Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    67s
  • max time network
    158s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    01/01/2024, 08:41

General

  • Target

    3c6663f28461b594261de56e9b354352.html

  • Size

    134KB

  • MD5

    3c6663f28461b594261de56e9b354352

  • SHA1

    3d35819c3b2fc22d1e74c3b6320580b064e28ff2

  • SHA256

    ec012d95c418502863b104f5e3af26e67efd373eda304795df7e5ef7831b26d5

  • SHA512

    c4e87913943f78f0a2e77e44a15ce34462d69e0cedc030edaeaa78a90d37bc43fa2419b8479a6313ea8c223a09d0ac6d52170108f0f182abfe0f4e3ef3f08f87

  • SSDEEP

    3072:yMFnPTpnF+i1WY/8T8LJE2cyhGCH1hUzGHuVp:yYnPT5i

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 32 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\3c6663f28461b594261de56e9b354352.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1888
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1888 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2336

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    1KB

    MD5

    066f25f02e2b2ee2af54544028f9dd37

    SHA1

    9167983ad24f65c762b7622a8f43e8a218cd72b5

    SHA256

    b208bbc90869834e2fe53ae058b5ab6c200f5c5a00d8b536989f65071568be8c

    SHA512

    d79e1b28bae5f2026cbc142aa0ee78552d20b477ef507b12ba36f1522c7be1b20b4d0e218a3755537d5610ef0852744e673149944f8b337ace006280e71c2beb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0950dae3c0194e47a441812dec9b6b73

    SHA1

    41c1e03e9ccec31508198da96ff1fa3e5d165d24

    SHA256

    a4808e37a03a1dfa3ff9f921f99d808d98319808a6958717389c2819767a5a07

    SHA512

    dc392fafa04c5a3299312e79a051b4a5305eede060f5b402ed949a3737f3591bf28141c97bc2c6f49895f231836191d0a25d97dddb1f7ad72d388e03b71ad26e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b53c45ed6b0e2cc52b07b45f6d43b9fb

    SHA1

    04fbc9f67ea03e9e79f43814b94b436ef1226904

    SHA256

    2a8acc6610a2215ce846d9c5833259bf51b64fd7d9974f6585eea8b32edb4a9f

    SHA512

    2c7e5c346589a60cb814357f6948f9ead306d872d41fa76f443643b3427370e41361d1762e075c19a0400d34060bc779f23234f7d74c75b5b7129da8c35eb0f3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    eb086c888c554b67c3474e5260144b57

    SHA1

    ea5ef94117311eca72c0e3740a6bcb2bc02c3b44

    SHA256

    0a8dcf2c5467151646cb7e64e3580a07c84f88cd21ed297f122ed3e69f6ac8c3

    SHA512

    393670bd51b24b7dad686909d228a3f2887b0ce3051e9b5e129ccca28c361f75c8ae23c558add46ddbc57ccd31cb04f7c9b2f818529b6bc2a51f30e81fbaadb7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    01e4541cd4b1903203920348fcdd1c4c

    SHA1

    8d2ce6fd98d1e7e8982a7c0ca1b28fb1ade31de2

    SHA256

    7c9bcb627f49abb0639ef84e6b9d1b8a82c2bcb999ef292cd7e5855e11874422

    SHA512

    c0101384b64268a967681e0e3a12e7f554270eca759f8593095fbb3782bc00d39d2fb7eb9b32f7bdcedc50b3593ea785364a3abd2244fa96ac517f73041131b0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c6f27e61140d39fbf7623ef28c4b85d9

    SHA1

    4c351f0494497b0bc36092e65a96897122724d9c

    SHA256

    785ee66d0bd8d1edd7c3be0450a49b352a693da5cf9304486eb056fd60568408

    SHA512

    4aaa312917c7ed1685d0fb5f6bdba1463700c36e339c3a73e974e9ddd89e474db6b871d203ad73f98728e9d720f4a227481c3924c4a510cd3c5fcda8af4582e5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4cb05347454e8de1ffb5fd5cb72204ca

    SHA1

    c9def6387a82876d6b53611de68cc95cc89e7779

    SHA256

    348f72782cc54614121d97e89f4e1dd0b4cab58ee95ce79053b16bec32d07b98

    SHA512

    01480f74e591f799c6e82e93d1457303788e23c584ba38f6e90a59c13c200ce5b6ded0d1342e9e726584e5a51489cf40c1002990c0308a4666b954302978ce97

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0fda5ad95d8255bdde517c6926f0bfd0

    SHA1

    03b448a2c47811b5489f6331dcf544c8ba4d52ae

    SHA256

    40c636f95441286aff4a47eb05725a2b92fc69229b8748e90f5ab4c74178b25f

    SHA512

    7b3b59140d27e290542496ae6b3e7e5bed9822b7c385f3f889afa39dcad885f116c0f49d65b2c236b1c2095871728e6cd7ee03eec6d86ffaa1779ff450ce693f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a500b842ff9cc5859a1263cea6a21f36

    SHA1

    381272ca82d4d9b5b2aa317a63a898c3cd4bb247

    SHA256

    ae3b894095b9ecc198115f76a75b43736fd96950c3d7663df5819e23e881b381

    SHA512

    edd9c7f96d12980a5096244026d03831048aa2dc9eb483a9b6cec47e30f34dc8da12c1a6e9df5c2ff5b10941f2622c45113616d44f36c2aa5e54c4ff05838de7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b652f38950c1f9f0ad35c877d1c14f0e

    SHA1

    cb9d749cd2ad9276850a21491c446e7fe0085782

    SHA256

    6cd466a0306dd77274a2bd552017b9e90f087d3ec9b7ada587b7d385400de0a7

    SHA512

    83baa7577a8cb5ee47194868f2436592adc9c869b9dd450635d4069cc75f65c25de033e1252fc2d47321029a73c68b93ffe1de2560d21b1e2a62b08228d805b4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    dc0de7b7903ebfeb382046aeaab289b1

    SHA1

    f8e0a3218c23209cf3f6536bc7325cac482bc3e8

    SHA256

    6109fa0b64e893c3b1f9f9e862c9e7f8dd0bafc3e6e78c8b89024366a0b864b7

    SHA512

    09226e8e88a48afea0622467d07f9ad9619b447aa94851ea9e00fb40ab11d888bcaa91f2727c466ce4d2ff16d1a630ff50dab947a6af4796194282989dbbd445

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ff0cbe6f8612c5f2d0aaa8a023999d86

    SHA1

    f8ba50931596360a8773aeda7d42b7c30bf967be

    SHA256

    46ac9b1d3612ca3b17845bf20cc3967ea71c2e27db5ffb1bfe7d7ebd79b74e36

    SHA512

    be288f11031fc204cd073a57e93198d4e9b40e21a10dff713a082be2be93a5fdca4bd70a34ebf67f59d9a761fe44444013c01f8d2f6f1e67519c56403f3da733

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e195d5fae8504ece918bd9cf3c43c7a0

    SHA1

    068b80502342a66bfbc4ed5029e96ab17fc4042c

    SHA256

    2d2a98d8f0623ec4dfaa10952004e408f6f8784e3237cc59084c1aebf73455c1

    SHA512

    b964629ab34d6f23e4dc80425e2a6ad46d3ca1030f1488b45c490c87c6c62694ee4cdd19293e5281c997021b417f51c5aba3dc039ce663372bd161d4336f545f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    27273a01a32d5453a73a927b1931e91b

    SHA1

    bde854b0f0828b19f07a8e3594a34a2936a8fdeb

    SHA256

    8aa299e24aa52479131a4544cb5c8f7f8bf25bb0fcfcd0622e0200058f6a3b28

    SHA512

    fe6870507e85706e973f5c40730a61800cff3a00dd623e4c2e79ef6672c2efe1a1f4b255d6f738eaf5b09d238b8e998ef4cb25d0ca0970b864dd61fec8160819

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4c9dab4625a78b465e00a72d6f68077b

    SHA1

    10f7588740bed215483a48866957b8ae87fa0cbe

    SHA256

    20015069d45963dda53b2d16bafda32a602d06a8fa4a2dd9fcf92a9a6cb16774

    SHA512

    95028bb281073c2d65a68e6bd411f436bd211b63fb265d28b71a410991bfb1f2397e3916b29dad3f6b19d0aa72d19bd313ad2be5d7852edaf7bb71a8517b3f92

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b1efa006f8dc11cd40343068f65a086d

    SHA1

    487134041ae2d27e5f5cbd4036e71645a0615527

    SHA256

    620e5336eb2e4ec8f399370ac87833e9c3c6801d210b566ec3db1187902e3b48

    SHA512

    45d994374d86f92446fe21b9f0a08f4993faeab3c79c0b2b7bf5a6a731e0339d256049f9186968a0fd79206f660c85b886390c23c76ff45d333931fb26183969

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d9dec5a9d3854968a87a290f0b511c9c

    SHA1

    72349f7c97703a7c2413e5bdae5f2a758df587a8

    SHA256

    abd3bce91f456b7fd3478a95d653e288c76936f51187251a6dc43b3505655d67

    SHA512

    24672ba8d4f7571b5552680f9b5957efa61ab9fb89ab74a053ec7ff0eb04dd4939e1034cb9a39ac5a4e067ae995c319c450466b6ba14a9ab55915d10553514ff

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    04716677af7bc993e6c163e5a1c85f2d

    SHA1

    1ced11ac47177df6437ec48e8e0a0299fbd78eb8

    SHA256

    12eb45905c27db0b580d7687a587e9102437b8b5effeccc289c00bc80ec98de7

    SHA512

    0992c34b7c08d54b55668ae36bf53f795acf825d8eb6e5588a1432ee9a61d8a1ee0dfca3d22a58c36ee401a75e00ad210a8eaa9938b49a522296a761e09d79b0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    db53b1dee24a4296d90c1e17ed20dd4f

    SHA1

    8532c1645bc3fc56811df4313799e05e239f5474

    SHA256

    fb057b2d436a559708500a5415f168730d4d491573a0baf8772e05687bb19e28

    SHA512

    ecdb3ad855d474b5eee0a4b6e3a9fd4358e4dc202417f32bdd3cac318c2d39752bb4e12f71bda4facfb253fec1ed94f9a594acd715db7d227e7cf5fcd873b24f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    689734957e3022902b2c93cd59d3e706

    SHA1

    81c617a4e20990b57330b572d55474c456dc5856

    SHA256

    e6ed5dead1abe9fa2186cdd7fe45fed82f13727df4ca0be4af3d5c9013845332

    SHA512

    bb23bbb945c72abcd66fb8d6c6d68c78bf2eb0e2a1b3808290ab99fc7c7ff8c11b227abcfe96db3bbbbd6b9b3928b5966a68dd8a1fce96f97f7d3969d6f732c8

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\A89I98IL\55013136-widget_css_bundle[1].css

    Filesize

    29KB

    MD5

    e3f09df1bc175f411d1ec3dfb5afb17b

    SHA1

    3994ec3efe3c2447e7bbfdd97bb7e190dd1658f9

    SHA256

    1a2eca9e492e3a21e02dd77ad44d7af45c4091d35ede79e948b7a3f23e5b3617

    SHA512

    16164d66d452d7d343b1902fe5b864ffdee42811ee90952cbfe9efa9847c58c0403f944c8e29db2bc2384ccd516b629cb8765e5e51de37da6efd75962cf82530

  • C:\Users\Admin\AppData\Local\Temp\Cab62AB.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar62FC.tmp

    Filesize

    116KB

    MD5

    2310bd8914cc6e8a99fd070d52d54633

    SHA1

    b04ba9a0fb5a7faf73de0f8e54d898c652e9781f

    SHA256

    3a1d6bc6594b7b55db96b95f2e9cffa4c8bfbbb50f3dcc1545c0bc982490d9cc

    SHA512

    90c93f4339e6aa1935bc740c74b9acee507297bb15fab48d3cc60df231d38cb0de38ef338608810c619adb48e380539ffbd5d5a94d62742033d04a4d22bd5490