Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
198s -
max time network
249s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system -
submitted
29/12/2023, 19:24
Static task
static1
Behavioral task
behavioral1
Sample
019eed390af19b3a664934bb3ee0c214.html
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
019eed390af19b3a664934bb3ee0c214.html
Resource
win10v2004-20231215-en
General
-
Target
019eed390af19b3a664934bb3ee0c214.html
-
Size
16KB
-
MD5
019eed390af19b3a664934bb3ee0c214
-
SHA1
cfa7dfeeab1fa6f7e246b6fefb4978848d7857c0
-
SHA256
e77453521723a2fa6e34f991db82cc555251785a4ae55f466a5560495a7a31ce
-
SHA512
622dcdced953c70ea9df189fd6a7c1df72b6dd89c573192aed9f25e7376b0c148a6253346bdee208aba769f5d72781318e514770c7446d0453e5f9f2dd6fa6c2
-
SSDEEP
384:eZQcBJDl+XcaiwTOnAAwVAJONGmO56HhzOT9hXHu6L562V:fcBRlq7a/SAk1+3NH
Malware Config
Signatures
-
description ioc Process Set value (int) \REGISTRY\USER\S-1-5-21-3308111660-3636268597-2291490419-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "3" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-3308111660-3636268597-2291490419-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 70fad1a2913ada01 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3308111660-3636268597-2291490419-1000\Software\Microsoft\Internet Explorer\International\CpMRU IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3308111660-3636268597-2291490419-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Enable = "1" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-3308111660-3636268597-2291490419-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3308111660-3636268597-2291490419-1000\Software\Microsoft\Internet Explorer\Toolbar iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3308111660-3636268597-2291490419-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3308111660-3636268597-2291490419-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3308111660-3636268597-2291490419-1000\Software\Microsoft\Internet Explorer\IntelliForms iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3308111660-3636268597-2291490419-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-3308111660-3636268597-2291490419-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-3308111660-3636268597-2291490419-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3308111660-3636268597-2291490419-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3308111660-3636268597-2291490419-1000\Software\Microsoft\Internet Explorer\International\CpMRU\InitHits = "100" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3308111660-3636268597-2291490419-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "410041770" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3308111660-3636268597-2291490419-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-3308111660-3636268597-2291490419-1000\Software\Microsoft\Internet Explorer\LowRegistry iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3308111660-3636268597-2291490419-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3308111660-3636268597-2291490419-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3308111660-3636268597-2291490419-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-3308111660-3636268597-2291490419-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3308111660-3636268597-2291490419-1000\Software\Microsoft\Internet Explorer\Main IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-3308111660-3636268597-2291490419-1000\Software\Microsoft\Internet Explorer\Main iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3308111660-3636268597-2291490419-1000\Software\Microsoft\Internet Explorer\InternetRegistry iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3308111660-3636268597-2291490419-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3308111660-3636268597-2291490419-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Factor = "20" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-3308111660-3636268597-2291490419-1000\Software\Microsoft\Internet Explorer\DomainSuggestion iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3308111660-3636268597-2291490419-1000\Software\Microsoft\Internet Explorer\SearchScopes iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3308111660-3636268597-2291490419-1000\Software\Microsoft\Internet Explorer\GPU iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3308111660-3636268597-2291490419-1000\Software\Microsoft\Internet Explorer\Zoom iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3308111660-3636268597-2291490419-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3308111660-3636268597-2291490419-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3308111660-3636268597-2291490419-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3308111660-3636268597-2291490419-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Size = "10" IEXPLORE.EXE Set value (data) \REGISTRY\USER\S-1-5-21-3308111660-3636268597-2291490419-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3308111660-3636268597-2291490419-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3308111660-3636268597-2291490419-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{98256711-A684-11EE-82B3-FA7D6BB1EAA3} = "0" iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-3308111660-3636268597-2291490419-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" IEXPLORE.EXE Set value (data) \REGISTRY\USER\S-1-5-21-3308111660-3636268597-2291490419-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000a883829c536588438b4279b7bc6c1930000000000200000000001066000000010000200000008cf8fa96e4e47e6b9b65c74967cedc76e34904e3477b5bb9ad405d3fdf7c39b0000000000e800000000200002000000062e5addcbc164e9e9d148da0e0ad9914602e4bfe165033ddfeadd9f03132aa8e20000000293d5eb5739e213d8f1919b6400f8e727dace90370c80ff89c7891bd7f6bc6214000000028366282d85dd124f5ff2995eddfac27b4de61e54e9a3e6d53d441d4d8371a13646e715fbdb75ecda160bd5c6f16410db53e6080d0c949f97e119290e457e431 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3308111660-3636268597-2291490419-1000\Software\Microsoft\Internet Explorer\IETld\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3308111660-3636268597-2291490419-1000\Software\Microsoft\Internet Explorer\PageSetup iexplore.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2540 iexplore.exe -
Suspicious use of SetWindowsHookEx 6 IoCs
pid Process 2540 iexplore.exe 2540 iexplore.exe 1644 IEXPLORE.EXE 1644 IEXPLORE.EXE 1644 IEXPLORE.EXE 1644 IEXPLORE.EXE -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 2540 wrote to memory of 1644 2540 iexplore.exe 30 PID 2540 wrote to memory of 1644 2540 iexplore.exe 30 PID 2540 wrote to memory of 1644 2540 iexplore.exe 30 PID 2540 wrote to memory of 1644 2540 iexplore.exe 30
Processes
-
C:\Program Files\Internet Explorer\iexplore.exe"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\019eed390af19b3a664934bb3ee0c214.html1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2540 -
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2540 CREDAT:275457 /prefetch:22⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:1644
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5808e0d87c5c4b354c62951ad049019f8
SHA16fdad814ab52a8bc806b711f0380734cc3ffc0d5
SHA256c1b3a1dee6be3178003a796edf39cbe5dca5258da7b64d5730e138b3c01cfacd
SHA512754a3308d8fcc4a640c4fa4192ef2c467b5019a6d6e90d98306067cf7e06c7aad8f63fe6f0e36efbee4b972c30bab3aa8420589e18bbccb3bcd62de781417d72
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5aa045ffe73ce2feac548b5513c4ffeb5
SHA1f874d468d2fb4c46da6630a9fc289392adc216ef
SHA2566a1819b3aac9357108e7cd357e27c2170c8f15b004f939b8d1daad3c9a9d2846
SHA5125c342a7e206ff06806ac8ad13bf4c74c8e6d9e6a091abceb22d9e46d055676355dd3201c5e14a07a4d6d1ba5c492cefe66ec357662f9eb9f96584b37028a084b
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5628b22c33bd2f738f5110e4d9dfde84a
SHA143105490e9250ffebdb3ad2888fff045f9d02c1c
SHA2567cf076f7c46d4bc7039244d327e6acc24a968145e8fc2fedaf4b7d31856120ca
SHA512135026a0064497077f8852bfaf219b345058c6b6c1514185b34a64e46afc8c3aabcc8a3a04ab70762e80bb2f98c725241ea3f562b3df8a30bd6587a9590c909f
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD545bd4ce04f254712d0408b951d03388a
SHA1697120cb0be179383eddbc414b6afbf9d7dd690a
SHA2569c60c33c83cb0ca28f66ba2728a06025269ac5ec26b3cd8e65c3867864ef78d2
SHA5120da1d7ce25f32f15ba27590c720a87f35266b6227e97c74150586d5824aa25fcea7307a923bdece89a2b3eee9629e276ee2db60ca36e3838a34edbead3803267
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD577fb5efcf3df8090c841db4701931a22
SHA1d85ee0df45e877c16225219b1af0519e98088d02
SHA256fe9e3db59924ce5f9481cd639e862eb0d1132366f42613a4f0bc3272a93bcfb0
SHA51203fc37acb19ba474da5ade889133b95ea0682cca5c6834add75f1833411ae9ee4517116bed333fec528b1cdbda14b2409021470fa5b14e6fc89e95f0ed2a47bc
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD580159fa0aa7426032b77265af0629eb3
SHA1daf188711717cb2999247a265a67d2506b0de139
SHA256aca8ced6601a03b34ec321590b669774ac6c0e5285643e17eb265309a31cccb1
SHA51260aa1b610a535a368b13bc21a07f678212c610915aaf8094f3e8ec661c29b26711aa42e4dfa3a27c58f83621dcd780c687b63f9f8ee63665c0958fd8422b568d
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5e01a5c96e5fb896b5f5ca4c2f4553f16
SHA163e160b1e7265a33bb22b7eacf816135915a34d0
SHA2562ca974689f4c7be9c8aac152b36bf642d2a10fe727229240ea4de85fc7982a6a
SHA512aff99d6aba2149401d3dd12789627b8aefb5b921865bfff306e2420bff4b90b2490259145cb6c3c42beb1f517b490249daaef289b27c18ac9348be4c27b7738f
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5b30323cc5c7d8f094e12c03aca7370f8
SHA15b421a4179196da438c945bc4b664d6120473b64
SHA2567c1a3ca925d3b2d30f91af2899a24d4e239d15b0c2815458744067eb40ab3e29
SHA512b97e2d546cbe108acb95e15155d5bb31e59886ab10692147bff261ef3e2ee0ef91028072acdc6e5f517c82bc335afb868998162c2007d6eecfaca200893830cc
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5f87b115592ef174a667b20d447a999ba
SHA122295ab529d62d7bf65658b27a5aa080d1efbdf9
SHA256db22954abfda2d69606d8a7dbaa222c2bcd70ee3e4fc645749cac2e9ea9e0492
SHA512bcd64bd3c90491685b38e2894c74079bc6e0b0fd66753ee0d9a7bfe9606d9f769c9ee1e8edb4fc44df8d808d23dc6365aae56adda85194ce67e1ca99184cd8f1
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5f24be08b708bbd1ce85c722030ba112e
SHA1e8be293e6fc0d557e8bfae84e53601199c199aaa
SHA256f01fb9a1d103b1b72f478f607201e7d0a87709a720316b25f532c738914dc536
SHA512511223568d9995e9984005ef6c940c19b8ce0a2e6f1ebeb51672cb2e16ba8670b3f05912168407c3a02f73295d63ef4c639aa21e37d4044938be1ca3eb0c8edf
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD59550334d3dcd93fd3fb4f1491b90b57c
SHA124bef675d33f560f711aa123bc9d0c17835bfc7c
SHA2568a8ec17de70d4dcf22d9104476f19ccde4a7f861012ef1c2678e61b3f89c4d82
SHA512d5694d693f2848de9c96a01258156ec07cc9a22d3e901e29e1208956ccd36aa014f9321a1e516703ea6691c072d77478e6db29d1ea4e9dc702e0796cb1600260
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5c263fb7902b833bf8ab9bf4a426d0f66
SHA1a0cc4b070def81e711df9f1626ec477f51f3cbf4
SHA2562e3746991216802160a1570a784f6a8dd246a9e27571a28e86c06135e4ad6e2a
SHA51230c6a4dc919a28b7b9c4710fb7151c956a094ea5aaffa10876091014c44cd61fb7aa9fdd898c98ab4c488bcc139509eb08da51eb6d110050aa86717c980dea25
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5f18952a1ac029b7a2ccc6109a9f34a0e
SHA11f4e2cde2a46ffaf31606a565311f3b232229c4f
SHA2562c291cab59385f0e27bd8ccfce78356fb96995f76e99e1ba15d4dc0544f8b888
SHA5121d898b78ac2e24756d489529971dd59ecc3c0517c63c8fa3e6ee20e3d0c0c345bae9f9a929fab3881b39bd5043174b01b86504b4819afab7b4a2a23c8d868455
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5a590049ea3ed4e28c9e960f532019168
SHA14900bb799630394ee7ad1d240e61d8ece91e2c05
SHA2561079449eab87dfdd2333fc876affb59b8da32710073f0f7b9dfa5fd72b418784
SHA512d5ef26091386676bf9cefe12ac584f8d8cceeafd919537b8c71405cc1732d89f0273cde736ea76807d8bdba567e2c00f76ed77e8feb541551eb5cc1fd76d3cbf
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD54062ee019d62e001ffa72a7be6f4bfa6
SHA109b526e44c9a492700d28344d2c93e414f103370
SHA256943a7ac6735a588960d1b8519b88a9847efc41b01a65904cdf7ed68ad11a8720
SHA512195ce0b137d23c5285c49a1e4f088d77616941638ab4a0dac8d96a0863112b77d7270eab919623c0b23a833672c7e65c2714e1fc25ae5ebbdd4974a390868c46
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD54af15d8c656ffb1f9ff3d4bfc26b2cc6
SHA1e04ec11e9b78f7aaddd42afe039c072963cd2b4f
SHA256560ecce3e533229886f54a5b13c128a15221eebaebc21ab4806cbee99d6945bc
SHA51242de7fc9bd1bbc0163e90d2436727eb838b36708cead00221aa8749f2eea3afe5ad18a4e59a80712d9c93e44fd506406499690465db17e93bb11e6cd9b3b15c2
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD595e144f6b7944997fd89ba300050f848
SHA1351cb2bb6812f2c26c7a79e26a0df248a7a8673f
SHA25656ceee6da4c0ce4b15b59cf5e224209cd49cd6095fa8bfd7d51f6845c8bbd929
SHA512e404723eaab05aa47fdae19a34927cf1e1c59358c6ec8601c1ba516e5acf639efaa09d179ae6b2b0f7236e6bce8c3cf4f3e02b80c37c0cc495da7cbb383f2c6f
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD58100937c926c4ea4d8b3cfa675b7ba87
SHA17ab59c2e9d49287a408512eb1456a14648c03c6a
SHA2561463296aa1663c0a06ad714a14afd4c1c9ea1a6f650c9ba949f451589776e24b
SHA512ce10a8628026e1c0553f08a4783298832d903727cdca6840c31ceffec22de275f1d75775f9ef08ec07e9abe362d26688cfaf72a447cda135f9314668614bfb05
-
Filesize
65KB
MD5ac05d27423a85adc1622c714f2cb6184
SHA1b0fe2b1abddb97837ea0195be70ab2ff14d43198
SHA256c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d
SHA5126d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d
-
Filesize
171KB
MD59c0c641c06238516f27941aa1166d427
SHA164cd549fb8cf014fcd9312aa7a5b023847b6c977
SHA2564276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f
SHA512936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06