Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    140s
  • max time network
    161s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    30/12/2023, 06:56

General

  • Target

    1191a94520477a912965f0cf2ee9cc4f.html

  • Size

    105KB

  • MD5

    1191a94520477a912965f0cf2ee9cc4f

  • SHA1

    b3086fe864f4a8d11b3ff1a2a3a4d0e6f19a3018

  • SHA256

    c49b3058b958da6c48bc0eebc09e43bc2320c551aa8139450555fc014d4169c4

  • SHA512

    97194da29f486b5d24828a991304cad00907b2e5b009e1e9c797945df80c89f2d3bb1c82441f652692754be60499ef5d5d59a9a276a57dc607710d14f6c8c312

  • SSDEEP

    3072:ejPsJecPT8OqcFbYXnIjIF7WQ2ZksHNR6y2n+7NH6RX2MGqARRq:4P0nPT8OqcFbYXnIjIF7WQ25HN26F6p7

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 44 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\1191a94520477a912965f0cf2ee9cc4f.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1808
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1808 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2060

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\B2FAF7692FD9FFBD64EDE317E42334BA_D7393C8F62BDE4D4CB606228BC7A711E

    Filesize

    1KB

    MD5

    6ccf097e4ec46c6a93a6a325e3316b81

    SHA1

    829768e900c41ff8ba47b57439101d656876196a

    SHA256

    19f0530402df57c6def690f1de3073615ff2136e933873a8f6b3bc8b656c1c3f

    SHA512

    b8a4937024ea8c119cd63d7e46da37951d66c8cacd0cfc74951496e6944a797cd3b5275bb29f1bad94dcf3329780e8821ac56557c9541c52178a5e2cf72dbc70

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9aaa79e7595d5612209417d6109c25ee

    SHA1

    6e2b219a9d85bc8e975bfaf0e2c2aa898efed178

    SHA256

    e3b18c83cad77603602717d0163df88df290a4f7b0ec2296cdfdfcd7cd97c003

    SHA512

    6f6264b199dd7e57b75cc309453efb208f174f5c984ebe0221de5f6bd7c0fd10a3a032beb3ad07e5627cea4391504b97c67f784d4f097570f5e2ab2fd11bae8f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5aa7b6f2a0144191efea7233ec71884a

    SHA1

    37fe7b7f27ca9874ab5ed62941ee49e66b0c157a

    SHA256

    13f27eecbe1da885672800708ce2b315b75c228234f1c6ab285c53326c081bf9

    SHA512

    69f6bb5cb9988fca3a7670535de88af308d1cb679bfe91ae15b7a18583d81fcb8003eeb89eda735cb84f62bd230f0f7937bd64395cd6bb782ffd56a027ebeda9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0b9b22c5c486f57aaef486c16da5a4e9

    SHA1

    b441458d317778dad9e9b48771f57b9e7ecc2ff8

    SHA256

    9a3b141af977fc093486e1e8442d883b8c3ea1418fb1426405483a862501a04d

    SHA512

    8a9c4ff4a3745be29de037f9a5a4ddf967e3c3e898b5bd115fec2b040df12b24c0441ae73f984e251eb20c0662dc60e0b179f9f49533234002811dc182b0c1f8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d4492ebdecf07d0dc990dc171383ac81

    SHA1

    0dff6492e8f2bab6fd469f826d9d4eaf6bc9b06b

    SHA256

    0d1096652343c2dbee462c346b7ae70419fe6437f3fd777c970e936b57d31c70

    SHA512

    f14c541944c7e2319c00c3f864d02128536a4b40e3d0d6ac78080cff18ab88dc9558828a2ffdca967f0456a3d287e1491cf86adf301c3ac02988e3e3b580bd01

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8179dc8ca730b3104244010714a5f1f7

    SHA1

    a2e7fc70107639766acefb0763d84c3899f15fb0

    SHA256

    3ca7c43ccefd097823d580fc262964ea2b225717a8897deec02ed4c383b9b845

    SHA512

    a6175535ef5caaf258a5ecb9e78925f3346e7c139417c4f773a45b2620b5a4e6274cc71c28ee34641a51efb8a8df46a0a7c6d75df08405b9e387b1476cebc24f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    93b0d3065c7d8708f7b7d1725fb864f2

    SHA1

    ec91112fec794fdf554526334fc338c4a9c116d0

    SHA256

    d979549523b20351f0b99d5768d4d48994168a59c941bcbfd0a563da4564d0a4

    SHA512

    afc0620ca47d8757e3ec6dce8f282eb9c9fea00f3d2dd3ce97d5c98a3c3a6e13310f06abd6cf45cc8a57a4f9bcf6fbceaa26c7611a8508c26a8daa84511154c9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    03d61246afed9479f28b78bfae407883

    SHA1

    d7b5f6c6016032f8d15c7e34f8f182fc21ce6891

    SHA256

    0654d6156eb9075cb46e14c46f9f27579328ef3e363d749b54b9e2a5a652c0c3

    SHA512

    d6c20a952a33180545b71373fcdd6e357e314a91df8ddc8df6346cf789d4965a13e606be0293d2c9377fe57662f62182f26b1aa7a8e01b1bc5c2382c5b2acd55

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    32a1c2a24674cda52f1fdcb1ceb549d2

    SHA1

    f1b7b1ee4d76e39f9e5ebce66a68fb697abf4b90

    SHA256

    6d62fcdad5d64e89aac6d16eacc98fb6c4e8d0fae20122b5ce55f99823d425b2

    SHA512

    e3c91f8f6d91b18ac08889f00612c10b49190a659f6b6c9e3db3498e1974cfb60b0486f564544aabd775c1c37012de3713dbfbde10a369c4160c487b661278f1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    216e39a582ef57086b45d4a5c9887cf0

    SHA1

    347abfb163811b30c4635509d826ceb3e17e707c

    SHA256

    e46e9562b6dd719d022be9124e6041bc71f1b9c53b20d02b8eaf18f7ecd63909

    SHA512

    aff8bf8c1c4543ffbde6f33ddba0f84c45b1ae901617ac412232f0b8b97c7804e73e3497bb7e50de123f4e909c8a6fb2d3f78c79cefe6032baf714fa42b240b2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a004b3ca0d7f37240e9ad725edb93a4e

    SHA1

    8c588b430d0a7045e4d583a07bbee3e28be5c7a3

    SHA256

    f985d40ee8dd91199fe4203f20bf59052185c1cc2eba797d144bd753e740531e

    SHA512

    6847e59e05a3f5bf3a6915a0f0ed274c65cb3b45f70e1714626c32cabcd0189e5986d8e2dcdd021dd70c1decb1041345e06c22b05d56af6366b1051d5b184ea6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ea2e280b82242645c4b280cb5cd95a66

    SHA1

    04c66c0117edaeaf2a097aa12cde436b7e6a3951

    SHA256

    8b2719e4a787c33357d79e1668d121b7ebb1cf4e1970b100583efb5d1eb22656

    SHA512

    649be346b4b6afd576f02b14ea44961f1b945b641d416b33ae6e92800eae29b7adc76c4317486bdcf3f8b56b9d96cd5515047dcad37e7edec3a17aac43956335

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1c69c3deb639de75d88bcd19d64e6635

    SHA1

    2399a3ba7693872ec6d18b2289bf0607a20f7cd2

    SHA256

    5571241ad6281cc1722dbda3c409b4766d826437a82b592d48f2cc2b98791c95

    SHA512

    1c61e06217e4a223caf9cb7be882fbaab83188aa9089e1b2c448e97028a028f5d9a90a81c8c15d70035fba8f7839ba8209a51c26f6385af3363f0367f62b6147

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2394294c8a01a215b7f29709f8880a5a

    SHA1

    42f2f5404ae7ccd06f8e0cc0c6bab89a9fb49b12

    SHA256

    049c0799a70f9dc7c454b9e02fdea863a1180b2edbd32b1c7aa0b52aa042af94

    SHA512

    557f48fed6177e8a8061d5988f05245d3928c109675abdf85aac4ecf07cad5388a0a3efdce8466adcdb9291e4ab6e0d861e0ec7678c08deacdb97ae74b95f88d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    71633a202bc68e2c6ee682a023e8ae45

    SHA1

    3b53eb8c1109357f13ef708fd826b0a7c68cdbbc

    SHA256

    2fca6a6eb12951e8181101b78c43bd4e79da477ef448597381d5dc50ca96a7b8

    SHA512

    782edb3e49562e4a8032abc76040346b2e58ee93ebda42c89ed697a55e096e2d1d17cdf79078eb7d4212cee035a1d503ddfdc72759bbfd0a364d3d6686d3db03

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0d208f8313b5cf989121817e672d12a0

    SHA1

    245634b816e4bc0b4f56b1c67c8b31d27b8beee7

    SHA256

    a34756d45cc1c26cbe8f82ba9c695589cfc74842f2336d00327110eb28197131

    SHA512

    ffd3f9961bd2aeb7e090229e9a8b52037a1003b9af0fa9d238aff1e4fb353f170bc18641a5b181f99594d86c4aa103e1b922750b0141ce9b12d61b7dbfac800d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0315f867a477fde876f58ddf89aa45e7

    SHA1

    dc154e834bd404ca6e53bce88f7159c5b0c72963

    SHA256

    c43ffc1c25709aaa9fb22a242fa5c02ad33edc94a8f9b3927ec03c7265017949

    SHA512

    73bbb0dd8944609c0fe1bb590c8d7a340301052988d9817808827e4378783460e107f92657efae8530bca159db2a49d228fd8ec8530cb7c59a907ecb47a85891

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\LTUWD18O\www.google[1].xml

    Filesize

    92B

    MD5

    ca46393fb7c2a7d61c81ce4298aeba41

    SHA1

    ab02e83fd9934a12abfe08d73445a9b569463ec2

    SHA256

    45641ead2965c39f2f7716a2ade19d2c3424392c402c55f773cc886d6b988c53

    SHA512

    5c01d4abc94ed6beb4014eb18a30e09ad74fb282c81289f4e5e1588c10870ce04ffe3c96ed61f1cfdcb53ff05cdf2169f0f57c72967deac12da109d5f557fd7f

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\LSNXCBKV\f[1].txt

    Filesize

    89KB

    MD5

    77d8a7ac124b40c4d1933600833cb2f6

    SHA1

    fc14aa153a23aa6c6b780836f8c98a3baf5b4ebd

    SHA256

    224416fb1d89f196d63288cf08bcd3a8544bb373c7f62ccdda6bbc16221c76f1

    SHA512

    5a4c4eed45323e2d22814817b290b381c5cfe3ef0ab6bc8af9949149dc85a76cc5efc41d565a0512fb353c511874841df529f717094a7823c0f11a17f8a809fd

  • C:\Users\Admin\AppData\Local\Temp\Cab8C3B.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar8CF9.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06