Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    143s
  • max time network
    138s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    30/12/2023, 07:13

General

  • Target

    11dc58ef24785be9de55a1b7851ebd13.html

  • Size

    4KB

  • MD5

    11dc58ef24785be9de55a1b7851ebd13

  • SHA1

    a18c21903483fffd9068b385ac8596c1c7319496

  • SHA256

    a307fcdc3fa4c2541cbf8f95ae21a72a742e9645da5e9e40842cdd3a6cc89371

  • SHA512

    9c519c1ed8631065cfc4271afe608c69a74a848030375db7d6291c5554313174874258d1868f5bbea041026ce57c4942c1b100d03e6fd92d20ca63ce37be3db6

  • SSDEEP

    48:6pJ01KFrevGA6xdNhk6bG061B1h1E18g1pbyJLlpMJgkXMGVMVfh+EVzUNnt+Oa+:ufCjmNhYDvygkXMiCFo0ksNYDV

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 38 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\11dc58ef24785be9de55a1b7851ebd13.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2244
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2244 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2168

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    d2ebec4ea1192971ce020a661ef68748

    SHA1

    4e8b5e652c77cdee4ea4fdc1b8a0d73fce5dfeb6

    SHA256

    12de6b64ed3f6e2401da4f9ddf380f83491faf1a173c039d47e516827bc81f73

    SHA512

    3e96f31ac7f7e448cb567bc77d2934a86618794fb2fc8cef144a6f18dc3fa7661c74c9c24c6fb9ccb14d0dfe0eb7cbd642285f1b96e80f5cdcf47a9e5a6062f4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b39067b2818ab2a79df948bb565f375f

    SHA1

    18c02058c922bc452e8de0465b54f1827afedbb1

    SHA256

    52876b720fbf96fe13171b6abd71b4bc8928bd9d503f55c136c2d3c053f82188

    SHA512

    ae8226fba89902cca84a8d8aa247cb2d032809609e676ab7334c31090c6b080497cec93b58556bbd86e9b6809c292dbc3da3aab96b8c6c24019d87cd8c768c5a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5ac73086f13107f68127bcb4fde5a04a

    SHA1

    3136c1483db5537a52db0260dc629ef2c99a9c1d

    SHA256

    03021e0d5127ca8134f9e4cc9392a6d25585fe7a9efa5e6dade1c75979814e4d

    SHA512

    733f135c565f59a6d70d8e1c35e605515c772bc9e622b0686e2c38101d1dea05dda035c7f4953fb7fad995a26724f84e35e80a3b54c34d28516766d8d67c5809

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9ae7304116393ab595233edf4f365cc2

    SHA1

    e48aaad277dde88dab00f32b4db787e8f3b52a63

    SHA256

    3e74afad9afd7a8c8e83df416a30e6a66f35878a2757c0e50af640f6dde075ad

    SHA512

    4c61fbb6a2cf3ab5811296d8a617dfec08e12797b3af04d5a6033ecd1d867698d8cc2db64e68314c522104fbc6a4546c0f8ad5a92b701afa08375564e5bd446a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a1d2513a3cafa0f2bca0a4bf79fcbe10

    SHA1

    2ebe04123d45e2d8122bd02008cf6d94f324e52a

    SHA256

    9f32c72c9ee947d121d7b16c44990261dd62df38ab0b3f86c45d3494d6a79a24

    SHA512

    14d4786f6a8b98effe9cc2fff830f18ef725b797ddbaadd20fa2c2e7de6da555c7f1f4e2092dffd11e431b0c8f3fc8f8a2b153fc91152e6a405fab75f27ad927

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a31e83ee530e6ce43450a6c2c23532e0

    SHA1

    9551cd96e27ad858f78b3f812b4b994bf833d4a5

    SHA256

    26db11d40e1707e41234a342ddc25f3db3d82021797f98b9266776f41429f8ed

    SHA512

    e19ab05f51fb97c5bfbed46484da6716912ac9b7f6fefc438d79a4d5e97b2583f8f4354d8215f98a2e407c66495a342937eda27ade96072816e87c46eb425012

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e49bee978cee573d7ea55b83b620800e

    SHA1

    ad9a694bd6e63f347ce4261ebd7b00f5237f7c89

    SHA256

    5a0723d0fad0aa5ae02e5d0ea961e57db3f23a74a372fc5d14e115d28abfe29c

    SHA512

    0cf23499760b1554702759b18cf4d3dd3d09d5528fb68e097596bd7c814d3ac97286d750c749c8df5e9391ad45b785dd9eaf7dc6f40936695cfeb0e72345303b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    08b480b13142f6250e511b58cfb75afd

    SHA1

    e5c4d1ea10f238b04849656bd60ac274fe8588d8

    SHA256

    90130873a2439ae0e7e60a64efacb1fdf5b75f08b2ac565f89e8b66b07f9b05b

    SHA512

    401324cfdf8d4005cf409376a52656d0b4d3a1624969d1d80516031af734f26bb22b9263de09eecfebef3f4fb13a6e9fc19a88abc9cc25d654721107f036f30e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0e3a7961cc5b09b5fa965c2da6c5aec3

    SHA1

    9d7784835bdbcbb68a3555913ac9416e4bfc991a

    SHA256

    b734299bd27d6a59d9b58b115766740639f4d954058f6e02090652568ffeac2f

    SHA512

    e8ceacbfa357c4a0282f13759ff823c3869e71ef2584facc7453cfe49c186324bc73ac31eaf32fd684a5b5ce7cf1d76793063b512a28561ef78ca8b87099014d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    85372621b6c00c43cfa5b9195faf1b8f

    SHA1

    ff74c361bc962751925aacf9a40d73bc5a1e0165

    SHA256

    fcba04fb6d47f545da9387dc0a8ad4ba2a84f4338624445f187332538e2965d4

    SHA512

    1a654b15a55449d57d70a6b4858af2c6b40e5cc51e6acef5b775ccd5e150eb20236a1e27f0c34812efa9676121f7cd5080cfc6e599b3fcbd9fab6a6ddd0da631

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e729a6714a28fcc2946e4ec8b9e8dd0b

    SHA1

    c4671a05159164031c6fd621ee9ceddc4d27efa6

    SHA256

    968f7b84e7d59fb5552ca88cf0fc2ecc96451f47c49217d56907845208e3b315

    SHA512

    66e4b7ca783daf1eca3291ac00f33dc4f37e5c8343d883133b6b28113d5fff22b5de5b24e07707b9d759879620eabd34b0540573c2c2ff83baff9502ce23e9b2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    320962a2b42b090c4125e784e8776392

    SHA1

    1e36c236e9ead3d4c60dd24860ba1150427a6968

    SHA256

    bb9a5e84a6fc5014c769e53c4727faeebc35e9ca3a5be688269f915de2d41607

    SHA512

    9c0a0ca669b4c8aa1f25acc5afa9f9d5f14c999b0ceb547a80adeed0455a7f247ee213d25a6c619432de7ce5c9fe6385c314a837e17c8418f1665461ad4fe1be

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8503b523660075737298ebd5d9f9b229

    SHA1

    b190241ef52b60c82a5d73ec1a289d781e7da51d

    SHA256

    8b4250da7e043cb3afa0e34adbd6de605545258f7239aa997a05694811104ffc

    SHA512

    9117d451f5a267ec71d36b7a6d3a3d947c5c9947db690ae9ee4a2011ae39e1368ed95824baedce891fff6e62414891a22e4081a077138bca4659d27c8cc9a469

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    70d2f9794de3ee52e2156ba051c699c1

    SHA1

    3cd372d90db82e2cc1e3e5a4b1aedfc5e03439ec

    SHA256

    c61cdeb812eee4a706348fadafeb2c01802fdb1be0a9160e53ec06ca8dcd19a7

    SHA512

    c7e0da976368cde54fd3d28c152b4e5dca9b40e14e7e0779f7f9be3be4e7ca8fc93af7f7392c5d1a8ba33823178db4dc4cf3552917bc41f738103d1ff9a27b22

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    0e802f36577c2612a2d64e0c7c3048ac

    SHA1

    5e453cf3dda5d4b7710e57ef9bd09bfe82e5e53e

    SHA256

    c459976eb5080d12051f656c3a736cf49daf851c5ac09975c5196c8eec20dfb3

    SHA512

    6dc9a52d84b803301ebd8f2308b65394a7ae525022d50328fbb6ed01b8bec0258befdbcf83ff1fd57ff68d982e502508ddb489c45afb814bc9c0900d9a8bcff3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\Internet Explorer\Services\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico

    Filesize

    4KB

    MD5

    da597791be3b6e732f0bc8b20e38ee62

    SHA1

    1125c45d285c360542027d7554a5c442288974de

    SHA256

    5b2c34b3c4e8dd898b664dba6c3786e2ff9869eff55d673aa48361f11325ed07

    SHA512

    d8dc8358727590a1ed74dc70356aedc0499552c2dc0cd4f7a01853dd85ceb3aead5fbdc7c75d7da36db6af2448ce5abdff64cebdca3533ecad953c061a9b338e

  • C:\Users\Admin\AppData\Local\Temp\Cab32D6.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar3411.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06