Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    119s
  • max time network
    138s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    29/12/2023, 18:14

General

  • Target

    002f629a40e84e6b31ca8a508cab1ec1.html

  • Size

    27KB

  • MD5

    002f629a40e84e6b31ca8a508cab1ec1

  • SHA1

    83025cfcbfe967035313f7ca60ebdf9c858a95a2

  • SHA256

    ec8abf8a6c322833b84e5b883d873dceac82d4e6ee07e2b33b5623b4ba5f7b3b

  • SHA512

    162b1389b7430f3e7ee3788f425778322789862c1aaad3bfba3a107bb7725250f952d960d9736b53189e1dbd20704caf18defa1914ac9960970dac81a890067c

  • SSDEEP

    384:u9uQnTsn1o/je2fz+944TubjHGZPWBMd8EZ5JVX/NGfzGuRKcq/J:muOLe2YhejHGJWMdBZxvNGfagF6

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 38 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\002f629a40e84e6b31ca8a508cab1ec1.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1748
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1748 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2340

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    23533934f70adfbf0690c62ca310a6ca

    SHA1

    ecdaa3f07689f35a7f9da82639aada52a8d2b6a7

    SHA256

    064d9e96154aba066c98dc9366a5a73c443212f51de566325fd8d1929f187ac7

    SHA512

    1c667c98d153d758fc53fb458f5574c0ee73a71fbce7d7da5e2ba0f860df41851e3adc0b37ee0363b8fe97b3fc559638b7b7a20c172a8d0e701c611b6033ceb5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    24900aa070308fa61728d33a6cea0579

    SHA1

    b38527b0fa173df91f79fade11f3169254eb42bc

    SHA256

    2010f335853af9a68fcadf9d6757e694f07f8527c002e529a4835e7187ce380c

    SHA512

    d7f7695225a81419badf46e1314f16942914f1d4735478d1793ffaea8508e70952cfbba5ee5bedcb84f492b8f939cfd9bfed03c6f598585249aa733feb0525ac

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1361a67ebf78c07251443f0dbf424994

    SHA1

    f4881a64d474e35a76464a65c8cedaf4afe374f8

    SHA256

    654771a356af815b0d24157a2aad82245839ea872cb320df254b8458406f24de

    SHA512

    a099b12337ac5bd89cb48239e102062159a426144f4df040fa8d789deb83b5e110c12d558fd4710a8fd5f40882de75d7702c464fe36de3ae414fc8879f07bbe7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    93a5beb52025eced07af769bb6961111

    SHA1

    00abcd3eb43071ec2f7acc02beb5127715eae195

    SHA256

    f56c271eab7b059213e47e84fbd5496316a2da7f2b713e2cfd681950a24978c4

    SHA512

    9ca161ea327d691d4235df023252e349dcfd6d5fca9be0815767034d4d6b8ea5cfec30674d9a77db93540079060c8bb11ef56779ac37e6943a40eeefec03fca9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e3d2f0ab639e9ec4f8d37199b6a989e8

    SHA1

    3ad67f9bb3923b1e67eb4370150105f9efad9dbb

    SHA256

    c0fafa56f348af10076925c6e13a2b15b89573a6159b62c9201890891ef05e53

    SHA512

    2df43cc5dfcbe8cf97ae5bc25b6e19556ae0ff8be1679fcfdf638fdfc7e5d68e5bdff4aff66ca63f7fe84d5c637e582fdaa88d40254dfb73ab3ad1c0f83d2020

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a99a447bc500072f0cc1919a00c4ccf7

    SHA1

    78c7cbae32f085675c6505421b663195e9b4c16f

    SHA256

    30b057c5eae025ea8609be28fa532331c94e538d0d78d408e89a93653724c9b9

    SHA512

    4661258c29e7612ba890ea76340358b58b5b63c56c8499ecc5dc1be6c7bcae1ffa8e0ec994a2e0da7a8512fb9fda9f89c53e98ec1a84900e42c4e2db06bc343a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3658a5f2299aaa7b2e6c083b506c605b

    SHA1

    c0e6c1f4f8b5dd2c7b1df8b2139a9d96ff0d9601

    SHA256

    4236ddc3d641c5e4154794c07a9d0aafc0c255ce5c2a02f82b56655a21a81caa

    SHA512

    e5ecedeb51553e0d10f33fd9f4378b3457797274df5676cea1c303e3931767bd16716e71c1df661a74631018546b4d91f2262f5c805c69161691cad6dd0deb3f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0743cf3dcd0ae855d1cc3968633e0fb0

    SHA1

    8a29427eec71085a5aea8abe6b8acd5acfba5453

    SHA256

    586de811f9c83e3d456986ea97d8c6c648f2082b8f2a2de6d68226fdc291b188

    SHA512

    0f6cad374540ec0adbde9339a8a4fef52a6c18820f07c1f27d838e735555ff2f490ff53f29f05099c633f11471443765e6e6fc1a3df4928334e213fd136468f0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    be4a25fbeef758dcdeeb136a5d9e0808

    SHA1

    5f801f95d74aeb72bed115a4d1a1b39d05ecbaa9

    SHA256

    84c2aab9edf4f38f8a835df6970c01ce0dba5a8fee870a1a0fdfd4137ecc49c0

    SHA512

    9f26219653892e651770681e7b11656d64c7911f6f51c1ebc673bb42e4ab894ee5bd854cd3ad121a148c8747c2808b55f33515853dbbe8cc9ff342bebd220c9a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    ced0d1f4b60ad5ea2b56d9035161a63a

    SHA1

    a397dffa2ec98385ac2a1138e010d900b2dcd046

    SHA256

    73f082bcaf8804a26de9f0c56f9520e27161cc0f2c481fc4b2323b34a01e27a0

    SHA512

    696fbab1d60c8684aa2f9db59b3991641b062eccc03e8e0a2af39ef3ef2724cac307cc4c599c6b1eb1011e161082ea3d4867dae313e064482ee28d0713cde245

  • C:\Users\Admin\AppData\LocalLow\Microsoft\Internet Explorer\Services\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico

    Filesize

    4KB

    MD5

    da597791be3b6e732f0bc8b20e38ee62

    SHA1

    1125c45d285c360542027d7554a5c442288974de

    SHA256

    5b2c34b3c4e8dd898b664dba6c3786e2ff9869eff55d673aa48361f11325ed07

    SHA512

    d8dc8358727590a1ed74dc70356aedc0499552c2dc0cd4f7a01853dd85ceb3aead5fbdc7c75d7da36db6af2448ce5abdff64cebdca3533ecad953c061a9b338e

  • C:\Users\Admin\AppData\Local\Temp\Tar3F57.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06