Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    41s
  • max time network
    147s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    30/12/2023, 04:05

General

  • Target

    0dd9d50d1c470071cc63c2af0d4647f8.html

  • Size

    432B

  • MD5

    0dd9d50d1c470071cc63c2af0d4647f8

  • SHA1

    f4ea191964b4daac10fd63fd17b5c4f4f1956c89

  • SHA256

    8b12002c8e40521cb64358d7f371f7f9e4feb7d27bd554c82389c8a0b1955a33

  • SHA512

    43ed474b0b9a8f295ce97f023ddf6d02486a1368fd4540949511e91fcb47addfd710bffb53ccb8b53641957423edcda7ee2f816e40893dc329b76c79ce58c27a

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 32 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\0dd9d50d1c470071cc63c2af0d4647f8.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2480
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2480 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2264

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    95d3fa2cb72ecff2fc856a6817d5e8a3

    SHA1

    08d288aa1ee917c13b98db908f4a2f3c8b9c6595

    SHA256

    7eb0d6a08dd79cdd26520ac4d6d8e2e56369fa805380bd33550455ce1d468300

    SHA512

    e67426528a48191a8f60a4ce123f4dcb6b24d4f6eb1b45d5d3a5f978cd5ab92c9147fdf597c2f65e3bcac215511386a25eaef9ebea0c4a540001f4ae4c4bc0d8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4580be20dae6515a6b6abb1875655153

    SHA1

    a888d8f15a990e783e5487bc508b96f40738699b

    SHA256

    d18a03c0383ca1e69bb0d6d6b0b5214b56567c6ec18f6b35fb9aecc7738e6211

    SHA512

    8a37d166a2ffbfec6277113127fff8714840ce86245ae9e9583add885a40bbd0ee1d40816faafcc3a611527961f9a7a57f990d0c13e94e166033b0ea318e515d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e30cfd8d641656118bf08d2f058106f2

    SHA1

    fef15cc2690191f1cca729b60fc7d42b4673d230

    SHA256

    00b965fdfffcb3634ecadf7c7890b1124428536a17a4531841199d6a7c0338fa

    SHA512

    2df7591af2c403b7888c60d51e6ad9b96765ca8ccfb203fd96ed31ae02bf2fdb866b6023d8df74905a696ca194b3a0ed72590d0820fea5d92249751c863c333f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ec95ab4ee6f4bc414685e79655059502

    SHA1

    605c914895e3d67b0ec4b28bf73663f959cf4a31

    SHA256

    490206c3c5826eb077ddb1545077c315bb1c7ac4f9c28d88fb158a8c362b48d9

    SHA512

    a084e03da768ab532389e9e696963e8b0b51f052570caca37acf2ada2370c672001f2849a1123d67c0e6207685250d9181706e7d2d3637776ca5961680187dde

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    515c3d2f22f4ce7dc4589e8b3329f85b

    SHA1

    d1d34bc95a67f3ee7f3b0c46a08c0310521f8144

    SHA256

    314eafbcc5abaa0662144570ea11a9414d2ee99ea9eac6f6d24741ae62a282bb

    SHA512

    46de152c8727bdde9cef82d693301e8aba36047eba0b439af76c9753bb0f05ff12e8a748baed5c5c40c1c7c5d743e32b6615ead76ae6f8e7e75ab2c0e3087109

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2c925357cc60547400e36668b39f76d1

    SHA1

    69506e19acaae0ab03b0e63c6551468c1e3ec31c

    SHA256

    37a69d2747458fd773374c9f2ea4cfa625e4f45b976ce648af255a6947b8d70f

    SHA512

    3567ee624459c0807e81590be5b45e002c49cba0d90ad6fe8623a758d5515502159444462fdf93e112d73928951ec961c82ef38b9c175b2ee162ee6bba6d8796

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    55a054a7adac049f8f2d982922a13deb

    SHA1

    ba209ad86ed7761156b0cd13a11b6f25d236f28d

    SHA256

    261950f2fb7cb884ed04418a5aa755601dff46be32d8839f522a6bbeecb500eb

    SHA512

    75fd5aa98539eca36f3d3d0e821f21b7995d96bc50066b725ed6b72677b18b719648e5d0ed077d1bb53e9e355a2bbf91cf52a79faecb573f10f85ab722410cd3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    abcab2b417f89a5985b401ec5c23f03f

    SHA1

    9a49245aa30b8678689a1c772c060be1440427cc

    SHA256

    971fb031d021fc0370589cc54704462f1d0eb74feb50255f3d4a7d37f35a3a21

    SHA512

    b571e501bf7271411e805a55bffa72ae9297f1a7376d5128ad6e898dc2cbc7318f9f9b907febb2767c96430452c29987bf0c8aa701e7e7bfc54d7f09d80630c7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f8a839d432938e88099666a276ae48ad

    SHA1

    f132de9224fc49a6be8b0ab1e30dea08962f0689

    SHA256

    512b6f79af2e15109bf9b1b369a9d022ba8b97ba89c75e4aa11dd39b96fde176

    SHA512

    9ffe329ebe4a462ea0a03d3712d7dd8df446cf33bc500f2dc05d14117fc40fa7cad0531cc3a418ee899d7338d67d4a7efe0e153884525afcab5f6416346de42c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5867c7b83652c61ad1ed9aca15ffb091

    SHA1

    12e5de4da70bdfbfa2cfeacdcf8a41041f3701ed

    SHA256

    51ede259bca0b6c8ba95a89af0b0bada0d10d6752121a1aad4e6d4d85b899c96

    SHA512

    77a0206bfc5cf8141ab610e0623feabdcaa1c5f596b5dcc43bec189fd66cea7a9027da8fe3b2cbef8fb36f324c5e20dc8b736423a9a55e8890c48d8791bceab0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    af7fdf4963aa3f8039007bfeb0c96492

    SHA1

    cd992560ccc78b025a420ada8bea85f08a9ee215

    SHA256

    a394ddc05583697c9209c2322fb82d3e19784b97a447ce97cdb394b222340db3

    SHA512

    a7239b19145e9e424c568be76d044bbe65e976ab0e6939bfc68de3ca412e0008cdfc06b0cfee269aab8e21329c860fa1a30450e16ccf994da325cfdffd1108c4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6bb110a2cfcb979f2c4283f2019e539c

    SHA1

    56befedb028410ff949cf64f58a443e7e8fae355

    SHA256

    6c90dd2ca073571439a5d9d6e309722e8592fd10d4512178b29522b6d77bc6d0

    SHA512

    3987d57ce208b9e09fc7366a0f2a0cd50fe016aef54e6c75655cfe929abff333e02b2961f144d8ac0c1f3b1d4fe65848a5dc4faf4679c1d6cead0f5165bbc4d2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0e2f5c7d8fcdc97d408d70662d81ac02

    SHA1

    d15814b02741622b51848c73244e29657ec221d4

    SHA256

    c35fc5d2308a3d98ee579a57136fd2ea57a9c585018924957164d97cae7514b4

    SHA512

    63990d4f83ed6f54849573dbdf47afad730160c91c5408282f8d9b38aac1bd62158ee0cdc324826bef9616746c7101a521653473a1464889a96fe1e55dbed879

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7888079eab2998513ccda1f398e57b4a

    SHA1

    9968571ed579ca2d5c08944266e6c75ff1a3f91a

    SHA256

    ab0a0048bbfbd34183c9805b1a8f28d6da2a28a3f8ec3f4c398acb9f937a6887

    SHA512

    f03f340faa75159a8c3caa3b08ba23d352fed8c5c99ba9bc8010d1b57359f15abe52d0a09b0aa6cbb01aa354799ea486bc79146d7947904a7e95aa40e1a3e1fe

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    af0cab6128fb83a2100a7f1aa37e42f2

    SHA1

    a9f31759d54903ba645c391a825a2f097d300a48

    SHA256

    a45078b72e5bb041d14e3f55618faa9e00517901a77f6427db6e1f1990216c4c

    SHA512

    50011357a3056dbc8f3ed2d5043f435beb2d3bff6ee6b742ed7647a5c288f28950fd26fe2d91267e563793ec9d6915cea3a6e0788c0439419d5bf3b02cf471bf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    db161a00afa78c0b2e07facd34a6b338

    SHA1

    1ee1cc36e34e120adff468e2e5ff1626e614f661

    SHA256

    27bbecd64a2a46d8af2faf0eecdfc19942df72e5372413e7a53ef4b8891b8d7b

    SHA512

    14b142b6f57386f99f09c0173e9a100dfd80a6fbe4102f094fbe28caa26c259bb75c47cd0a143ceb3e922cd78dcf07ad7ee203e5e5890bddfc0944976ebf69ba

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    eec9c1b833aa00778e09875e565bfd85

    SHA1

    76cab63215259cc88b61fd0de694d4092278b581

    SHA256

    798597fa081871ca5c8e5a166ade4a64e9f7650002608723c1bf2747f0d3297f

    SHA512

    c5734e76496eb772c905396421548cf68ee0601e8a39c7087f0b54a2414849411af8fd6b014aa7ce4d0fc0c9fc68769bd0f916a532ae4d69069aa6b49a24b34d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    97a19cffb69fdb6db76f10dd27a420d6

    SHA1

    9b825715a44fd51a181cf575a6e110e2a6872a44

    SHA256

    ee5aa760e742cd2865cc98ccaea60965e6b0d3e1413ad3f694bac5715b86567b

    SHA512

    fda961be2a0cf853e94c9bfb05b572eb158b111b6b2ead884a15a7150d21335b89f0bd311a707fbc7fe655c98b4843d1c3db14b42163fb5b370922583fe94003

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1ef8cc128a5274c2f4da00baaa54374c

    SHA1

    f7d03242a783cfed582d283dc0e3405423ae34a8

    SHA256

    d9c5a9b54f7475c776208ad04695cbb27d0d3f9fe56b3c3d05f57cb67d6591d3

    SHA512

    a4b2bd708243fedafd65c3194e693b81754f3e62910cc350bd86338b21574dedecd3e548c7efcf661f1b76e646020689725516c4165e32ffc40fc691ba2ae9db

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    59a5ca9435183f667bc827a4f249843d

    SHA1

    152c1420f7b7c372d8b4dd328dc5bdb22387c134

    SHA256

    ae3756cc49be14f0c7d0cbb6817d2049c9d5c42770b836703339e614a4272982

    SHA512

    82d4f8b89ab58e23199fd0bf8d57459bf72d0d4166eb18304e2f25980b4d8dc807ef0581608e6e9f7359e319b6691a6b887f0838e9b20686d1559f2c22e01c6a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3131938b703d00b800bf68915ffd7cb8

    SHA1

    f280f9609ad522836466f7f96c4ef18f75bd5a0c

    SHA256

    c1f82e310323a828f77887d6a2bcfb3c58e5ae2086e56970189d662a3a454c89

    SHA512

    aa5baed7b1a46e0ddf4abb8327b69f7f150bae7a3074eeb340807042fd56ebd7caf611ddd45e0c3972f6a98a273bf938e08a7843077bc3a6a5b42d72c60d7835

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    11ca55a2660770feb3281dbb5c1afefe

    SHA1

    08dd1b028963894909a81682e543cef8ea9fbbb6

    SHA256

    fdea04a65d5a96cdf8539905d6444eb74863f6be0e4b6e6d3b1853bbf212e85b

    SHA512

    43c721d55e23a4b3427b089197104b7cd75b3e301abfde25f65a1cbf3ccb3edefcf011b0152cb685315fc287a189187e8613c475f265357c2ab790f53cc83680

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a2bbe407995cc93fcfeba6209757457a

    SHA1

    d63b696cae23fe9c59de36649f63718a1f404353

    SHA256

    d02e54c9b04bb038ad0fd3ad95804bed4b97a43c5947a1da59bc63adb835f5b8

    SHA512

    8526ba7d28711dfc3fe617e6967fdc878a72b3e4e147fcc18de3bac50161e29ada5c24167e0f85ede18baeb6e225b07db88c231ba44351ccffff998d9eb8a794

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cb77f9093f423157e0cc22e2a9261aaa

    SHA1

    a09d052a1059f64680c31f114ab488a3f580cf2d

    SHA256

    7eb0b455f1874999a71e2b79e990f4ffb74040c650266642767e065d79b15b76

    SHA512

    3c5a93519e7cc93b45d8c9a8b1834f4d6d85e22558e8229a9e92592ec0cd9932c526934a395c3a90321ea6f0c9f20ba5d8d72059bd43a8a70a87402b3d0d1d81

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5758bc4c55aa04807f29f7ae3d54af24

    SHA1

    6c3665f1c878a4ace46d5d424a38a36c0dffda0e

    SHA256

    ecefbfb79ee1f0ed2751079ef0a693c9ff99911c459a2775c0fc26857cf7d063

    SHA512

    20a4ae47dd9cabdc42cc761323c686d8b3a46e4e67ef2077c870d72328c5de5ce832bebcb81ed220761290bdfc10b63fbfdb6e72c5df7306c54b128ee3ede63c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d4e8c3c68472a71b588ecd6b264bcdab

    SHA1

    d10353285182472ef0d4b00ebf86387e807306cf

    SHA256

    13f4075a180b471958a0eb5217648f454ced8b406ca4ffc59ba07ad6827143a8

    SHA512

    ede71e8d1929a906b691782f9958aa9e9074edb79443609c29efda038e2d83a2ebb8a39ab6ff93f4ba426b8443257dd5a4e7973c0e60a0d7262eed2ebf093097

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\imagestore\wz5r4lq\imagestore.dat

    Filesize

    2KB

    MD5

    614f0c25d416d45cc38d640b3e9ed38b

    SHA1

    326a50b12783919c692dba01883f7d139af041ab

    SHA256

    c1714a63780d57638341286e1f642941d87b66d1def7e14b44e203b3a060cfb8

    SHA512

    5d44d6f3648ea57b256db1f4412080897c5e1d93c34fb05be0dde0fc9827eb18e4365998cb762a41ab78b698f52662cda1f2ebbb842d7a31257fc64c616914fa

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\4K0WM73A\favicon[1].ico

    Filesize

    1KB

    MD5

    91abe01116ab422c598e9c8af72cf4da

    SHA1

    0f2815fe8e067d48537ad168225ab4674271fa27

    SHA256

    b1d7aef06456fe7431124129a28f0138bb5fccfa4f4161e3087de23c005e5edc

    SHA512

    a4d5b20c3014153b6b382c43404917bd2cb5bd2a59bb1e981f5a19eb7dbdec185ace288e9700428d24e5ac623e45d04905e706f0c45a1642b1aa6c091213c23c

  • C:\Users\Admin\AppData\Local\Temp\Cab699E.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar7CD3.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06