Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    142s
  • max time network
    148s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    30/12/2023, 12:37

General

  • Target

    18be363e2d38e408a923dac88c179c29.html

  • Size

    51KB

  • MD5

    18be363e2d38e408a923dac88c179c29

  • SHA1

    d7fc860fb03fcbcd1b87d0b5ce1e13f4f69e0eee

  • SHA256

    00db2bc9c1f6c028129f0d2d5dff9a2117ee51a8d7641932d0fbaade8c3acfd2

  • SHA512

    cef32d0bd611cf9f28cfb79fbb883ad5dd04ed4d15617813879829cb17278f6fddd30c58785b64cc4104204d3a525303300e39402f446a6aaa29493624a1d182

  • SSDEEP

    768:/7AwRT0EipB5Vo0IZ1H99oliIw2rCUQtNdQOZWVW/X6:/cwRTupB5Vo0IZ1HXolpwGC1HZsa6

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 38 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\18be363e2d38e408a923dac88c179c29.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2652
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2652 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:772

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\4A9377E7E528F7E56B69A81C500ABC24

    Filesize

    889B

    MD5

    3e455215095192e1b75d379fb187298a

    SHA1

    b1bc968bd4f49d622aa89a81f2150152a41d829c

    SHA256

    ebd41040e4bb3ec742c9e381d31ef2a41a48b6685c96e7cef3c1df6cd4331c99

    SHA512

    54ba004d5435e8b10531431c392ed99776120d363808137de7eb59030463f863cadd02bdf918f596b6d20964b31725c2363cd7601799caa9360a1c36fe819fbd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    00f0728e8fc43b413762790cdc9bd74a

    SHA1

    2059a1ceb4572e1e5ed128ca3332208de7085f97

    SHA256

    7786aedadf457770d2ed4d541f084590a6183e67dac2455006792c7942641531

    SHA512

    a0b6dedeeded1fe6b25a867ebcba6559a3bcbc210cca06324d170dcbacf9bb351925bc865822d9e4b556d2e2bcf2052eba4df03d412c7e9348f7e7d627ff0ef1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e1bfbe3f0a50eb467fbc369d4a6fd620

    SHA1

    3bf2520d10000e34c9a097d0b2ed12ea12aff802

    SHA256

    ce1139c56bdcaff2ebac2c0524b06faac2c6cc49370badd3ec790f4bcb5b4314

    SHA512

    b6cbf00c46606d0d871e7cfef8dfbbcf0e818ae48b5877af852db53eb1e2408c5351b63befca6137e80da4624bfd4c51ecd1c3cb55cddf38fc6f77d7e6021d31

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    27913aac76c1bf163cdfb4d9529e8d19

    SHA1

    f8a0cd4e30f330cba55779b41a37c37a5390af43

    SHA256

    5ee1a2fba72e4daf852909de983f313f1ccca675af97cc2908c57df07a621f1c

    SHA512

    73e3f534b22a0c600b53a02a5c22dcce6e48cea08afadc060aad3b5bafdc808bb0ce24e60a37bfed99d6f21767f6cea8998004caf85d2587bb5fc424a7d61331

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e8ea50ae7b5a3c72c070b7cc209c961e

    SHA1

    b82abf3e71aaf454f09e8fb088c6fc53b3a5b0fc

    SHA256

    d5b566d9271ee78dfb65ac76f2431519df6da1f37f274bb1f8608209b9641a6c

    SHA512

    aceed2bb5bd3820fe84f62d1ca7c176ee2c3df6cf6bf44509d96e317a0de39987737441c429c5a5dbab3bc8f5777c42a80008b603758b51b225ab1347b27eb1a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    30b4695a6ded42252336e79d7a4cc5d6

    SHA1

    e74b2490517c7b3f26ce8f94e8b64d818afc10d0

    SHA256

    d25942b8272a3004f5e13b90bdffcdf002d332fa93f17f475faafc75c3d2b363

    SHA512

    d5f2b58a308026e44f9706571a816d19a070e4a080be58582904994e77986eb5e3cd66af00a7dde61a930c9ffbebfcf421e2abb578989d892d8775fc95458500

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ca194d022d22e48d8ae7d08b20f76973

    SHA1

    c2243871584689cdab7127dba6ea6c7c864b5c28

    SHA256

    7553227a40bbf02189a143c2a54c2ef36d79fe6cecf1902e31f2303120f163d2

    SHA512

    43a9f5099557626fd2b0b85208eeed540984fdd5c97dc35c12c13a8c2172e87f62e038e12f4e7a8d278d02dfb5ac45803b2ba1ceac49b0697cb13582ac4945db

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6384b34f4752fcfa87a64146f496fe4a

    SHA1

    9783f910c2d840c7d10772229b45c1522c964e34

    SHA256

    f938df787fa1238ba7db6f074edefab13c8ed7767bd7028681392d1a8ba32c82

    SHA512

    c07c1f19f366c243df37187679dae5a237b8d9e2b8d63d6ec1c2969ac786dfd09e64d4f92cf168d7e6d5b040e156bb54d4e33cd9eaa2644795f51fc298820ee3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ca82ef81314e2fbb5cbede922ef33771

    SHA1

    8d5c868403ad7cea632d28c5a0c21e2b210f0a5e

    SHA256

    8dd79147213a6431491a01aaf6956102a694108a6bc5a2960217f4d565024a1e

    SHA512

    2bde160c224a632fb09cea4e6672bcec6f2287d601959bc10f8bf0e3b6b15a46dd5a68ea5bc5656ef849f8d16f6bc89e25586ba7497623de198ce1e3c815cc85

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    349334cca5aacbaee5ab827da221e68e

    SHA1

    1c11b495b9b3cca0ae53335445cea1f094bb8098

    SHA256

    6d0868796387f31269bcba5ad42786e70e8fa9b35f5a20a26f6d27d25ef2c931

    SHA512

    1aba539d5ac69afbae1ab302fef3ec5b213d9c83b9a26cac9b782303fcf1e81418a55af068b794691fec0150843efb3c1ae0895b710234f123a7ed21d94f17e0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1ef052de55dcac5c71a4868edf852b8a

    SHA1

    4cf72324822c0fc393393b9fd0b2e4a1a5a0bc8a

    SHA256

    02dccd90438fc07f9c295ca2b778523d33c757529c3ceb87cac906d58a4b0d0d

    SHA512

    2988bd9d3e4df41d24fde0a57745e46a0703866d4d8f39f9bc3a2a8568158a49229890952be224ea986a3ed8b696b18ac4dbc84c5cab4f88ec903cb673feff92

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b77bddb7f379b8deae58ed4623535a13

    SHA1

    bd043096b46be472702fbfda3b73af08a439b16c

    SHA256

    be65bbef5dfa8264e4e2302e82abfddd5019d95f5906f91f362397b20431150e

    SHA512

    4bfcd7fb648dae558895f4df434140357bc23c8641fddf4b15f6e1d995f9b826bd3c60b984cfb728b1f0b2cedd717a1dc58d25efd108a240353902967c1279d1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f9da3f77310acc80e27633347e0e04c5

    SHA1

    85d40059cc6bb819fcaa75b9c0d110cc289c4850

    SHA256

    d3794cfeb0c09dfaa0c23906e60018601cbc4dc199822c036468960a858d9cc3

    SHA512

    1339011b3ec8f67c382aa03148cfdce6165f593bd7e77eda83a9b253c779300fb630036dc117d8b6a14912b9401c52837c961de7488fedcdd702c19b2c2b8eb7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    787fda679bcc37c99e4f9c52f7e47e82

    SHA1

    7c10809d2e3a2297101c0e9cf9d87b8fc30dca89

    SHA256

    41b081a3cdd0fb7f07ac0401f5e104ad0bfb5b753843202c534556d44300453f

    SHA512

    b4f163eca850a49752ffc6966b18da24afc71a7307a47ed3272039d5505fa437dc392f95faa1153094180f76e5e940b77053c27fd98bec948e286440425d6ed2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    99975764f29a62abefe1b0b7193674a4

    SHA1

    dff2f39875793ce09196b3c5e753cfd96770eb52

    SHA256

    954f745c06007fcd88aa231086891e675c6e82f80f8e1c70fa3643a6790a1dae

    SHA512

    b4a511823f6488f4f4a91a85745263a1a1d66cd4c7fe6b85f38b2111f67cacf3df9c3ba7cdd662603e5c15d3f275cc75051021ac1a1816764bec3b763d323b63

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7f8921618857a72621d6362438fb89b9

    SHA1

    d1aad64ca2c63552d74e383b71d896bef607393f

    SHA256

    d25297da49c07f5ba156bcd432a71169fd02083a93a4207c5dd0101765871c88

    SHA512

    71eb1033d614f78e4435fb59bf77f8b3695eeb40a3f66585ad8a9fda71c83400cd82b8ca0afde80efe31e78f65a297b25ae28e8b428a7dd6cfc571a405b92859

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    14337b55bd024801dc6e733e2c6a2a72

    SHA1

    1020e785fab63373bb2a007830a9772a55b5163f

    SHA256

    2b5d65a42a1c0fb2a1639d2c4fe980e4c3b4265ef30945250b6d16c04740bdf8

    SHA512

    8b0af690f1dfdfbd9a85b018e4b42fb15ed56defe8bb1e985a6e6d74f080a306dcfce552445b541648403082a2c30040a570d5d08dea12f2a67a2180d7ab687c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e406cc2cd26d23f0e6a4ffb31ebae4af

    SHA1

    029ec4aecb82faf38268c921b3e6c56db8c9fcf1

    SHA256

    9de76c4a5cc6d8d2f255e04e36c574ad81de70127883c28ed44f90766f2beeae

    SHA512

    b8182288eea80c5ba3f5771dc25b462ec222b65f3d5aad122c37e62f9145c4be1a027875837eb86fb7154cb8ac6bda2b588232eb47dd273cdfac4676d48e22dd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f512a29224e6d172f165e12d1ebda508

    SHA1

    334e9712b3678ee281c62003cb4b8c94e9ad5da4

    SHA256

    47183d3efe38b52df1a26da740bc801ece5a869e3c0c20d06847d789d293afbe

    SHA512

    4c18decaa2ece7cc82ae6ee38ab3cbd7b8f83a2425a7fde6e353235cd61ad0fda4b0818e2802a5785faaf9d5565c3ee7a58873d17594ced650a16c37398ea5e0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    af41b2547a0b462372f75e119b53cc7c

    SHA1

    1c23cd2dd5a698b87408540952d270950dbc2d94

    SHA256

    ebbe1edd44ff3d9f4668b967f78ba2f190a955cd92e1b83fab5880bc04a1d987

    SHA512

    670f2c02fb55830599a4601cfef8deac45d4d77628bbe4b896ccdee32e52ebc7a851cd82409d53f777d7c8c1a359f5df5ebcd25e015dfd42cf7f944adc364615

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f959bae2f4f2ac25eff7af6fedf2c920

    SHA1

    cde72ea158b8106d9bb6ef29102058f70bbf7e2c

    SHA256

    ce29e5d86f1d589c2793a5ce15c2bb1dca3eed1735b30d2236525e2b6180b484

    SHA512

    9c9c5f21036cda3bf66a84c9e5be6b0d922e7915be5c6a01bb316212547411fd520ce52917053668a1375a6a703a066eb7886c114317e71332999eabf9a4d356

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    304e65610338bcf5570bf7b5b6107f97

    SHA1

    a243e41a860695f62dc0f14b64791766e55cf5d1

    SHA256

    9c0d98e69e61e76269d38ac705ca6d1d1493a2f55491972caa807609ac8e6b31

    SHA512

    9bb0b4c4d3166e02716c247ce482613b421fdf01c3804c14223cb07ae1c1f79c32350dfc4fe166dd8d9f17fe7c891228b7da5b7cfc5c371b21bd41fcd5c542f6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8e69c73235690dedddc4f5b2287f5b7a

    SHA1

    b7fb86114661e0c61d93b3b4301a55e677b27d82

    SHA256

    aaae62823aa0ad67888fdbad37e357ac00c8bb7a49403e550398ff775b6be838

    SHA512

    0c3a81106ade55d1c5da6269723e9e4a1e7c6d3e7c71e7149b1d4c1a0854e83e6566cd52bf2cfb18dbca4d93550b5827ec25d105c913eee5c967488c82715890

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fa37256eebbee177eaa89092bbe2e707

    SHA1

    d27e81e5287ccbacb4e96ed3e08368732b9fbb8f

    SHA256

    942fd7ad2e0be02de919e4c224a24c07db23af29fe77a5667c151a03c5b58a4f

    SHA512

    41087e6d444c65c2527f227a877606e7aedc5235dc709ba4a27f5b7f2133642a764dec4764e761426b9fe05f1e3e1ad2865f06c4773027492e27cf980185f333

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    70d398890259ebf64b5b6af3de0b7935

    SHA1

    df78695c439cb4b19ba760acf84dfb1a81d2fd17

    SHA256

    2e0dda5703b90ffa0541a44d8929021d463ad45ce31fc569c7bd9c2fe96ca79e

    SHA512

    7cafaa89314189e781720192a449dbf1a968be6147f557435dbe4b9b7cab1b746cbddcf264dbe6cd7cf0515104391e1d7aa3133ab4b30fe85047a1b6de536e69

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    cca770f6aaf46202c8f1e5293d1d7719

    SHA1

    64e7aa7ecd4481ae5c39c38b15404762c6373811

    SHA256

    342ff18ecf62a07fc44b8e9e1b9922dd0181008cd9ec461547ba6d69a93041dd

    SHA512

    24acf30f50eca062a175c534a1d6aac6c17baa9f5b23464d0bd4bd1f06f946ca2cbdced17edc4c15b1896ed77722d830de1ab3cefa8ce69dafac615be8547b31

  • C:\Users\Admin\AppData\LocalLow\Microsoft\Internet Explorer\Services\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico

    Filesize

    4KB

    MD5

    da597791be3b6e732f0bc8b20e38ee62

    SHA1

    1125c45d285c360542027d7554a5c442288974de

    SHA256

    5b2c34b3c4e8dd898b664dba6c3786e2ff9869eff55d673aa48361f11325ed07

    SHA512

    d8dc8358727590a1ed74dc70356aedc0499552c2dc0cd4f7a01853dd85ceb3aead5fbdc7c75d7da36db6af2448ce5abdff64cebdca3533ecad953c061a9b338e

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\APV8VUXH\cb=gapi[2].js

    Filesize

    133KB

    MD5

    288c5ba5b7001fe841c32f690f62cc93

    SHA1

    29aba9d8e4f7cbe25fa5e64b9ecbe256e51fc789

    SHA256

    c2f33dc18eae27d4e878bf837dd97f1bde5151e44b0271408535bb93265b8c52

    SHA512

    e375d41344a086d35accfb02bb1f91e2dd383db032af387fc3d6b1230057cc5e432e9b2cdd976e51425b4f587391d42f4d9d857c2e6f11e822a65edcb85f1c9f

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\VA0IDUP8\plusone[1].js

    Filesize

    56KB

    MD5

    1944af3661da46249991197817b6cd8b

    SHA1

    f952df40ec79fafc7c798f37aff92878977376ed

    SHA256

    63326a1c4e0eddd3501f0a064b06a2708eb0362f3ae934f53145978d3d0799b5

    SHA512

    0bef19b32be337cfba179ed9ce4533a207cfe645d2e5fe0da9fadc7b01c72704fc89749670d1ac48b8d494675bc62ac089fdc4d8495979226f10828225594376

  • C:\Users\Admin\AppData\Local\Temp\Tar1615.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06