Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    121s
  • max time network
    134s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    29/12/2023, 21:12

General

  • Target

    0421f06fef26279b2e12c9b208a0419d.html

  • Size

    8KB

  • MD5

    0421f06fef26279b2e12c9b208a0419d

  • SHA1

    386865f7b89f0e3d48a037797d312d1f3c8903e9

  • SHA256

    ab5838cee39b14fe8b2a225d37948d525ae80640b9da5e5eb83abe18c83c27fe

  • SHA512

    9c00626babac7085e7edd495fecb8cdb3caf2dd99b8054b4a1b6e0cd9d18a2374e97ceb6e6556ffa3be642aede5fb2721e2f967167f7742edb0f0c1db24667dd

  • SSDEEP

    192:F5OfeAMRyibW1HUxjyDYi9y4e1cwvNwD3ZqaEb:FcfRo9+0hyDrI4Ecw1wDZqaEb

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\0421f06fef26279b2e12c9b208a0419d.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1712
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1712 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2272

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5fbf571ad4875bc50cc3e0f328feb836

    SHA1

    e89aa12de5b0d5e2d5e82467635658a583bd267c

    SHA256

    4ee83036808b0a5f93ccf6b179ed8f47c24680c94d71ce8b46bc30ed0d53eedf

    SHA512

    99eef0b204fcaae76beb6559938b253a9d4cf0f1a6df410abfa48be7808ba84f07a749dac10ef5a1c3dbe06ddc9f4b5462d5ea103a298547568101bb78c23e19

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c9029a66877d49251f965d4de85efc1c

    SHA1

    a3aa23c3e7f91b90c2f53ca1fbb8574a9f3e08bb

    SHA256

    8de7d0c05b180c59b9435ef8611b60cb2c3ae23be3b555928b521410b58edb23

    SHA512

    fd95aac26000152c8c5e8361d5b2b540c0b50b0d0e5da883e36b4a7847cffda490eea70d8f114b8e0645ae207d131ff04d3311dac5423a4e1942c0cbb8353c12

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4b06cb5cae8580daedb0620d0054c70d

    SHA1

    38aa906ba1756884a8badf00955a0664dde8c5b0

    SHA256

    2c1d582ed65178059050530fa7f3b06a703cce8dd3c65bf468ad841b952b5c07

    SHA512

    6910872508881c671f034a1ee43aeaef006360f346e48ae4524df4ede246b36d27673eefa73560887d44e276dd7c34546c38495a720ddc8edeb80c0a10c98134

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    59aa04e40d83fefbc1f7a7c6654e0f58

    SHA1

    ba873caee349567ccb9f61d6ecee1e656fbe191c

    SHA256

    223c7ed0b054f9f4e9425a06255f7e8f7fb071faae4008d7c0606723071a0471

    SHA512

    9fa7e1597512d8f6969586b44927fc0e3d25a3b41ec73b3b687b40f78c1b99ee6b5afa3f1d583d6ee61a6305d961b8a63561dfd7c8343a60531df1a5cb6c3a84