Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    139s
  • max time network
    135s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    30/12/2023, 03:03

General

  • Target

    0c68d786854d6508bea245fb4321a599.html

  • Size

    3.5MB

  • MD5

    0c68d786854d6508bea245fb4321a599

  • SHA1

    2279f399949a5c2f3dca2460a833a8850c90307e

  • SHA256

    6b42e490a27026a377f16850e36db1d71163e37517c4980d4216ac46c2899d16

  • SHA512

    7094e4f74b7c20a894622931076e9781eae0f81bfae118c288c4f9ba35acc58e5d7ec74d5c8e2b766f503f40225b61a12feafb615225d4d639414215449ea7a4

  • SSDEEP

    12288:oLZhBVKHfVfitmg11tmg1P16bf7axluxOT6NfT:ovpjte4tT6NT

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\0c68d786854d6508bea245fb4321a599.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1512
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1512 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1864

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6aeea4b657a0e6c658f9725b19454a83

    SHA1

    17a9c98e8105f5fd85789b2a2a3573672dda1eec

    SHA256

    00ce0f92e74090d0c5979b48981a3813e287fdcf4dd1112a4a48081348baf690

    SHA512

    9de7cbac9739bfa8a0f26987bd8c577ed593c7f698a5f405aa1f7808e91f646d6cbaaba719b224d24766344c8f257c0b9f7a0338dffc231b541b760697f6a56f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bc5cd8e0ff7d5b55af69e013d117b9dd

    SHA1

    56fe719d7939886411a6aedeb1e76f62dc6a85f5

    SHA256

    cf49467738749cc95c62df97765442d4460a45b5da76232d539517631a677434

    SHA512

    207383bcc83df6f84623373feb60bd09267fc74d7f54fb1e529be2b2d8ad97bf29a22554d20451ec864ffc77fee44321b8d6657a113bda86b4424e2ac4e794db

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6f977c7875729cc099523df894fb8626

    SHA1

    e73d609d5966826d7ce3e62c627fd0f212d7f92e

    SHA256

    0cb2b2c0ff3a099ec64e3b3137548b9fffdae2a62ced8e8546ca15526f39e5ef

    SHA512

    4ba677c396833df146d64347698b0d8cd2a894c23b4b95f317d21931d98b88d563b1df8901c927f59c8b3b648b45755f9d6e6f63f79af73755ce220fbbbf25c2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2e3fc526045022e2341e585c370f95c5

    SHA1

    dcd60c566cca7f8c6cef40c55139e9c00ed37bc1

    SHA256

    87335d94ac3e061fbaaeee98f22ac6648f9a717a8a93eee6f12d5b3dcb99ec54

    SHA512

    9467ec75a4795db1065d232939d34009c58f9bf1a7dcff4faae1b4b6f8143d01140d89c170ad6a95983a9cb1ea0bad1c6092cd68a282cf21ba39c991333eb26e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    991048a96e032bea292a334f6ef1d744

    SHA1

    31f01e59f5abf61358e79d45d6c01c04cb0562e7

    SHA256

    0e1e61ccad898499061dd8e158709a104222444b3bd125f0727687d130dc8606

    SHA512

    79da98f2409cced464332f32da7f598da2a88835002d26314a4c9d3241a8822988e2ce13a2f4a16662fd29ec4f7037325442a72780c79324e0b2b66dc1be1631

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ccfd0f5c49ebc6207ba2c16da5e48a1c

    SHA1

    d801b81726791c23d71d1b760b1d2ae989c01621

    SHA256

    f41badee92f20bc5d2201344c88c38b288f013e808a1f9d6b451e69b03d192ee

    SHA512

    e3ca3b584f2c03434ddbd098ac87b3bb7fc313bd4f96a057bc6274bab4b3e2eaf1370aa6c05ab6f248d19d432d878b92a4193285b4f4e422446ba5b2c854818e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    663d0ad47d19c4b1cc58efb88bad8a0d

    SHA1

    ab221b994fc9cd66e4509f42407fd23697b7ec73

    SHA256

    9376faf5a7554ebd2f1fae431a51cdf8db4183d9784fb85158f19f6dfcfca782

    SHA512

    231c438719812e6a120e0f9d4eb4d51b8007b45004ba06eee94a800abff66f6c4ec026eb80d33c00a355648d1e4f9b5bdce711779407416c0c4aa7cff02b4c62

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    591c7b7ff49259cabc0114396901f612

    SHA1

    d32ccd7edd115184aebf06b6aa54bb606f1be8db

    SHA256

    a23066550c8fbd7f48e42c026ad7888087fe208965daddee2ac42cec56d65ca4

    SHA512

    0a5e96228dc746aebbe0f69b1209d3e91422b84c8a290fe48df1fdb561d7104d9a9e1c2b3c60cab5cb4d2aaa664e6502090afea232bebd5919415d00754719f7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9a7e29ae6b5f416f220c57b8cd733ecb

    SHA1

    5dd0213cde925a9f2666ec44b1bccd8b8f5a02f5

    SHA256

    8d87d0ff76c70031c1866a70997e0862ff16d9a40acd896be7e57448852fd23c

    SHA512

    00860e07ee588f64ac4e23a3fed6174dabc66c783083f256c02426b90d86ed82e579f05981bb6ecc32443095099bb45c4ee711f96986305c94971e8ca112952a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8ba697ad47140cabd1e21b1b4b92b690

    SHA1

    822c05b92f3ccc4925362f08182fb59dc8ffc1bd

    SHA256

    79129e6e3baf5421f9fc8b88f31377a3387041b374e9a2bda2ec803ae4b7cd9b

    SHA512

    6871e76607a839f5d9dbe7b15c93f6e2196d193c48bd0a7aaf427f05ebbbddbe34b1a7b7de977a3159786032f20caaf446112c21535e30ffb65540aa2d4a2172

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1d457046931d95bd8bc4d1f399721b9a

    SHA1

    b8f0e29fb159eb62584933ec4d3c42db465817a1

    SHA256

    315f3d221a5e8ccb0fbf5ae50db291e3615496e6ff213fceeb801fe0aa1443fd

    SHA512

    d0fa28db35a52c0289aadd8394eebf01131306c785245e22b46ac79dbdd9764e9835352350c9f4294a901ccf3855fdfee55d19d8733a6a22aa25faa4c7a901de

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e77ad5d31adea10577c6252f6506739e

    SHA1

    f465551bb59352d31a09eb5c9febfaaf5c579d7e

    SHA256

    9c7cc6874057549ec29265db6278cea797111750a3c6a58bea90cac3f28f3285

    SHA512

    c4074ee9c42e336b6c6b18dd0432d51db6ee939036122471217d53a38866048d1bcf2ff273e8c835d0ed98b153c5fb0b2f1dd8fca6fb673df6786b8b2cae2ae5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8515742b4064039811cf3b77cd79876d

    SHA1

    1dff0aa8e328a38de4a9c7becc4082df4d0daa62

    SHA256

    684e72ddb701c6fd325f2931f2c03e36255c4c26a31e60375470bdb8f66f24cf

    SHA512

    647e2ceb2817cbf73fa4b4bf068f090604de1d1d89d2c8969f86829ded695577da7d7bf77fdf8b6588f39cb9ed18d192152dda4e9d10058cd2b21d78bbbdb764

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7b2a1f3218181e79f3f3dc03b703e751

    SHA1

    21a5eacde9943448c5c7a82105309e9d5547d9e3

    SHA256

    8228b80d900867a9fda0b3367b1bf0fa356195b380961013550402e178a4195c

    SHA512

    04efc818aa508a4e969d9ff37def9296a0ebd0049b127676df043773dfb80bac163f41b24190f5ee70ba5dc37f4ec2eb48ee3d53e36ea95094417f9241ad4e0e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    58e30fa1c8763b864c417fa096709a5a

    SHA1

    9546d8f4060f523f0bf41292fa13792cc449a4f8

    SHA256

    3681f93ad81e8e6284cdcf3b184b440195f027a72f0f82a0280022e3c197f176

    SHA512

    9a16236c51f512e556b98fa0c0d9c9bfc42d665da2e64409e3a666b55ca33e623a30ab628b17671bfc8fb712aa2d91181a79c25780d3a96b5c98affd7b53ee58

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ed77f5b391463cf416b5d338e139d2b0

    SHA1

    8ab8249f9fcd7c72972f9ee8cd219c4dfa8d7f11

    SHA256

    94234bf9feb0d7c2cf7620cc25c51af978d08047c97026aabda1cf5c8ac4f53d

    SHA512

    0028d0c2253fb38cf732f2eba62781a9f99ab602c1555f1a35d110e71913314508057430ca050bb436f28189e70895102b5cc05ea3b186235587efefce90de5f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a96733b9346252305b071a2f0e3781ee

    SHA1

    7596164161bea437434bbb56d5a6aab57fb95fae

    SHA256

    dc6b54057da7b389c44814f3fd09614d7254ba5c36ae8ed89c2d644a748f6d0c

    SHA512

    001a2eafe3ca8ceb5c3e07499ea0b96fc0898848245c7b7cc0b3a1c87ae9c3661feb2718fd944996a39d086392dda68d87696b6c6d9609765770cdd4d819ba5e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a73e7e18722a677e2c5c7fb7f599e2c6

    SHA1

    f901c9966826ecbe55371a3f03908a1205e322d6

    SHA256

    cbdfe5e2a62e05ce3cbf37617d441e8ba461fe754d10b8b503d25a8e41daef61

    SHA512

    451edc70890a433c68a5ea27a168d68b373ed20fd95a2debd2914c54c6465a9267aee1ccf476feb0ce80238390e6e4d94db3be56f2a275494d11515b89b5be9a

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\LSNXCBKV\beacon.min[1].js

    Filesize

    19KB

    MD5

    dd1d068fdb5fe90b6c05a5b3940e088c

    SHA1

    0d96f9df8772633a9df4c81cf323a4ef8998ba59

    SHA256

    6153d13804862b0fc1c016cf1129f34cb7c6185f2cf4bf1a3a862eecdab50101

    SHA512

    7aea051a8c2195a2ea5ec3d6438f2a4a4052085b370cf4728b056edc58d1f7a70c3f1f85afe82959184869f707c2ac02a964b8d9166122e74ebc423e0a47fa30

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\M61DDFBK\jquery.min[1].js

    Filesize

    83KB

    MD5

    2f6b11a7e914718e0290410e85366fe9

    SHA1

    69bb69e25ca7d5ef0935317584e6153f3fd9a88c

    SHA256

    05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e

    SHA512

    0d40bccaa59fedecf7243d63b33c42592541d0330fefc78ec81a4c6b9689922d5b211011ca4be23ae22621cce4c658f52a1552c92d7ac3615241eb640f8514db

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\UOO61SKS\jquery-3.1.1.min[1].js

    Filesize

    84KB

    MD5

    e071abda8fe61194711cfc2ab99fe104

    SHA1

    f647a6d37dc4ca055ced3cf64bbc1f490070acba

    SHA256

    85556761a8800d14ced8fcd41a6b8b26bf012d44a318866c0d81a62092efd9bf

    SHA512

    53a2b560b20551672fbb0e6e72632d4fd1c7e2dd2ecf7337ebaaab179cb8be7c87e9d803ce7765706bc7fcbcf993c34587cd1237de5a279aea19911d69067b65

  • C:\Users\Admin\AppData\Local\Temp\Cab4BFE.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar4F4D.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06