Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    198s
  • max time network
    249s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    29/12/2023, 19:24

General

  • Target

    019eed390af19b3a664934bb3ee0c214.html

  • Size

    16KB

  • MD5

    019eed390af19b3a664934bb3ee0c214

  • SHA1

    cfa7dfeeab1fa6f7e246b6fefb4978848d7857c0

  • SHA256

    e77453521723a2fa6e34f991db82cc555251785a4ae55f466a5560495a7a31ce

  • SHA512

    622dcdced953c70ea9df189fd6a7c1df72b6dd89c573192aed9f25e7376b0c148a6253346bdee208aba769f5d72781318e514770c7446d0453e5f9f2dd6fa6c2

  • SSDEEP

    384:eZQcBJDl+XcaiwTOnAAwVAJONGmO56HhzOT9hXHu6L562V:fcBRlq7a/SAk1+3NH

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\019eed390af19b3a664934bb3ee0c214.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2540
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2540 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1644

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    808e0d87c5c4b354c62951ad049019f8

    SHA1

    6fdad814ab52a8bc806b711f0380734cc3ffc0d5

    SHA256

    c1b3a1dee6be3178003a796edf39cbe5dca5258da7b64d5730e138b3c01cfacd

    SHA512

    754a3308d8fcc4a640c4fa4192ef2c467b5019a6d6e90d98306067cf7e06c7aad8f63fe6f0e36efbee4b972c30bab3aa8420589e18bbccb3bcd62de781417d72

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    aa045ffe73ce2feac548b5513c4ffeb5

    SHA1

    f874d468d2fb4c46da6630a9fc289392adc216ef

    SHA256

    6a1819b3aac9357108e7cd357e27c2170c8f15b004f939b8d1daad3c9a9d2846

    SHA512

    5c342a7e206ff06806ac8ad13bf4c74c8e6d9e6a091abceb22d9e46d055676355dd3201c5e14a07a4d6d1ba5c492cefe66ec357662f9eb9f96584b37028a084b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    628b22c33bd2f738f5110e4d9dfde84a

    SHA1

    43105490e9250ffebdb3ad2888fff045f9d02c1c

    SHA256

    7cf076f7c46d4bc7039244d327e6acc24a968145e8fc2fedaf4b7d31856120ca

    SHA512

    135026a0064497077f8852bfaf219b345058c6b6c1514185b34a64e46afc8c3aabcc8a3a04ab70762e80bb2f98c725241ea3f562b3df8a30bd6587a9590c909f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    45bd4ce04f254712d0408b951d03388a

    SHA1

    697120cb0be179383eddbc414b6afbf9d7dd690a

    SHA256

    9c60c33c83cb0ca28f66ba2728a06025269ac5ec26b3cd8e65c3867864ef78d2

    SHA512

    0da1d7ce25f32f15ba27590c720a87f35266b6227e97c74150586d5824aa25fcea7307a923bdece89a2b3eee9629e276ee2db60ca36e3838a34edbead3803267

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    77fb5efcf3df8090c841db4701931a22

    SHA1

    d85ee0df45e877c16225219b1af0519e98088d02

    SHA256

    fe9e3db59924ce5f9481cd639e862eb0d1132366f42613a4f0bc3272a93bcfb0

    SHA512

    03fc37acb19ba474da5ade889133b95ea0682cca5c6834add75f1833411ae9ee4517116bed333fec528b1cdbda14b2409021470fa5b14e6fc89e95f0ed2a47bc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    80159fa0aa7426032b77265af0629eb3

    SHA1

    daf188711717cb2999247a265a67d2506b0de139

    SHA256

    aca8ced6601a03b34ec321590b669774ac6c0e5285643e17eb265309a31cccb1

    SHA512

    60aa1b610a535a368b13bc21a07f678212c610915aaf8094f3e8ec661c29b26711aa42e4dfa3a27c58f83621dcd780c687b63f9f8ee63665c0958fd8422b568d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e01a5c96e5fb896b5f5ca4c2f4553f16

    SHA1

    63e160b1e7265a33bb22b7eacf816135915a34d0

    SHA256

    2ca974689f4c7be9c8aac152b36bf642d2a10fe727229240ea4de85fc7982a6a

    SHA512

    aff99d6aba2149401d3dd12789627b8aefb5b921865bfff306e2420bff4b90b2490259145cb6c3c42beb1f517b490249daaef289b27c18ac9348be4c27b7738f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b30323cc5c7d8f094e12c03aca7370f8

    SHA1

    5b421a4179196da438c945bc4b664d6120473b64

    SHA256

    7c1a3ca925d3b2d30f91af2899a24d4e239d15b0c2815458744067eb40ab3e29

    SHA512

    b97e2d546cbe108acb95e15155d5bb31e59886ab10692147bff261ef3e2ee0ef91028072acdc6e5f517c82bc335afb868998162c2007d6eecfaca200893830cc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f87b115592ef174a667b20d447a999ba

    SHA1

    22295ab529d62d7bf65658b27a5aa080d1efbdf9

    SHA256

    db22954abfda2d69606d8a7dbaa222c2bcd70ee3e4fc645749cac2e9ea9e0492

    SHA512

    bcd64bd3c90491685b38e2894c74079bc6e0b0fd66753ee0d9a7bfe9606d9f769c9ee1e8edb4fc44df8d808d23dc6365aae56adda85194ce67e1ca99184cd8f1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f24be08b708bbd1ce85c722030ba112e

    SHA1

    e8be293e6fc0d557e8bfae84e53601199c199aaa

    SHA256

    f01fb9a1d103b1b72f478f607201e7d0a87709a720316b25f532c738914dc536

    SHA512

    511223568d9995e9984005ef6c940c19b8ce0a2e6f1ebeb51672cb2e16ba8670b3f05912168407c3a02f73295d63ef4c639aa21e37d4044938be1ca3eb0c8edf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9550334d3dcd93fd3fb4f1491b90b57c

    SHA1

    24bef675d33f560f711aa123bc9d0c17835bfc7c

    SHA256

    8a8ec17de70d4dcf22d9104476f19ccde4a7f861012ef1c2678e61b3f89c4d82

    SHA512

    d5694d693f2848de9c96a01258156ec07cc9a22d3e901e29e1208956ccd36aa014f9321a1e516703ea6691c072d77478e6db29d1ea4e9dc702e0796cb1600260

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c263fb7902b833bf8ab9bf4a426d0f66

    SHA1

    a0cc4b070def81e711df9f1626ec477f51f3cbf4

    SHA256

    2e3746991216802160a1570a784f6a8dd246a9e27571a28e86c06135e4ad6e2a

    SHA512

    30c6a4dc919a28b7b9c4710fb7151c956a094ea5aaffa10876091014c44cd61fb7aa9fdd898c98ab4c488bcc139509eb08da51eb6d110050aa86717c980dea25

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f18952a1ac029b7a2ccc6109a9f34a0e

    SHA1

    1f4e2cde2a46ffaf31606a565311f3b232229c4f

    SHA256

    2c291cab59385f0e27bd8ccfce78356fb96995f76e99e1ba15d4dc0544f8b888

    SHA512

    1d898b78ac2e24756d489529971dd59ecc3c0517c63c8fa3e6ee20e3d0c0c345bae9f9a929fab3881b39bd5043174b01b86504b4819afab7b4a2a23c8d868455

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a590049ea3ed4e28c9e960f532019168

    SHA1

    4900bb799630394ee7ad1d240e61d8ece91e2c05

    SHA256

    1079449eab87dfdd2333fc876affb59b8da32710073f0f7b9dfa5fd72b418784

    SHA512

    d5ef26091386676bf9cefe12ac584f8d8cceeafd919537b8c71405cc1732d89f0273cde736ea76807d8bdba567e2c00f76ed77e8feb541551eb5cc1fd76d3cbf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4062ee019d62e001ffa72a7be6f4bfa6

    SHA1

    09b526e44c9a492700d28344d2c93e414f103370

    SHA256

    943a7ac6735a588960d1b8519b88a9847efc41b01a65904cdf7ed68ad11a8720

    SHA512

    195ce0b137d23c5285c49a1e4f088d77616941638ab4a0dac8d96a0863112b77d7270eab919623c0b23a833672c7e65c2714e1fc25ae5ebbdd4974a390868c46

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4af15d8c656ffb1f9ff3d4bfc26b2cc6

    SHA1

    e04ec11e9b78f7aaddd42afe039c072963cd2b4f

    SHA256

    560ecce3e533229886f54a5b13c128a15221eebaebc21ab4806cbee99d6945bc

    SHA512

    42de7fc9bd1bbc0163e90d2436727eb838b36708cead00221aa8749f2eea3afe5ad18a4e59a80712d9c93e44fd506406499690465db17e93bb11e6cd9b3b15c2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    95e144f6b7944997fd89ba300050f848

    SHA1

    351cb2bb6812f2c26c7a79e26a0df248a7a8673f

    SHA256

    56ceee6da4c0ce4b15b59cf5e224209cd49cd6095fa8bfd7d51f6845c8bbd929

    SHA512

    e404723eaab05aa47fdae19a34927cf1e1c59358c6ec8601c1ba516e5acf639efaa09d179ae6b2b0f7236e6bce8c3cf4f3e02b80c37c0cc495da7cbb383f2c6f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8100937c926c4ea4d8b3cfa675b7ba87

    SHA1

    7ab59c2e9d49287a408512eb1456a14648c03c6a

    SHA256

    1463296aa1663c0a06ad714a14afd4c1c9ea1a6f650c9ba949f451589776e24b

    SHA512

    ce10a8628026e1c0553f08a4783298832d903727cdca6840c31ceffec22de275f1d75775f9ef08ec07e9abe362d26688cfaf72a447cda135f9314668614bfb05

  • C:\Users\Admin\AppData\Local\Temp\CabCCB3.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\TarD11A.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06