Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    119s
  • max time network
    138s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    30/12/2023, 13:49

General

  • Target

    1a8dd4aa3a79a122a4053b6368cb897c.html

  • Size

    3.5MB

  • MD5

    1a8dd4aa3a79a122a4053b6368cb897c

  • SHA1

    cc91064d8f7a854b65c6ec2e7e45af2cc2903636

  • SHA256

    3ad12493a4d4205cd6d957647d781df1a1dcf83db01f5e67e3ecc6ef86a49e17

  • SHA512

    794e863ec3fa2472ed56377fe08c07abafc1a21c6e7ba8d66bc30616173c399d3372d1d9dfffaae68e78b8ff42bfb93bdd017769bb55186db5c7e3091f9ca9ce

  • SSDEEP

    12288:jLZhBVKHfVfitmg11tmg1P16bf7axluxOT6NN3:jvpjte4tT6D3

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\1a8dd4aa3a79a122a4053b6368cb897c.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2072
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2072 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2456

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ce1b7426dbf0a4c6435f9129a8249ba7

    SHA1

    d3bd863bee29f5c86bb5e1934820cbc0e2fac0b4

    SHA256

    a7c7fc2817e5e16255089579fe351516f1ae71791ede9918834ca15ebc4d5aca

    SHA512

    bab0ab4d50a0ca8c7d7810e552231d3c630362e9584368e87e72008eaf56534e354696802556e2ec2ec0280ef0af32f7243f4771cb5d1867fa07e825e70788e8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ae57a0c1b5449049cdf7c6c02584728f

    SHA1

    b3eae497c90d6f4746a954015bb1d838997c6c3f

    SHA256

    a06413a175e2327e5da5408f053475fc9263eb6b97862c02ce939a8e4aa2c82f

    SHA512

    319484073f583894b48966bc6a74e05d9c785d3a5295448f169361614eea36da7614ad5742c29bb47ebc37615f55f1cb2b0a24a3ea9166c04596ccaecaa2a7f9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    24c2b5a9020631df215d76b5cab7ccd7

    SHA1

    7f3283906390eb0aaa90be30ddbdda841d03b84e

    SHA256

    4a34a98476bc057aec2c2b01628865563e014271ab79c1fcff7be992296d5376

    SHA512

    7bc0761485083ced6856831d18587713ca4b5d34785935112ef605004315272fea7849980448c72ceaba01ddc0199dd1208ac6132da7c41442d29b6995519a3d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a3c57b700f36fd01394e5f596b151bc3

    SHA1

    afc057f7a661297fd731d3d1028094e0e71fb3a0

    SHA256

    bc8f2b95b3f31a6c780330c4cc968aadb9341fb8fd81291d6a9ff8d18ff57b16

    SHA512

    03579e8a025ae58a0baa257a46e507beb3cd90b6217a25033dc0d351c05e165b5f566731f790de02f83ddc5dda821cd6fd73bca11c4d6a47c18c773853efeb8d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ff884300d821948b7acdf94c45efc1c4

    SHA1

    2a645060b25970c9ded12e30f9ecedafe050d523

    SHA256

    7be6f7b8e79f3aecaecf2f32134b4c17eb5bb17c06472f99410653a7eba92dd4

    SHA512

    7477b695933a07873d7fc9cff33713446fdc765257a1f62f1c71df021e8b698ae5a630aacdaaab66d1e13f47bead95d183a67f76331607e6a950cdca45e79fb2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0541c8703af49d9112e7e21d23a8b99c

    SHA1

    683fa3e565697a1784a2fcc94ac57f55d34749ce

    SHA256

    0616b5d11ff0bf134155ed12f03ce13d522dbfe7004032332f22da29f3298432

    SHA512

    534fc586e7b63c8413c60626a449e023b9e7e8caa645c0111371aeaebfceca3b50c8e5fe35a4f69797a94eb134c65df2848a3a2bd79230f8f26285a7a19ba294

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a347260a702541877c37822c2939c2eb

    SHA1

    7483147e0d103049894008639bb21d060388ef4b

    SHA256

    beb34ed3d94ea2a22f83ae531e19170765e3495709525438281d3ebb43ab2060

    SHA512

    16d8e14a748a77f9a8f182a2c9b49dadc15aa73dac29e999f0152dd7e855d8314e0988c04b11726e43fba94d0a7650fa7a51504f8e30eebc06a340f968e4fc97

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3326ba775106f7f8f429ab447903ac1e

    SHA1

    d3b756f3ab2a04e1aa5fea2c68be73bca6bbace7

    SHA256

    a827c9cd6a45e2ac6cabcf7a6af7e37af967d194159978969fca9c92d7de4b19

    SHA512

    891dc75595b45754812b10f1e67037b2f7c4becc8a1488b84ced0f6d4729aaef5cd8bf3bba61bd91d8f14343f252fe36415b951114824b0f4dc75c3ef685617a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    acf287bf4df3f1948aad91c982723d55

    SHA1

    5fb22b52ddc262d464dc0045073436b86b4f7086

    SHA256

    4ff3dec640db84d30f551cd165ba1f3d4ca3e5cfe35605254d7cd1bbcdcf529d

    SHA512

    778daede93bdb94091bab43527a3ccde91cd2d69f334fe97f6c96928686475ff0d48defafea71fec079fbe0259958ad8cf9bcde419580e137443b296d391e66a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    438480718f6210100d5d5bc92659fa14

    SHA1

    4c9c81543d22b2ad6bcb9263931481c112f7a2b9

    SHA256

    eb7082e0279a3a786d87b9677f53e212bafacfbf097aecd659df800847faaeaa

    SHA512

    c1f670f7f8a8dfd618d141e5576a40e0448750c201c6951ad0f92aac15bc5619a0c67a55d60896a41941e8633df173da34c87bc32dd5a65a54b560a45cb58cf8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6475c1e28b35a062d9a61b8aadfc5267

    SHA1

    cc6ce73fd3206b08c59be9f6cffff887b67857aa

    SHA256

    c6066035ac4802ad3841cc3ef034379981062f5255b0939f9a2aa07e38dcc5a5

    SHA512

    aaac2991692c71ffd28dc35c227f867acf356d2eed3f7bd78e30695271a19bdb833a9c679f2d4f13e6d952457254c01313d7a2a6ff974d410c02756d599d9a4c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e45bb59bb134bfa5a9b8d78c07ec2aa7

    SHA1

    59237742ecba8467fd6d94e1088fdb35560fd493

    SHA256

    2ccc52a3f240f4b8dbb380e5116a7941b20d817704aecb804a7dfe746bb01516

    SHA512

    01ef8179ac20540f266c7d88844ba6957204563d9ab7d7056d10a7766d86e15983dd8e9d067147c665700cee20e22b794546b697596b61f72c90d620a071cc3b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    552bec43bff9b9be09d172afd3575dde

    SHA1

    aa7ce3642626bd098acabf0e157936fc7e4218eb

    SHA256

    8fafbd16dbae4b8df912df5e50843a326a1390679c4df8d726c610abacfb16a6

    SHA512

    82c6d94985126bf683ff89bf8a2ae20c747a8dea548979911a1e2654f32595af03c4e2cd56e2a076235fb9402597eb13a0c33b17b556279f8f6d33a0bd96d03c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    dcdd3d888b171755bcee9bae33ef3ac6

    SHA1

    1d05b5dc3d2d976bb668abb607e909a2b3d82381

    SHA256

    e7574914086c49304d26856622a2b787c37e321faac947d9df0ab0531077adf8

    SHA512

    1fd8687fe7a4e3368f6c33051d2f3b802807c7b661f4d1c123e8e2d3f098825dad88f7d53cb158b01c2ef94d095722f0d61892f6ff8a95e640529621c3e6f7cf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f835ce0c94916e8842a672d597e3ef52

    SHA1

    a30f38fc6ee7940c7e173f23295edb791e1dcffc

    SHA256

    211536bce685ba4e9020acee09cf4f60fdbd394e05e555f5979aeca032eec22f

    SHA512

    20b478f94f4d4d8ad57db90cfb0667942f32cda80f5cc494355bff354048d5f068cb0fbe6eabb86c619ab22a4daac4ec865d8fb3f0b52fa31fac58f856bf0416

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2e3f2549555103cf2a7333c944ea46d8

    SHA1

    0f722a83be2d8387cf6c1766a756df0468111f23

    SHA256

    9da90902b1a135ed039ce7dc48f2c3bee972272af76cc30884d2bfb8fb97eefa

    SHA512

    3e46264fe3d9d4c01434b7532d0ff19f27610c9ed5904df29500457a82c6f39f4929ef0b61133525349df999e4639fdc6d4d76a6fe5ed9d48d5a39c739e98adf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ed100cfaaf0d675d1808c1c373fd37b2

    SHA1

    f8a858fa9ec34303daeb045ecb8c69df359131c1

    SHA256

    769517e2e1f01bfcdb0419e3b79a06a1e94c8daebfe577b14f715289fc29409a

    SHA512

    57eccdd45840fcb80f0e09229ad14123468c58ef35c631fca939b6ee50da348c8982bbd1ae74940c2f5ca84ef23a452076d3f660add16c4476bd8e78c64beb73

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7e3a7c8ddfefc328ae8c13240a409c28

    SHA1

    38f489e3208bdf86aa9d86c0138234500da4cfd7

    SHA256

    f24c6b9989eaa4fbc4b7b789e100e9243fc03ec9603faa41aab01f691a92aaec

    SHA512

    d8b2619cb5c6919bc33b0e12650859fc9a1aaad8c334f1dea300c384a8e062719dbfa0822ce342d8d26f879eb83682d3fdb7ed31bcad834a5a6b73eb48d272f1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8e1c671ad938893a79f3581efb53283f

    SHA1

    5b876fe34e265a463a9481850ba83af789d738bb

    SHA256

    835fd59b6466b742796d823e6d608edbb1795f52db8e2eb4290606265d32f792

    SHA512

    27fecf784a34dbc03a6fccae970e869d4c63f3483461e5a623d0063abe56a52e3f1cfc72f2cbc1c5c4be59fc3157d477528a4ff361b5ade44cdc9d7a8e71380a

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\E1CCB52I\jquery-3.1.1.min[1].js

    Filesize

    84KB

    MD5

    e071abda8fe61194711cfc2ab99fe104

    SHA1

    f647a6d37dc4ca055ced3cf64bbc1f490070acba

    SHA256

    85556761a8800d14ced8fcd41a6b8b26bf012d44a318866c0d81a62092efd9bf

    SHA512

    53a2b560b20551672fbb0e6e72632d4fd1c7e2dd2ecf7337ebaaab179cb8be7c87e9d803ce7765706bc7fcbcf993c34587cd1237de5a279aea19911d69067b65

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\U1J1BPYJ\beacon.min[1].js

    Filesize

    19KB

    MD5

    dd1d068fdb5fe90b6c05a5b3940e088c

    SHA1

    0d96f9df8772633a9df4c81cf323a4ef8998ba59

    SHA256

    6153d13804862b0fc1c016cf1129f34cb7c6185f2cf4bf1a3a862eecdab50101

    SHA512

    7aea051a8c2195a2ea5ec3d6438f2a4a4052085b370cf4728b056edc58d1f7a70c3f1f85afe82959184869f707c2ac02a964b8d9166122e74ebc423e0a47fa30

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\YV6H14B0\jquery.min[1].js

    Filesize

    83KB

    MD5

    2f6b11a7e914718e0290410e85366fe9

    SHA1

    69bb69e25ca7d5ef0935317584e6153f3fd9a88c

    SHA256

    05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e

    SHA512

    0d40bccaa59fedecf7243d63b33c42592541d0330fefc78ec81a4c6b9689922d5b211011ca4be23ae22621cce4c658f52a1552c92d7ac3615241eb640f8514db

  • C:\Users\Admin\AppData\Local\Temp\Cab3F05.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar3F47.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06