ad6a68a3c13a5fb27475637f55ea8cb407fb1

    SHA512

    b2d33a9900456bd7795294ac974fed2e14a97a8d31622310024c98286ad9fcbce7c76931959fee076b7498f50559776606ae78ad584c7674fcfa2f35af001dd0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0ecd1794a42c0c0551ac884cd37653e7

    SHA1

    9430d4f6da908e670b19affd7190e26b2dc6c28b

    SHA256

    270748032b0dd9aebfce3d9f94aab384da385bd4b7cb9cfe484eddcffe7fe8f1

    SHA512

    c3e6adf9a71e6ae51c752ede3961a9ce467fa4178a085df58f4c6473d4a92475a24d874dcf78d2623d6d83db81f6ae06b7a4599a1c3530cceceee844f883a2e7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c3623e125bc44334a742d5ab9c85eba1

    SHA1

    d84e1ddcb42c1d04535e77eaa816f9422f178f06

    SHA256

    03a880a4c9be2f72c32f2292044d0bdebc842c6661948a0749dd5d604a5b2264

    SHA512

    d2178cd98696b9f5061f87bf3132f1c0778264d002e74f47f05c65197a2297f3b0af1203cfdaa61fe11765d14443c39222389499c42bdd72bf18b81b403d1b2a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c92478d4c637a13eac50c0fef4b86dd6

    SHA1

    52629a8e15d23694719350fd85c608688f651cbd

    SHA256

    469cbc2de35a212b4c9550d77e735333cffd16d2c0102a4ddef201df35c5e01d

    SHA512

    886a1b337f37e7a45b292760317a99c2202e067fbfca6471df2a302dbb3239c08681adad9cc05a1e99ede04a2ca1f15479dd3dc77174301aa6a84ed911ae093b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    168b7ecca4250ac9f0e9228288e778d0

    SHA1

    d33d92460a86566c6e34d84f4523f620cbdc7a83

    SHA256

    bac38db88bf0c9821a51dc07103325264b884c2ecd8c867d758d7514110c4fb2

    SHA512

    f071c840f39c639c35aec0cfb710870cbaae6df07514238dccbdd98cd1519110f4598dfaede12473d6b9cd1a16d1b5934fe66e2eaec63ad8baa63953f78149db

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    acc9b513f35366a2fd215186aa32ef4b

    SHA1

    b5e5fbc5913b1d6886c40d6d83e923dc81496a5e

    SHA256

    fa7cc0c9c3fb39954cc076ebe6e50c8eebc122db746606d46276a7ff186ff673

    SHA512

    4944bbb743f89910891110dc7e5e5f34008f52d4dbe098318c4993a4381ffef595f366ea83d781180e26e1eb29f827f098098cf265070e2cbc107175656d0010

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9e39e8e8d9af3eb4bbad5618359b8837

    SHA1

    fe644f32f39f2ce1bb771fadf60aa84e3032b97f

    SHA256

    bf29c88d94553bc216949564b7e4e94c7d72ae364357b7ea15e0d3b0753fcb7c

    SHA512

    e3ec4311a31325762273eda5f0f74e20f095f75da05f6b42c5fb419f583656a427d814f14e7d9afe744a208264f6734d87081aa77951b408ead161f1b2e0b89b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a59077c511b92b3081059c14b343d7a6

    SHA1

    65fd33a3d9218c4ff55cbe4ca1daad3610088ba6

    SHA256

    e8d30533ccef2459d4d52582a532f393aac136bbe89b834afe158c8b1b9de1a6

    SHA512

    aab594bd98cd293e24aa7f556a9195d451d161506d413efe2dd4941d7fb9344efe9b72c6ae84c20a86b289225bab8002bb9b33f4c6a9951812e223547bd3c114

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    dfe38576c92581f68e2d208f3cc96fe3

    SHA1

    41761ffe076008cdb4cc450497adc9acfea68cfd

    SHA256

    f5566d8faaffc023a312fff881a2cfed23d92b3090e959fd37717d003d9fd90f

    SHA512

    3ce1095d7f80905f34cea6d18359ba4046faee2ee4e8cea2f4ede575bda0b00c235c4af49ccaaef72ee6aae7e0997dc6e9504a686ddbe35f2a4e948d5b32297c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    18d7f76448cecf70a5caecd6cc52760f

    SHA1

    e6625bba870bf2e948d9d33cc6c3aab6357b0829

    SHA256

    dc0b9f0eb488705cad2a9daba5722e3241d22af46af5ffa5aeefad78a1dab0da

    SHA512

    c81df339c9532faadc71b03b48ce5b0fa2158ce98680be2bbafa05c05e3b640701d1b1821dd449a2821fb58142ace45c03ac1ae7b6e2b40fd8d1372bf7981d94

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c30c571111cbe19c446e186979d58a98

    SHA1

    d9ff9367db576992ff87597bc73bb4dcf9141209

    SHA256

    628008d1e0fed1a7056d9f08c67549c00fa8c225dcdc50d60fccb13d4a3ed1dc

    SHA512

    9b30412409d011ffc64150635c7e14fa641723c6ae084092851f8ffbd145bb42e29f79045a3fe03fb8f9f80612f1c3731ee7cc85f75998869ec441901136e886

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    72008744ea432b6b7f359cce30490054

    SHA1

    4a0f06e910e1b16f5f4db4732324767577743def

    SHA256

    a04d2bc04a73dcdb6fa414d237ca4cdaf451477b70033f45382e3efef42b2149

    SHA512

    af5a39a936492134604496fcfc3ff9c2fac114787cd4d7c5c0d404c2b09548a26e8c1558cd0b210b7fe5d20b9765d6a21f3825c1f99172eca5eb6c17e95a2daa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    aa913eb5ec7a4391fd18c5a7b323dc0f

    SHA1

    7a65aed9bbb12e7d55056037b102fb734f3b7756

    SHA256

    f995ee8db3197834d21be20c3204adb09a474d5b3abc92783ee20d5f45a7889b

    SHA512

    ffb7ebe814503281cf2269823d3899509e321d4f62839a771e7049450b09975b912ea173c65ed08c04a89c5cb38babdce789335ac43e487cb2f756ddd3b79dd5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3bafc8401382361cf3c05116563d0549

    SHA1

    0c7e97ed69d851292e2aa6dd49b5517a230550c4

    SHA256

    4f8f763d0b202587b1e393edea9bfd228cdf6bdf705faee5030599d880918433

    SHA512

    45e0b8d2c7ace39cfb516dbf2ff57bac0edcaf6135446745bf31f465b08cc90b6c8ac8871bcdd6a94dc0354b81c536e9d8251a3079b77302300c3ce7259de214

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8f76ae56a7b0d0fbf8e537381fd0ca24

    SHA1

    a9aa1ea41b3826bee2b1e2667de49ebbebe2d2cd

    SHA256

    6a83b130222340aa8dfb45ef2b497ae75d69f25858189792236788d181ea753c

    SHA512

    5bac8b591b5b738ea0b0332b2edd2007a471202add10800033ece745c54f6395022aa8cac69cfda6a2a85196905317c008166a0aedc5dfdb54a863defce4a97b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    716763e4ffde1d32f4d7637747117125

    SHA1

    d53fb9d02942e67fba488608aabf4be6e10d9fcf

    SHA256

    680ef1b6c32c3810d8cb0dc3746d79fed09305c410c8704d189b9564ac71e48c

    SHA512

    9a461dc0d2ebd4ecae7d7fa5c48f5cb67bc6620fa19f645af3caf9f77e66485d26df1f419e1f1d728e7cdb479db5ef315c6bd7165b568928483800d0b5cacef2

  • C:\Users\Admin\AppData\Local\Temp\Cab847E.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar881A.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06