Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    121s
  • max time network
    133s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    30/12/2023, 04:38

General

  • Target

    0eba03bef90505f688b2293029009c64.html

  • Size

    2.9MB

  • MD5

    0eba03bef90505f688b2293029009c64

  • SHA1

    e235372365c40599af637f99de7fe7024095273a

  • SHA256

    14849d5211a5c21c264f28078ae0100494a03e3015a902e1bde0642e1d18e9d0

  • SHA512

    7fb7bbaffc5136017f69a1506873407fe6a5b43c5bca7b0697e79e0291c9b1f9a879fbe9508d7a77d7c5bfcaf9a0af549852c621e51114e437a2e65252356fa6

  • SSDEEP

    12288:jLZhBVKHfVfitmg11tmg1P16bf7axluxOT6Nl4:jvpjte4tT6L4

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 38 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\0eba03bef90505f688b2293029009c64.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:3020
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:3020 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:3028

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    ab894ec7fbcb89864cca86bea03632fd

    SHA1

    acc9a26bfcddb2d83dbf4e214f8ad5e6890f7f3d

    SHA256

    b399ef80c59a4978aab03a8895a84582219a6edd17c32c9390a2a3db6f70ad23

    SHA512

    b36527c48c60e5520a23659275a4830adbb8e400d774a56887daa5f28a53d49fccf2421d2adaf40fb1f95a348345828f9843d65d8a8c890fda8efe08fb8c4138

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    20e23bcb097b65f614c2c8a03f440c70

    SHA1

    82dee2644263e739ffa016954b35cd952909c072

    SHA256

    d6ccad36e4e47c5c706faeb71b70ba12c81f5080f8bdc5fb1adfbb6c594631ed

    SHA512

    212e227bbbea4aea23f1cd1f0f492c6ae01d7a51d233396d35b2b0b1a313c1172ca070883c0a4fcaa4f1baa770a0f29f2ab8dd587aa1d7e4b40516bdfb5a8c5a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b4ab64f12d7ab99e014e5eb1acc35e02

    SHA1

    7a370b3ff35c75e614c9cf25b5babbcdcc98b42a

    SHA256

    342a3924096267b6838088056a377123fbdd224cefa97556c310c61b3b6aff5a

    SHA512

    824804b3d5502f749c64a5f509ea245ed6b4438566c7e58f24e7adadcf5b8db08261ecd9352ef24b1e5e4b25c2a7bafc2854803516eedb2d3211be52a7c481a4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7cea74fad4f081cdc72f07cd255e298f

    SHA1

    87ab514131ca8d8c1489aae4dea992f00b7903ad

    SHA256

    d8135c3654163f3303a3045e30ad515b60dc7f2244538ca5fb000438a786043b

    SHA512

    627e28d401bd45fe0b987ff9e6df225c58991d7743f348cae2f37285ef050b58c876ab35e321ef686bd93170a6327b5feac72628cebc00982dab2ad291e8e44a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    df4335ba8fff9a8244330358dc6bb56a

    SHA1

    50cdb39afe0c1663135c909170bfb32f8ac92e38

    SHA256

    0c70fe6e1c14e9041256cf675bd152281210357ba34ac4e8a7da1bddec64d4aa

    SHA512

    22de8851e2b20b38f856aa952e48c0d5ddf93e03ad278b76c8430dbb38ad75aa9e1fc8030de8ceddd85243da731e78ae0d6cd30073c0b19175eac49b8f3048a1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d60e92606f56bf21fec8e0c566791b9f

    SHA1

    ceaddae9e0c9c6475c6f9b1e7a35b89ce7d14066

    SHA256

    0793cd5cc000fff1082b191f1fe68f7a8fa12e4ae74332a8e1e5f4bf0423177e

    SHA512

    e15111def2134aa9ce5e2ab1b919a577575a8b20eddc182de954126a13ca04f6eef1735c84a452ba40b67a5abe686281edbc7c55b79867031455c9c7e0c0e935

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f4b0404f46cc2a70ff573fa8ce8ac06c

    SHA1

    ec0896b4311b77518e96a188d7a9ebd778f6f099

    SHA256

    78ed904003a228841e8b0bf6cf232bc4a381ff5c9f11858048d3bba0d68fbdc9

    SHA512

    e1f904f33a59524e91f9e6f9e92321bf816d5d44bf890946b2207f22b1292fdc384e4bea6fd9a40da4f38dd98b1e8be3264f7fefa5400b6f25befbe0707f70f9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b3e45c1151bf89ccb9929dd104f204fa

    SHA1

    aa712709362e1d61698245ee07621e9b8417fc20

    SHA256

    33097db3039840bc6e489f3df8647e81241c805a395fa7ba4bd012c60ff17651

    SHA512

    939dd101482d64117c1f6cf0caa96dd3e85d9a2d8a36d5410279665365a74df07a3228eb0f3fd3001a54efe328ad610d8ac85f74af9414e0fe9cd5b3fca9448c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    30bf9925ccc689c53ee49203acff86a9

    SHA1

    b9810b8a5e71376a98b19ed3547d4298527a0d55

    SHA256

    b2c9ac424eec1ae8e0ff87286b5deca19c5406ffddea99a751eb15281d5d8fd3

    SHA512

    e244210e2b1cced138d4c55182372e30932e23bbae869a2ae0d296db11c5485bfa7821db0e139bfe9a807223ac256d994acb46d5f05ca6d21852f4e4aecf9cc8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4e6b43a75ca05b93d191fa6af4ebf13b

    SHA1

    30f2e3c2be635cc033dbcbe326ef7e8c6fd1998e

    SHA256

    8bc18e9361ccf005dd0c71d7b6cc09d718836a4d8ae4bc1ac5166df82dbcfd42

    SHA512

    2de3da12467eeaad941da23980a9a43d44aaf37200ff572486d9737b35ea49c0c1ac0eb5bab7dc1832a83db4d04196c3f0e2ab753277eabd493ac5ccf97fee12

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    81ff1bf2d98b22eeb97986c058f11d5b

    SHA1

    6b2d68e3bb8b16b1ce67a86dda30d68a3b2f1abb

    SHA256

    091c4ca43859532a5106e3929900dcf9d62f28831c696396bea0f2b5cb6d83c8

    SHA512

    f8f9898996b65ebeb8603f52bd18706a7b04615256f6f290a4814a1797c490b210c6e6103f4d3cfe8cce74aa321fb51046481ee553ce5ecf2fb0442bdda143fb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ef0905f0bae2f6cd6f88d9d8b01c45b4

    SHA1

    7b78126237ed360a5e1ce343eb8bbeb11f224348

    SHA256

    e15a8547bbbc6f6c6002547adf9a4dc320b4c4fed43ae887220d39e2fd88a7ba

    SHA512

    0c88e64c96fb1f37ed8676dd40a2ccad1fc0075f2a9280a67115e13d1ecdd693ddfc0fccdcc7b2d85b77c9716d8597078e3bb0e418dac89fd6bd4ee70bcf285a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3e1f4267032827da3cd26f47051bdee7

    SHA1

    b688b2a34b2864f09dc41e3d428cbf376ea38d4f

    SHA256

    496d5e7aade9e7c278e6e6e693f65c5e67a4836e658079148b943af057718c4e

    SHA512

    af1a0e79aa778bc7c5e73e6fb90d0ba24dff3e7d5996bcd1c00411c2d59e85d9a1ee679c02bc19326b125c057f5efa05b8e0c47e3ae460ef551cebd2d75f3b97

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6704263e85fe729c16b407c8b6e1c208

    SHA1

    70f9819186e4a1b7bd7c1fdc94f6b1e7dd86e52b

    SHA256

    040c60b0203985bdc399b84dc68cadd977e73c1906fb799b8fcf6c7adac109aa

    SHA512

    8ea852f34ba5b441256f4e85bf7a300022315f8549bb8816cf4de4af177a877e7b9ee50dd8564a49d542cedde07b8e2c3aa2ea6cc0a0d17efffee17e945a09fb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c6a096ab3082d9d68f14e5516527e9ae

    SHA1

    18d6ae64ba9f980f21d847f2237a391321646feb

    SHA256

    67fd05c866cf080f1c9dfa62623564b55d1f80f0fe6a3ea02de2c39167de331c

    SHA512

    85e1ef9b1e6db5beb1e123c7a2e2a6fb85695a1db6facad32c7598fd1d6713c5bfd3f1a22f0a800fab5330d407685dfed53be8895f17aa896759889ea70fcbeb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    69ac2158042770c2933a87f799f7ede6

    SHA1

    c4ecc7430724af64a29c75630892aebc41a2d5f1

    SHA256

    f2202d4ed67c005680a57a0ab1da0fd3726a4da99c87dc76857952e6b444805c

    SHA512

    9bea03902abc7a12dc4a930ff092b752a7d6a116f8f14228acecf4cffe2d423b5be333f520582a27ee1f4b69cb5d52c72e1390821d3880c379e1cd29d44ab5b0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    28f1a660211e6953a5f1ebddb2ba28e6

    SHA1

    e112a4228d0c10caae355f9590f96a310a0b4d80

    SHA256

    7269c00e88b51e7a7c8360dcac3b9db7ae05d98e34285524787797d642f55404

    SHA512

    ccb9f3f188d0acdfd47c731c3af34d22571e4222f019f32c6c9d34c5ea0abb95badc6c2b052ebb93d4981192293e6b1f1b217ba273dde54f28c52b8eeda5db17

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d1e47a491c32c7ebdea91abc394657a2

    SHA1

    743d8291c70913eb8233d2dd8a9412842dea49d2

    SHA256

    1859f02ae67052144f035dc7d7112c9d0b63cea941e56d4de9a8b39a14de09b0

    SHA512

    23a273ff180b1f9ddff3bf15e600bd97b31f927c81061835bc2a0a3579f9963d11bc4b6df5f232d9826acf10a8e28f34a0f53167fcd5f1b294bcc694308672d4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b014cd1855219d6ea5403513186263c6

    SHA1

    cae4053f2872f32a9f3b65fa308a4cecbf72d6da

    SHA256

    a94ded8323d491b358bd4d7741e234c003ee862a1c7246498d7c2fe734721be6

    SHA512

    222a5c1270244d6c5c1834331d996a936e0a636c4a9fad0dc5a72b5d44ceec32f97e4134f9e1cb990016cfb2c1eeda9dac0a89fd97e2d56575004abc75c8ba16

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    39d8c4cae64d4a0df119ddd3f0051742

    SHA1

    325b3f2bec639a032fe6c308a8b79380343b5a43

    SHA256

    5827ac6d1d65489a8ea80d980897874edb6e3b8e80e9e810245707c3a5a4afa1

    SHA512

    8f342394ade9618029817cbbd894e24bcbb91293a3d9a14d75a74c443db838600b1919f390a5c0931bdf00ae8800a22aa36492f09fb9245d93b92b7dca74f1e8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6af6f7b8a733820dd2aab7bf3805b8bf

    SHA1

    c2a1f9bb41658df622fc434c4d111c6ec383d3f3

    SHA256

    659ece4e4b04043b78413242f2da7c5508ce7206a896a4ad4de85cb7563c92d0

    SHA512

    f3392301a709ba0eb8a896311544dac7d7bc623a57b40a72a16e5520dfe9ce52a825d4667d9378e5558a642f8a28a49c0553005cf0b061a053847b04846f646a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1b776c91481ab919a369db3efd5ca2ef

    SHA1

    e77624c937e521e4f8b9b6f67fc7f5708788c0d9

    SHA256

    f9a3ea14117ef701cf44205a1f5c64a66e180a8a04ae16c71a02925f66aa50d3

    SHA512

    75e268eced33fec85893e08079c6a5dc32178237c402c4021570d9b30d24955d6f35e47d916d37b9f4539f4c243fe39fbeed44665b095dd255dbbe6573f7b9a6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e736d6645d213591cbd29dd1631609a8

    SHA1

    5680e4badd7778dcb5860d5f1727134233487057

    SHA256

    49d7dbc2779d43042981893424105fda66dc03079920ddab36d1101dca8ef0c8

    SHA512

    86c0ad5260094b51f80b04cf8ab8f551b399eb5c1779a0c74c71558db9ffa9383c6d085718519ecb804a1655a8278362005b9928ffa158ecfd212a314489f771

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    eaf5bcc34854726accd70bbf92893137

    SHA1

    9f08952d0a2ee11eea678a8ba81c527f95248321

    SHA256

    e62c8a5fc9ef18a7257bd5e489a1cd8e360edd22cdf8524255d4d297fc30f764

    SHA512

    5c6dfaeb9bba989ba80e7903f92084988cd7fb9decea01cd9aff46ddf1e894d8ad0b0b101ea78b406c5d60a9cd27f58a1b5422e4d38b3b97478c354ba65b1282

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    7c1eef91a733de393ca89e44992892d4

    SHA1

    96a12932668153b8d296051b3ad31be5abb405ae

    SHA256

    234454b9d211c11c955d88d0db4a1a900d29bba9d99b3960d6c6a73370315e5c

    SHA512

    5873aedf319b428441b31f87011dd283844e2c02f29ddaee16db0dfc9c7b5b554cc235ea5fa826a367924c331bbcb614fb9cd852f0af29c4bfaa315311989c68

  • C:\Users\Admin\AppData\LocalLow\Microsoft\Internet Explorer\Services\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico

    Filesize

    4KB

    MD5

    da597791be3b6e732f0bc8b20e38ee62

    SHA1

    1125c45d285c360542027d7554a5c442288974de

    SHA256

    5b2c34b3c4e8dd898b664dba6c3786e2ff9869eff55d673aa48361f11325ed07

    SHA512

    d8dc8358727590a1ed74dc70356aedc0499552c2dc0cd4f7a01853dd85ceb3aead5fbdc7c75d7da36db6af2448ce5abdff64cebdca3533ecad953c061a9b338e

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\81DFDFPJ\jquery.min[1].js

    Filesize

    83KB

    MD5

    2f6b11a7e914718e0290410e85366fe9

    SHA1

    69bb69e25ca7d5ef0935317584e6153f3fd9a88c

    SHA256

    05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e

    SHA512

    0d40bccaa59fedecf7243d63b33c42592541d0330fefc78ec81a4c6b9689922d5b211011ca4be23ae22621cce4c658f52a1552c92d7ac3615241eb640f8514db

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RTKI8X18\jquery-3.1.1.min[1].js

    Filesize

    84KB

    MD5

    e071abda8fe61194711cfc2ab99fe104

    SHA1

    f647a6d37dc4ca055ced3cf64bbc1f490070acba

    SHA256

    85556761a8800d14ced8fcd41a6b8b26bf012d44a318866c0d81a62092efd9bf

    SHA512

    53a2b560b20551672fbb0e6e72632d4fd1c7e2dd2ecf7337ebaaab179cb8be7c87e9d803ce7765706bc7fcbcf993c34587cd1237de5a279aea19911d69067b65

  • C:\Users\Admin\AppData\Local\Temp\Tar22B2.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06