Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    37s
  • max time network
    143s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    31/12/2023, 00:04

General

  • Target

    210206e5328ff14fc2ad4c77859ba3c9.html

  • Size

    29KB

  • MD5

    210206e5328ff14fc2ad4c77859ba3c9

  • SHA1

    b73213c7f250ddb5e589425be51394b7e4939f61

  • SHA256

    6db387495e05faeb82c0aa7be719dda4ee495b1cbbb1d3c55a197911f1bd192c

  • SHA512

    411479137b2f21fb3bcb2edb88378cad609de6851c546d805323c24f2e083f83c05b5f0ba7c773d79bc42598d3646b0174298b23613d9e9bd8adaa9a84c11598

  • SSDEEP

    384:SiPGJtq924cHx2VLwM2XQ1E//j/cxHq4btIJ40oMIhfTqn3LuWRcu0C7GdoRxT0Q:S8Wz3s0Ou10NeB2U18IueB2U18IF

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 26 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\210206e5328ff14fc2ad4c77859ba3c9.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2468
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2468 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1712

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    2b9324a5e270b9971e561fc3698af126

    SHA1

    55032da782a433f8730a908a243fce5a315cca74

    SHA256

    2e4070b849da790a0aa2563d12b1ea004225c1b91cd75818ddee136a4c021307

    SHA512

    e40d7431c25170b155781e5e9f0f20f7386640d4ba003a09902ebc94a4291bfde17dcd67c53140bcb46a68018a8138d0cbd82f55950043c2e4d7e90b0b4a9e45

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    58ea818e7c6789e6092887c4a8eae1bb

    SHA1

    dde08d53d39d4b643c084f2867f83c19e05c18f5

    SHA256

    60a20a1518e5a1e5e19c0c402c5cb0335bc0b3d11643b4d697b03356813771e6

    SHA512

    0621b7fe63da80dc30cdf14d949b08131bff4dbb21a55939e45602e51b93cfa8f3d24263fbe24b63b57c5cffebb9e5e21526d41ef87adc288eba74cc37cc954f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0211ff0c9a33b2fb227d0680b07d190e

    SHA1

    ebb4033ee2381413305572e09df1ccd6af733ffc

    SHA256

    a698356a26c5f841dca593d15c1f1a8cd1cc9f9e00bedfc405527cbb5cef3b9f

    SHA512

    1d402a12056c2d3d07e310fb492fb73017f57e3d766442e82a4bbff449f73ce073c2be0da8abca953ad07003be35141eaacc854e54782d25b61ba216c729b188

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    abfc768ac27eca2df19e31e2643dd238

    SHA1

    35b6c0553106301ca0c46fc200662dee5c46bb04

    SHA256

    3125d8db2a18d2eac5f0e99951621cd41e76d8fcc4867dc3a64ed83e795dc2e9

    SHA512

    6874fcc3cc28a4935fca1662c91a924e88a402555effb5455b38ede4fcc6dfa3c29008027304eb8a55cd7ccde3947d376b7c8d9b8f3b0597b18f8b387adb2bac

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6b642430a8f0f07b317d706db8904f04

    SHA1

    c71123e4a829b8c4cac4821f0cca2d78245c02d4

    SHA256

    89a9d18f301e1b8c59fe7edda72796ec6de9cb7943f3374338408011c68444bc

    SHA512

    c632d989ceaa150909ed84d8487e0f3d833f73a902e812d10deb7d2e6e84c4cc6b4fbb196d122fae98a5b21d7d741b800e60fe4683caf8a89403faf8282631cf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    05ab6199c434893c00611093f1c39a27

    SHA1

    609ca2ee79646ee215e7f7b4e4b46c94eb317cc7

    SHA256

    9b5bf6c17557dbb83bd564dbe778e28e7adeefb902b26d4809439c443599c82a

    SHA512

    a7b8fe1c0216c344ec6d5b043f9084b715c2d28f7650b2f838a6f0998a4538950e1c9b1bdcf53be22b15420d197cec77e18295b94326df517eb8ab2e5a515f1a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6e2fe275d61df053f55eb283b797fdfe

    SHA1

    ce47dc295c4505de097d78f96ab9a36e576c7b76

    SHA256

    21efc8525a06b9ea2d2c84e4c044ad70fffe3c96ecfe78ed15b0bb079d631378

    SHA512

    d28cb6b21c0801a7ccbe8fa2e99924d5aa730f7e9d1d1fd4faa733dd32c1ab406da055718c5b6b8b048d6d6bfc47eaebf3b53bb00a3acb8c4d77fe98ede59011

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    32dd281f05ef77d7ea56326c30aed983

    SHA1

    59c961c92524a6f7e8a29085b59bd5f569ffcadc

    SHA256

    4e7f8412d2710ba563a99e60c8039ea52e2c3cb0855cec46e67985f55c987da1

    SHA512

    7c180c428381f2ea29f2369c3111e0ed8884e8c0ba2237c99c21e22d42a359da8bb3b01c360d66f41588eebd2b69dfcaa7ba90763d362cbfbd4045ca07cfbe27

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    87795f9e7aa5d674e514e548d68ded8b

    SHA1

    2fa3cb5d6a6f9899c631158f69b101376012fec3

    SHA256

    0e612890ff2080b592f7c4f6fe05e5d1dad7924a47828b0123cccd72861e33ca

    SHA512

    fcafdf46410d67825eb5353cb6e0031d108e26078fb9bdc619ac8173598b95d1c5918014b71344c3a2d8edd8f14715afbd13b415276c24792959e3bcf6a1d2ce

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6dbdf24aacc610d1c0fef05b096bec68

    SHA1

    94a99d3038f223ebbf882d934c2b81a584a95460

    SHA256

    d5de6d17fbae0378c59529fddf0339f937483c8008fc133de8b8c0158e196169

    SHA512

    6ce7240e452bf44cd612488fc1e12e757bab94aea5321ea0c812b56777c78616586a83027d9aff90a4aa710c9c3ab498fc35bdc76cf2722c80407b608cf71fa7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    fcdf1829a2f71a1820906afd2d497685

    SHA1

    fd0f01ede9fe47960a2826a8937ff7f0c130e7a1

    SHA256

    4f0989521f60996167b7bd3de1b63ffbb2ae3e5fb5d326a8b3b6159fe8474fdb

    SHA512

    8d0ad6327e35be3405d62f8e7c26f046b992fcf6f81358d5e36028cd647bcdc6ee6070b0d8b4042aadf3438db9d642cb4883845d7442d823d10c6b8f862a4a6b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\Internet Explorer\Services\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico

    Filesize

    4KB

    MD5

    da597791be3b6e732f0bc8b20e38ee62

    SHA1

    1125c45d285c360542027d7554a5c442288974de

    SHA256

    5b2c34b3c4e8dd898b664dba6c3786e2ff9869eff55d673aa48361f11325ed07

    SHA512

    d8dc8358727590a1ed74dc70356aedc0499552c2dc0cd4f7a01853dd85ceb3aead5fbdc7c75d7da36db6af2448ce5abdff64cebdca3533ecad953c061a9b338e

  • C:\Users\Admin\AppData\Local\Temp\Tar4446.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06