Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    139s
  • max time network
    136s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    30/12/2023, 20:15

General

  • Target

    1ba01f416668ea589538b27baeaf7355.html

  • Size

    70KB

  • MD5

    1ba01f416668ea589538b27baeaf7355

  • SHA1

    ebd9c2c6def9e97bd3f66450eaf3b18076b366e8

  • SHA256

    3fb6bd56de51cdf5492c1194f34bf5bbf676d09443cadbfc7f78eaf71f189b42

  • SHA512

    f0705d19299762d723bb2754cbdd7ebe59a93b3d56805785bf568a53b290e1b0a633877fdfd017d6c6cdb1bc3df6c1d22cf8ab1a7a015049d9fa9bc018022f90

  • SSDEEP

    768:npiTuA+R6SWvVojlrWh0WDiGYwENWsdoEaQQb8NxPKwLumPKorhhIodLX05D:p4uAc55xQb8NxP/umPlrhhIodQ

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\1ba01f416668ea589538b27baeaf7355.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:3036
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:3036 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2312

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    1KB

    MD5

    1bbeb3b415c89ec8c9e54810dfce875b

    SHA1

    e863f39344d1d85fa7db00a473d708968c7240ef

    SHA256

    7baaebfe56b73bba1c4f0156706815091e3b472300a4f57699bd5a11489d93b1

    SHA512

    8e74d50d6ee28e68093c16b1e37f7d4440863024efb79df85ad7963d8f0bae93003da5dd6805b5b261940c421db090c61b488d15a238c6e879127d861bce354b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\D0E1C4B6144E7ECAB3F020E4A19EFC29_B5F77004C894173A10E3A199871D2D90

    Filesize

    980B

    MD5

    ca0fe348bcace1ab5dcfaa777461a29b

    SHA1

    2e1f609325aa7a32c5d3dd7d8fa8b17939b05a5b

    SHA256

    a1cae7ef002ff8dd264c712458d2c68c0ad4adcd893db7915d633ec50df56af8

    SHA512

    3f439024cd0799278bb36500c3f9963b94e00c51c69960ef5b9550a116d11ed1ca2f877ca556dd4ba416e714ba9353f558522d2df0911fff1eccfff12b25337e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    522d656fd153c20cda0dcc28cb0cf134

    SHA1

    96513512fb276b99fc2c326f275d0208b514ca63

    SHA256

    565e2451a36e9270c947d38dd3f16f090d065bbeef3b6947fda0f11d60f4f590

    SHA512

    2283f5fd1b54096ecb79b6be93efd87f380b7b96af0b3c416e644cba25d95ea3b8bb700281cadff4ee9573d44da7450face3b5122085f30baa31190a70981371

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d72e0b012363f2a67cedf0a7aa839fac

    SHA1

    79bd581a6fc82d5cd69fd07f8e602a9ddca1e290

    SHA256

    b405db99429c75389b3c6d70bcc70673634f5578bb6edbfff312789f020c461e

    SHA512

    dd5d9fcce644109c05d81292c850a28a1a11053deff7a142ada7a543cd739452658f7f821918d9654f0fbe4d7ee0789a5ded6492c9a3ae7d5ddf3fd428da6950

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7d602e1145741824624af6c232eac1c9

    SHA1

    9cac560c08ce0379547d8c24020474772d8300d5

    SHA256

    6ccfaed08adaa5b288d6a2a37125128651262902866fce116c8a414853b97692

    SHA512

    56cd732e1ff73f01506829197996fe77c2e939062a8c13cb60a2d8b4e3c45ca55adcf077e6db45e36231bc1b04dd2f415e871a191ff842ae875ba354e206c2cf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1a1e915d7491074885dbe6e56d8a511b

    SHA1

    32f04fa5244f3a5a2c23cc2f47a8d367b7070b75

    SHA256

    9d58bfd40581b473e615046909a92d7a0e9bc7e23617b0a9b10294653d409c45

    SHA512

    e42c7544cb9d30ac6b1312901fb274d42b1c214256ca0ea6bf57c46ed857380c44f69c28c615777e34523a105c46fb4a7cc631f1cb4a7e5365c017b06e197308

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    16a98fc68c4574ff51060ad14e4e1248

    SHA1

    578d09235bd1d898866d24d7c43d2da2122af27f

    SHA256

    4feaf192d5374a870bf0daf6d1153db7b012e445f8c91626d6eba3c4819c3682

    SHA512

    c5f4874e4d09ff307db057b8e98dc9d8df09bdc28e30fce4d82c7d564e14173eeb77dfac62c6a0f4e44eba66e1f1451d1150402b0bf9389f332e40530b19e39c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    db39e37b9313580236190a734c7d1aa6

    SHA1

    827e6bda8fed399eab7123c9a2a4077c22bfae78

    SHA256

    a71e430795eba269453328b026e33bce0bfc1a5d1941524a455b4215f33ff1f5

    SHA512

    7e522f28665f176618ed45b0094a1be90b494791ad4e6b1418f99fc67a1dd35e5cd42143f007719c4ff8dc41c4dd06a07d58b1c848b00c373f9cbbb445321873

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bc050c049cf1ef584d96db1851b8c11a

    SHA1

    4f836b10e921db1b0886f1e8f57c21b75006543b

    SHA256

    b16b5a0f544fd8fef015aef387ba2bdcaf62fdbf493a469989a3a84bf4fecb5e

    SHA512

    d05bb8bde4bcf8e2d7040e40fddaf7e781ce5ae84016c1193c248431710e250a521dcc53609e94f5cdc6b76fd88c01c57274edfbfa8b2cb0a491ad5f4dcf2f42

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f4ad59c4b30f20909a6f245ced1a9f8c

    SHA1

    b58e8487840323ed100afe3353276bd4169ae195

    SHA256

    ba1f109dc95351c500bf0093b43460362baa8ac03ea36c4309180614c43c9df4

    SHA512

    478cfa30f4a648cb3a3ade250be3dff2bf41ae90e4d5f3dfaf73860b588467cc7c534467b7399b76246a43f26b3b01f8f08ae8c86f9861da90e20875158873a4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f0888c82bb0cab5126c3d289f732cd52

    SHA1

    1094bff548aae51f3c9a54a1b12ae6d2a90f891f

    SHA256

    604fe4542e0ed000808d089e95a58520518efafc601f01c64b32178b49591a8c

    SHA512

    b5a951c6bd3e118df5637e1b6fd66a03ef883f86fc0048dab7a6d034de115c4b2c98455ab1c782a7da069845381e0cd428aeb231be334a8e6f6464bbb51e5cda

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    841e4160630555d503743696d8fa834b

    SHA1

    68d3ccff436a96a92932c7c01b9bd992abf871b4

    SHA256

    562633918e703e3e7e4b184418f34d47295a837574b6e61ecc068a2a9011a67a

    SHA512

    a82a47668725b2b147c97ef4a17cebe00dabfeb6ca5b66bb06053d39a9ad69c0c3bd76f939b1af6ad48d17b732a149a959a1c178cf7ef09b4d7ab250a3198490

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b1e7a2cd813b9d355652eb41b94548ed

    SHA1

    3db56ab694c7aa28e2f3a5316a9bcea781d22cd8

    SHA256

    802597818494be6d013deec5c338a6479c0e59246cc45bb9d2aec44843ee45a6

    SHA512

    be84612acd3136d5ec58d6387d03e97b45d3be5474340c709f41c565665578bc9f1482d3952699cfa22fe63216888fdbe144c184dbb4f0342fd1c275ef38d77c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    15943d0faf674adb8ddaa765348a427e

    SHA1

    2edf7ad9066dff1e43fddb8848f8f5ea9425cac3

    SHA256

    55f78beab529a797f930756ac7c88f4b3ba531be7bbe10b61555ccc68418f16b

    SHA512

    d87b128b33636cc38df9df7ae97cf75e0684af2a8c226203d36ed3d8143849cf6ce43ae96794d36aedf3eb04b51a0998e0de2b630578bd39a55a5d5387b514ad

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4c920aefa6f8e701e1c642eba9d968d6

    SHA1

    acfc002851da80076dc42794d4b707ca87791f13

    SHA256

    0c396c5b20b32c427dde814c9e950eafee4cfa387b6d0c7132c3427298328070

    SHA512

    b58a10da251de3bf024a3d36114ac420d2e20a1e30e7a6c0a0f9542f4bd7202e46a0c3c5ee5e3965f29e96121fdaccbae4a30a8ad196bc70ff6fc3e598cd5a07

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2800be56af2d93e09e7c44a89f8cc899

    SHA1

    74fe84a0ba8822d9faecddd9f8f09c0d6318a74f

    SHA256

    3754f42d011c8f3212452f4ce5dc492bb806239db659ad1555beac7eb21bf79c

    SHA512

    4bd845c8b8da6e33fd5842d84b8e33f71fb992badb5cae4354a5a473b374a92c43e005e464c5858ca13616fb9793e69df97634e3577e46dcb966f198bb4d0d37

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d357b3043c227141a10969fef524cc07

    SHA1

    79a5f0c34afd0ae3ec72bf478ebcc2fee0351aa7

    SHA256

    80d5ce20a375cdf852e778f9db67249c6b1d8cc77a776cf2d0445e7f8152190a

    SHA512

    928ea5eb9bd93ea7c86bda76d024e5addca40744eefb3057ce5e8abea17f0ff93b81fc7cba10f789d7bb14657af96012395c5635e595dee94243dbaeb0f556d5

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HJ0GGVIM\cb=gapi[1].js

    Filesize

    133KB

    MD5

    288c5ba5b7001fe841c32f690f62cc93

    SHA1

    29aba9d8e4f7cbe25fa5e64b9ecbe256e51fc789

    SHA256

    c2f33dc18eae27d4e878bf837dd97f1bde5151e44b0271408535bb93265b8c52

    SHA512

    e375d41344a086d35accfb02bb1f91e2dd383db032af387fc3d6b1230057cc5e432e9b2cdd976e51425b4f587391d42f4d9d857c2e6f11e822a65edcb85f1c9f

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\M2VO416U\twitter[1].htm

    Filesize

    162B

    MD5

    4f8e702cc244ec5d4de32740c0ecbd97

    SHA1

    3adb1f02d5b6054de0046e367c1d687b6cdf7aff

    SHA256

    9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a

    SHA512

    21047fea5269fee75a2a187aa09316519e35068cb2f2f76cfaf371e5224445e9d5c98497bd76fb9608d2b73e9dac1a3f5bfadfdc4623c479d53ecf93d81d3c9f

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\W79VKSP8\platform_gapi.iframes.style.common[1].js

    Filesize

    56KB

    MD5

    f6140cf2e81a9d5b9bc96970fe1946f6

    SHA1

    e18cb20a08d0c13d44b72e36e9560aec2187abce

    SHA256

    68cc8a99c8ed5cc0eb3aa2146fd34bee0051bfd98faa3c03b83c78b4a12a8bd5

    SHA512

    1f61bf7228ae9fc1b36249223f4ca0675da05beaa6c00b28b7fff500e0527ee237d139eaf6793ece67f8730dfff0207bf945a848795aab7c57301433449a8acb

  • C:\Users\Admin\AppData\Local\Temp\Cab9F9B.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\TarA02B.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06