Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    145s
  • max time network
    153s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    31/12/2023, 05:24

General

  • Target

    sample.html

  • Size

    23KB

  • MD5

    f8bd9cff28b3ce6cb0045367980bcb81

  • SHA1

    b8e72cabfa88a97e71603954e8d480820b707c3f

  • SHA256

    d71bd1695ba6f27ef64cf0d446df9f2b563c7f2057299e0cf8cabc0c9fd0be2b

  • SHA512

    8453cff8e716b295349c03e872beb06c55a31c472fed17cba908c95dcc7935a40021cbd3f3704dd01590530c2df202241d0dcd754edba83defda8b82cc73460d

  • SSDEEP

    384:4SFpvsBh4o4VJNC4IL+1pqSb0AeTGR/1RFtvMotdvu3hl:4o9ueLVJQ4IL+1pqSb0AeTG9M+dvahl

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\sample.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1856
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1856 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2684

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    804f49bc40964731c7797c9d911e628b

    SHA1

    30cf0039297875a75f771ff8dd1acca1a7ebcb58

    SHA256

    1dcfec7985ccee9c255af79767536cb2d80931be4335af58d81b5dba4fbfcd1b

    SHA512

    f1fe6b1096b25b5165827ef226daa3981c261507f2bcaebe9ac1ab3f96c403c3149752121de79af30c4eedd94d0d849a667d123dc74e20c89cba6244272eea90

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5fa24135ae7b5309cf6b34cdad9972e8

    SHA1

    e4d08a3a31b32f44794f7072ac3e7bb8ed65e2ba

    SHA256

    6ce983c944eeeb05260b8125ba121027b3ddcde9b6eed52c3d1efe77456839c1

    SHA512

    e07211169062c166a1a0922b0cb664f399db66c0bfc072f4f52744a4e036a5cc2033e5e7c15fcc7f75f5d1d1365339683b3e29fe1cc4236cca05a4d27c99811c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6456584713bfadc14576d78e29dba5f2

    SHA1

    c1eb4b7d2ed8862dc461966312c73ed82cedbff6

    SHA256

    570f03ed3a1b30eb3c6450e9f883c87804ab99daa44c2de71260830008b09482

    SHA512

    daef874c4a02f70678aad3c2ab52c3587e5feeb15bedc446ce67beb694dbe5fc71cb3a8b21284885b9da84e9b48a02e19c46c3eb7ec196e579494e1e9be7ce04

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    42b07a2c5ba6a83c037ad117dd7280a0

    SHA1

    9b956436237baac050b64af72edc40d5f79ba3de

    SHA256

    d58d115d52bfec29fdc3b8982d7208e4a66231d19531ffef7e0d910fd3543204

    SHA512

    e372f9d4c80212dc9e4f15b6eda6c0b769e87daadea619b78d98ee0809e6c5cacc0350ba96d13a02e41f0903f8f8f4b13d10f36bbaddfe6d22eceedec4451550

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    74431ae330582bc517d004c45f3d345e

    SHA1

    9c399da90be1c0835f4821506805ce270d580c72

    SHA256

    4e9c5a31267e93e9866ed6c08afcfcb6e13fc040d81770779cc700d98c0ada3a

    SHA512

    8fdc97c1c6723aa457e7b051b107089386cebb1f35d42538d7f1fa692530d876183faca2b557d9bbd2d5effb38e3a785e8f4fd8bc55619977f9c7653c2c7fe9c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    92837d677dd1ac38e0ac3108821188da

    SHA1

    09e1693b52dde5aab970a1b4880841e8d1b5f50d

    SHA256

    64f5ad636d3e671a9956c7ad7438635a6d1c6c05574ccf9a4bffb28f1e853fc9

    SHA512

    50b7f5eae9c7768e1673198851d722c345066f9b572a35dd4c24cef7d37aaa181a91b4d0666d07b835e8e10fc0502f0d976a2af19f41a9ff51392a0d14077d0d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    74bdff631fa141a74b83776216ce2d63

    SHA1

    8b66d85272ee23a1305aa12267b8621a1c184e4a

    SHA256

    e6b45465f83d47040de5acf31aedacf2f9673dd85c76934f86a770ae9e3c6e01

    SHA512

    7ba66c4af08bb76a6c6b7b08e7721188c90ee48f47b0430fa7f6fb7b1391c9809e41ffb3117c18370d0659a7ce92701dc452517506c5f1e1abfea40527aef247

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    887bfa41ddced8395ac945b30f116af9

    SHA1

    bf7c7108360c5c9ea668ec5542ee810bd8b3eecd

    SHA256

    2c54809554c09fc498c4ee5da3001a455e7669cd99080fffdba4f8c545379e32

    SHA512

    c470382a5f766e67d2fcb60e6762bd8ff065f41d91993669f74db9c6a2238af2b0f6214553114874719e727296defa36db41a3739b11e278c7ce97e21d6051f4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e8a34ef12ddb0a3ea6f24697610ecc68

    SHA1

    4ecebb1c33900e40b4b908e543bae51bcb866ec9

    SHA256

    d30a280890170f6aa1cba9066e184a2f715fb35c3418fc8137943b7f23f3de66

    SHA512

    1146cbeb6e939f45891b7da108b89aafe1b7d2d076d2cb2037a4eefbd9c6c53029e2942e19d26757b3e88222d59f2fd29a611c3e717e64d4da40e0c964322184

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1fcc5a0dcff2530fa05a258d4e7f9744

    SHA1

    852cc2a870845772cba2c330582b4099f50a475a

    SHA256

    f580ce3cbf6490959765e42fa5653e5fc1605e0935675a7f285a3830849586f3

    SHA512

    eaf73ed7a2bf167b4296a04706691926673179de5684b7130b9232b95e5e7f662ccd36abdf8daecde0f25d32555cd5fe44bace89eb389461744d991f10e0863a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    38a4ca18d18ffe46503fd9ff1e773e7e

    SHA1

    c6fd8b5ae31407a76f099f5a9ff37f0818154925

    SHA256

    a1996a8376122cffd8e88d3dca4d11a895d7993230d1609096db16852538236f

    SHA512

    2cf39feb8d006098eca6f998b9d0323a13a1c79ab0e7ac667bba24f5606e3134217d43532040b3c61a211b3b81a49d3d4a665ab39d658a3c328b43a3bf88f3f3

  • C:\Users\Admin\AppData\Local\Temp\Cab7A8F.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar871F.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06