Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    142s
  • max time network
    144s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    31/12/2023, 02:15

General

  • Target

    242a1d71dbd40a2fa92f7e9a35bab9cc.html

  • Size

    18KB

  • MD5

    242a1d71dbd40a2fa92f7e9a35bab9cc

  • SHA1

    5831bbc68bd940b5a1d6ba93ad0f0356ad47b23d

  • SHA256

    598d3efef0d5a6c7bc2a96e54f98c91150c96b7eee809eb56c2fa76b4d1fe9eb

  • SHA512

    947b73fd44a9ecfb0c58c1ac3d7d68d2fa27d9c53db5f4bfbf6a69dcc73f4c662fb5cd7415ee4a026513bf2cd620bca5aa23242071d8560b2945c203d6051a48

  • SSDEEP

    384:Xlxut3PZz7jqM7LmcIc0WeicPG8sM0Ewu9GWwxi1xiE:XlxU7jdcWcSW7

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\242a1d71dbd40a2fa92f7e9a35bab9cc.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2896
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2896 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:3036

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    725df500f4bfcf0051019a03700b78f9

    SHA1

    48560c927a52e2712cb7393af368eea2e6f56dbe

    SHA256

    9860ff11d3de4d1719a3ec0b634fd128f302f09f9f331d108d87aed6541fa10e

    SHA512

    159e3e4fef4bdb7358a7f1ee60062a327a2693f697ad3b4fa70c735894ddc7a341bb9cf14803f235c3690db99fc4ac374acd849741b9cf3366589efe69b75810

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ebf5c92c9e396df036e0f5b7b7495256

    SHA1

    e55f5bb9b84584d9406a88147c96256ea2d41b3d

    SHA256

    7be8efa2bba809176ef87795e15a8bd6900bc845f3721dd4149f60959e2489b6

    SHA512

    80f99daed3f71349a7cb1278c32bde8103884a88dcd7010d1eb8d95c8f760f33b12c70e80faf6eb9cd2df047bfa140ea52b20a7c02d53c7aee24b34ba0e624ca

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    22e5235ae21aedf92cb672fda59bc1fc

    SHA1

    360d7313fcfd34fb48e38b114bbb2b23963d3ae7

    SHA256

    31ac3877abc4a0f9116b6967a31778e2d7403bf3ce9991dece65b2ed9b8a505d

    SHA512

    5cfb8c43304e4b50b7da29a16780b096159c042c02a6fcf0aa24a9055088265a9da655c7e0b3b5e7e3f54223fcb5fa0098acb403181451276bfee5630c6cee8a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    34832f570f40a54d090b6fac11385059

    SHA1

    db193d62ff6cf951bb30965394415e42af57dbf3

    SHA256

    fd9ed0df611a465b9be326c2d717ceec004cc25538576dfde9e0608518b33c68

    SHA512

    8af0c0ccd120180671d7a5846d8b598327847d47f67770c7f6536cfbe58c5d73ec58f416e76e99485c1d0fa2d1008ba46c9069e86588c13b2079d7710a011d9d

  • C:\Users\Admin\AppData\Local\Temp\Cab2435.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar2457.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06