Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    145s
  • max time network
    158s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    01/01/2024, 02:42

General

  • Target

    3bae56eff3219fd13904561a51c3889e.html

  • Size

    46KB

  • MD5

    3bae56eff3219fd13904561a51c3889e

  • SHA1

    f6d16503ad0bed76043b416a5a273904430aee3c

  • SHA256

    e39bc82ca16e0a89400c2e943630ba37d633fe896d579047ef61dd6cf3022c2e

  • SHA512

    f2d50c22360992933402b984510ce9a755bd91de4a27c3d76ab77fc2a9ec9542aa598526fe5d0acab0a3c23f7107e83136d0a4611ff0d849dc83fd8993c65568

  • SSDEEP

    384:sNlIcUtU43DGTHjZLS9DaayZLRtG9xiTGu/JR0htbpCqYHtOutBkxTSvsf0dkNeb:hapIg/JRAY+S0fWeZW4/uiFkgArwaxLZ

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 28 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\3bae56eff3219fd13904561a51c3889e.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2480
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2480 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2268

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    03afef38c2e3dfde177a980d33b6fbdd

    SHA1

    8e91b15fff864c9ca34a4179540b4543ccb6511a

    SHA256

    62ee86b6e07c273bf38729d28f5d6f1b78b7c1d5e70dd28b943b20305f006dce

    SHA512

    84bdbdc6e28112a4db687650678ab9bbbbd5dba04c4d4fcc7241e6d912a139f5f59a88ef0230f2898beada1ee7d91ec27a0e12e1e85e0c4b352d65e7577d658b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9edd018145ce6682cb10b8007b29bebd

    SHA1

    42ef18449cbab122cd289e0b90f39599f3d38e49

    SHA256

    c52b41d68b528e531fda59f07e0d5a26294e8936f04557436d485bf876826eea

    SHA512

    e08ce24a6d84627ad2092a1a2f58e0f586dab6bcf1a6394bec871c9fc5bc1d28c653fcbc8b8aa1afd515690df04cbeb4e46a6fc20dbcac27724fda98864faadc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    263f3e8c912ed932d2b345f4729d96f1

    SHA1

    5dc4e6460833c6d1caebccbe40c6af0ec79d2be8

    SHA256

    684bd297bcd872b794b4ae05eb9263ad986bae02b1265da0c5337efb6cb93fc1

    SHA512

    9507e35c31bb95acc4c98a6a6d1650e7107b923a1cea21d0c68438b20d9af50ee31ac29e2e199fecca96f89cd18faa5a007a7cd7a533105cab2d6ab9bdf6f4c3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    99317ac3b10207d3d1f7c09d23041e71

    SHA1

    765c3f5044af30587786935ec9f1a60c72e7d094

    SHA256

    b6814024befbdb43683ca1c539b46fb66ac0fc5f98a58d038489fae275be2bd1

    SHA512

    1ee20d9917b444f3ebb6bf00f7896ad4d700295ca4e4ada5b104ac645a4a336c316b6beaa1d06be8646d25aff861a4324e923686017cda2da6d61c370eb982b9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ab5050f974a811bdbb0a998a34db0068

    SHA1

    9957ec664334d81261a025f1c651faee63a8ec39

    SHA256

    04be5b360e646e895ef22d2e7ff18d1e5041d4a718a69020619f52ac22daf173

    SHA512

    a28346ec78471f322e6cc074ad383c5e09be90bae1210dd1a3079f3f5ae0fa4c40656e13947729a6a92ca4a2f89e43b2edfe088bdda7f56e3bcb7b81d48e6ee3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0c78d5784b34ab5c502fc6b44b7bef95

    SHA1

    8b30fa49dc8aca32397f0b829763ac58f12a6471

    SHA256

    aeb88e5270a23986caaca4adec9d529eca849c6d1da65b6336797a9926084b9a

    SHA512

    7e871e46d82f330e916e044c5cb07791a5ac95d4422b3484c8970481cabbd9d5ca827531c006d377b9b36d664886d366572287f0daa5b4c2024d102338b832f3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    96acc5f1d829050cec46a7009cdee8f8

    SHA1

    1642f3121aceb3e751d36d60e311125ddfaf854b

    SHA256

    8145470a2346048c8f6f31aa8173906edfe3842a42879dba7014399129ddf1ec

    SHA512

    138b918f44d60c4d62a3c16034b7e4a97d630b380b6b60f5ddabc471f3de94fbc426410912ae8dc47c03935c37b051627215fff369dd99fc8127cd8fd3ee44a6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4818f547e25b7083b849dceb3f9f4f63

    SHA1

    ad3ae735aae44bca264d7cf45d24fc47a0a045eb

    SHA256

    3391a94cda4de6d05de1df8c3bb0bd807cc12117aec28b16410e37a2cdb96a51

    SHA512

    8c2caf9d6c3070bd6db834ef78e0ba2c66db6273fd707e6cb431767f043ce6346d1450f6cf50b1557220a13732f019b86c7b51f5b3827df97a11f481cd7489d4

  • C:\Users\Admin\AppData\Local\Temp\Cab6EBC.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar6EFE.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06