Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    121s
  • max time network
    149s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    30/12/2023, 10:02

General

  • Target

    1540cf61fbb88f033d714adf47ecb05f.html

  • Size

    3.5MB

  • MD5

    1540cf61fbb88f033d714adf47ecb05f

  • SHA1

    b130c75fbf02e7a871826fd98617e5670fe7afad

  • SHA256

    e8720412b91c3ae2a0e7ff6406a77e9c5f8568084a226067bb222e115487027f

  • SHA512

    18336fa34c80fae52eb9d4fd560c876e15f661d5e9ba0e39d099348a750d009f781e5b94231251ce114d34aff58af5f2ffa43228376deac45514bedb7a1c636a

  • SSDEEP

    12288:jLZhBVKHfVfitmg11tmg1P16bf7axluxOT6NyC:jvpjte4tT6sC

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\1540cf61fbb88f033d714adf47ecb05f.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1796
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1796 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2860

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    aa22fff9c6bba8f8d016e93fdf91b1a2

    SHA1

    697f24497a14898fe4ebed8e0666a961234a0c9b

    SHA256

    85cdf24e4300d7b3be8aec7b0f9c293b9055634de44a7ab825bc9f9bd0c8ef8e

    SHA512

    e1e4630a2df939bf7d0154ff48fb1be5dec8df776a46821e2052fd26fe06c7ee6ce51f879a9b0416ad48a60de549bb216036ab470868f5b9e2d45f8c9f2f3a13

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5b14bb2507270608217660299b098a68

    SHA1

    c3a8860e9e7663f98f58e3ed8a9468804886be8f

    SHA256

    4bb0ef1c31ac26a2623f1bf273b7cdd16dae99f897dacddf54718a94ccd91c25

    SHA512

    b7e980355f4aa1712cf2d128133b940ad8eba61f3f186045feb4f6bfe1eb8d1eb0bfa5890ceb17578722d0690c0942f51460602bdf8db6b346c96d02f973af83

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b83f5c861ea88f2b206c09dd7eadf18f

    SHA1

    78fa0f53891ecd9d7d6dfa0839c159df115669a4

    SHA256

    fc7abf915b457d6af9db51476eeaa2d9ee124e515389400bd3a922bdcba0ff6a

    SHA512

    cd80a5f8b9e855e6df63e3d93611a45072f27727be4910424af54d9eeaa2a65ef0e3fdbd8d57736768c2df8a4e800442257335f61f32087199ebbe8bff2714f4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9e7ec5df038701c4c8260eb9e408ba3e

    SHA1

    e366b5b2b1455afbcca948ae068eedd296a80ddd

    SHA256

    967b986b33e80be8e73b497916b1249baeaeefcd17461dccf5b6b5c1713b10b8

    SHA512

    6a82a13d6a6a45128f7ed850838c519a564ac3fa4153b1ccf982dc92054efc71231dc9156a22289835b78edefc50c23007d9c5f5d0ac45c754bcacbb4faca8b0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    810cbc088e4abcf71f251e969d310b8a

    SHA1

    d30a9cdac13691df59698c8f9edbf3ee9652ad3b

    SHA256

    465db213a6e4d61191857257abc9a45260a84773ce1bd0d016107d7eb7bbe401

    SHA512

    3cd8996860a337d5e4596e6ed4c52ca2307503dbdd2fe81db51c8ab2d866e0a6bd090c87790cd91c2084c01e0269f93c419f541190fe3cd660075dddb36a9ab4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    24a7ddc315311ebb1bef929b72eb50f0

    SHA1

    070db73d927572f0741de6ea58d4defdfae74f45

    SHA256

    d386f27eac7918dab776ab1bc27fe1fa279b7419bf5069dad3e2ccbe62ed5c27

    SHA512

    98ab120fb3b3fc7cec9a9a1f0d6d1f4751de78a2b65060c5cc782f019074074a11d5962aa9246812a1ab19028d1fa12d1aaa6326e527cdebfd373c1f77d229b5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    66a0bd05e1fb9447e2ce97b910204812

    SHA1

    ab873b7ccab27aeb4259c0310f8ca5c491de95d0

    SHA256

    2604de80b458a5a7998b147bf81db3f942d8c6db242d9373c294a7b7a99cdb23

    SHA512

    6a4877428d5fef45be0ce9afe2686e49a94527f674e74571133b4f3fb52cdd116ef8ea643f532ee3436c745df4f0392cb7dd4eda926b5c9556c8e749da4ce1a7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7b8e783fc45ddec09acc2ea0af67eebf

    SHA1

    2ebd749d1fbe1c2d7d8277f1fa84724849c42ed8

    SHA256

    f1fd3a9aa96b75cc57cc7a3426fd81ababc33d2c1259db24cfbda5827d1c7ea5

    SHA512

    7980ac2ff9751e038dbbdf3fd57b090b94fc59f118c83506c55d82b2ed8995a66db5b7ec594cb139ca94b8a2a0c09162877e6b72d60aef8039d4b6dd83198311

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5fb32d2f69ec14fa390a9db1aeb8fb5d

    SHA1

    04cbe9a9cf759f314127f5a3fef151866af13578

    SHA256

    9492323f1b520526b407551131d1de7b63cc5ce725606aee04b7cd18894751cb

    SHA512

    e8e6167acd42acc4663cf39c81c4913e04734e35b2fe6a0b0677d8d2bd7997ef9ee94b83bb7f14510d8597042981c247454a8a4713b33acc80921ef377d33c35

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    eac38135fb3cb5ade6fc53ecc98f92d4

    SHA1

    47c363048522f76d7a96b85be4a9a12f89099890

    SHA256

    8f05be75f8ca90ab3c02cf26d09ab7bc9fcfd48ac7d3438d367755063bbe577e

    SHA512

    e24502f4b968af4129829f96b1d959cd03affa82e8c7f441287a80f72b1de62a59853bf3a60211ec180b81504b039d913b28d8c4a113b4871e9fd3c2803ae11a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e30597afc6b23ddd3f3d25ced602a2e9

    SHA1

    158fa621758ca66f4a17c244c23cf65406420971

    SHA256

    f13b3df3609b646fc10b356e60a1c58612568049759d323f439a80e1fdd1f113

    SHA512

    f1b061f9d8bf1807f591c34d70e2b526d473314c43b5576a6912a58a78e21365518e2853e30aec9cfdcde5192a9baa71ab7f5ac284c23058b0fa9a92df15fc13

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4e78c272580d4a606339508c78ca54fe

    SHA1

    ed8b49ce177b6c428c60f1856637ff489cb46cb1

    SHA256

    8ea61c086c4ba948ac44e0fd935abe849546c9209390b0cf92792a0eb78f291d

    SHA512

    797a71f1e64f820b9458f4633fdbdb250a5be5ea44442e694c2a3131b306e16b5b2161fba8617e3d4242365ab151d571c1b3033e9fb376f1b3982cec65c580a6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ad861dfdc407be9fb5c16e7f74e5edc6

    SHA1

    80bafa8c6358fa37c050ba60b50d2e839bf5a431

    SHA256

    38a25053029a44bc39083e7ba9b9a80dc182bdaae39eb534ac77c4de5aecbd43

    SHA512

    1662253e8dbbbf3e8cada874e9b60c3a59c07f19c31e99d4e285bef5dd474e83f44498a8fdbaca377634f77d375c476344c9c35a50cf77db85ff6a956540e5e3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f13d9f0210acc7f671d0c071b230dd55

    SHA1

    861d9a89d2d6042689b308780967c0656ee4f738

    SHA256

    9fea10a16b627ca4218c2abe82184ea8e864d1f5956a37caef7b8dc30e8eeeed

    SHA512

    eab2e9a95d463e473863693d294ad57c2ec5727b8edc57a5cf9132f37f04149c422ae14e622d75e5bc4c747039de458d4f6a6ad1373543ce6431e77217914056

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    21ec504565087611cfbe715acdf43f7e

    SHA1

    690776a48d63b42cf50d0bccb07d70c260e9e41a

    SHA256

    d8ac490c5a6b3eaa234e7688615aa9b0627de3d64d1e9bf58de789850d330cc1

    SHA512

    f761b9b096c5efeb43dc0ccc0c0e0c16825b527dacf37e96c48ea88269ac8de46128ac607fdeb26c0e5ea82e8bf69e32e341901a7802202199b9508b69a195d3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ce168cebf709c996c87c61b3e4203e2b

    SHA1

    0a69db060605e48c6a3c07ff370f8bde3071fbaa

    SHA256

    6d5c68849645b721ce55fc6fd9ad2af25374b91eee5701dcc9339d6c017c7b54

    SHA512

    2604c0acd9314319fbdfda74958e7cb39e022a14604497ef1e31d2bd18d5b2116a7067f312e6a55329bd765bea7306fbc8b6eed9930869968b4f9a4a8daddc3e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3d14fda0b2210d8b5cf0eb61ee52ffec

    SHA1

    6ff066a06df615a0a5457daa6cec27b18d791de2

    SHA256

    965081cd45bfdd58fee11b6447078269bab8a53de03188c16b978b668901dde7

    SHA512

    9450241b3e77d3301fbbcc506eac8dbe2fb1bf9ac22896ffd9cf8acf952328ff60d8c970f50c73a5bd6d3d4db716da3c51fbd564db5dce9834f7f9f68bc830fe

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7dc56923f67e5a2c1b4bea92980ac559

    SHA1

    bf976d04d3890248e363168d20ff4e7a690070b1

    SHA256

    bec3f19ae5413a4be0861893b817844434b986de52c2b964589f3026cdf17aaf

    SHA512

    18dd956d235a1f1cc826ab743e782c489700ef68ff4adb17d53c9ff53debd52a52dee7a37de95d6274c4df5b10db5c420b550f934193ab35508aed3ec14b93c5

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\E1CCB52I\jquery-3.1.1.min[1].js

    Filesize

    84KB

    MD5

    e071abda8fe61194711cfc2ab99fe104

    SHA1

    f647a6d37dc4ca055ced3cf64bbc1f490070acba

    SHA256

    85556761a8800d14ced8fcd41a6b8b26bf012d44a318866c0d81a62092efd9bf

    SHA512

    53a2b560b20551672fbb0e6e72632d4fd1c7e2dd2ecf7337ebaaab179cb8be7c87e9d803ce7765706bc7fcbcf993c34587cd1237de5a279aea19911d69067b65

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\U1J1BPYJ\beacon.min[1].js

    Filesize

    19KB

    MD5

    dd1d068fdb5fe90b6c05a5b3940e088c

    SHA1

    0d96f9df8772633a9df4c81cf323a4ef8998ba59

    SHA256

    6153d13804862b0fc1c016cf1129f34cb7c6185f2cf4bf1a3a862eecdab50101

    SHA512

    7aea051a8c2195a2ea5ec3d6438f2a4a4052085b370cf4728b056edc58d1f7a70c3f1f85afe82959184869f707c2ac02a964b8d9166122e74ebc423e0a47fa30

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\YV6H14B0\jquery.min[1].js

    Filesize

    83KB

    MD5

    2f6b11a7e914718e0290410e85366fe9

    SHA1

    69bb69e25ca7d5ef0935317584e6153f3fd9a88c

    SHA256

    05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e

    SHA512

    0d40bccaa59fedecf7243d63b33c42592541d0330fefc78ec81a4c6b9689922d5b211011ca4be23ae22621cce4c658f52a1552c92d7ac3615241eb640f8514db

  • C:\Users\Admin\AppData\Local\Temp\Cab59B6.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar5AA3.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06