Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    140s
  • max time network
    152s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    30/12/2023, 04:51

General

  • Target

    0f1a5ca142f86a9772b20d336e3d4508.html

  • Size

    55KB

  • MD5

    0f1a5ca142f86a9772b20d336e3d4508

  • SHA1

    91673965311bde285e17844aa9d2b72aaccdba55

  • SHA256

    81fb61a4cf771255c1916e376c000af9fc5a56d0fd56735da2d55322c5e04a86

  • SHA512

    f71e02f59322402398499bd9b4d33b123ad1c2fb7b2a1178e3068440d30c116d2b6fd923a3a130769a7565559bdbfc064875c2f25ba882d171c7131f4e9f8fc8

  • SSDEEP

    768:/79T0EipBrqADza7KkcOndmxf0ovAvuZ+d62VS01:/JTupBrqADza7KkcOdmxfhyuwdj

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\0f1a5ca142f86a9772b20d336e3d4508.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2304
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2304 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2724

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    262de6308762070563ff2377a231cd95

    SHA1

    367a9ab1db1ea65e6536db88d1c233050efba9ff

    SHA256

    aee21fea8c9642bb0498e36ac8830a672678ac344e5c3fc61753342c521ccfc5

    SHA512

    f05264ddb8295d8068e29e2212e233ace403b230e0d7d00e7fabf2c855f31a46298bfe615bf6651b06f9e5b8155163e1f468cb719c6efdab8fa62cd7fc7cb2f7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4459e522145a0e4ba304b30fb6400924

    SHA1

    c3d797ed83d1c91dcba27170366b4e346953ec4d

    SHA256

    c6fb1171664a3f692dbbd26eda279f6a264c67bead4f551cf6684cd92afee8a7

    SHA512

    de142b2d3dbd6b6d62395e50981dae3a2d9b30f2b9513d4480fcafc731fc3da6627f55b8e2efa514c7f59fbbc2d1af7ada9a7924436c111275407918b833fc5f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7645a41efe87941a046891fcaca75cf9

    SHA1

    e94eef8c9ace5d7872c34d248000efb1981c4272

    SHA256

    a1b6bbb9905b27d0c36b19eceed859e1bf6e00a98783921ceac8b2d995ef883a

    SHA512

    1a7475e6fbc11e8df63b847f58517d823fd4021bfedeb462b1a7b4fb055c129f5dad200c72ab33b25c93a02e38458722cb6f4160f5af9bf1ab7d6ff00794ec38

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8dda1d7f562674a5923ec4045975a524

    SHA1

    a494b954f0dfd83f15b8f607c72729bfece74714

    SHA256

    cffc294f2a269023b7fa3dccf68381490cfcc2b5d858f09a975971b72040c8b0

    SHA512

    d07d0ffa284f1081b978a9d8d1e92a6ac36ff2f830eaecbfe5fc3b5e536874c6082050267731cb1f349e66186fd1cc5126e7eccac024d66f37823cee60fcc9bd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d6b3302df54f980e741d290e5753200e

    SHA1

    c0162f66a39bdb73cc403596338e382e3f2e0541

    SHA256

    3939ebf14fd32b78861781a4b5c63ecbcf52fe0261082a5d6028bfe3443125b9

    SHA512

    b11c17d303e62d5f6f9d8d550774b6ed4f6461ac833ec4a45278bc71be06126e0263f73dcee5b3cd320d98c01a05e2d9adc7e10ad556b58c89f85e9644ebf2cb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c1d1c80929cb91afb47b4641879fc605

    SHA1

    3635296d85dbc483ff9ed0d77e4a287f64d76584

    SHA256

    887d29bd5701b019c8d4bdd0ee672db44ea1a530e61e35b2585a21e9278aae8b

    SHA512

    cacb1fc422c61a5f4fa99256e1243a0bb45cce27a107c685ca64b1df0ef7fbdb812b639e51bac2cd7dd354cf582bcf1eb572ec1a718ab5650a3db90977b13981

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    82e9a7f3a1ea81c21caebc405cbe5684

    SHA1

    19a26ee0bdd521dbe038df301d7b74fd01008cbf

    SHA256

    32370622f7ec8609cfc4341b44634ff70ced3382fe27dfdc16c7aa46c9021ba7

    SHA512

    7c2e2ff566f3fb68109d081b00f1bd35f3c48a5659ac2dd5aa5f4ad0d9e936ef2a6347b3b678c7f2da669791b2c0446036ef5b09e18d303296ec9b673094b0d2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    eca440905134c264d8a59d06758a3a87

    SHA1

    d21887caf9d4457ba86ef553b1bd367f55815d20

    SHA256

    c7837ed1f2b5a41f507d258a01447e39bd4acd39e7c9fb3bf316505a7802413e

    SHA512

    ff7f67279e9ed4d665749fe119e526216be641e6f9ddf453ec20dcf1d91ae5407be3ec380426e83ff26095d9e453006d00114c0478e56e0537cce0ba4b2dff80

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a4c472560a1c57e35e9e497b186a5d3b

    SHA1

    9a32adb8f0a6f21d13f324881f5e1f83cf6e6174

    SHA256

    2f940cef46a5d60bea8be01edbc1ff74b245f1f28d621b4e7d9b9be5270606ef

    SHA512

    a38cc5d7d62e0174eecdc79f296dc12b2741e55364119da5f55bfb53b116e391a7c0519048dc875e196546a52777b12ed4aeaf978cda442c6eccf523962a524c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3af2e743cd0a68e83bee38e9e8de4b31

    SHA1

    efb3f6eac868addadae02f9d62c83d124f41eff5

    SHA256

    5182b51ff09652f639ba44f12f9f98481ec2f3658ea3eaf11c9c6e5d99202912

    SHA512

    40fe52329f70caaef9ee6c3beaca8974b3ecd514390fedb81eb7e8d21463f396ca96515e70d544ecfdad75ec7e4e405d8041672172080f1ca148fe83ad90b90b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    eb1a7c6d1bb36040f4f7da7a9a87db44

    SHA1

    23de3401166b92e5d5ae54252bd04e1d5597b0c5

    SHA256

    fcfeb36a583985f1e36654856ae0eba7905633fa6c9b7657910736eeba425fca

    SHA512

    416102567505b567cbcadb6b3aa97c697e9fad15dc523701f7f5b1ef925f4f197ab83f9340a7de602ff7eddacbfaf67fbc3af6bc6239261e55c5303887e5a3cf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    aa299e88bf5b1a4b574b7a0f63bc38d5

    SHA1

    d170aad165792da97240d5a5c20e722ea8218875

    SHA256

    8d05d995c88af3279b70f11a57b28825f229561a7b0842d0f4e3d227ede20a50

    SHA512

    c21bd154d1522ce4db0a6c2ed2992cf828bc9d5c7db42d061100cbafd58b30c39469455d10a309b796c278b1ed0d581b28124b9ec132e7f26362371dd599d3ea

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    75fbbcd1e3a2232dc191e3c9bb784d19

    SHA1

    7d885ca967d276c25b4b158a46256aeccc00732f

    SHA256

    56cf33b1e1c21b45faafc56085be6ca40aea27613dc25528a82732074e8d2bbd

    SHA512

    3ef1635ebf86f97fdfb1d4840aef38ab8ebb7efe03fa09bacf36b2237dc1cfa4ce5928e9f8aebeabef40844b40ea2f526b64940e83801069f94708a03b9a0c45

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    66379342919c35bcf00a97569a2193e4

    SHA1

    9842e39db0b58fc3dfe3d37fcfdece32b4a7628d

    SHA256

    ff1e0aa3e8f7a041e5a14a24e0f6db4bb5a07c58e4c775d6e4635f624affae42

    SHA512

    c0055f8167b168c1694a13ad408c03587be98d9c72372258fe6226824a56060e5fecdbacd8003cde1de37009e9ddbf9af2becfb833c7aba578d90eda8122502c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7bdfeeee7f0eff5ebfd5c1d3bab66556

    SHA1

    d55998f52864a5454328c4b84c50e390a113bf74

    SHA256

    32b4d1f94c310d0d1e32891106efe97b3117c357b71269f471664f47d7daa827

    SHA512

    9b7a52d3153c9e26e87859d34aeecb334a64f201556d11556cf882b4e07c9a29fd8916bb702f4a77a8018078f27ce8d64cdb439d278d2e90bb829ef866c65f5a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cb21b8246796b7802d7b17c605087d7b

    SHA1

    43f39666fa40e17f9d96951c5867dd3e2affd26c

    SHA256

    8d5a1f3d6ed30404f74e821e566da4fe076ce488f324c2ed5b264c4dfba5c661

    SHA512

    9fd9707c0a1dd8f68ee2aa8ade47c1c70fa361694187c43fc9fb1d18bcbae4a231b9de340c80cfbe7296665fbc89111c56e733e23f72d2316f33a29540828152

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    33730097cb566afa25bf488ff85cabdb

    SHA1

    f67656930d92b43f90dda26bf95e94c5461f39de

    SHA256

    e6df956ec6aeaaaeea812d6a8ef411b03df9f862addd4e0d43b4086830de4a32

    SHA512

    f932f8ee12589ba738fbb195a3744cb345984909be92ccc23fedcee5c4c094b5244370f80fa4a5eb698ab13199a82ec4e55976135b310010b4737760005562ca

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c14eb0ed042ac81bf1e0df2a3b66cbb7

    SHA1

    c5d2028a7395d208e7415ec8d3c45c102f92e6cf

    SHA256

    176eaa89eddfdb89e6b78aece54ac9a240a647af4122924bad5f748892544085

    SHA512

    5a17cf6899015a561849f518d2bd85ffdb5ec1fb80ede0f2ff26d827791319a8f79346fc53d35c9a07d3233e8c6b80daf80164dc20c345cd91847dcd1b78f1b4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cb13b408ff0031157b0c015e392f3569

    SHA1

    1fcd48aa8ee5ff723a6dd495c6ff9c4e9a7df87a

    SHA256

    32394485422b4591e2ca540a339e1ffcc5166b3e8791c9eec9bc5e34282cc778

    SHA512

    c571a7251fa0588f9b2d588c20b449733ded56f1fd47c7736d8c91ede8c5fdea9e880d7d4709139a9fc18d23fb297be8fd05c08729506b09e50a3df3f10631f3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    98cc7c555424103503ee3ebfbaf137e3

    SHA1

    0cbdd6df78a5a1936f9488a2290e28d8949dded0

    SHA256

    58046afd3608c6081741319e6427275ae2e193cd4f554854363cc3dc411fb141

    SHA512

    fda4665bc2e79ce846a97749b2af7793ab6dcc2e18f8e8b1c122b25a8353b774138f05548481d8c0aec0def076c43967b73b7b9fb5ebb1fd05c64cd9d1a6a6fd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a26c3e169c13b3feb0572ad0fcb8bc62

    SHA1

    db9fd9904d6693fb36695a9133f5f7fff5ba56e6

    SHA256

    529f81eeb1a582910ba85d98b0b3a149ca9a70144d54a199d3d1bb14d180beb9

    SHA512

    500585adc2c2e4ce3c208bab22a0c013ca67ec474f933957d48bdc5fecbaa4ce80ba45d561dbd8f9466d1bf051b0249627e0e712597b2a1e30a036e1d2419acd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e3bce2d5da337046e9441e04994384c3

    SHA1

    77c988595fcecb1a87b765836d31c8830e00e706

    SHA256

    09e9aea1dedcd73ee465b783f681274707adb240827b351199a4292e0c969d99

    SHA512

    6b82a862e11f8fea568900f4f45768ed109e3b982642b736b205b0313def35e283c1bf3fa1bbd99aa8f9d1c4d8df5f415f992bb484ce9b3d51a5b2ebc48a99f9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    734944120a503f1f5e21ec43cdc482ef

    SHA1

    01df25d95bb3b6f6e0ed729e43720a48797e4638

    SHA256

    b4832820167d3d78091b237e60562f4b450d4d1dc23f6b2e636ec571fb3324d6

    SHA512

    9e82d125d5f2bd3a4d9fc60d2264f8aa9e75fb754e2397357618f0c763e6d8b7e997600adb31288b169c5d438dec9df61f447d59018218a1ccc2db81e105593c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1ab9e7e04ed38f14f2e30c790443fa01

    SHA1

    56fa160295428a1512634a481c40dc9507b8a7f3

    SHA256

    b9badd5d7068343d2ef66c3f259b4b1bcdaddd04f4402c02d35c4debc7de864a

    SHA512

    6fc5a7ba504ea1f6398f20404bfb72a86bf796f1f3f26b0f6aa424bf9dafe7c098eff0aab1dd53b2795c7e1e537958eab96d8f3dd94978da9bbbf3f9ca29f286

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\M61DDFBK\cb=gapi[3].js

    Filesize

    133KB

    MD5

    288c5ba5b7001fe841c32f690f62cc93

    SHA1

    29aba9d8e4f7cbe25fa5e64b9ecbe256e51fc789

    SHA256

    c2f33dc18eae27d4e878bf837dd97f1bde5151e44b0271408535bb93265b8c52

    SHA512

    e375d41344a086d35accfb02bb1f91e2dd383db032af387fc3d6b1230057cc5e432e9b2cdd976e51425b4f587391d42f4d9d857c2e6f11e822a65edcb85f1c9f

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\R1EBDLS6\plusone[1].js

    Filesize

    56KB

    MD5

    1944af3661da46249991197817b6cd8b

    SHA1

    f952df40ec79fafc7c798f37aff92878977376ed

    SHA256

    63326a1c4e0eddd3501f0a064b06a2708eb0362f3ae934f53145978d3d0799b5

    SHA512

    0bef19b32be337cfba179ed9ce4533a207cfe645d2e5fe0da9fadc7b01c72704fc89749670d1ac48b8d494675bc62ac089fdc4d8495979226f10828225594376

  • C:\Users\Admin\AppData\Local\Temp\Cab629C.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar63C7.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06