Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    146s
  • max time network
    152s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    31/12/2023, 05:48

General

  • Target

    2a9dfd57cb15dfbbf0df6e95e6bfa861.html

  • Size

    67KB

  • MD5

    2a9dfd57cb15dfbbf0df6e95e6bfa861

  • SHA1

    07d50f45ab609f654b9db08f660947605345d5ed

  • SHA256

    e0fa0ab1280983420fa4677e808d0dd1a97b46009f91187a7ee4e42f81f8f778

  • SHA512

    af1276f48a02ba1a497fa5e6076913d700047b18ebef23c3a6e18550d55460c807487b39a1586e655b3ab715fede1f4147ce68ec1ae27a57b3a1597f403787a0

  • SSDEEP

    768:St0hqGbIiP//mdvsYSgLj/DVWmTMYq8Dfr7Vq3t40MSxjfLD+PHgkyMrj3DZ+/V3:StIk/LtnwOHL6uc1

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\2a9dfd57cb15dfbbf0df6e95e6bfa861.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2292
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2292 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2672

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9288601de347c2791b879d5ce7b6a8c1

    SHA1

    901c021a4b2813e1d4a9a265f2a9b9c6ccf4c656

    SHA256

    a471d2b6d3d78ef26ce3c3ac1cf50840fabadd8418b1ff66a86177ca26140a56

    SHA512

    926313b8041ea2a64bd02210d70529d41930ec737f807584de04a902c2f31b4c7e0b539058b60fa2c595c194b1f88a22eb48734de09ad9da99bb105ac7ca059d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    03bde7754b3d7096a83ecf5c2186265a

    SHA1

    0773ad44043e103d7953eb471264db91d7adf207

    SHA256

    b2405923defe5f54525e29760ad95a82387c3678a494ab7157ed963c60433a4f

    SHA512

    2703f867acd194ffe87b9591955ebe4851ab27e137af39c07e7a0f7d5e209acddfe2e122697502eda45ae9278f24b3f06d8d241451a73534af24873df8fb6d68

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ccc41289ada7e5958e95626edd01851a

    SHA1

    6537fa68730f12229b2b382b8f4d5810df3a4d11

    SHA256

    06c68f4334ce1dd0fad3946f9dddca03eecaa1830093105140dbdca4e1e33f5a

    SHA512

    a0b91bb1ef64fa613a469279d98f63c7c4438168201849fa63c1f507af67d61bc872b5ed895e7e168ad910f65c46e1956f615015c2ecdd2dbfecbc4ebd9148c1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4d5deb3a13cf1410041cebd19f7f9798

    SHA1

    8b5709a17ff019f2d3e19a55cab1e76f3f4b4970

    SHA256

    7089fad0a2f1705f9c62fab16c11342db465bd3d5e343906eb93281737104d87

    SHA512

    26bc4bf1a819ad0ec60ec1769c7ef996804ead7ba63653c97aad80721dbef0a2e2a8261ae23e04bd7a668667ac26bacb25561e64765a134de0e7b2eb3011c206

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c0698dd5471ce2f734befa7896b6e707

    SHA1

    77f9151fde8f090b2a2b99d0dd3ec9cc1c9eb975

    SHA256

    4ff89d11711b843e51a9109da14e3c2b4bd87cd0d26d6beb0cf9abce65c5ed27

    SHA512

    14ef1bbbb498f6004baaae14f9884b583ce17e6cea31f5d853344718afe44f81e70c8b5dcc5a08ffcbe514c26f9ae96376afacbcb57a5a21a0276180d7815429

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9cbd898f32b5527ba8085b21a9b36fba

    SHA1

    dde8500e1ac838c51159cbc78f6deed52c6f3c4b

    SHA256

    568542fcb4e484c9bb7e410451cf8937bea2823fc681625f786d74c1d5ff9953

    SHA512

    d782813566f8757d96634f0b0f4ccdf9191ffd20db8c2cc401a774d7474a25f7a344315ce5da79f0168e5e6570bf790c14f3e9fd0e6d357831ff3213a2d05007

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    01d569aeec1635f39d97e7642fe98dc4

    SHA1

    0d307e5ceb06cf4fed9e5c09f60bf661607910f5

    SHA256

    e6ed2cfa8127f229e1aaba600a8b38349fb2606188fd02484d52974b89ecf071

    SHA512

    ed1c38218f59799d302a9b2c4b426806624fb8c098063dce49a0709f84c46f04c7d463ec6296170a6f062fc772b1b42444a27237d2e21d5967ee510ec6cd593d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    526175f1ac6cbbd9d64eb9186c4edabc

    SHA1

    faaaa8db025ae74b82b35b7fc24113cb8a6819df

    SHA256

    f7d05a1dd5f410deb249ae3db6d781404e7d70572633be2c6c962f6ccea60a30

    SHA512

    121f6e9040a7f63284762024823198dffbd5abdf100cefc66ab30151f62447cb9292ea3ecca09739e7c8225655a300d19fecc563d22b1494f50ea1e1519079ee

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7ec59ddc3acca7bf65298aa4128bdea0

    SHA1

    98a3d603900d3f4e75e02ef4cbadb192607965b6

    SHA256

    b949df62c29d7fc3fdfcb3fd8785fa8a124b863b98e0b8a58e886ca6b007e9a5

    SHA512

    9df74f8aabc128bd341538f98d6a25bd48ec79ad6cc7b582c1cda34e70324c04f5d8f3c75e4b65499cddfe1286475a3388cbe23da11b8995ece7d90be3c89656

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    20ec49a977e07e27ab892eac7b73b961

    SHA1

    1a86f6b97545632dd1c66a0ea3d2989da924215c

    SHA256

    7435d84715e20456444f9175feb95ecac5e0f9a1cc017eeb2cddacb4b62370ce

    SHA512

    a925fbe08d8e3ce7379ad3b0da56dbd4b0bf6d9057d06e957b8279d505ba1a878fac53067b152b8c5d20dc20e4c43215503879051a83bcf6d3600fa99f0ab29b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fdf4b68353858e910f6e3287bd60c11a

    SHA1

    aefc43e68b1d393d04734b99723a58eb7d332db6

    SHA256

    51c60a5e0c0bce08d2fcb3ed026fe1cce9b92d86edab2be4fc4485623ae1d3b2

    SHA512

    0459082eaf07a1115a74a128631399815c0df4431df68bb6ad4a203b96584886412bf82bd96ee438863c7487955f898fada91ab0e503f273306727878f677ed2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a8c3270b4f2cd2e237ececbf4c903def

    SHA1

    765c28ee8a901bf1ad4afd7a56dd9613b9a8134a

    SHA256

    8d7a0e121c35109817a24157e6ff1c2198503bdfefcd99ce08db35cb561a9496

    SHA512

    58a2601449a6ff7e119d17d9397fcb8e61b948ad32b28ffa0487b089af9f6f4ee7f24ef59885604a70fb05eee7b8016b3e03a0e5261b315552338183c39d2acb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e33575ef85a163faf33f292553d24a4e

    SHA1

    1866e6e816fff7fb56220e1d412321efba9141b0

    SHA256

    a2547b18b50421e6dc4719a649cc514daca1c31c034eba3c6a6d0551ffe2b1a9

    SHA512

    62daf59d657d40c6461341254993f2f2c5a2a7e7504b4d6183fe69cb71bac2a6d1353185559631b412f67bb22dbbaf1b4b35a8d13e8a5935e2415babbd53f07f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0497bc944e0a7554e2e4684f66ac6a49

    SHA1

    f756328f62ec85ffc00163355b8996f2b5a48f39

    SHA256

    249b2caa539154bdde4c7d818f1f50fd6d63b977fd292cee9a0f484159fcff79

    SHA512

    93e9baad53c45522f7d41b6a942ef331db0a8e9900394a8f806ec9907012b124484048c21ef0f2c5dfad4bedcbc6a3b04c8ba94040553fa33f6a09c6ea6c1994

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ba9a1c2f86f5158d425cb8b92ea90733

    SHA1

    813f32613cbe52bfd60dff14281e7e0b503bad6d

    SHA256

    f961cd6c9ff9ac6a1d0d867b61d89a92536d3571da77666b9dd04239eb26cacd

    SHA512

    941526f4259a85dddda5d4d2a27456e3a3ac4c2cb96b00f6736cbdae4e195deb23895fe179f324e1dde2ff3678fcfc5faec8f0c5f5f1c8fa4261d99a2f017992

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7cf371ca5ba168124e02826a9f1a2199

    SHA1

    60478418552d5056b2af2cbdf298c2cd674a9c89

    SHA256

    41124dabc6224e42e91336dd68903372ea0b08c56a4a10d71c95e69333c0cb10

    SHA512

    688cfc1c56e00d9abe84c9f0104e5c4ae4ad4ffd8ddc366104f6a634bc064753e394e1f042a553d31bec8fb62e9cf4b340dc84b38222f2a96e5951cafc87ad87

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    86f79adbf51ea661f6c4a7a2c7740057

    SHA1

    53103d8e15f468981f3b92eb6e62575f362211d0

    SHA256

    ffe10b71c89109bcee799126ca29890ba49c311edb7e6241a2ec1c3f9b200e79

    SHA512

    8dcd7f560fcd969b3273a99e1bba1ff4df92a9968ab12a3db45682ac9c6fb469286a7e2b2c5af3fabce5956868a4fcb29e39cb806627aa6e3489f7c9b65d8039

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cb2cd2028b4ac019641f70d98eb7bb39

    SHA1

    0bc4f89d43f6dad62272d32380576d19ea77c017

    SHA256

    c5bb8027b980ad4cd2707528cd45dcf41d955549adc1b12fbe5110d1f21a520e

    SHA512

    6fd2fbe591559d54f1cef3cf42aab0f722fa5af063380cd0e132e9b1f303c3ded7952000e312a9a5c84cce57756e4ecb936a5085b2f290080c9a36673ac7867d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    308cd8b337ab728735d5a8fa5903edac

    SHA1

    f05b90f6da5bbdd1785d38c3634b470dd189a6c0

    SHA256

    742e5502a308ff39c4a3d7eb7449fed99a43439b20d2e71eca0efc398a65bf6a

    SHA512

    1db3932cd9ea194ae71bfdd8adeb6389bbcc6c7d55ce6686a6e7c1ae037f0e7f5335d1716db32160bad36160618834645c613cc83a134b280dcffb2a986521b5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a33ce8ca00441790610bcb17e9c483cf

    SHA1

    a04e921ddb09a0e65626564c713819cfb42889b1

    SHA256

    10184187ef3db38c8bb232a38ab32ddc52cb6a4c2e45eee83665e9b6123d3b6d

    SHA512

    48a8aa4d60b9efb23f83a726ef619bf9ae35b9a1498080a1b4e72f050c99701bec30ce83e809f9fbd4a9944084d5481ad997e7f20a2ade8865f3f0c1fb6fdd98

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    43d4e4552c57692c358da765db12c1a1

    SHA1

    db113c1d5e6075fdb42814031387fd5ecfe78365

    SHA256

    d98c7a3456d3b8f7444f8835bfe00d2acd19dbddeb30c943d2fe0669a5693699

    SHA512

    5aadbe2c62a052fd605df7805ebfc565e5175727775a95061ceab49ec8b1426e5e8c144f514909c95b7a66aaf016cf1d26a13c62ef9a988295515d90f46242d4

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HJ0GGVIM\ga[1].js

    Filesize

    45KB

    MD5

    e9372f0ebbcf71f851e3d321ef2a8e5a

    SHA1

    2c7d19d1af7d97085c977d1b69dcb8b84483d87c

    SHA256

    1259ea99bd76596239bfd3102c679eb0a5052578dc526b0452f4d42f8bcdd45f

    SHA512

    c3a1c74ac968fc2fa366d9c25442162773db9af1289adfb165fc71e7750a7e62bd22f424f241730f3c2427afff8a540c214b3b97219a360a231d4875e6ddee6f

  • C:\Users\Admin\AppData\Local\Temp\Cab6C2C.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar6C3F.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06