Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    119s
  • max time network
    162s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    31/12/2023, 06:04

General

  • Target

    2b1aa95d6d2e051c45868e99c31663c5.html

  • Size

    432B

  • MD5

    2b1aa95d6d2e051c45868e99c31663c5

  • SHA1

    090bba86c20df9c651f52ffc1790a01636643789

  • SHA256

    4570c334fc7cec4e675d177054a7b612679eeb157e65b41be565b4acaa7aa920

  • SHA512

    afffc5de9de09fd13c6222c9985f16f28c43327948072494e68784198535f4b8d8022ff51afb1c254a7bff2a8e1bc8ebf3b3a3c2d432a70534196e290f1bd0d9

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\2b1aa95d6d2e051c45868e99c31663c5.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2528
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2528 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2176

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ac90971fb95a6334f71ae84d7f64da38

    SHA1

    96245a9b99d4bd2b42766d5add7fc68cda1cf6e6

    SHA256

    7d4adbae1e33ddd57d63249eb79b15d9fe109e6e70b310c3d2f10b27e26de7ca

    SHA512

    eac61f0702830fff44bee628f6148af8973b1fcd7a50d9dc8144cfc025b7c7b614b344f3455ace23b596d3c5b55e444036a8562d2c094791ddd5fbb992d4627c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    750df3fff1b7c758b13fec8eb13f1dfd

    SHA1

    2c2e2120b7526324544793f4b28c005b76dc566e

    SHA256

    f78334aa0a72809eae271c26cd7685a65620494bfa5b36d08df8a7c63ef52f6e

    SHA512

    6338d87351a286ab87e767da5750ffc4a3945d6dadaeafac27e5920feae9613321fc90bbcf542a438c2600f3d349cb8bc245f9bac4e2dbb5cbcff23e8560a866

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ba85acb74c4fe2fb189506627b189067

    SHA1

    13626a701bc259c7605c4bc5af6ec6162a72fd03

    SHA256

    ac0527a2e8c39d295de26446bfd6766832f1957a25b214f472e75e2261b3ad19

    SHA512

    09c47af26bc48a5d85b2d04142d6deaead04fe609d5553930dacf2b4e250bf8756ee5e9a76fc1aaa8abfb8265bbc826cce6bcee4bde1e7156c25cfcfebdac263

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0b01e9033320be96fc55955c98c258a4

    SHA1

    26f7ceb090058139309a160d3b1eec0c78a52471

    SHA256

    11f048fabf883e5c7172571895bdfa64dd995df2177d68120ee8ef8358762968

    SHA512

    a4a2cf710c8297cd3873d2083451afddd59e0697e93d5a2b3215b4f86e3fc2d51d40d8a57746cd01a8202e8db53d912903c97f46d2a633012331753cff92c18a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    abbe262a4a87a8e3b362d601f3acc124

    SHA1

    783e42ac4b364c482e52beb3c252ec0a829212eb

    SHA256

    a0ccd01207f6772686f4f4a947ab333f01d190303fd7a76ec3048d2d705bb66e

    SHA512

    04802893ba0a064dc422dacee2915f4e65e3e0119f156a45a2421689d28b5de4345a590fd7a34e1cdeb9ed365765c6ee83dd666b46240e0321cda29da8887649

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d4d0080b8c4ee69a2fbbe528419a80f3

    SHA1

    26a3a809f8daf8f9b6e4a6ee60606aec2acd08b4

    SHA256

    70113e3e4e21d78888cabd920aa329007c55829b0e1b9007f6c7c8f7fd16649c

    SHA512

    c79fc0072bc45dc57daa1d2b733022d9a1ec60e4012f177d209ca8b8af8adaac63dd2fa29f0271979aff2c8a642fbd2749c4a08b99e82421df2b9baab776aea9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ca38a3175516c0ea600ed3903d299b4f

    SHA1

    11ec5517eb33a81294054d947e658ea5206ce9b3

    SHA256

    640c97ee5b2441a42e562d04cf2df0f8edd0b84fd5d4f8b14cbd901634c83693

    SHA512

    54374a07b7ae9980ab7711fc69f9c9f051bf9807b53daeb2e8506957d666828a8e3897c2101952a53e95b55be1099b63894fa7aed09c0bd646fe4960dc3c1bad

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    030a04e6a241234e858b247756b2a970

    SHA1

    999de8daea80ffe7458aa83915a0acb2ca879d46

    SHA256

    ffbed1150200ca87072ab9eb2e84e48a85bf7095bc9249a61e4bafc659c0eb75

    SHA512

    3b7525ea0d8a59aaf7d77403cf349c3ce5befd89a084efc762925e6334a18b5b86a6c0cea995eeaface42ceebd2b0cd01d099d4b7c8b6f5c5f092bf06a27b1bd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    45121d84d438e50b5c2b3afdb6be1bf4

    SHA1

    71c7071a69b303ac756b5eaabeec4a24b9abe0b0

    SHA256

    0450a42fe6c01a65cce11ae1a013d6aab2e0b0d7a12477948f8d2b9f6c2d20df

    SHA512

    e98b56774654dc1cbc56fafd973a0812e14c23de8a9fa8654f81665c37ad365753b51458c9457ab84cb90d1c8d61407aadd8ef6e60e3cd1f6acf431d25e6417d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    de2504c8268d1391b7bd63f0d2253f0a

    SHA1

    ff9fc7d94c9f6104a10b527e96b3fed74e5d0162

    SHA256

    8003d59e254a84e41108820ef5c9b20b7795ee94e0e1724a18b134f1570875f2

    SHA512

    366b5f4276f5ce48b56081a2b0249abbe631a1405b9eeb3df0667e65d9aea2dc3b09616fe1da204cd3beb18c81c86e1be6cd5bad4b682e9bf0eeba24e88e89af

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ef0136a2d98695e4a85d53d73a995020

    SHA1

    d768670b9a8180d2a8222e32561fb9fe5d9fe312

    SHA256

    56901d8e349591d83f1396b692ade0970ece65edbf52e7f0bd91b683c1db268d

    SHA512

    0983c58f86a162f14f63c26449333f8da0ca5ea7d1f80bb3757f41f156a56d56a21c826991dfaab59e0ef77c12f41cb702939d1a9ad66f7023f996974b156062

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    502de636930ced0709442d64683de23d

    SHA1

    ace956c6bcc1ea22db87901dd0f9cfb01f089f9a

    SHA256

    2be6343d7cf0cf739b9c074cd3e23b6aefa37c85d19524af44a716f29872abdd

    SHA512

    0a22d363aeaf715b987772127baba260d39651f4e5a235374a8380305a4329b6052dfe8b6284e081f531fc75c51fc5d21692f8dec9b0dadad3959524edd66589

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9eb735ef3a58bc5c8a3a46a535a45f8e

    SHA1

    9cad0159e6f5d9cc0cf2d481a5ae3bfb22381fb1

    SHA256

    6665b20abe0f279c24157add700c8703ad5cab7795db7cd562313f6332f0a81e

    SHA512

    367fe78aca41af1c8087f650ca8457a5d89ebb98de140d140dfa370b94bdd6254ee3b874e4c9803f5f69fc25786a2011dcde2e594a68495777fd5dad79dca57c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0267211a8c66d9e5fa0eb49a697fccd0

    SHA1

    c545b54011602da9db55e712a0f3970ee1ee6b10

    SHA256

    59f32ac74b824c179c1fd47390d97c92a56eb2c9ff1b007ae76dd9e361eeb7aa

    SHA512

    3fa60595b05ae505cd8e017c25070b6582d9851de80678e5de86feec70891fc1e1370a57b7500f19d36d0b16cd1be2167e99547ba8909236c982f50e8275eca3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6507826a154c9303d5eabe75fe87969c

    SHA1

    0315e50b7257c12c929dae903c44ded9b47e60c8

    SHA256

    fa7449e865159465f4fea4ad9096fe7be9647cef83ac2b9f3c90efc090554d59

    SHA512

    1f283f3a18e204ae067ba7e40d8c7f8f6d59b70d0edd454202c9eda522bd100d4c0cca6dac33ad59b24c08353ef2f3f6b9994ef2c4bcd8604e18caad9c5fdbc8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    82a5ed3080b8860067a67eb704f34ad0

    SHA1

    5db0977fb0a2149086ad7db7341d178f77dc7af9

    SHA256

    b15f4143371890f8b054829868f70e2077348bbe876b1dd70a5317382169551c

    SHA512

    35f9c078540e1d55bf72089c1f2f3acbb51aad941ced0e0df90d78d117c90000726a1bc3ca0f2c41964868bc3e9793c9a74018b1f5aad84c3243263c0556002b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    97423b31784884a776b2f46b8f1f4742

    SHA1

    2ffec1daf72f4034a6edbae4126c59ff2af5f258

    SHA256

    d9beb049dcd7ace90911d27862090e11772f835e0cdcc1d50f9fcb0bf7d1a0b5

    SHA512

    9b5b03e17d6ccfa297c8c3d3ff101c1c949bc6b85fe5f397e1557f53fd2faea5605fbb9656cd55f856220590e5412c704a1c4e48d7a9dd29c766b23460c0b018

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3338de1ec44223f6b62ab639073823b2

    SHA1

    3e3454fd8ba4d3d413da9a81a854fe726c2a9252

    SHA256

    412af877135d4084c4f36b94827e90989bcd8b967349c4f8c93ead1be4238537

    SHA512

    2cb78b2658f6d2627094f33468159adc6716be284fc0e889bd1bf9a15d533de7616c00da43856791194a5788a44283998123d6bf56666a8c7d02c018032f6643

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9923601085c844930b4b2f1133707c41

    SHA1

    183d36b0fabd25a98e1fc92b85d98ad1117909d1

    SHA256

    4e0e974e133975cdb88fda8a2fc199768f428d5f17c96dbcc16326113ad83289

    SHA512

    ee9daea9f9be07c0688fbce86e5127a218711c988d79d8e272ee5662672e79a3e0627e3d01a01b6cc0683949fec47d3eb293199f2519d42432b48a7ae7e260d3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3ff43420036fb7471954a1573a27f511

    SHA1

    4a4457f39fde650b8a1670d7e5e2842dc07f6355

    SHA256

    af9625a619807be01db600ab98110b1a72662ff01c760fceac8d9eb63f194efe

    SHA512

    be671256820d5189027f747d0b22f4d7bacc2c5dcd4b0b10c54a6838e5f29359a8e2ec94d55edaabdc2e82ed9a69b81e6f5c67b5fff0263b77e60d9c192e534a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    455d3821c15c34e12a50e3f83635145a

    SHA1

    1d74087bae67c36cf0d9620e5218b8f86243f2ae

    SHA256

    c394b3b1095b63806e42b36c7f45d48b8f522d1dfece43d0b013b710bd09e2e5

    SHA512

    f9e6bb8cf6c496468aba68dabd41bbdce70b3b63c1ed86f07adc57c9679749ff1b5feeb2557d883e3de41a7a7ddeb73d23994d6812b4a46d5ec5ba3dbd6db52e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    71518db1915ad7dcd92f39bf9ff46a7b

    SHA1

    9c5bc67a4da9c8055169cfb16248a7e8e13712db

    SHA256

    44f6a6579be16d20cfdb4900e30fe689b80e282cd1e5200f3b4cfe3c91fc96d4

    SHA512

    ca508e233440c1a1993310fa24914c56b810de769f0bb8e55d700542b98dabffee83b8e98b72b9757f8e6133ad1a75964f0611b087747cc4c4350aafafed8e14

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1131a25ed76e2958415aaa63ea38d525

    SHA1

    ff5eef915f463a5e43971f6004d2b6ea2e009aab

    SHA256

    56783abc26835451731e43f47a26cb661da93304c0ace1c4045fbc7042732d05

    SHA512

    32963a70222e52f10b4073b08a5caf313190e1e05eb66bb6b1b6f4e17dec3c7f076048047c3dcd82f0fb62ba20a8d59cbf7cff112e8951dcd5664d8712c3f1d5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5053d3792d0a0b094f3c55351781001c

    SHA1

    a31e2a97be73ca50049184ff7f5a0a54faf70ee4

    SHA256

    6a2d04e47a44dcae113bac6d145132f07e1c0a1355d95ab4d8288dd6fdefccd0

    SHA512

    db4b66f1be859ebcb91de93f5ff532b02c46c0b5a14d2bc76831168091ffc2bd1ae0d21b4dae0068916d86f0d7a5e5c305c53125870c8fcf988b7f407227ca38

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cfa312ce8f80a6d1dfd83b8791219e7e

    SHA1

    92a04b7ff3084f3f1a1bde2ab64adb08ad9264d0

    SHA256

    84f0bcf2c99c1f28f14b3837a7926d176d6e1b9652409382e0ca0a99a2f3eb37

    SHA512

    ec1c5c847f66e094974c1a23bdaef45590ed40efc6c7814938e44716bdabaf40c62ee7a338effa036ffc53fe1560cd8318fec122b999b33443ddefe01ac526b4

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\imagestore\t83hqs9\imagestore.dat

    Filesize

    1KB

    MD5

    5c43cc604233b25886c92a668cc0fc77

    SHA1

    f2b429ef1664ea1e66f58335f330e49bb533dba0

    SHA256

    a29e1260fcfc5f7f43836668e87e9182172ad4a96fc9a18899f028c6e5039ee6

    SHA512

    2764de65bb2e918f414c3f93e00f5cfdabda7c98d13a8972519af8d509f8c8e4c5ea206a4c1ad9c645ff41dc07ef404da51098444cb481659f0e2ce1692f66ea

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\4R90HQQX\favicon[1].ico

    Filesize

    1KB

    MD5

    91abe01116ab422c598e9c8af72cf4da

    SHA1

    0f2815fe8e067d48537ad168225ab4674271fa27

    SHA256

    b1d7aef06456fe7431124129a28f0138bb5fccfa4f4161e3087de23c005e5edc

    SHA512

    a4d5b20c3014153b6b382c43404917bd2cb5bd2a59bb1e981f5a19eb7dbdec185ace288e9700428d24e5ac623e45d04905e706f0c45a1642b1aa6c091213c23c

  • C:\Users\Admin\AppData\Local\Temp\CabCD11.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\TarCD91.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06