Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    144s
  • max time network
    149s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    31/12/2023, 07:07

General

  • Target

    2cc061478236ce68203d2be7510e3514.html

  • Size

    56KB

  • MD5

    2cc061478236ce68203d2be7510e3514

  • SHA1

    9c7b086667d278c5918e72b6305fa28e045e3e7b

  • SHA256

    9b5fdb142d185d5e7e6c0282aa65b3232badfff085e71a0cb6f8fd0b037cde6a

  • SHA512

    4688e5403d49123462607aec30d40a00cb8928db482f06107a3a5deefdb7ae8c863f8ace741b1e362dd4477d18fa18a44cb9abb49133ce0aa8cd319dacc79d35

  • SSDEEP

    384:MyLpPKk3JuIjlHss6aIHvXfCIoolnvcITqj0Jcv8vj7wCRhCoIELKEj/KO6DtRrw:zLNupHvvCIoo1vZTw0JN7wCRhf1+RLy

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\2cc061478236ce68203d2be7510e3514.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2184
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2184 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2116

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    038f81f317e99452e29cbb921c0c3085

    SHA1

    c270e29652fbf9a4c52693119c9bbcd833defe0d

    SHA256

    b02fcb1a896aa56ce7e350108d237385dc55e204ffb9db68d5cdde040d939d31

    SHA512

    a6ec707956744bacc41897162643d748b020d53bd0ab6f2d18234ad7818a362435cedb3a4d8107235d5b97c11d1d80ba7366d50271f84964614d600cf8c3fe66

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c3334a49cc3b5915a4d163510b63b0da

    SHA1

    8f0c7a8481f0f823b88db5dc8b5accb91cbe2372

    SHA256

    eefae7782f285dde0d5254fb72311d6296f0569524b4bcc54e95f7e7eb6b5537

    SHA512

    efa2b155f0d5d69caf4a806116d5b4ef1880f5f1ab1e3686d59b9c5ac3845c001a9eb62e3214a1af097662fea008117b3c4107cd8ab2a881296bdd10eec22772

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3a2054c6e2a69fedaa5f2aa2ece2faa1

    SHA1

    004b99892994d7d7187533729389018579863783

    SHA256

    daa82ceeb7f9b90fd3fa331202826d30e4c0511aefe8fbc17a8c649daba9ac5a

    SHA512

    e0acbc5732989b077d3886e129aafdff948dd469347f2d64d2aae71184cd08ba159a742619500bcaabd13dad935ffae299b442204582c9dd7f4d2449900e1a60

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    dcd6e6106b8a2d2c87fcb97dda661c8e

    SHA1

    1ce548f3e9a3a9f25e359349db20a751191322be

    SHA256

    80ea5359e97b1b0babda548815d5cbac8f8fd26e5d5a77e775e70773f37783d0

    SHA512

    9d448002778cc5ab4ffe859df4368a9f4e4b02e35aee26a9e5bdc3e3424c29397c88e0dc840c03113c99543b8b43a6760383385bfd5de1521be3836f883fa071

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7c4e3b05853db714a093a01c7c20f07a

    SHA1

    231ca2b8a9439656eb1f0ab843084ee0f6b02bd4

    SHA256

    3a49965ee919fbbc6b51aa5822f2c792dff2c8678e88c706bb142458f4f35453

    SHA512

    66e0a1e369ea7678fde195e5cd8a925b3e76634706d8d22c033ea03c6d29b365102f1927b40f6147296a9bd8f04fb0786ce400176033445296826fe144c429ab

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9edbd47dae1dca771750e6ef1b5417f6

    SHA1

    d8a32301c6a3db2ea755913d27f4518510fa4ad1

    SHA256

    8975c9f6b9a34c6245c31cdf5a6607d78abd703b79d4fb86b950671105fdd71d

    SHA512

    5fdd82543bebcbdeed33bce6860b03c35add92d49d605931606b755477c32bf289dd6c27d71a58434a062a5a42afda00e4bcc1c2a5ca015fb824fe0906a42aa1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    68e48204f3988fdce8514cbe2937c00e

    SHA1

    e8276f2528fcdf58887bea201cb6eecd51bd90e1

    SHA256

    e79bf6f94f1765316156fe1f67369c7abdaf84396283e7a7249e6ff9e95f1f70

    SHA512

    53985544c53cb30ceba7f2da0fbd84bfd2987051646abc44c58736fbd5d14aaa800fb6b206e5e96636b775b21eaa94fd784923a483ea6b3ca358cf89c7da0e52

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ed8c4688601d078a48385757ca26c586

    SHA1

    5eef27251eb84bcd5a6ba23e35f1bf357cd235cf

    SHA256

    8ab8086bb27fdb74b18655de1037b47d4837cb4a57cd6ea39d5c66983e7ecc79

    SHA512

    ff2bec560bb0c0f0300b06176d5a65e14e63a3d448538af3ff4e291e6900a9983e0a480d9f3cdb97010a67a43d0c21d94bc52e3a81cea1ffa11a5690201359b4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5d6b3195ecea8c5de8a63b5072172d91

    SHA1

    03eb68a93fbed7e58af3cee0486b69ecf2eb4575

    SHA256

    f37a8371e419c9847209f81056c54949e7c5676b2376f21af71cf32fe50fd57c

    SHA512

    1e8c4dc6caeb34f1ab9557bcda654a09c2a96c811359cd00e67fd5662d70121cf3341f07f533f9b4856e3a91455733b07d60539f7d6fe83c48b2aa0c6f7d577f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7957bf0cddd05f3b794d1546633069fe

    SHA1

    5e5f06b3464148509918d7db484ad7b9700c153f

    SHA256

    c95cadcbc5940f358fec01dfa0cce65ec0eccfb623aa8a5943ebafdc0d550ba8

    SHA512

    8b94ecccde2a8d83ac4479005f07e4020fcd4cd23e1e77b6fee281e3e42619bc6593aa087c89bdfa1253780e2f13a521d32524ef1dde75bca5506cb1cf6c972b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0fb2301c22ebb34e67233ea5327a4806

    SHA1

    10aab6a4496cbf788b4f22c8b6c834bccc81aedc

    SHA256

    2d77f075bc2d0081f94bd6a3cbd0bea7439113e0ec8f7e31b65af6dc047351db

    SHA512

    4a6c9d1d8da09a91e0e9de7e0dedf325664991f202d25e4d6b3662051fcb4e196023c57efe798801ff034d76346d196228b58dacf1e2e97109bb85492b7fbfc8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f2c775457df9f1e64e21b78dc1512244

    SHA1

    984d2faf9380211df7b8532948861888fd42cf15

    SHA256

    381883a32fa274ff182ca4752f89d302fd717a97142754e9fa54660a57155608

    SHA512

    05f42946429ac9c092e53e6418b1451bd3e8ce618ec7aeb98fe93d0dc01faa4b1102071859437632f811a604c584ef0dcd42e21dd118892f108242e672c1b0e8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c258b75e982764e9872de13ad649fb21

    SHA1

    4a7005c8f43cf32fecc952774e6ccdaac150e883

    SHA256

    b7fc42fe814f9d2aaf1efc84c49840c01eaa3dd2228f95c059062fb8382bf932

    SHA512

    c113f3b3d808dafecef664b498c4beae23292990444cad2d38f9278725b246173d74f36c5e4af091bc592702ee871d653e9b49133c124afde481e3eb15a0d9ea

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5021cb95e4ad03062df92ab4f110e9bf

    SHA1

    8db5beeed502973a8a66472058986abdf8b3ef14

    SHA256

    e7ccdf96a43ea72430c71b43780a2e69305d15dd8c16b71895f1f5c54fdeaecd

    SHA512

    092e5df148294080f6aaddeedf28c6981dd8b1791d0d712c2d7093d266fcdd8d30847b6d36a70f3cbee6a443ac552335cef04b937204aa9f1f918bcf93c7c50f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    aa9aa22dc6b2f267d48b98d73f28facd

    SHA1

    1bdc49133903d1c9e82359645bec717692af3b13

    SHA256

    8b06252281ddf4a1df02fee2d2d56679541641126d30db2fa63c73c9bfc09648

    SHA512

    c6cc46b194a0c06cff48516b52bd7db920bf0d9f66ab190734c7b1523ba14b4b739a22d8667a76d3fc7c89e698b8aedacdf2ce5d96bb732ca3c0974d44e8eec2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    82c5f738f13b4a3d4ab63257aa24ada9

    SHA1

    7df6c21f3ebb5c4ade2340f7351e574845488aeb

    SHA256

    f78827a218c00b717211e8e00b17e895c0fa3bc698478f7d6467ee78c0d4f5c1

    SHA512

    656e6caefe68ed945642a4710205c98298a7cf36c458070d4842765dbc6e51acc87a57fd6229e6f26afc28d3eb90327e276074622681b4cf670a055f4e533af4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    986e73218b4cf9a039589778b26b5f24

    SHA1

    31d543af16c2da1b23955fae7c14bcbaab7ab61c

    SHA256

    03e3b380572cf697feedc66a55f50085a052e14463f40d139ad9b7e1ba45271f

    SHA512

    37a3b8593b3c6f495d380acf55a4581c5e6892677dfd97c548536fc1cba7d6ed9b380bcd8db577a6d0e8e55cabb216248a4b063d20ea6049bc15685598bbdc40

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c6e994ab5c27cd1bc8e9ba9cca8c0313

    SHA1

    3aeca61b04ef270184c560cc8a38f36fec0e36cf

    SHA256

    6fbb58b0f1f762a1d82d643fe325a09b11e2d6c7687e9bed500d3b5e4b9c5af8

    SHA512

    68043f071c748dd456ab0d4a9d3bfd9df5c6e310408e1dd1b4f1a6d74b3e7e2f89c6ac366a2906f69179b23484eae86c8078c532b95fb7d4ba0bf2e7042304ba

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6804fa9db6b372da03af69a46c1045c5

    SHA1

    040a16c75fc5852e0b3d6b20b69c822af940f683

    SHA256

    23fa799415ba94d34c2cfa75d59caf42616464fb3ff69b47383d7b6fa4f8bcb6

    SHA512

    4177a4edfbac78a0f27440d86ca931828fac4f4bd1334082ed81467ca9a7a2d8b73c3a79b909bcd676bbb3f8788d226721b7dfa815e9fb228b46e726081b9bcb

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\53STNJLW\platform_gapi.iframes.style.common[1].js

    Filesize

    56KB

    MD5

    f6140cf2e81a9d5b9bc96970fe1946f6

    SHA1

    e18cb20a08d0c13d44b72e36e9560aec2187abce

    SHA256

    68cc8a99c8ed5cc0eb3aa2146fd34bee0051bfd98faa3c03b83c78b4a12a8bd5

    SHA512

    1f61bf7228ae9fc1b36249223f4ca0675da05beaa6c00b28b7fff500e0527ee237d139eaf6793ece67f8730dfff0207bf945a848795aab7c57301433449a8acb

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HJ0GGVIM\cb=gapi[1].js

    Filesize

    133KB

    MD5

    288c5ba5b7001fe841c32f690f62cc93

    SHA1

    29aba9d8e4f7cbe25fa5e64b9ecbe256e51fc789

    SHA256

    c2f33dc18eae27d4e878bf837dd97f1bde5151e44b0271408535bb93265b8c52

    SHA512

    e375d41344a086d35accfb02bb1f91e2dd383db032af387fc3d6b1230057cc5e432e9b2cdd976e51425b4f587391d42f4d9d857c2e6f11e822a65edcb85f1c9f

  • C:\Users\Admin\AppData\Local\Temp\CabA279.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\TarA337.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06