Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    149s
  • max time network
    148s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    30/12/2023, 01:20

General

  • Target

    09e9c89f6896d19b84a821526bb26feb.html

  • Size

    3.5MB

  • MD5

    09e9c89f6896d19b84a821526bb26feb

  • SHA1

    9d1d219a2d655a880fd24141a956da2c8bc6ffb6

  • SHA256

    559de345e96dc844b9320b5f8ae4f39031ced3e416a678a2fbb4607fc83d43fd

  • SHA512

    4c1522858a317a9f08e0390867d908306c915332410d9e16cdefe61962c38f5727c213848b58369f864d76188a0b6ea79c8c7d4bf9886eea1de7a87c06b9a590

  • SSDEEP

    12288:oLZhBVKHfVfitmg11tmg1P16bf7axluxOT6NfV:ovpjte4tT6NV

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\09e9c89f6896d19b84a821526bb26feb.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2752
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2752 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2788

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f5721033ad440fbca1b4e36dd3a0626d

    SHA1

    ea3fcbc15271bc98d4443bd7b47c61383079bdfa

    SHA256

    2d0b859973beb2be764277c66cd06917c4f0e553da9a9ce2afad27f26e3378ff

    SHA512

    3c128a7531b97fa3a9fb6c641b4d192f5bd314208ce2ce9ddab627caa107201901628c58365a2394f8cbe10d94779459fe958cd35374dc2f436d6083a0366add

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e32257302d4595ddd4692b820a816759

    SHA1

    6a24f7efd4a36f38381b1655b1be0b65a0e8d5f6

    SHA256

    513666ea7adc33d3673bcaa2073c1896471e3167515ee8c187e6b62c83d2035a

    SHA512

    9f86f494017b44a86b8becceafb8262d6312d6de2f8f7162b1417503e81da62c7ceac23ecb2a840537e602f60339941964c80fb587f68c0dccb54c7c25f30fa2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d3999a7ba22a1b95dc849d119fea1087

    SHA1

    399b67ebebfec60907cebdeb9783c1bc296bc129

    SHA256

    49b76d48e44f9778c5c2cd9dbf91bd8392fbac2fda5720b8afbe82d57bd7c908

    SHA512

    e8a742df8db4f1a9588f04cfab02f79b546716db44b57e154896c36c692146a127b6e9ca299838a66dc27875170bbe2ea3bd51e586b9ec868c36cfa07d177e16

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    065c4ea24b1c4a2963521c84813bde94

    SHA1

    0bfe4f9d5941274f78e536e53098551c70161015

    SHA256

    b60a9fa178a74722c400682ac976b5e7ec65f3651961822ae3b71b21129fb551

    SHA512

    7f26422ca8e73c7d9825119880bd66b1540718b44e4955c141a15ca483030fded40cc898a85a582adfba9719541bf4ec89c0a7c9a098223077d32afdedb3a0af

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    80710a2d2701d5625b101b8e58aed53e

    SHA1

    ec3f54ac7e2f38d7bf7fa91d3dae5bc7f781b959

    SHA256

    51f20e25c2dfd24b5e12284f1783df3e8e9213ef6cff9fe159c20742b5d3d06c

    SHA512

    9e3907f1fa30c168a665576d31c92542b2af968c95cd579b87a44f68de9df46b043ab030d9c940bbccad48aebb00562c721635d9ecc21957823d6e89535f813a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b71e159339845bb6fa94d0ef38703107

    SHA1

    0fa048fa87f5f6cac06697bfd944e24e089dbfac

    SHA256

    bd8e626d782d57877aef22f1b2d52037b006065ddefde4c886aa08503c7d19eb

    SHA512

    291148440b83c3c1e6943b084da0fa3f39d3c97b54f5086cd174cf7344ad01beffd6337c7ed0213fe0c2b3fece40b90cb41e3630d800f827a4dabec93c0fabf3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    89452e2a51eccf1c8a5430e0ace20b2a

    SHA1

    2a4a290ce2336b545afde4a36b5082cd8cf3d114

    SHA256

    b2b4ff4d56380ba6505f60fde58977e67d1102cca729b36ef2ced865e0fb335b

    SHA512

    cdd69575138b0c2f1a3ee84cfd065b456ebd5534962612d71f5ecf0a21c1b31efee4d48988fc4c8255756c3367ffc3a27e3794138233b9ef517aad02c3658cc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    17ec8458eadff1aed58eade363982cfb

    SHA1

    7f5cb172e2653e0734e6516d1f934909b38c893c

    SHA256

    3f7d84ca1def7c48e51a476d3d7aa32f666ff317a09433d158d78d35f2003e95

    SHA512

    bf129f024b159162df44b18ced83929b83633fbad84d4295db8009dcd3acc9ca1c88a5d6521d9f50fab326e49900ea69829b1f5b66ddd5a6b56760f2cdd5ea32

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    aa3f6aafb53f47f7f906b751878bc30e

    SHA1

    8ca4e88eafb9631507b0e7dcf8046c0724f17f1e

    SHA256

    010bb1e7eb628b97cea7713c6892ecc8f9482cbf82fb5b1e6cefe7feac7b39bf

    SHA512

    1ddfdca2aa3ca750659725c12c12a0ce53bbfe9b0e2588374da4c2a1181818b92b99fd9468d9ecc0a3c699a919febe9a50e0923039379a59562d0d25a87204d1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    db3a80e72dc227d4aa68ce56e7c7e108

    SHA1

    a40b536a8249adf7c60d268674d3cedb47a1c43c

    SHA256

    a93b4a0b524ed558cd22822cfd0048185b25903e99830d79c039bc6fe9a4ce95

    SHA512

    3e74b1841c6a8df536db3059a217fcc0abf482e054b15a08c488797ac3f3c157190a116064f5687ae27123f21953f05b5eb3a0601328f2b5135219f6b2136bc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    04d65b8a61581b182e0f6502bd4bb41c

    SHA1

    3d5a934d1c121c31d9ea91c8c5ea5ed3f8a276e8

    SHA256

    e993048aab01b89b60a1932f5a02202729e586fcd2f641d33ef03e1aba7512bf

    SHA512

    548cf3b7086647ef95bc6b49690fdc98287f16f00072dafb223b0b37e9c7d3bca4e6537e51aefc2bdccf4ffa129925174bee94ab0b6ba5e8d7b29899a8775090

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7a56e3bc1c4785b6b4b9481be6a0c670

    SHA1

    87c8bed4c8f9570217a62b1f5ce88dc9390fb44d

    SHA256

    2b9f80ed1cb75e55d63fc2b1c7b4f5a002f07521b17918ce56f1cb4a4f626939

    SHA512

    f3f9bff14fde5c6c9fa3ef943382351b697ba1ce902ab2a93e4368e1f129acc95616ae336755c34dd5f9ba3bd4d40b909a605fc2f9eb42d8a5a4d1998d848b18

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1ced1aea35bd4a90ab5073d55da133b1

    SHA1

    456755d6567401642b6ddf6edf008a51b18b6740

    SHA256

    7dd96ea3e22aeb277806f3eb9da2f37890c08cd191d437fd8c6fac1e27d29b50

    SHA512

    fda9338fdf4243e4f0373e4c02ff9aeb92f4b2398fd99f34e3cea917ddc0de3716eeb226f7ecd49d7ed288f96db851e8102c6bab56d8566b2e8d48f9ebb750b1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fd4b9ce9f3d2b04a9952c5d074d4e538

    SHA1

    3ddf8cfe1876b37079f83e324f8fcd0c12b84b57

    SHA256

    8532f019325d2f5afcb43ed3a456d205695de760b1cef843abe967939cb287af

    SHA512

    5654d4390564882c6d0f558724e39cc1fbe3a4769ea25c586114ea3f38250e14291ea28e2a780799d6b59e45867d3c0c3f4f82612f9d9708682465487bf8e3de

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1bbb4006dc38104480fa0e4c4b6d059b

    SHA1

    1afc1a7e58aa62f3a1b43bf485c9da71fa56416c

    SHA256

    5f3069cde0d70633f90d0c2f33036da2f3b1556f3a4204c23612500f191eeed6

    SHA512

    90c2352fe8a477ca7b81562e0aeaaad744c78a7a63aa35bbf9b2f9ab619afad3b23cffc65e74297a9584de9e11e69c8548988f21688c3490a1e834d6cccc65b0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a121da935ba7747965e87369eb78b6e8

    SHA1

    324fd37cb6aa586f62350525e0ee27d27cbecf76

    SHA256

    c0627d382338c84bd6f8d2a94c8f115e9e17adae6df4c185edfc03e221841e23

    SHA512

    64a2a668588094a3cc55840da5fe489ce6e6c84a21d8ce09b1c42e292dbf99b33fdac099e5d56a8a5c828e789a8ef7772b205be52a703e3930057209c8d6e440

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    af2cf33781701b2d17e265566e4a25ce

    SHA1

    18086cef3fb06a3f4a1d9b0456cbf016e4cb886a

    SHA256

    0c0d9353db459e9ce950b19e0eb38488ae30aa1311611cdd740f695d71985a3c

    SHA512

    502c53ebe6d3f33222981c00f85c2fb2f9a498b8ec13f2775300a37eaa77193a53ae66bd71042c13f61126c6f3d15f7790695c5438d2a5804a36eb0efe8112a0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    97446fa71a0bc8360236aec6f671a82f

    SHA1

    f530c26b518d7f8639e5f054a252df72cac2a66a

    SHA256

    6944caf8d1d0fdb784ee2aa076f7196a3b7c5334c034c96f65e4fc07b4a484f7

    SHA512

    8d602ef565f986b0662da65e3371193376610ee15a038e72928788a593f1a4438dd8c206c9bdf4d4b704de3e4941614e2a6d16a2ed4f6296ec20db0fe041265f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4cb1d28e2d5a338424dd69ce28d5b087

    SHA1

    697de7ce714683b30fdcdb64cfacd430b1ee6093

    SHA256

    818949b4f94c0aae50773c658412a2edbfd1df4ee02d1669b9b83b1244970f92

    SHA512

    16c25335b4c3a9339b7945d8960a7ad2441fad209fbf3ffbe58ae4b1de3ae319bce1ab3592c1ee3cfdaf5c84ef15079be5eae6b857bc6e63809f26c018732b45

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a006d362ae27ce7327033e5388db90ed

    SHA1

    c4c3b653daf7ee290ba6331ab36c04d71ade3df8

    SHA256

    b891760269b8f2ebf18b37bfe18fe4e28e7dde4f31ec27a793b720140d0996d0

    SHA512

    f0f682105323e9eacd64da3a02d9dac6ebcfcb3978a28526d61d454415ae40fd13567cff223f4cb183c8d1b982507f594b31f24168454f128e8c40445a4cf300

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    92c937690fdb0a38513d3f66d04af0c2

    SHA1

    d868139eb53a17a19f0d9b18da3a98c0b4efa33b

    SHA256

    fe5fd67431699cdd86a0e081c6bdff7f6fc1d51d16a747955edcfead1bf01c88

    SHA512

    39d1485486495c48496a8b1cac84237545ebfcbae1d6840d2d5c035a7b5f8a56739139424f4c1fe4c9a3b59f7b0ac1b933e0f9e5c453ad7c9d98b0bdbc4a3711

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e4d8af2d5dd317b83562243c4d9550d1

    SHA1

    8213f4ef93b0fb8b1bde24e4ad417fd942649d4c

    SHA256

    53967da68de1c642113a3d79e6489a191e8bf8c8310d6ff7425f5a6e0510955d

    SHA512

    fa4ee0fbda4268a63a2fde546299cafade41dbd791d87497a10f3fedb96b8994bae2046fcea88c233709a5cf767ba97aad05c014d5b4a98df92b3f73899877aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f33632cf25fbd85b451df2c5aa3456be

    SHA1

    ddb565204aa0862a446e8b5c67ff06d75ab3ef36

    SHA256

    e8dfa24bf719dd900e808a35f0349d3efcb7d383403a47981eaf7f3697e9c7ba

    SHA512

    ea9061ba807d03d94befa6a961fc56d8084e19efb1a5db4e16d82167105a752105c6e1039d7f7abf9f519ccef0efab68566a34533bda4ad5c5a6ba521b20cf1b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    838f56b226f1b8d7f6f4b019f9dabde2

    SHA1

    90d8dbc50a8b7a245e9171f3c2f9e82aec88ece8

    SHA256

    ccb5c2b90a950c43d103e366647cb0156918a86f23ec7369beb19789ffd58a6c

    SHA512

    b2c6aff96544172551eeeab08306e88c05651b468d173e75f629d91c36221b290673729b264434f2004ce12ed83f82042dcafbcc2a939ac58af60deea1e023fb

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HJ0GGVIM\jquery.min[1].js

    Filesize

    83KB

    MD5

    2f6b11a7e914718e0290410e85366fe9

    SHA1

    69bb69e25ca7d5ef0935317584e6153f3fd9a88c

    SHA256

    05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e

    SHA512

    0d40bccaa59fedecf7243d63b33c42592541d0330fefc78ec81a4c6b9689922d5b211011ca4be23ae22621cce4c658f52a1552c92d7ac3615241eb640f8514db

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\M2VO416U\beacon.min[1].js

    Filesize

    19KB

    MD5

    dd1d068fdb5fe90b6c05a5b3940e088c

    SHA1

    0d96f9df8772633a9df4c81cf323a4ef8998ba59

    SHA256

    6153d13804862b0fc1c016cf1129f34cb7c6185f2cf4bf1a3a862eecdab50101

    SHA512

    7aea051a8c2195a2ea5ec3d6438f2a4a4052085b370cf4728b056edc58d1f7a70c3f1f85afe82959184869f707c2ac02a964b8d9166122e74ebc423e0a47fa30

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\W79VKSP8\jquery-3.1.1.min[1].js

    Filesize

    84KB

    MD5

    e071abda8fe61194711cfc2ab99fe104

    SHA1

    f647a6d37dc4ca055ced3cf64bbc1f490070acba

    SHA256

    85556761a8800d14ced8fcd41a6b8b26bf012d44a318866c0d81a62092efd9bf

    SHA512

    53a2b560b20551672fbb0e6e72632d4fd1c7e2dd2ecf7337ebaaab179cb8be7c87e9d803ce7765706bc7fcbcf993c34587cd1237de5a279aea19911d69067b65

  • C:\Users\Admin\AppData\Local\Temp\Cab7081.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar72A6.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06