Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    121s
  • max time network
    132s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    30/12/2023, 05:18

General

  • Target

    0fd2c98e6778a6960a5fdab9cc20ecd6.html

  • Size

    3.5MB

  • MD5

    0fd2c98e6778a6960a5fdab9cc20ecd6

  • SHA1

    5295bc83b2ad11f99f4625d824fd85d9236ea969

  • SHA256

    8bb371b2ac6982d5e0992cf1f76ff53d59320fe01ea53dd4cfd4ac0c20294187

  • SHA512

    46316f9a262e69928d60e4d8d0207bdc58d80f716569640d528a3fa59ea5c15262d81b6a7d2ee7649bdc571591c990cf4f2c69180d9080cfd821041366070244

  • SSDEEP

    12288:jLZhBVKHfVfitmg11tmg1P16bf7axluxOT6NSn:jvpjte4tT64n

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\0fd2c98e6778a6960a5fdab9cc20ecd6.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2076
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2076 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1240

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1a996a48cb7dbe712762da6912b5f3c0

    SHA1

    0a4eaf2b58225beacfcc26cb89fbbb4ec997a88f

    SHA256

    a25248230e1cdb368fd01e3fb4adfa3556b69aeea5b7f5e18ad08a62f1ac6f64

    SHA512

    e33c46711bf705fd633860793c3f4efc86f6ce083297229e92ebeb71e7039940d1744cbb5f189c7acbbd27fcfb4c070c5d1092184e70021ff6b0310146942bba

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    02643f57194a32d0aab82d9ae5944013

    SHA1

    d6816e3f01f1e5389aa93019a54a39f42033c7bb

    SHA256

    d77a22ee766bb95061c0a0b04a2899c15cb7e64b53d4abf782b24081c73494e3

    SHA512

    97e0a05a9029805c45bd77d417ce1583fde0c224f0dea0bc2c63479fa818984e4be5da9858b359299d72bf8e6aeedd55f8fb2e4817b4fb1b2b3b362ec73ebf38

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6ab5d3a17d25cf00872fe787164d2e90

    SHA1

    4442b2627557c6b089cb38f8b0893aad0052e30c

    SHA256

    323ffd25701283c2e9dceace820f718eecc62992b9dad7fe4370021770f2ad59

    SHA512

    ba69899be988b48527c38beba6dad82bede9a233b7fc13807708fd1e1c964e1e1b3dbf5cd06268cda2ea9ce5da33dc0a0cacd164dd3a85e3f8ee7b732f23762f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    aeefbb658c2b148b93de31f038fd0232

    SHA1

    0539007542b5aed6c3bb168d6fb7fa5a7055b0cc

    SHA256

    0ade6862da100d8cb92815dcac3b83b0a81bd0aa13564e80f9c79691862517f6

    SHA512

    208a854e412f06f3100564bdb048756d9807bd113d16076e0639692f5f58914a047721ef7688912becc33c5c87a75f3a5dceb87b5a8542750864640e2fec6e31

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cdad2ecde685110e6b64216553b22c18

    SHA1

    97985e2b57e7438b4139f7ad42bf3ceb2aa941e8

    SHA256

    ac2d69d22c166446912ca9933c9e52b2e7d82dd8ae3e611a7d70e8d478f84052

    SHA512

    db57dc2efc3f60c702f2a393e1e4dfefb4bf51f993e1ca2d84e7e278a9931c093107f9fb9341f3d088991538c083d5bd9ad9dd7bdad8b2937042c40dd61b91fb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3a525a359b2d451ac0ec66902beae9ac

    SHA1

    e52b6218e6a0bc4663b9c8f99129dde38dcddbbd

    SHA256

    9c0ddd3dd352870a2f31d551dabbb553fdd35c379268716d94543a2946747fe9

    SHA512

    d3822a1f0c5a47164594ab83b6fe7a5bad6e4a269d53310baf5b8103904159e11802f82c9b9c15cc5b865a3061ed846f224070ce00cd749beae5a387deeed16c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e57cde5858196e3c64f7e236c137e49c

    SHA1

    7aebebe036e99d45b2eb85e3dce0bd101efb22d4

    SHA256

    8a75326f1f499969c588c3a583cbaa83366180bb475ea3a137148a8d184fa339

    SHA512

    e8638fe9e9d686752908fd60193baddcd3e679c3e3ddc5e56ae42150e1b3df5759cd37fc2e7b246c670f1babfa00f73f5e9a334a861fe8d4482f8f9797a448d7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6334a9405becc75228bbf80c417d34f6

    SHA1

    fa85efc5a84f88b2550b2099a1e3184eae5fdd20

    SHA256

    64395e74f2ab15fe03aa8f6139b2572e24a7b98417b543496198a3934d291393

    SHA512

    57ea30371c1b7ef599d0d6bba6ef849e4e4bac14b237595b71b1dc6dd1cb5b85bf1261144208ccf139d945b8f3f34488233d67642925ec7eaee3a1b7ab380976

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d622380f92d88aec7a78753341a417a5

    SHA1

    b4496ce314a42dfd99b2e2c23701f5c7feba0d20

    SHA256

    5f0d926ddcce071c6b0e3e8d8e752027db429c5fd52969731963023049c1b7aa

    SHA512

    b9d7bc094f57e33a3f5f37ffc5a061be1a2e17492f98ab6a2d7d09b846bfba293665a2d14a2eefbf0589638254a872bce5d0aee85edf0f0e2d6457f9188e3c8d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a12689ae378d5e2756d96beba72130ec

    SHA1

    2d7065d90ab1972325e478f806f4734539079b71

    SHA256

    d7a1f60a84f97ecc84a9604e9af0b0dea352c5ace7c184a78ea02e1fb123e002

    SHA512

    cd3c2a285b6d9f8e998e004d09c685a6e0b6cf9cc9a4292c3dc5ee9679afd29998bc24be541cc618cabd1efd456e1b7f99becfddf86b3461c3440eed6f6ed111

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    550dcccba9ca14c85362dbc2220a3da1

    SHA1

    c8f3d2dbb705ad05d06be050f4c3d1f96309885b

    SHA256

    8844614299fd4b924161a1e2f1c2405ce79007106d46af7ca00f0eb3d104d447

    SHA512

    aa76f1a3c64694b04e2907b0e50a028d5e6f591466805014f412c779a8c2caa81296d7c441d9c60787e93b32dddefc5054100995fdf8b2047007d1ecf2661d6c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9403c2e962f188003e4b1762876c82c8

    SHA1

    7d4f0371ec38e625d35835bf20f4bfeae7e18743

    SHA256

    f43e4f5661da00ea4c16089efafd7fe9fe8728a00aac597d1c44eb72a0062d32

    SHA512

    9ae40a3e35654ff1f7dc12a3bd3cf056d34a0b724e9050edd8b52209b01aa2fadfaddbee223aaa558110496bcecb5d92ab1d10a8417344012d222bbc3d7a7ca3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9072ca96ef430c7193931b0e354875d0

    SHA1

    bd1620358599ed4604dd82c1e105b15212fe6109

    SHA256

    2dd037f4f35436d358a18394a15f523df342af3a4569c6102aa57318ab280c82

    SHA512

    5c0d045be3046fceea6ebd13e0c155b2815e120c964ea43065f1abb6b3f0b90f50047d7871d226a655e7fb54a38d404965d27337fa91355d65bc842072d39440

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    056a9801e5a8406858551989a68bdfa2

    SHA1

    cffd9d85342b7f50bbde3fe34a8fb150bb56086d

    SHA256

    ac8b0bc73bf1d4641d998adb539363b34ba1a24c246a3d58dd02fc1cc852d692

    SHA512

    6b816a35990737a5945e42b7131499b0076fa253109bf3523965f7187093c2afe5409cddb1afbbf68afba5a1bbcd4a906e3c56ddc88087588c79a747d3ec3ab6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9236099f881d3ae2c272c97c7e69dde7

    SHA1

    3e18543f1bd6450ea990c344c4e8d7b010a02a5f

    SHA256

    081412a557ca9568425d4336407ffaabb062d25087d98e5699749f60d3fce131

    SHA512

    cac01d9f2a63a6fa008cbac307094a0fbeb0644c5f06b7679c26da2c1ce2fde99d926776b37864c354858b7c6d4b5412c508f309b1eb2104f3477322d2fc60fd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2163be5e7fd1d08f536784b14f389897

    SHA1

    438c72d76cf34e047b8f31686d0af7b0ee3776c5

    SHA256

    e4fb871dfa5d3afee4001cc4d6f4b007df6c076e914173db74de5d386e349fa7

    SHA512

    77261eb044f90a8f0e45872db84b0d10a6662a81128087726dbe1077fb1169dc6416757f463cf3ec6a031c13ffe1627123d8c02329556e578030600632712d91

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    868c14e60bc05a273faa3d60209df65f

    SHA1

    d115ff8f4bebab7dc911364c5f9d55bee9a1d31e

    SHA256

    4a0681a0a75a966c584c2a131d9a6f1d08c0d5abaf7b2d878da0dae126618640

    SHA512

    97c60937de095332179bdb0812bb8bc0af31f758ad1c6747ed66e48a3ed10beefe607709070b8f4203889a307ddfae52c4d46a1f76d0661b0804a17e0f476512

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4086a547a9b58573745b11730bf7409d

    SHA1

    a42fae115bc6b6f397255ffb54dbb00f8037ad64

    SHA256

    154e5960c9dceeacee004dbcba297a75398c93a144bc6151f141361888eb5c29

    SHA512

    906de6c3ecc5e8d966b2c2e7685fc83fb930c8c472501e9b529be2f4673275ec4813d4d8e03377ac56f6ce084802bb150bc0a1e6d32170dd60819233dba1e77e

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HVBRC7A9\jquery-3.1.1.min[1].js

    Filesize

    84KB

    MD5

    e071abda8fe61194711cfc2ab99fe104

    SHA1

    f647a6d37dc4ca055ced3cf64bbc1f490070acba

    SHA256

    85556761a8800d14ced8fcd41a6b8b26bf012d44a318866c0d81a62092efd9bf

    SHA512

    53a2b560b20551672fbb0e6e72632d4fd1c7e2dd2ecf7337ebaaab179cb8be7c87e9d803ce7765706bc7fcbcf993c34587cd1237de5a279aea19911d69067b65

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JIH1AB02\beacon.min[1].js

    Filesize

    19KB

    MD5

    dd1d068fdb5fe90b6c05a5b3940e088c

    SHA1

    0d96f9df8772633a9df4c81cf323a4ef8998ba59

    SHA256

    6153d13804862b0fc1c016cf1129f34cb7c6185f2cf4bf1a3a862eecdab50101

    SHA512

    7aea051a8c2195a2ea5ec3d6438f2a4a4052085b370cf4728b056edc58d1f7a70c3f1f85afe82959184869f707c2ac02a964b8d9166122e74ebc423e0a47fa30

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JIH1AB02\jquery.min[1].js

    Filesize

    83KB

    MD5

    2f6b11a7e914718e0290410e85366fe9

    SHA1

    69bb69e25ca7d5ef0935317584e6153f3fd9a88c

    SHA256

    05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e

    SHA512

    0d40bccaa59fedecf7243d63b33c42592541d0330fefc78ec81a4c6b9689922d5b211011ca4be23ae22621cce4c658f52a1552c92d7ac3615241eb640f8514db

  • C:\Users\Admin\AppData\Local\Temp\Cab171B.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar172E.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06