Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    155s
  • max time network
    187s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    30/12/2023, 03:42

General

  • Target

    0d4f6c0e0a7acbcc8afb7d6b28d5df79.html

  • Size

    43KB

  • MD5

    0d4f6c0e0a7acbcc8afb7d6b28d5df79

  • SHA1

    76ebd3a2067019712bb2bfab42117e3bbf491756

  • SHA256

    3e00a972e4dc4e76346e01913a0203cf1256efaed7282898d1da17fadbe75da8

  • SHA512

    6f249411712152c753e7c0f33535bf8d81c2e29ef34bf7a95d959b715f2176ef3996db1459631fd673a0aaf246d1f5ee14fc959e961750f332f4d7481d2c4552

  • SSDEEP

    768:SF3y8uaMLsO9GpqAv+8Cc8TxxF3Vi1WfWxhsNizH:SF3y8uaMLshgAv+80FFOhZzH

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\0d4f6c0e0a7acbcc8afb7d6b28d5df79.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2156
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2156 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2692

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    763ca6784077bf829d66799bd4d6ec4b

    SHA1

    43ef34c49c859052f3ad50297968f457d871fd86

    SHA256

    292f2f0113053271b0b2718b3d279af1b04649682ce9b52c55ebdf5696c791bf

    SHA512

    63be9eb5d0f22d23fa63bc0c376299aaf38fca21d904f0bf7e4378fa33ca43df4581f4d5a9f1ceb611af3365c893a681b87676dc9c3d57e053836669b5c1e9eb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bf5bf28318602f4357398483d3689837

    SHA1

    111ec52867bd49db132016081b8d21370ce0f121

    SHA256

    ef3a4d75ec6cfbc93b31936f8f8377f904d58c9d10d6406dec92662140b0414d

    SHA512

    70e7a0ef299572c0dbb73023acfeb52075445e638e8fbfe9d54bb4dcdc6f2821b88e3511cdd1c88b3e94239fc78fd3a868979e3ba36b3f6b65178084d458cb25

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    62921d0bbca43eaedf54d468baaee8c3

    SHA1

    d929f949663e22aba3831f438c0cd309b8e3ff81

    SHA256

    05520e4755c1416d1ffb05ae5cf1dce4012f8463331f6ed8aecbf6aa947d7c5c

    SHA512

    ca33c12b88962ba182adf272e867d622f3efdd81ace19d888b4396c10aaa1116a312d71cf89d0a2109988e1e75173eeb4ec7c6b229539be8ed997d3698577cb3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1bd0bc10da2e3adc3efa9ce14f8bbcd9

    SHA1

    424e17ca85854c587b639db313854c85a4c95ed3

    SHA256

    246f4adf0559678256bfd4dc7fec876375b30c5d9d0c6faff58ec850d23ef7b3

    SHA512

    82b4ccd4789ac352eca130331aefce7c054441b2114773cab49e8e06fbd0738bad578fa1c088a6711e218653c816f848b48cbf06468b3d3eaf858e6270d38d68

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    82e29753341ecca3a6c5c82bbd748783

    SHA1

    797393c0f6aa846584330fda27ffbff6645868d6

    SHA256

    941cfef0e8a6cead58b94f7390c88d3e0e0c2c9a96965364fc52fec2906b59f6

    SHA512

    e9d6e822a013fe1e368eb09021fb530d34eac22f7211008b6c06ab02a48f29781c0b20cccab1e14f15bc1ba37b5c23580798417c771fe3fee7580e41b2aa8400

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9e0be9859d999a184b29ff77bde8e714

    SHA1

    44c6e4abbee812bc622abc0686dfe7ef0ab8a1aa

    SHA256

    0862af1ad7e0ab01ece829f03ba52ac002a7f0651ed16cc535578365e6bcde0c

    SHA512

    87ca8e2ae34e7b972a19ac8879eb6b86161188e8c1861653ef2a125e3cefb963e28fcd6964d56dd1173b964a121f85070ca59407480f8360de08859bf742e95f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    df6208d06c9eb34e83561fd00c06603b

    SHA1

    a23a129d91d33e99ea2c5d037433dc104d8267df

    SHA256

    a68626407c3d7395650bde42dad3f33bb5ff03dd8f2335be598c01dd2a78e0cf

    SHA512

    b2adf029e0c17c7b26b63f47bc8818440c5b673e574588386661cf931210288ee11cea9a587dca23a7bfa4ea1f6feb6d4e0d2221fb66e81ba2ed66f6f7863879

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    11bbf5301c2e85c2b784bf5af680a609

    SHA1

    43e7c8720ac53664a0e82b574b91578939aa0c65

    SHA256

    67b962d98088504b132ae2d80198133a458d54496296f3f6ebc52c977b028843

    SHA512

    662125fed2beb373e7d5d5df96bccf73f081eac983892d46cd6c4f1764c9e58e74c71030b2af21fb0efb296b89808c5bdcc64e25009043822f0db5b8deb8790e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    475f36a2f90cfcfe4a6ce36f38f75e8a

    SHA1

    0599122dd3fec8249e64971afdf404072c8f6c45

    SHA256

    39498b4be90f8faf39fa6d9d391fd2d1af8c95ec0f7f75808ce7fc8b5a3164bf

    SHA512

    b00a74398796433c1a8797fa681edd1d0bb8a37fbdba280fc37b41b20df467953bac493ce932f1c6d6049861997e41e80f244bf2b9c24ae7a643e47b845f45ba

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c5f4b4cb06c61048a1a0f15e18843afc

    SHA1

    5299b234b792f1f9905b7a8e579ae60e6866cc3c

    SHA256

    763cdbd673c62794bd75a8df10a88e26ec731722c7b5049d60216c046076d343

    SHA512

    c380ed4ab26d127df3cde76bb50e4b9e503d0b230023aecd44fdd3be3b10ff5d06b18c9b213142a4fce5f4099811d359caa5e7a8069ef31163b8ee749ba23f67

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5fedf80df35a09f08775a4998de51864

    SHA1

    05d02bb033f62f7aa145d521cf906f099adf8795

    SHA256

    c3eee8bfff499d54289043274129c15802eee37897c53da119faf00fa989f20d

    SHA512

    eff4f99ea77001cd95a1228a47589bcd02f6ab98e23e3258dce1ff5054202aa40aa4e50972aa2f33c12b6c723bfc5802cebfa770447efd0aa923c2d3af958fdc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f7a84e3b13c1cd246820c89c1a309a77

    SHA1

    5e515668cfab540284d997ff2e2813014237d0ff

    SHA256

    226039a7e78f533deee43b575164f4eab335eccda9dcf07695008b98874fd282

    SHA512

    5d3eed8cbbf7690fd149799e2fb2ef9afbc63781271f90b7324f91809d493694d0d8d2d2e2010e6df4e3031f1c9817b46ebdc39d56d5920448ea672624826d87

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    49243fee788fc7f7dad939e273db0d26

    SHA1

    594d69c0fd1fa18b903193e3246e5a4c672f607c

    SHA256

    d3e9fb2933dc6079ca50434adfee9b312d80dbf9ee4755583b65080af64faa8f

    SHA512

    415ac70743cb5d80bc8e1438d5d684f8db9f8a1c7c092208b09bb0bd7d9aee1032cbf7fb9c542c9846f41c23c21d9d580010f5cd7986a8dbc5ea743e284ae668

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d1ccef76b004a2272d145e3438f3734b

    SHA1

    bd81dfce5fdb18c7613da1e131d448412fc709e3

    SHA256

    5400f63e167d34ed92ba7d4c72e3dcb71df7d57fd98b6914a8ad2c9b84b026de

    SHA512

    7676b0927fd02ec9689bcb8963705dd076fa7717e8697ed74a737f312ca3577b8b30f79ee3fbb172ea52994dc9319039f6615138d064a6750aea05c2d1ff2bf3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7d6e6efd2ff4fd9237c5dcb1565f0399

    SHA1

    a8eaf31c8f360b8f8ed87bb674bda7f939527744

    SHA256

    ca46c1ea12f50ee07f71b4e5209181ba1e2da7702da7278d7b21ec5ec46da533

    SHA512

    b36cb14ff63d59571b8989e6134d6bbaffdf4c6b425eb7accd2ec15e2e7a0a71eb0d9cead379dec1f0ea202f1fcb25eace0bdd539fe2cec78c0a3f66c97bdf44

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    88eba4798bdcc10bfd9ace4f9ebf49af

    SHA1

    52474b7b99a4754cb9aa4082f1ae429b242d7ab6

    SHA256

    1aaaa4c870c534fad38dcf448aba07b5f05daf87c2e7007ab238186ce5d47354

    SHA512

    d7bc7c4a9f809b132c8831776ca02a9273fd6cf5a16130ef6469fdb3a7670383f9a6ae7d75d386b170b783a06c515a234d5ea61d1aace39cb45efb6733419c32

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    633bd8b4f9d5af7fade67ee9a5d4088b

    SHA1

    5f84e24bcfa6bdcd353c27d11f45a1e40f8f6302

    SHA256

    af77c878251af60b50afd0ea7349155fcfaa9b57b27d706044834d2c56058fff

    SHA512

    8fa503ad739c55ffaf97c6e77906853536b7bf3419c032016cd4bb4779e774f445728c23e67ac0699b37f3604fd7a9637a2912dd0341ea15c386e55a6803fac0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1bdf363b9251bcee959a19cdae41b5da

    SHA1

    ec1039c940bc7a12f7625f3712e1f3a568c14779

    SHA256

    b99b7e46105020e39dd68acfa847096dc2fd9542e77d458120dd8f32e3e4c11f

    SHA512

    0f684d5197a29d9dd69e42d64dda71ab49ab5c9887687754de937de8a98ebbc879660eb294524351b5af6b91f0f58bed6991f9baa98aadf9178166c682632f70

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3551a1ccbccae0c8e229cfbfd9e6da9a

    SHA1

    4444f7cafc06230c69cff1d018c9599d3bd7283d

    SHA256

    47fb8f1e3c74765f7815f441123751c9831003bc2965da5b8f43da2cc87d56c3

    SHA512

    456f7ac4d20eeb26348c24e928f4c98a88a17c80624df1069aed8e34b350a90811a7f07d8b637f846e7c381920ccd2dfa3f9ef4ec6c02264112886b8ac07015d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    923567986d91cb75755a9f70c1675217

    SHA1

    2bbf951997faa4ff22fe5c05b4a6d772e5e993a1

    SHA256

    a738d495fc7de2d131725613478503550057e7e7e7c787821c728ea8de36155b

    SHA512

    85688b2be93c20632b038149a3163bbeb16a228b823a9dba25fcd766c76abda0f0c7537aaf5254d2eb9da71db951f94d8068a802948e253633dbc7915389bcbb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5d582387608ad9bd70c22f05679b9726

    SHA1

    6ac433713c0a8d539b1facf13f4d0babc684188d

    SHA256

    d2c95127f3fce914127b3de6ba85f5d172286ae41c59e65ca1fd1a8e5fa51994

    SHA512

    897c73a0c38dcef00767272bca5e8da5decbb837ef400e67f5b447a0ab43e3089c5c4510f6463922c6466cd1adf6568318f85e2df496daea8a8d4b01c3c6fe3e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e6261c1d25811fb668c73a8070014f99

    SHA1

    b0d9d9cd02e151bf4d49532ee7435d93e63139c6

    SHA256

    8e55137f0b77bd1b26ee6072be54eada22f7c70a400ffee1fed8ec385c88b9dc

    SHA512

    4635bad1b5ed16ed7fa9ffbb67564b54718ca0b59927f04962691e2a518bd7a9846d1d01827e05010bb5264e99f20324c801f8181a6b8fd6556937f32a7edbe0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0f278f556c6d7871346004093469d096

    SHA1

    5c34ff9690690a95565b01a3d180fa7649a746e5

    SHA256

    42735427d5c6c67e77f1e4529765e63e8ac00caa4dfced532431b7b298229ded

    SHA512

    7e1a34b06751e947a9cddb67a9619c4c84e28ea326caa230fa210196d074241f8a9500402c36b971c0941e6ff6b0cf39bbdc78d41a320770016df89936bbf152

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b3796253097624cf4f6eb6140aece7b5

    SHA1

    508a6913c7399339d150ac5aa394f65b1d56078f

    SHA256

    9319290749f5d7dff9fa7e57d7672401e127c928286451c31ecd6aae1a549902

    SHA512

    3074d31c84e66332ab0dc667c610976062d44f1d362ef36d99525db66b0afb4fff6bdb7beb84406e8efc6089ec479370607b03731cee7f9c5143c91df0adab1e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d832c7863caa4f7d105630ab4d0a7eef

    SHA1

    d0d0a5bd8f45a107c8927e1bb7561321212add33

    SHA256

    7d7e5bc43ff1a832f688c1d2f1695cf897d0cd6a9eab44d1684b41cd73091a3c

    SHA512

    65d12b62da824e523c0155efd4d0c7d7561554f54a1201d94a37829e3e673a419131d04593cf0c98dc23140a4d570c897d1485b012993ff19cae83a7d4a83063

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d230e0ffcff1aafae6f33b912ee8206c

    SHA1

    cc79bfbdbcfb57ffa4caa9b9de7f0c5f4368db04

    SHA256

    6c6a0a902b9dd641285d0c2e606d3948c33366e81251878a3958b14b7f63f61b

    SHA512

    1fe8742bc0ce363fce11fb5421e67c667b2aa70bc8ec77595ebc78f5396774172c89212ea94f77a9e8c135116434047b5da2818d521be6942539a1ff02ec9ca3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    17b6fb77e8fb9e92aa3ce9c7727aab40

    SHA1

    a64f173ce5271ea0a5a682f5c91820625d1cd47c

    SHA256

    dee3ee33e081739b1d49a807acff22fd9cb64f5fa80e143c072c5930bb6903ec

    SHA512

    225a18ab509165136acd884c509d959219cdbf4c8c592be2d67e6233318ef35d2f74333644aa0a1bb7f144c72ad407d3780dc50913d8e70b875fbcfb1d164beb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    975c2001afed3916fbc8a59e7cf0e97b

    SHA1

    2f5272e438a0afb8c6937bb2f6d9d03cfb8f902a

    SHA256

    8373cc1419dc4279ae54747a5ebb612fb55a1a19c90f80e474926c5214bc8de4

    SHA512

    e70b3aaa8a103c69f30c4afd67cc691239a2c47776a0fc19366efe0f55595703b69d6552b77fe198e72a8d8297627aa199a97c610b0cff6ed0057e945f094dae

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3e241cce1d4ad97cadad186ace650a15

    SHA1

    ed91205a861e50b0229b7d67d0071c498a72bd8a

    SHA256

    47894029e6a8a134ad91e9a0451c11dbe0363c1476ba9ba3f64b2a8e399294fc

    SHA512

    7f04b3428612c0e8cbed16736e635cb22b106fbbaebc01447361195dfefe8cc9ecbff353dfb290cf2390e1beccf66c2c6697b76c17a8be2feec4b188f4a40551

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\4R90HQQX\px[1].js

    Filesize

    346B

    MD5

    f84f931c0dd37448e03f0dabf4e4ca9f

    SHA1

    9c2c50edcf576453ccc07bf65668bd23c76e8663

    SHA256

    5c1d5fd46a88611c31ecbb8ffc1142a7e74ec7fb7d72bd3891131c880ef3f584

    SHA512

    afc3089d932fb030e932bf6414ac05681771051dd51d164f09635ca09cbd8525a52879524b6aa24e972e7766ddf529484cc1ec416de8b61255435a89ba781f8c

  • C:\Users\Admin\AppData\Local\Temp\Cab984.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar9A7.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06