Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    120s
  • max time network
    150s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    30/12/2023, 22:06

General

  • Target

    1df96744b4e0abdc56ecbf71f53a5a6c.html

  • Size

    895B

  • MD5

    1df96744b4e0abdc56ecbf71f53a5a6c

  • SHA1

    d77cf5d639eb0982ed84bda5540d35fe4ebd852c

  • SHA256

    3e8dec99ccadb3b183cfb903a86ad9639120d64af1bf73b97c1069aa4ce32aa2

  • SHA512

    c8b1b2224b8f42eccf2217a70d81813c438b262b43c1bb9ae406e1fde49481c8724711045c7b6cb730894692ce71d7843663a410ba1274bbb7b5fc576e387155

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\1df96744b4e0abdc56ecbf71f53a5a6c.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2352
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2352 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2304

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F59A01A8B782D93EA6991BC172CEFFB1

    Filesize

    867B

    MD5

    c5dfb849ca051355ee2dba1ac33eb028

    SHA1

    d69b561148f01c77c54578c10926df5b856976ad

    SHA256

    cbb522d7b7f127ad6a0113865bdf1cd4102e7d0759af635a7cf4720dc963c53b

    SHA512

    88289cdd2c2dd1f5f4c13ab2cf9bc601fc634b5945309bedf9fc5b96bf21697b4cd6da2f383497825e02272816befbac4f44955282ffbbd4dd0ddc52281082da

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    be2346275516bc9a6eac019658dd1521

    SHA1

    07fef960b588541f549d07bd90bd7f84deaef639

    SHA256

    da36367625b7f3dab053f9442a7c01e575b44fc53ffc184edbbc71954f31c88e

    SHA512

    42e154009f087b616c760f2bcf859fc29a31c7d4e4dd0a2d3a13a7626a187bcc0168ee6965f89888e0cd0d416061c155afbbd58d4b85b5e9e88f255ad649716f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1347ba5d4aa3a703c86eef05ca261085

    SHA1

    dc7d92e127496de49bb4fcdd42c2d233899f4cab

    SHA256

    260b58cb08628828d37f7af8502012ea21771bc83c2014d71804625fcfae84ec

    SHA512

    48c385339480ad75effcda88d27a2f1b70e12d4fcee3254a00be57480d4344007e3735a609130e14a3e5ed4c6d4e31c4110bc7dc2c32cc1e38207d66c657668d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1c47db5e44e4e98c77d6495e78ceedb5

    SHA1

    85a7a34a23a9cf325b7dd199552543e67c53b779

    SHA256

    dcb0822603aca66c2279cae5f555b95ae443eb4a3749f206b36afcd0bd4000c5

    SHA512

    e0fdd22843325844d69964c4fcce866918100038a779374b2c768d231dde5f4eb064004520ea1803851a60ea176201bbd5624774f9309c633fd8394dcef2137b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bc9ff480f430c2e7e720b00a680a544b

    SHA1

    46f8268883eda062c03c0fccaabb4f60a289372d

    SHA256

    500cf283dfbd2bdb2b0a5da430138cfb38aff8b9fdf46884fd66e120740b7fe9

    SHA512

    e230ea5eec6b13d5d3960f5ac9e5dc458de256debd0094235ea1591a5ec46f0f37f76a658c4271989606ba09d112335d24782ceaf503a5fd4aeae5ce65c64976

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    074f58016990106dda2b03d04aba90a9

    SHA1

    a924082d95875d6faf2315eebc29c477eb8948e9

    SHA256

    f07259a853b21a59e5b6414c4a24a476ca3f3d91c96e3f8dd40c17c57f73ad69

    SHA512

    714f26c18fae9cfada17002d74b00551c56ac37a0d23a63f15861c0134296c81c8415f1a6fc68e18e0c74ddf3e01899bffaaf9a0bc600931d6ace17370462095

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    06d0ac02d1210a221c507d9120877a10

    SHA1

    f2e36f41d2c6e505586ec8aea982159f492bef99

    SHA256

    3ecfa84786bb2490bfc64ee746fde7b3f9ec580bbc76dcc283bd40010f8084ea

    SHA512

    5ed2157a2991d076e00ebb924bbb9357592077f5f14c491b08c97ad572259797a15ecda01ae6b94994d00eb3d92b8bf92f4de39d6366558e476344ee84118fae

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    862dde38fcf02b740f620538c629d020

    SHA1

    8efabb0fda34d00c6a94ce809955307b1ae16e68

    SHA256

    d2063c5579474a66178d0a3efebe49e99fa9ef1f86a813d2822cd60e51a8e02d

    SHA512

    8d2dc95c581cad792d492d97c6bd77bb16a9d0795869004fad75901e127dbb99a242b6da6d8501320a080bca9fd091db17b8c87099dbbf564d2dbe28a8897f7f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    17204b6b1109e6819d689a4a5d825750

    SHA1

    0d446c144fb6df6b1e472c949c173a36843942ec

    SHA256

    2f4561fea038ef65103b924f7811948e503cdb605f8c89dee80601cf3cb159dd

    SHA512

    50264a0c0f8e66b54ce6692222eee75bca3347b767f860cd6673b6270a4283ca50c7500265f45230da5a2ba9634f12bf523ed816e5e6dd7bd5b345b103ce22b8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9172da880e774be95d7f70f2502f7540

    SHA1

    8c356d263d07c7d55893c1c3da0bb6c609a0ccd5

    SHA256

    21f4d0f72dc4173e1ac29c3543c1dc848c4bb4b2c59ed93e72bcb6917ca0dd68

    SHA512

    b1293112a2409957a7f80cb92045d5a06d7c846dea102b4746af641ff41164f82dcc98788cf0c912bbb4a2b1bf6103918f74f6db7a555a01613a54ff14cc7310

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a50960d4c2f626ecd87e43f529463c3b

    SHA1

    ee147a80577ded62c142499c174f65e8dcd69893

    SHA256

    f6cf4087cbb6b0d012e454a347bfd1717e0e2cd1fdaaf4f1f40c29e7ba96429c

    SHA512

    a40114f08e5fb40b540c818f8a842a7bf9987236043be522d2b4b9d14d9bca42c00f2e82a496f5a926c5c16f1876e5e6fc15114d3b526bbbad2a648807a3a278

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    547d0a83f4f677be7ad60644ff4c221f

    SHA1

    b678087e71a15f981c2a82477faf5af9f9b3c697

    SHA256

    2c48d938b5d7eff7cb46c1670b834d52fcd96207036c173926b2a0d999c6746f

    SHA512

    c729f73cefe09ad900667635c9502ae074168f4a93b9cba5673c1d4d224adc22961e2b629219d5b69411c5ac3174dba7831ba8d093f913cf153640010ea6cae0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    609baf2e55177e9683169d669b9cb537

    SHA1

    48e814b50d5d70409e1aa3bdc160a50151b99a7b

    SHA256

    c670c8c9d7b20569c35d00733e399bc9a594a20eef338c22f7f7f5c9deab8502

    SHA512

    9fdfc5dc101e8087a64b4f53e771a3f3e38abc46c584b731094d7fc721017f6b2c2a3a82e8ce24b6072e0a865f5f06e406fe0eb1452c817e8f44f59b81b35c97

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6bb8dd49a04ea867c02d6d218bcb1ac2

    SHA1

    9315650d9d052251c3bf5e73f8690d7a393050b9

    SHA256

    669cc7a80b12213b3c65a19cd8575d69474f24f8a88ca6dbcab08ab396171669

    SHA512

    1ac520e5bcf801bd9cbc331d774628f05caaee5b380baf51872f5260b845c7ffa27444afeb4ddc6273bf732c6274e75331e21f97b631dc25ba71f1bd520e8eeb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4fa8183380d194074e2a9342a3400a39

    SHA1

    50f62e7f3382021b9ccfa474e31a43d9ea25f2a3

    SHA256

    b51a5872dca31cb4aa8fc16f3ffc2d0da2b20d53266c71e749c93427b2f34109

    SHA512

    e03a8395e0f925bd7c9ebacd71bb3d45aaf482bda0bdb48c9d35aabb91bb30a4831d1801f59343701738f25e3ef77259c1075e6006b3b5f667dd57112c5dfb82

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    431483d3ba73bca658052279bc026fea

    SHA1

    6e8c3b0af168d55366484fc88a60983dee66c28d

    SHA256

    623606e1ad32bb27911fc8c6198b9d440c9bce85b2c6f26e0defd59417f0d444

    SHA512

    6cf6330002332702325c15440c5ab72684291949b351949514863157924cbc1e824ff2d0a047faac462338b74aa8a10abbd6ad92a8c292c58c154fabb8a9354a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    df3f688bcc655f0283f8c89ebb0f5c6b

    SHA1

    3a97dc9e2e6f92a1f544f0c4d6acd484cc252fab

    SHA256

    cbc47ca8152075dba9635f19170fcdc2486d2ed697338d958bb7338c0cde43cb

    SHA512

    c4ca13af11c824008ee86a9df2239575e5c32095562bd355c022bf2776e02e465422b664719f83fa2476911a8891b92e3bb7b162cec111ef32000465822ad4b0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e94399a238d2cf68d31c0d1be56fedc7

    SHA1

    e4fa0f0674408b0aea6d4f469663b635220c50a8

    SHA256

    21d48f5c4e28185bd084fd10629e66bdb54394d548dab42248c48898d0516848

    SHA512

    4b2a7f2f8d5a2a5cd9b4459cfd59881e306a4620c9eb8cb521ddd82444ecaf0e2d47dd786eacbb3b0a334413aeab7d16cd1c1d2b2b18cc4a23944abf227d9f9d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1e28733a34cefd0656437f2b4e6eb0d2

    SHA1

    d94652e4bd4cb39d60efdb031af22ffa3af2f7f5

    SHA256

    477aeb962521e32e560cc5453eb843bf6d69793b5b98a321e64e8311ff42bd1e

    SHA512

    2693f4f4f62335344b2a5ed18c4e95f3419d246a0c55bd0526ea4a399878d6c3458685409a48dc12acfd5eaed1b03588c471e7650d789e1874b12c9b58445189

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2d462263c032c94de7344595760a1c93

    SHA1

    273f8e1f1836dd075601c2bd92629873fd8772c5

    SHA256

    e73f210c4068a60d8747eabede8be0105d6aaa37f0a4bd4209b34b32acbf4b21

    SHA512

    ad6e04550689ddcba6fa0146647fe32ea4174fb1c1932350fd6bd56b87cc4600f3db9e555380dbc6280992d345d8aab8df0a23eacfe334b39e7b0013c79972bf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    22daaf47b9b1648950f0fae976f9d075

    SHA1

    eb081039a020e748a48cea1bfcc51a393cf7444a

    SHA256

    b9fb7d0216b9a5b36cf28c7211df735217d541a67549cd6232cad732d89b92bb

    SHA512

    d4d0f921e465683b2b958996ce0e49959b63cebdef3517483e34d8a3e8a164c58724d45717f07faf910f55cae19b9094193097b7517c2d97755b310d367074fd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    877efba5a780a8009b2c9352c0b1bf63

    SHA1

    9ecfaf32507a8a97b67790eea136e6ef8ad218ab

    SHA256

    fb145aa340ba4f9c782cbd9f851b1143182fc08b157b21e11d9cdb7bf9baf8ad

    SHA512

    b0490c444539763f2f796c7d86a0482ba1df14ae342845f58e7ed653c69053f4bb0432dfacc59ddead29ee745cc0f08251691f229a740f02b65b8b3b6879e37e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e43d949ef83c0db8562911a39cccd4d0

    SHA1

    4d1b3223007b782bb62c31155bd68a435c88bb0e

    SHA256

    2119032d454ae92edbb4f76d51058c616eb1a7e3427baeb5bd67157c15b62f45

    SHA512

    1136fc204881a28f63fab306ad2e75e7bfefd13cb02825aea3a80d3ab922c68471a11b1b70450c8ec26eadc8e4edf58f4b522269c8afc73a96e00b70503dfdea

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b69e7fea5bccf5649687848a8cab6cde

    SHA1

    0c239448bec900d15485a6fccd01af13f7776761

    SHA256

    ef93598368d1b7e84e6978557ced7ee5b6dc918cb8b45d85013e69dff3b2c05a

    SHA512

    717bbbc52bbfce26c011372e25ed9b01c74ef9a348fa3f3a7e28e9d7890fe745d0aff4889f63c1b7520b413be437fdf51f675bc778c777a4a0472eb26b155fc4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b416a51549b7ef7c6614c86ca8897c3e

    SHA1

    a289c15f7c59f61c170f1704e05eeaf413ac989d

    SHA256

    b0c760f8a388526418091410919b3f334c24f7828a26a07b9d0755bd7e3d16a3

    SHA512

    7bb0b1dd39ebd133a7b4021fd992d78ed5ca17bed7b2a47f48d2dc382b0e3b0b208f982d72b7d1e4206ef2d941d7fcad9bfdab49f89ab313440d287c73451b8b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    95e12eddcdb2d350d0a77a5ebbc4742f

    SHA1

    93a94b60570e53aafb7eb19d3996967c0592dca7

    SHA256

    41f6b427995692b6d6925d587a414a3fcf9d5bdc83cf50826e44331814e3d7c1

    SHA512

    b6118ea7b91cc9fcffa3e4c1aff375f4f0cdc5599b2075c151a0254f3607de2e5cfab92af58d4f042207a3b4a323ee20883ff00e62f21f719b83c108a142acaa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    26dc0defa814d0ed26d5a06da2266f85

    SHA1

    a43b44d429ed4cd3398921fee1d6c4820776f987

    SHA256

    2a0503a49ca51038373bdda15bcddf1f5a83ec73dee3e03dc6bdd2faf6b5c96b

    SHA512

    1ef4caa627c779015b709dfa2d46b4420c9d358ea8069eacf2f39f61da6439ceaee968da4e6d707569f684a76ff6bea1bfe7a49c157899c4c02ee94f3633be9d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F59A01A8B782D93EA6991BC172CEFFB1

    Filesize

    242B

    MD5

    ce5a8849b1f2465daf2e0e578103414e

    SHA1

    84a4c95b47ff23fa042de7b66852dbdbe3ee49b3

    SHA256

    8ac66092031957539355e637a151c509c5e522f92795d5da62248fd420cf70bc

    SHA512

    4322d75cc2965df3c7495ceba0c6acf8683b3c4126343cc2da26544ccbf1d8c29934bd8c7c2fa65e35d98cb718dfd9d210f4e08a224b6e4ab889f2d55a5eb21b

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\imagestore\2tj7qpw\imagestore.dat

    Filesize

    5KB

    MD5

    2548f269f756b3974446258f19009bfe

    SHA1

    55832b82371a23d46f21423807016dc2608a4f69

    SHA256

    ec5bbc0e03b3495af2ac77d88f9dda8907ba7ea9ef847badb879b24e01972d42

    SHA512

    ae22e34967a2d4191f2059cd2aa1f2ba43602ac335ef5a93d035f289a5a88a3f95b4bd1fa617bc37f3dca3575998948faf3b1cbaec27e193578f4c7f2c1a1b86

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\imagestore\2tj7qpw\imagestore.dat

    Filesize

    1KB

    MD5

    701848a66ee0b605dbde7a201cdef0b6

    SHA1

    d86b68e1ede6cb339882c102c67df4b95e84de35

    SHA256

    84748f106f4b2f1453edf49f1dbcedb51b8cfc0ee63613bef90a5eeafb664e15

    SHA512

    16d7cacfcb5e693e2620d273f2b147c3e3cac510917391b397183ab4fba79ed257d6ba1c9d6b6ac0a4e99f8444a7a14159526235f4ef67c419fcbbe0e51bd1a6

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D0I6KXNQ\favicon[1].png

    Filesize

    3KB

    MD5

    a75c230f34b9296e6fdd8b0b855df5d8

    SHA1

    e0b9e32053d44532fb4e8bb55b54c3211965517b

    SHA256

    8adba20b1dd9747ec8ac6ed5a26a8dfbfc7ab82213d8051b76ac771c76b87920

    SHA512

    950b94afc397ac760f38f4c68691bda6b541832e1d23f496e36568def2b9f9dcb6984c6a42ff6b5abef0e19b76c37e40baab22e9dcc9360091b609333029b24c

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\U9VC31Q9\favicon[1].ico

    Filesize

    1KB

    MD5

    91abe01116ab422c598e9c8af72cf4da

    SHA1

    0f2815fe8e067d48537ad168225ab4674271fa27

    SHA256

    b1d7aef06456fe7431124129a28f0138bb5fccfa4f4161e3087de23c005e5edc

    SHA512

    a4d5b20c3014153b6b382c43404917bd2cb5bd2a59bb1e981f5a19eb7dbdec185ace288e9700428d24e5ac623e45d04905e706f0c45a1642b1aa6c091213c23c

  • C:\Users\Admin\AppData\Local\Temp\Cab6309.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar63C7.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06