Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    120s
  • max time network
    141s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    30/12/2023, 02:37

General

  • Target

    0be7a496735120ac9aa2574e5bb1cdba.html

  • Size

    231KB

  • MD5

    0be7a496735120ac9aa2574e5bb1cdba

  • SHA1

    7fcf11bbd51fcafd80eb182124dec12a63feed57

  • SHA256

    6fbd4fef450f26fdeb13b41dd1cee453c84bb5debda42fd083045a01cce91df4

  • SHA512

    787557f2051d3215d59536a6ae12c9ac6de4beb6550226eecccf0b56cd8b74c143cc5e11867562e9b90e8f068c7b24b64c76ad678cc4ae6ee5436a877dd5bbb1

  • SSDEEP

    3072:bCzEuNUweyY0Zio5aB2JUl/xRbb5ljP0tpIFvYlJt:bCzEYUweyYqicFJw/xRxljMteFvYlJt

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 44 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\0be7a496735120ac9aa2574e5bb1cdba.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2252
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2252 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2864

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    3229a561df227ea8431920242412f8de

    SHA1

    7024497edd331a80db5f4730ff0af8cb4126f698

    SHA256

    2b80c390d546c486c4702f2307ccec60942275a93822ce1eeee366f5224be6d5

    SHA512

    d26b1376a43c2d4aae9c726d06d461a93dac8d48c035c35deaf0e1e1ad01415dc3de57ff99a1ee9c822005de33622bfe5e52cb5766ad9398e48c6859e4dc5fa6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    47b10c87b96e11da79fb9cf6ee062f2e

    SHA1

    7b0fa0f14a980fb365f2002be5a6665227b54403

    SHA256

    8a1494684bc85b717fad1f820db327f29af2962711726755a0e908385073aec0

    SHA512

    f294ed6bf9f51510fbce0a44ade993369273860ef9d3c35268d5ddf29c89a3d61cace4ede365fbd4e9ddbf91d2c9de752059a40fdac1a7f81b5b5127922336cb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    20d7232a7b072628947bdea0c744a7f6

    SHA1

    98c00d285d54a2d9b3bdf988ed09fb9123197bef

    SHA256

    4b2215624d29b4decd6319feb4d7cc3ff413860c2cdc7fb2543fec9b87ba487a

    SHA512

    01bfd6b0990e4d1c56584561e06646aa5d2179d9b654560fc35b951d8ac3334af4f65cb5e9481212c064f3799766c88cde8e4b00ed006b10522eed1a549da15d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    01793fe623c6e86a59f599beffb3a409

    SHA1

    9cbb96c48f5288101c5899234b071f8bb864405e

    SHA256

    5b10fc28a46ce0eac0586a568c1bb09a65c491c88612721e7fedd866f9f283ce

    SHA512

    d92094c9805be073da7350a8cec5f2e4662c406ea2243e0e7642299cb6a17acc5291f304dc30c59c4d90451f1a071070991ba1ffc3e2cfdccce80e42f77d6af9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    094288f6e845e814b6eebea8a506185d

    SHA1

    1692f04723fe7b86638b02291b27e325c6b9bba5

    SHA256

    2820001451fe36b4e48bc864492a860413eb39413bfcdbadbce2beef209c02cc

    SHA512

    7ba080bf44b49393d202b76e91eeb7d0542ddf6d0688c9bbc677defbd60970a00df529fc4cf666733d9d91f75f92da075e5410b083985734a835417e7e0064f6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    d76c6584b78d6b5880ce324fd8ea4a42

    SHA1

    eaa4526ef6e9ead48d82249114c2758df0190180

    SHA256

    8c29390ea98993fa34e8122e3b97b669599162f680fa4d796c1166677cb7de15

    SHA512

    c609efe6b1541f9e967beb40fbf8df4ae473d07da06bd1ef72f8b8a92e15e7a630148827ba08cecf9bfd3f736b563447c255ff47428e265cb0df268fb5d68b93

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    2bbf09e479e1c6d08e142afb21032556

    SHA1

    5b53b521af4325ab46497ea043c6d696c07dde1f

    SHA256

    1985d9c35281a171b5b1980fa15415d21663d598301132f9989a30d05757f386

    SHA512

    a722dbdd55e01d25d91aaacdf34875bc28dbf5f6078e13c2717f454835b2a1b6885cdb40bc9bfaebb15107839e0cad42217f4d1b64ce6cab2abdcc5606168c9d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    1c715e4cca5700a354e227fc8623fbf4

    SHA1

    9d05cb3f5aad697fba0bd2d6af3a56e12f566807

    SHA256

    49a28b9235326d538bfab421a27ad1c2cdd20872e5000af14943ae9e9c338113

    SHA512

    0714e176a6051d0258f34822c663d469dbdf53a7dd639fd361e32ab0c8acfdf5c80d45958a6bf4e7350b27c60dc90a9173aca22b5560927bdb27c3d88b63354b

  • C:\Users\Admin\AppData\Local\Temp\Tar33CF.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06