Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    131s
  • max time network
    145s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    30/12/2023, 10:58

General

  • Target

    1690ce405b5ae0bc5f887ecf3822e891.html

  • Size

    64KB

  • MD5

    1690ce405b5ae0bc5f887ecf3822e891

  • SHA1

    49b359bacb951b3096698d7932abe91c1ad907cb

  • SHA256

    2da502e8d55285ec132209433952171fa2ba71ce24d2590dbe48db39d1c6e058

  • SHA512

    55a815624bc80e42bad6de273b20915b93cb4df6a161b8cad7dc883a57d42c74cf58c10bd5cb6c7ce43c12be48edf31b6d90da2e926026f011dbdc607ee5bdc6

  • SSDEEP

    384:wQ/uFEPPHh4JlLDSpbiF1JvmP2DHIskDln+5udtaN7subADyfntwewX4cjfenynG:UH7LubiFPvmAeQD7ayfme5c0yG

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 31 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\1690ce405b5ae0bc5f887ecf3822e891.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2188
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2188 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2644

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1048ec8c773d5e89267fe8e3b32cfa51

    SHA1

    8307895c6881eddd4e316d61c9e1538850a3b833

    SHA256

    9f779d4949fc5feab527cc9e6e42e9712e67fb9134bbb31879fadb4bfb4c4c11

    SHA512

    cb8edc541c325fb13a56597c1b12e6e81c90870753b32be0557c73b421d589dc1edea1fe9a60b47b7d5a6737173e5df652d5f8644e5abb60393792a951a26553

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    29d7496b006ccd9a20a9d78e6af49fd5

    SHA1

    3070ac97416cf451e6a461aaaec199710b8ca006

    SHA256

    b4b159d5db5fd0d165bbd802120e0f007881b365cd6cca6be73b0380165b58ab

    SHA512

    6dd4330c866d40090a07b44a6ff5cc0e6d6f5b73c3a0a42be6ac95c9136976fd0c8e981f4628b044b87e8c3e1dfa90860031d341b3aa00074ae6b3157f84d7af

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7b8a6b9c6b64653a261f2767ad35cf53

    SHA1

    07bded871b1b2dd1cae6053c9ed534dfa52918ed

    SHA256

    6dd2cd6164e462272d444605f681b2cceb6bdba26ff5fb58ce38992f95522d4e

    SHA512

    247f9705a09dd5fd55d1020f4bc2404bd2c5f8b14416221dd6c8597470e8659735f1384ee410c1cc69b097b71cb701fe61b39886787189a640167cd00cce6bfc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    16444e4d8750dcf7512b26976ec36dc1

    SHA1

    3dc5b31010cd4afd21f83bfab1e21d2618b1b2de

    SHA256

    9109536a5e702cc2f18a1cf9bebc911cff6439ab554f005dbddf1edb9e95b00d

    SHA512

    124987618b624f0c58f8e8018257c95ecd33cba8ec4d49e0e1b5f3603cd68b07d4acffb6d59a201112be910ad0e03573a32be0c71a89db1f4a2e8d265e35f7b7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    be04149ea0bd2c39c5d76a6a9bbfbcea

    SHA1

    0429f509edf132b3a025b6f181a7108e6f2e3df6

    SHA256

    5ee140a595a9c857f5fa0f56b87c2de25d39046ae790cf4827fc243e8fa8276d

    SHA512

    bb1cad48968f1e89553eeaa6884e70f2cd5ed8a5f429db63084d15fdb36fe33ea0d696b1a1f48fb3dfdfe5da919bc843965a042d8ce2bcad842d998ced8f8711

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9d8b50a6db3ce77522ed79a16c60f601

    SHA1

    8927544f22ccf48bc9a5cbd053954ac4a2ed88db

    SHA256

    3fd1dfc296d7db809842426ce81f2cff581cbd1b79f00ce0b86073592ecec98e

    SHA512

    085972870806cbf65854c2dd689d8a0a58f33abdd22f2a2f49fb5f694db1ae4dc350266b31c482b771e7ca6463cb6be58a1cca02af834173680c56d61f79fb55

  • C:\Users\Admin\AppData\Local\Temp\Cab81DD.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar82AC.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06