Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    121s
  • max time network
    146s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    30/12/2023, 04:40

General

  • Target

    0ece18433b7ecdf145dffb6c5667ad65.html

  • Size

    25KB

  • MD5

    0ece18433b7ecdf145dffb6c5667ad65

  • SHA1

    a8e9cc5857a034fa389e3479f41dd8472177ee49

  • SHA256

    0cded98cdb3e0ca2726b3976db9b171d024d7a5b87483a96d5972dbb185ff0b5

  • SHA512

    1787cb57fd2651aaa3ae551069e9f48a393ea63e6fc7ce8387b8a6acfda68aff9062c50de89fc0e1972029f440ebdd551cfb8f3f2f9cd88a7b9096f256e0978b

  • SSDEEP

    384:1dg2H8oM/GwV9IftkOUtxKTeBfKTp23zMbApLcLgWQQ/U4yhoy7jfIWrYc51IlSs:7g2HlM/JltITe08DO1NG9p6

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\0ece18433b7ecdf145dffb6c5667ad65.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2112
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2112 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2656

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9ab8d7026e239c6afa43a039a347136e

    SHA1

    a74d211294992be8742e5d115ac5cdeebe216c3a

    SHA256

    57670723b1cc63af1ebe316344234527672af6c724d4f9a7b272a040d0fc63b9

    SHA512

    11c3b767b24ab0ef169649ac2d42b3cec2e0e9a81407d6fdc4f9e0973fc128ee0c8de875450f963fd6b6b6b70e38bbfbbdc12bd67d308748968903a14490497f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    02e3c6cbb9d391a6383b364b0b93108f

    SHA1

    9806cfd2013fb201d12ed3ff07478143b2c48abb

    SHA256

    00fb2cc907341e53dcac13f5758af605f68a5320b0899f902f1510f94f8adb52

    SHA512

    ee9f58c34e3872c67d5ec9247be827d34895ee09328bedf30c3779c84350ee4ac0bda899f7e9c8b4b3b00710e985f5ea0a11efcb490cef269d381d9c0a09411a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    50dfa7bf8120b4ae411e357ff8a81365

    SHA1

    14196f949ea0da996009825270fe786a0e359e8c

    SHA256

    937a5b3213162f0f22a84e68f76a138db3981c7f677e189fbf8a9a81e48f1e58

    SHA512

    bd16f976f3d2efeec7d4f2540191e93ee12cf1f3adb5c549870a3915544be6bd1afc2b27b29e3ebdfc5f6fdb1ec86b732be5542b079ad6db6116188242c77dc8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5648f2ab9c96144aa4d9b9a0777561c7

    SHA1

    8a660233ff1a2a549147b396fe7c135fca9c72ea

    SHA256

    52fd8355d88d44f69f02167dc410f3fa9b41f8b3dba0b7c05a5d91c9281cefc5

    SHA512

    6c50a79a14833fcd7ca991a14a3131928f008da78ecf2cab3ca8aa9eaab85dd42b9421ad568ee6dacee901f9c9b5d76bf4fc04e2c42d887f1e4e730d5a423fbc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cf815454b1015d4f4db4df000ebeccc0

    SHA1

    a1a504a48d55e708a49df58c294b1f7a18bad4c1

    SHA256

    259c34833851e87751bbd08455a21f661606095896f0fac01fdd587ba43e4641

    SHA512

    ff71268d804a70f7b9c42c4628ac4bb331532911ab22e243e4af60f69f5d10f1e4f69c0bdd46045549b9cfea98bf4886a9c5cfbeb8a0039429a0099be4d27959

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9c4048899a70d3fe32992619ae277d90

    SHA1

    f07f0f934e66a2852bbb7a60628c14e7c9398cd5

    SHA256

    068bed72a22f58306e757ae96ab0d00981b63a6c2a6a9682b16bddd8662f3b86

    SHA512

    601c6b46ec1f3cc596a0b35ff009416e0d4449b2f6487668b9d3aac9e6704bc248134d7f850b5cd2921a2dd3c3947cc75fd50d96c9c4aa7697789c8f27d38b5e

  • C:\Users\Admin\AppData\Local\Temp\CabA5F1.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\TarB293.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06