Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    120s
  • max time network
    166s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    30/12/2023, 13:53

General

  • Target

    1aa978cfbbd205ff95456f9d790d0929.html

  • Size

    415KB

  • MD5

    1aa978cfbbd205ff95456f9d790d0929

  • SHA1

    cb054c439e34f56301db4ee709a961ef02071b99

  • SHA256

    77c55d09ecf63af41ad81cbe3700374f88ffdfc6ffb54d32becfa92cde7d35f6

  • SHA512

    4354533b85bf4b2b38f80684266e918f6152d992e1aaee346f4e05874b08a93356bf7bdd49cddfeb06ae542bde45beb7ead68bc80698dd4ea44194cb0c10fbd9

  • SSDEEP

    12288:P7Eqkg3l/X94itkXzHYD/0Yfvn/sncnM/CGFtet3Bl/GQktItf1K6jm/UoY7t2ob:4qkg3l/X94itkXzHYD/0Yfvn/sncnM/4

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 44 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\1aa978cfbbd205ff95456f9d790d0929.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2220
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2220 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2312

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    256bb96a3bd95c6ffa9843f7aefe4939

    SHA1

    305c219ef244eb439e03cf18add56fdefe5bc2f6

    SHA256

    194d310a46d80b19ea6b3e93879279c7830a3e54e23daa18cfdb478d168d24a9

    SHA512

    3b3295ec9156b89377fa4f8027f96ec7b3bcd07085aa3981ad9c6df955a257168cb645d5bf9e4819c05ae86794c0a5e4b083a6f5d9c00299aaecd39f3c5d5815

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7275d416c16afa4f7990e3ab23c429e6

    SHA1

    cc5fb20ea7239566117c84d8807061fcc6133e91

    SHA256

    6cc62fb0822c74c6581e1ab09c2b25dcc42767e0392544ddcbd24d354621f2fa

    SHA512

    71bf97abe5586837602a8cb3c44448c43fb1881578dbcef187bb13e4348f4e735504937a2460aea78a18548f5dac69d310bb1cf268ec339435d182a5e03b5389

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b342d2ac24406b794d1075ba43e96f17

    SHA1

    b23d6729e0d2ede262c1f516438ce41c95168517

    SHA256

    b8877e406529dcd199288efd3f9f879fa4628e4618aa4a33f5f3ae349803fe63

    SHA512

    d10e2bfda833b258472e69511efa461975972d9e431204af5becf695d9f2744adf091a40606d24e52ddf0e6e315b6f14934e23d018ded8f49581885e4e0988ab

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    af3c32efed33de2cf3f47bc37ae3f0bf

    SHA1

    f174755a0075174398bd630bbfc18d3c6a5f7dd3

    SHA256

    2902e600003f9626b0c5cf162c3a7bd983d83345a45848fe2628808b4afa8129

    SHA512

    11958b6d4fcf418cec0fdcb97a931bc3862f0287d633f502cef0dc7d69df87e550e497cafda111a39c6035f372d8a6eff9e07c08975d8e001131bbbad5aeb54c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7259325df65cdab09f6db2389feb3fe1

    SHA1

    45929aca77498e55c8a1298b29c6e997208c16ab

    SHA256

    4e4ceb875466cea26876ebefeadeec9a47c2812eb2cd0573c7de3fbdd28eafb0

    SHA512

    697996a127e8871fb25150a8284713abb23f6158c67365fd59c27e54b004722eae81a47282ff91da6ac8f8bc875b56265acec1aa322fae4979b1dafb70f12217

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\CAF4703619713E3F18D8A9D5D88D6288_A7725538C46DE2D0088EE44974E2CEBA

    Filesize

    392B

    MD5

    6245eea9c3c27c6dfbfdcdbad3eb0dbd

    SHA1

    4d2c1183870d57ad3f7851d39e6b66de23614b87

    SHA256

    4fcdfb80b4b54628102d1d70ebd9f3ebb795f084aa9f552402f9399995ae3f6a

    SHA512

    afc9bece51d5bc65a62f130a10ef5e670a7180eb39c7658c0efc54476973152fb4aecefc0c14ad056f05893b4f715260f00296b16031a71a7b5b6a741b46505f

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RU3RPYUN\platform_gapi.iframes.style.common[1].js

    Filesize

    56KB

    MD5

    f6140cf2e81a9d5b9bc96970fe1946f6

    SHA1

    e18cb20a08d0c13d44b72e36e9560aec2187abce

    SHA256

    68cc8a99c8ed5cc0eb3aa2146fd34bee0051bfd98faa3c03b83c78b4a12a8bd5

    SHA512

    1f61bf7228ae9fc1b36249223f4ca0675da05beaa6c00b28b7fff500e0527ee237d139eaf6793ece67f8730dfff0207bf945a848795aab7c57301433449a8acb

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\U9VC31Q9\M0G1O5QR.js

    Filesize

    157B

    MD5

    67e216a27dda24bdcb086c2385b0cb99

    SHA1

    17141c80f5d32bec3691c5ab24741d8b7dd5f0c6

    SHA256

    9dc433b2142d3ba0803fcffa53f19d34da26996d20c829df6d694bc887325dd7

    SHA512

    802319543dc64cb011bc2684004e878a842b73aa55e4da1141ccb8650cbf42fabbf2b46c730760bbfcc7a140e11700244b9f5da78bafe9fca7ec7825c12b4255

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\U9VC31Q9\cb=gapi[1].js

    Filesize

    133KB

    MD5

    288c5ba5b7001fe841c32f690f62cc93

    SHA1

    29aba9d8e4f7cbe25fa5e64b9ecbe256e51fc789

    SHA256

    c2f33dc18eae27d4e878bf837dd97f1bde5151e44b0271408535bb93265b8c52

    SHA512

    e375d41344a086d35accfb02bb1f91e2dd383db032af387fc3d6b1230057cc5e432e9b2cdd976e51425b4f587391d42f4d9d857c2e6f11e822a65edcb85f1c9f

  • C:\Users\Admin\AppData\Local\Temp\Cab9AE8.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar9BC8.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06