Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    120s
  • max time network
    135s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    30/12/2023, 10:20

General

  • Target

    15b73261afd4db9354f63584ba22181d.html

  • Size

    2KB

  • MD5

    15b73261afd4db9354f63584ba22181d

  • SHA1

    10c15d5faf04c27715688d9159f59a115b37e516

  • SHA256

    2fbb9496262da682ddf0ef817aebb30193900e814fb0c974c6ce9d5c9d442500

  • SHA512

    c52d2c2ae0963721402c0e24ee4101ff9cdb1e0e849c6e435ba3d77e49a04dffc4026e6be232bc065a3d7957c4737b2f42bb6d943b496b528eca78feef2a4202

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\15b73261afd4db9354f63584ba22181d.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1452
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1452 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2440

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5e58a35a3e33db39078888e2fa3de1db

    SHA1

    d0014acdc8293e706fa13c9fcf0844fe3d8dd503

    SHA256

    306580666bf3192eecbf5316770f87f9781b5ac455ee4c26d722f13de74644f7

    SHA512

    60b80b74f89c06878785504bf72a6face91bdce89ab684a2658c40534cc2eaac0901c5fc00a6d4f51daad682e037ce68e844bfd4d7dd1ba5228eaa6deb72140a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1d17ec9196b7efade307e48da647cba8

    SHA1

    72bf8d6dacd62560736e2854c78db1a546fc6695

    SHA256

    98d5a02dcede75f16eba7d41b0a0d4dc5bc8c58ed69a881a8d45490321ef46c8

    SHA512

    d6aaad1b7ce50c38b98a3d0a3ece10ede31101790c18a591425ef47330776885053aff5d6a5f40daac0d7fe8d8b5de224b6d7d69ec0abc29c3ae94b283827a77

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a32389a49de3154c6c8eaeb486d6d016

    SHA1

    cbb25aae11ae06a587438fa05370835f15adbc38

    SHA256

    4212fcc6c2a744ceb18a8fc475231922897824833fa3ffe9d5d4512e0fd39048

    SHA512

    3f4dff7f28c3a43775871b57104238355800485e9d79e71d79adc78fcc1622769f59463a1f3c822ab7623bbc651138c9a68797e9bfd709893814451472fd66cf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    86d65cb8a41b1ea14a84035418e621b7

    SHA1

    c47a13affc77c8d109f2d99783f4e56caddd63af

    SHA256

    95855a7cee62c32ed4c304752fde232b41000a7c646d5407411ba23c754c19db

    SHA512

    482a959180f1a1728965be6b651ff28f20830445ed35f64ae6b179f2982936009af69b00f21530a617a719d90d0077b67ebd176f30cf2e18417681f8440b7ae7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2ca82fc89450515f6cc24e1facb99479

    SHA1

    1d94e6a11eb86e71cf8ef939a698d799b46ea50a

    SHA256

    32274309f9702b4edfc539a85f59490e031474261f53c04d605a612cf3e95a70

    SHA512

    b5f9f0283925642134a212fa0d6c40cb5a24d41b9bd35bd04068d9a6b6011e3fb9dd32ee0d79596b9a676a380ba337888483cd8266e7a1b2cebbd3e78b5d3692

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    393d46506b213a0cb9af8e7549eb3d9f

    SHA1

    ef3b8d51912b107caeb65bb85447a56a5648b2c6

    SHA256

    ef505cc57eadf0e741299509529b45a22c5ae19f8794cb027fd444a36652a389

    SHA512

    e56b36b5407fb49cf56a14c249404286b1b765756b99b44de1dccbf99eeb4215659d341038509b920fe7ce3128129615c05e8d796ddf0da9474768331d952dd9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0816b3bb29342eaa4594eb51884eb161

    SHA1

    517aa8706b7213936eaf2d4f69ac3eaedf730648

    SHA256

    5d61e8f197ca4a0457c280fd1a032a5e2a0a3c02886f1b29712a5e6e88df13d6

    SHA512

    ac5bdcd9111692a135fcf8ab5e3824f09bb1529662c1fc5d8b486b5ad58891af3ed0beb645674af415f2cbab39c755483a8a0020aa77866459322751b95f7423

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    204d3f3e0028e4fd8a026d99e2c3660b

    SHA1

    bd5ba7f292c9cdbd4ae46c850cc2026b9b33ca3f

    SHA256

    d167ae68d5affb762d0af567a8e5b3c8ee8abc4d7fc24a7facbb4a0fe0a48c26

    SHA512

    29fdb09e26d1d088e44254171094074ec0950d9d41307d6c2001f40c702bd7fd24d11803913425c7bf2d56ba99c4d74f10da02b8ba524a7e78549e42038f6619

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9cfd3b33844e413ae8cee063cb11558f

    SHA1

    cfbcfde0b5dd7a5abd3acd143ba66eb1fdd3fcd5

    SHA256

    2eb727827a30bdfb21766decbd22c0e41e291448b5b67972f8d80feaeef4ecde

    SHA512

    7de079b4e4c5ff5cda351c8931c1e79141f6d93d38dc89ae77499961a768bfd8ace55925f4c48018874888dd63c5617fa01e1335ca9b0b239be05b8d4409a93f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    295217f94273b74d071d08de887a409c

    SHA1

    cbe57bb7f5fe1760ba1c0601940fff53ae47e601

    SHA256

    5aad1a3f7b74e4287e0544e1c2743e94bec988d34717bbcd49bba84249c4acef

    SHA512

    811af8b7e703d970ba4b661169858b80208396a9bc5f84ce33e30c10d6b1dbeb54e5a614c1e571ac26b5358743bd32d4b61cf3e1d04c8c715d6204e70b6e3c36

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6092bac4cbd58a6486c48f7bd99084c2

    SHA1

    211934178b2653ac3ab825d51f31afa5923b05fa

    SHA256

    b7cb1d863d8b1410bfa4de55be7e832157c08ca7e73b764b2baa809af4c21b97

    SHA512

    30ffd172bda96957d546d835083d717f04cb0240cc47dfcf612df997939eb6581145be955933ce00372b9f1567946c3cb5668438f885e7288d6dff000d1f36fc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4ea395c50276dfe4b1b24c47d76d8318

    SHA1

    c772bd111e4908aa7d7072bf254eae7c0f82f547

    SHA256

    d5c84517fa08a2db74dbc69305d2f0e17747e16e4471ec4e21c28dfddd8dfaea

    SHA512

    88689f22b0b2fe827e72019ed3a0abcf8e25a258e12525e6da4646bf93c9c13f69b15fcc5fe38f8d71e670c1aa8bfb3f5f67c365e4e5cd0a0cda307558ccc265

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8b62476d6d79ae65db8fcec1d7c4b232

    SHA1

    231b5a07f8fc711b7fae9b18536471ad19d8c6f9

    SHA256

    3977392aead5a3adaee2e64de1aef95f3c16396cde2129eb2f028761dfd475ea

    SHA512

    5f61ef616c080d0d4f4d5615b72dbc88effaa10ef5f9cf05555df09fe7660171d5fc23839b9bea8aa826e1779f9e2b31e691f8e345434b2e98b9706d3f40e682

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a0e95ce7cca7cf46d5d9fcc990983af6

    SHA1

    5164265e7fd3af5868c6a6ee06d076a32f0d513c

    SHA256

    4fbe4d16a9a51067bcfa4636dacdb77787ad45cb50b7ce62d269156bf77d481a

    SHA512

    fbb65f503ab4d1e90f0ccca2e8632de75a1f2eafc6cedc62a405bebc586e5258a7d2eb74c20f74de8d568e6659021148c9bb8001bdefc98fb340c81c2fc71a7a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ca4f5e941dba9a1444e7e09438624b76

    SHA1

    a4b1672379a0c9804a0e2a5fdc2cdbc60018d1cd

    SHA256

    4f91c48972dac0ee4b36d354ce2543ba92f0a15114e610f660201702351939df

    SHA512

    f5190053cae61ea3f0a22d065678f91c9b467e8de64e5a9291cd2ba5182e2c020bd879c18cffa2e2f971b138e0590922ef091072b24a54f477bf2f65b83dfbfe

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    92ff2b5f20d51f65b784c0574a80bbbf

    SHA1

    14ec870430397ef6c1a445d63202e82e7e450fa1

    SHA256

    0e99bac3fd155d402ca1aab73c243449b1beb52c364faf6ee19260f8a652d4eb

    SHA512

    3cb6883cf814538fc32245981b956c186a78a632b8ced20dbd56a055a74dd275ba54c65c9ffa0f2762732be6d65bad6ea956397ee0ef694e09fc9feb95d1c076

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    28f5c7bffe7468fab9b973fc09d0eaf4

    SHA1

    97f09f1573ca4da19a29c45d3951b70bf6ad3eba

    SHA256

    315c5968ce53a38d869799f50a5f127cc2a8a88747d72f2d249d199c5aa1db72

    SHA512

    38182685d4e034c6248244530f0bb7f660d6c5a11ac9f21e8e52ee240ed6e6ebd260bc7b712c15e6ad48de84aa7f73c60e204b71fd773efe5f3744aef5eba587

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    00de3792df3b54dd67b5e15ae21a3df8

    SHA1

    c34b0088858478b2a90d2f06648c1dc1d638dd76

    SHA256

    c176c8842116b4b159e07b9d8685aec83bd39ed54c631a3046e9b9a5c776f6d9

    SHA512

    1328b53a8d75a10cbbd43eb1d89550ed03aa7d6e3a4548516ef41f676a888456213d44729b909de7348621e8f6ad55a80e0a957ee2d07ce19a2fe44514a344db

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    282459ae6bc87910cf48d8c343a5952d

    SHA1

    c16702c9714eccd36f56225fcb375c96ed4e512a

    SHA256

    a15e3a0835cfa1f5438dd909ecdd254da8801184d5dc055be20253f525dc4392

    SHA512

    02952448b9ca00efbd97bdcc73f6417b2f6f6d5e302a9bdddd219159cf30fa98982a43f2f8e58baec6f2bce5ef38b81aae6e1b3640102a0ba5cb04b27de22b44

  • C:\Users\Admin\AppData\Local\Temp\Cab9119.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar91F8.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06