Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    117s
  • max time network
    148s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    31/12/2023, 04:06

General

  • Target

    27793ca02bcac79f3d3deeb648ac39f0.html

  • Size

    2KB

  • MD5

    27793ca02bcac79f3d3deeb648ac39f0

  • SHA1

    7568eaa2dc3df6ff40f52cc4edd888706ae794c8

  • SHA256

    ce529732a33ca1270ddfd68ee3ee3cf8d2a13047479dc6c6b1f69804c21f0bfa

  • SHA512

    7ef28fe7df45a451d1ee972faf3129d025e406e4d8af81c12dbc9980d5dcd689e33db5641ce26bb74efc1847c8e8cd2cb5f10d0e16799cd5ae5f4c81f7cce7a2

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\27793ca02bcac79f3d3deeb648ac39f0.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:3048
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:3048 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2312

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    46c50caa019aa31cdd4eb3f89b075109

    SHA1

    a3c358301f099ae1f866e080d4a3506667982db6

    SHA256

    c885930d9b2c53afb6806c4ab15612061e7fbff170a4f10621d5d7111cc370b7

    SHA512

    87762890cf33f85ad0a1b6937db504c2a80706be3261859723fc9854c87d51ae3757463149fee33c8bf4fa0a42f221d60fe54c90aaaf00bc9d2cd6fd7c4fc77d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    75f6a2ad5b8682813b7a01c20db2f017

    SHA1

    9c59ac8534b2f438731e54e1c28188b3e77ccc78

    SHA256

    400d564fb02b1ff6b1403f07605b922e7c44d5a449c71d4ac7d0940330b12b2a

    SHA512

    d0d58e1410fcc760dc5d6d296dfd4a86b73f9090012e17f21938dbe3141c7c05b871c5c1f54395cf13bb30bfd5df5f7dc523e0c5e00db7a245335eea3428ba3b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d204f5e76bd92c4ff9a1994039fd1de5

    SHA1

    4c1abda592d4dd926e9c2510d75377e506737cf5

    SHA256

    c54729d5c099867b9309e7e99c81c4883e372c5d95066ec6c6d5a619bf77737b

    SHA512

    86a0b95be7cacdbf436287123afeadfb95f37e7d802382cedd1ca78cd1ed6df2a247044b554c1eba4495221e98bea8304b79cb5c4c7f039d7be20a73f9fb1b38

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5ab4daafd65b8853cf4a294c8ce200b7

    SHA1

    29673bac2ce33b819f95ba532a61625c00d3d98a

    SHA256

    3f7c6fa750d47ef7859773e95197afcba590d2c38f9160d417932f1cf86c63c5

    SHA512

    3a285dc4e781336d3baa2c501d9567050b209326ff71237fe9ab2f8de0ae00be1adfbf2300da1ce51a15ffa97c1e3786d49a03ab1fd7c1926d6555dc2914af28

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    598b93b6b1a4ddfd41cb18705151f7dc

    SHA1

    8842609c3fc567f64f15d223753e06a06fc255d7

    SHA256

    e045497d0587bf1abe8436c69753d0d38a9a2e7c7a7078635a498ce306b1f99c

    SHA512

    47764aecab3ff123419ba4cdfc6b0b6284f6257a9017dc79807cbf86c89195ad49b6bb4191dfa799fc3d9a25365ec7a17392e62ee4fac214cf142dd4aca7b8a8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    35185fb4e1ca59ac5586d0bf5f222a92

    SHA1

    2077e6284f70d46d3ec47f220899b75701cb9422

    SHA256

    00ee605ed7a45ce78540259577f354f262d555c4bbf2597dfb45b48217198880

    SHA512

    d55d90de375c63573d78d13be7c3e4b01baa1a3115897c34a9dfff03150534e82ec8b95eadfb525b3bef9dff96f5a6d4c2c4502ab049266e0e164056fde71041

  • C:\Users\Admin\AppData\Local\Temp\CabC7E4.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\TarD56E.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06