Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    136s
  • max time network
    149s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    31/12/2023, 14:40

General

  • Target

    3a1e98133ade3d2695a67062fdcff390.html

  • Size

    3.5MB

  • MD5

    3a1e98133ade3d2695a67062fdcff390

  • SHA1

    2a80ce5bdffcba54cb22d52e0179618520f2f11e

  • SHA256

    bf3c0dd4a1f76836bed01cda27bd500afe211fde1a724a6270652ed3c05355ff

  • SHA512

    c9b6bdf100f48920e8a1a4acdf74fee5011757c17a45c20862047e104dc0649a3118c67aff1990e090ab3ac0abdfc564e62495df04eb3961b71ce3f9df505dba

  • SSDEEP

    12288:oLZhBVKHfVfitmg11tmg1P16bf7axluxOT6NfN:ovpjte4tT6NN

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\3a1e98133ade3d2695a67062fdcff390.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:3028
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:3028 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2732

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a2800f10a61dfef314e1a71a5c1e9af4

    SHA1

    5d1f2380b7709fa4928abebae3f34f3d5358bebf

    SHA256

    36ea5abd607acdf3a0848aad2db7e47596f37effd17eaa8c23086acf1dedd53f

    SHA512

    e4b556f881d9d84b6befec3522c487e282b758c091278113dbba9a3be2d00ad6d62cb71aa459b4a515c31b47971852e0a7fb7fdef26c43392342078d87accc7d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c1e09160adacf23fbe0a32785f33e976

    SHA1

    4d45646d4f734c4e178d616c817b5b76bc79797d

    SHA256

    0d5492d8f4860ac2173380f5b8766325ec13ea73c1cc703cf507e067f1e50bd8

    SHA512

    eeec0a392e6900f6a34fa1b6bc033341eaaae006d042d8bb5ffa4429fee171182d96eb3d10a4d0174252608248070bf4b4dacf27ae69a98aa9914319d8e228d9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f25b0ea7dbdbcb4fcf7f19d0a4e3a143

    SHA1

    5baeb1ed81cd4511ecadabb9284bf6114c5c3664

    SHA256

    9cd0ba766ca1637c8c515b5be3a54caf61fd30a6c83726bda8361d6541b7e906

    SHA512

    bac4e1a6b2ee4b0680018c814154007b76d3f9bbcbf5bdcae52e745de96dda52e848dd5894dfc0505bbdec2d42d6db3916b5cd57786ded1341d84d910c737e23

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    95554eccb266c241570022fde2fd46ac

    SHA1

    65a0efafbf3c332150a7ab5082b8d72fa8576239

    SHA256

    06ff4a242c0bb318861bb86e0774d11c0c1b7d315546087bae223777080b730e

    SHA512

    ff8f3ce289cfd63cef88baea2155c3714d7837d64476edb73bb4bf2086a246bb93124a6a97e1108cc7f6c5180a9a2cfe0c2071ea2f03186d5ac33e1b9a303a1a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3757fd94a519a6aa01fa241dbb5852b4

    SHA1

    4810c4620ad79319332d44bc1a5742cefb1ee1ce

    SHA256

    70d7b4e6679a9d7c4616dcf4474b09f10b444b5c181725163030e50916960186

    SHA512

    60ab07e6cf20b1c3bba9f90b880f4e3e27887bbe8d503ad3aa92ac995592e9399d35560b9f4f142294ab3fc76bca286d89a87a059742356bdb4629e2ee379bdb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2de71ed98355615dcd0bbdf5ac6b313b

    SHA1

    f775e147a509012a9ec5729a722fee169b5d1671

    SHA256

    d237ef7e88635b2c76e9b498f46f8b21eb2cabb6725c64b9bef32ab78cc5007c

    SHA512

    b8ddeb8bf21fd45f2601db73957d64204a02f755a16884038d35b9d6321b8e89c90025692886c1556f2d797dbe82d61a24a1a45a0554c7751d6d0365299c9aa9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    16298c4ebcb5101c1ff335fdb054d169

    SHA1

    9fe82a64703c8938f8fddd3144683a38438c911b

    SHA256

    48e5b22a89c6782af7ee3e929e1fe6c45a02f31008a8f6045e521f531a45a515

    SHA512

    670e1b0c6dca0f505c09933233c7ff89036a3774dab637f51c56f93a2a9bf4753474dfa558a6938c652c072ef69952c47565800fa29927816b06f26a4fe3509e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b4517e0b37965c64228a7a40977c8d0a

    SHA1

    b8c085614c87d5643cda5b5c4083910eaff31926

    SHA256

    7b2ce51759ebb905cabc4a3e8c3b64d44d197987f68d16f9370b7c9ac638048e

    SHA512

    e5b5f5e2f5b4a65b0f0b75551506a036c333a5daa609ee2bc8391470c3641c220cd534dee51aaed9e830a4c51b5547abdf65e69b45a3d282e6b1074085a3eff7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d5103b364c17dce7fcc6e9de0946e665

    SHA1

    8de21037586ee3c1e583ab56e9eb9b5a483a4d37

    SHA256

    95826254b3022af880f7984f9a1b9b66abf6e419f4cd66b7e663e40a50fdf726

    SHA512

    6f810de94d8193de92a22522ef7213e1adbdf1bad3f96736582039a2272498155f93e1bd26ca753a7c5bdeccdc9f5ac243334e6e1578fd828c8eaa3182b81d05

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0e634a31ccb8e5c89ce19ef45bba3069

    SHA1

    cf75359bf3236f04510c02b7d532457aebabf545

    SHA256

    3c8307975e1a9b9bdd3616e768eabb66f78862c1f7a2d1c1dd617bb63fe9e30c

    SHA512

    4989c867a8b11c2edc41a7b091c078bcb90124c4177ea651cb22d9978893a66347cacb5318e87f8de6f3e2f87482ad951d76cb1eb9f9890b8ad971aafb60ffc7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1ad9843cd272e4b7146094356ab77f16

    SHA1

    9c374f71570c362db425dab1ec72ddd630d821f8

    SHA256

    4df8d9418aa66bed0343bad6364f2d3f840f69f57b973dc4bc3786b479531a36

    SHA512

    b03e5944dbb36b0ec29980f12d5901f5416a82483804be7bbe4ba98cb50c58f4829a98bcdec8cc09c0d1a1bfed0cc723f6887d7cd70b6d6b182ea3681017dd0a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    43aa6fb994ce4b5039a072bb5056741d

    SHA1

    b78bf2256960b8383207d463b59909eccb7526c6

    SHA256

    a9651a6ecdc05e81202616dfe2bc50fff98cb7a8e5b8b73fd6014ced5f1385d7

    SHA512

    fb1ec56ebcfccc88e41e9f793b5c34e0c5018db009a1b6beed58acde72224f56fad34a9473d460a7b40ec771c80499235ef053996d081e2fa04c6ca9d1d08930

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ced9ddd9aa5afbb8b38cf4b21a1891a5

    SHA1

    1e87255812b4b02760fe92c7e78ef3acdc98e0a6

    SHA256

    4c27c81540cec9151d377a924a397483ef5c30944328df4ed44ce98f363a3b1f

    SHA512

    5991f4fa0dd1a11f6d13b3e93213503eade4857ad4f55c89b3c35d09ba1105039680a302f508ba7fb5f0f387eb64eb454c0efa3bfe44e46c30615ecf82602d78

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b6aa9126b78bbd96388b43f892de3baf

    SHA1

    339addce7356b83fc8d2edcccafb733b2d65d53c

    SHA256

    8144247b9e735a582a791eb5d7d69c537c7289c52af71aefb4e6ead4ece3831d

    SHA512

    0b22b4537be64fbcc0a1039c346b552cd099e43be31ad8353877c677a9451d3730b116878d312e2502728389c60d19841b3e14eb02f150bfa2e00d1f757bf8e6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    119427256919cea8a2a3cdf3ffd4094b

    SHA1

    862a0287e7282bc69b055e4076af2ab0a951a53c

    SHA256

    8e85d8edd0d033bb2fc8b09e8f851be9975748fbcad95cfb425fe4fef8c443f4

    SHA512

    80b945084875cfccb7673e32b8124dccbabc08c626743735464dcb6bb8acbf07bac7773a180b64c0e43a9be073088aee27d935a37e3b24af381c972a0ed84fa2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f469eef4e71fa40792f5871988bd6755

    SHA1

    dc389dfd8f8163311cf981a21af666a69ce0b6c5

    SHA256

    3ed7c9515e4ec466788f6a49009aa527c6fe42298f02492ff66dc3fc16404e13

    SHA512

    9780b6b0edb726a527be7143e4e8ad6e20ffc431b8ce883cd2b50583a5a19a6e8bfa983d032dc0b073d495ed139add1a846c9eca9dd07f75d20b3ff4a5ebe437

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a359b74af9c31af158daf2945b5d36cd

    SHA1

    d817af2504849cfd68a58eab84c531a6ff5fac37

    SHA256

    a010e5d238c050e1fb18d3fe1362fe4610d3636ede44750c7662055e22cba280

    SHA512

    7d92c19c7669d4b6b236e2865c5b40c9262c18810e82cf30cb0b578163aa5dd2b0c62ee6c09a7266e1c4921a3e8f9cde8117d6107c00ca59defe6d0dd59a34d4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0faac009fba3e3fed303f8a34e04b6e2

    SHA1

    c855df9b8437beb6061403f17d5b210f681afe5a

    SHA256

    0e946db234f39ef27793df7fd16a98f783c281b7ba97cc0548e78f72970ff410

    SHA512

    84fe3f759455563f5706e4bab03e594803f50edf24689a7f397a938347f0d58a0438e42d42c19e736d86330f551e78cd17db5dcfec23eed881860768c4731d48

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8b0586b0f08020c4618fe49440c0d6b8

    SHA1

    63ccef506ffd25bf947d47d574ccec2bdaa0ddba

    SHA256

    58e114cad5f77cd99ab9c6ef1c9b6be6cb5554fd9f620726af6d3f6d4f18d0ca

    SHA512

    d272d9fa1d0f91ed9f572a44b986ee26a51b14fd98822dd36b2a04256bb83ba26fde1b6eda52242374a620a51ca72476f70a533c147d09080d5f54d295f72662

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f3d8d652fa1b986994d4fda7d57c607e

    SHA1

    3c100da52acd5fde44c21e9ba4e3a0635ffbcc79

    SHA256

    e718957b1444a209cd50d5a80e9655ae654f7d7ee83d50b36523655c9e9d7262

    SHA512

    90b5fd234f2fe40e1cf56c27a8c2298872a8b8e4e0ac4953bb78a3123defc795ca47ff08f9436fb0861b63c5fcd9b03acfd2148cde310d9c3bddf88a722afccd

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HJ0GGVIM\jquery.min[1].js

    Filesize

    83KB

    MD5

    2f6b11a7e914718e0290410e85366fe9

    SHA1

    69bb69e25ca7d5ef0935317584e6153f3fd9a88c

    SHA256

    05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e

    SHA512

    0d40bccaa59fedecf7243d63b33c42592541d0330fefc78ec81a4c6b9689922d5b211011ca4be23ae22621cce4c658f52a1552c92d7ac3615241eb640f8514db

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\M2VO416U\beacon.min[1].js

    Filesize

    19KB

    MD5

    dd1d068fdb5fe90b6c05a5b3940e088c

    SHA1

    0d96f9df8772633a9df4c81cf323a4ef8998ba59

    SHA256

    6153d13804862b0fc1c016cf1129f34cb7c6185f2cf4bf1a3a862eecdab50101

    SHA512

    7aea051a8c2195a2ea5ec3d6438f2a4a4052085b370cf4728b056edc58d1f7a70c3f1f85afe82959184869f707c2ac02a964b8d9166122e74ebc423e0a47fa30

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\W79VKSP8\jquery-3.1.1.min[1].js

    Filesize

    84KB

    MD5

    e071abda8fe61194711cfc2ab99fe104

    SHA1

    f647a6d37dc4ca055ced3cf64bbc1f490070acba

    SHA256

    85556761a8800d14ced8fcd41a6b8b26bf012d44a318866c0d81a62092efd9bf

    SHA512

    53a2b560b20551672fbb0e6e72632d4fd1c7e2dd2ecf7337ebaaab179cb8be7c87e9d803ce7765706bc7fcbcf993c34587cd1237de5a279aea19911d69067b65

  • C:\Users\Admin\AppData\Local\Temp\Cab9A1F.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar9AED.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06