Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    143s
  • max time network
    136s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    31/12/2023, 04:26

General

  • Target

    281a4b9a8e3c8e3adc0783fcc8a3826d.html

  • Size

    601B

  • MD5

    281a4b9a8e3c8e3adc0783fcc8a3826d

  • SHA1

    566950e6e7048c3fb7575bd39262409c49742916

  • SHA256

    608c8a4b82e761024d715a6a40d2be25edf730fbb25dcf2a87a15ce5f1c8108f

  • SHA512

    b31bbcabf088f462b9a16defb34d6b843e1ec283fecc2f91a15841861a26210242cac7835c8b63f0fc66c719812114d1b57298017cc10acdee3fd9efea80fe54

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 38 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
    "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2960 CREDAT:275457 /prefetch:2
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of SetWindowsHookEx
    PID:2928
  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\281a4b9a8e3c8e3adc0783fcc8a3826d.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2960

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    35e306022e748b555479eaa4420daa32

    SHA1

    9c8cd474e95d646d136eb42f7c6ac598e7d14cd6

    SHA256

    5d69955202418d3d49880f0afb4d04c94a44d6d988e0eba5b3b3fa1d7e6b358e

    SHA512

    99b1ab7b4daed23cece21b5e344e6a47b9ae12d7c667988cdbd24caf9cb6984bccc396fe6d54e64b31a930f3900ecc8065a21f774e63bdb6e5eadf27e3ce94e7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a5a1fcc71b9647510bde1a49cd1ef427

    SHA1

    62c2796aa45d1bcc8fc2b776606d273f4f22dc38

    SHA256

    2945e0139cb0e075c9c2aa9b856496936e543277f900ba920e229cd4a2aada24

    SHA512

    bbf828c14c1cf550af928d206cf2a601f8f32b32a459566f95f8488196e4f943bcfcc9435b9ffe0222c3c16b319ccfa7c465d9da4b707adfaa59fd70110c0e20

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6160684ceaf8732cd6f1bb52e73c3ce4

    SHA1

    b61988db56835c452907d9cc94f3020fdb4547b1

    SHA256

    9fffa82c4b3c014b10176196adfe3cd95720999add24accc4827e247625e626f

    SHA512

    15e3f8138c7723d8cd50bacd44de0d622c334370e1f75dcd26da4a503387ef9f8f9685829859b5c5564f0f4c732d2d3bfec43b4ef9014f3b508232ec656b0c83

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d8ef44ac04be6d636338eaf2b08a93e9

    SHA1

    f11bdc536f872d6e29dc387da2654e4fa4d85c98

    SHA256

    ef767795ee0e7e5bbc723762986f5bfc9a9d9a57a9f42cbc5b1344fc6e8eb42f

    SHA512

    14442730751f420eb4669d447e3112631c0da3642635eaf209ac566571574accd009a8a28de4b1ca21c3a5eceae025273ab0e22cb135f516eb655295e6d9f5af

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    79bc34496e08f696ab47b9775360eee7

    SHA1

    fcf5d98b8987a033ae3738695d597ce23be153b0

    SHA256

    d2152ee7d56c8396f2ea2346fb9342c4d678b902ebecee455b6b377fb31d80a0

    SHA512

    37f4189e4fa594cdcf517cf4c2128fa453f559f1c411435125fb85bcca5e60731153371a9ecbade08999c3b92173690575bbef6ab730a5912dca882c3d424c94

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    31ec18705e3d411864b304c9af0352e1

    SHA1

    e1a50571868250b80202b63d40140349d8a6ea03

    SHA256

    7f57171620585a368c2d764971658a9028ac4dd098a9d4d0a611008f9cf340a3

    SHA512

    187c3d1f99bc120dc65c52c166cef43de537b60d218cb944c5597a8ab7520577294fe66da9778e2dc49ee6b047719d07adf35a0c4413e1c1b56432c36b94b778

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    783348422d7fb2a76fd4dbdb807d5426

    SHA1

    8817dfd5f4f301fda7934edc16acabff08809ab5

    SHA256

    fcf78ad5b914b8d1f7db3bc526bb40d48309c3e7790f143b5577dafb533db386

    SHA512

    77c80eb0e0294597da8b8f23fc3dcd4ec6ef11a70ef589db9143ffde5a2c729b19078ba881ba11f4f5b4f420772b7ad5102b7de4e658c18b0420a7ef95ef220f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    79398f621f870c7cda791b8000497510

    SHA1

    15bac050588e4714cd555be48000530e808b02f4

    SHA256

    6ff652db88bce1708666e461262ab769aac5b5f86f74d7a45073befadcf2f219

    SHA512

    498105e333587a04c60b50719e9909f9aaaa543a32659188cf7d4ffb1efcbd23e6cacbe27afb90c6776ef804497629c8c04c46c35f3210503008a52d46d2f3f8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8a2408c25aa1f8a3b978f01b32b8b093

    SHA1

    699432f07cd12bd27202bc55ad24138d497f29b3

    SHA256

    d7ab166b861f56842a62e4a21dd05fd3861a7bc1799dedd5c10941442c03a103

    SHA512

    1895deb31aafa0fee78ae44b1c310888f04390cfb2875441a9827e2cb299bfeab5c7a4367c4e602be6bbe28017978dd5444b2180a176578ea275c8a71cb9de9e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ba29d706eceb5758f0355c5882d44542

    SHA1

    9dc0cc2a5351e38315ce452a77cc830448325b15

    SHA256

    45d0819a8dabefa4f1aa1f7ef59bb04a61b9c59c9fb1b3ce66bf8a44631844a8

    SHA512

    4d16d608bb37ce827d6a3cd247a274699f14ca27492eb73ebefecd398b8dc3daeeab4df8ded563d1aa0b9e1b09bcb143d4cdf72080fac2c3fb1868d7e3660f2e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    94fd726613fea1770e612f2e19fefcbd

    SHA1

    f824273f753fb96b1af115177da54a5d94fde998

    SHA256

    b13ee656f427090778b924749e321ded4f46371ecff0fa0ad3e1ebecb192a9c1

    SHA512

    c6829eb3f60a517b90b8b2945fc118b923794a742df16a9af235412e73c25987e8ee68f9e3aa9ba1c60acabd5568d026bdb101b00f4bcc4eddf73f2e701e4133

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    13d2c79663703fb785de757deb977676

    SHA1

    9292710c1d4484ec08d9e5dc13fe312fc72deea7

    SHA256

    e37105cb9fb01951230ef737e3bd221c8f72633ecf1bde4c25ba7fa7638d8471

    SHA512

    fbe8e2202f602da428d997134255a55432e4ba22ccaa6e120d7922860053b95df2260a2c728a6675a31fb70b91adef432dfd1e7f45eebffa3fd93ab3ba8ebe63

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    470fd9d746cce2db7e0da1e05ca43485

    SHA1

    afbdd6f679fbef255c317967ec127ebee8cb90a2

    SHA256

    66baefa7451724f6213bf46dee9366fffd50214cbb9e7230147e8147afc3d6d4

    SHA512

    66f49d5dd2afdb07757928f435a17dada4614f3a7e6d9d36def09d5f9c26061cd29ce74bcc56960088e2595d9029356a6abaee35d4bd7b76f8bea97df8dbb3ea

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    bd60ef2a016bdd8bd17207e329afde57

    SHA1

    47bbad8e53a8c153f2d3ae10bca0796a95c155c6

    SHA256

    7f7d0ef415eb7a5958a90ec56ade34a2b9c7b8f4782f8f0c143de691de39a23b

    SHA512

    9742f66e53714951ea2ea2a5f38c0b58c6b2b55c23ea7d94c6542b800f19011cd84b52c68b6eb41779a534312cb723e76bbd804517a67f85ed3dad21933a00ab

  • C:\Users\Admin\AppData\LocalLow\Microsoft\Internet Explorer\Services\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico

    Filesize

    4KB

    MD5

    da597791be3b6e732f0bc8b20e38ee62

    SHA1

    1125c45d285c360542027d7554a5c442288974de

    SHA256

    5b2c34b3c4e8dd898b664dba6c3786e2ff9869eff55d673aa48361f11325ed07

    SHA512

    d8dc8358727590a1ed74dc70356aedc0499552c2dc0cd4f7a01853dd85ceb3aead5fbdc7c75d7da36db6af2448ce5abdff64cebdca3533ecad953c061a9b338e

  • C:\Users\Admin\AppData\Local\Temp\Cab2E33.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar2F20.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06