Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    142s
  • max time network
    150s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    01/01/2024, 18:55

General

  • Target

    3d9ea6b1e72f9aecec98e137b003c327.html

  • Size

    19KB

  • MD5

    3d9ea6b1e72f9aecec98e137b003c327

  • SHA1

    56be18c6d5e0a6489430aaf12398eb21e924f362

  • SHA256

    61b783d38da25ace60d0b4b17157f4e3b4bca3762b8fe3923334d9536e45c0d0

  • SHA512

    51cefab495c1f4bd7ac8599137b6e914db2d753442468169ed9b7b2da074fd51938a1f6dc9bed80d84229b5c0fcd2b168edf08004157f38fa17418810ac9afc8

  • SSDEEP

    384:4+QfPFd9QZBC7mOdMUItKfpC5IgSnbmFe7AcDa6GLLAPd:Zcd9QZBC7mOdMUxpC5I9nC4vPd

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\3d9ea6b1e72f9aecec98e137b003c327.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2932
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2932 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2972

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    20781f496bba3088987d8c57c85fdf0e

    SHA1

    e49fc4e745d38d3ef6588bac2728f85b88fb79d6

    SHA256

    1c68a1fc58f6bb2fde295476343e9b2ee45fd6a6681b6bd98bbf1f0bd4e6cd14

    SHA512

    dd35dbadfc4ca0e7acf0ca651426c081eae2a0b82c40f61bbb42c185ac65f8479d56c7d27f0fb7ea94cd4fbef0be9b8001d6e729179ad1cdcc28d95776b3d0c7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f6350dfd513937f60e8d4067a5461a43

    SHA1

    eda51adbf7b7ff865273fe784e2300c2e4afe350

    SHA256

    ce26126c260cf6a21c3019aec4aaedda040dd88bfbcd0ead999edb07b47bf65c

    SHA512

    a9ab4b684bac36d0ec9d12b47ae5266ccab72b05be67ae4b1fc552e7e0c65749f4c34deb13bcece71949e096f5028b97bd4bf3bfcae7e61fbf1d47a0b96a37b8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6624e99f3dd52728ff5fc5b60b8eddc0

    SHA1

    3cacace3b3176b4cbc4e4605ab7641c6bb7d9e83

    SHA256

    70381c9f370e91a06e0d3b37ea4378f62f4b6b7cea2fb9df9b95a0bd563609c0

    SHA512

    aec7c8a342801c814da0f8064fae7d2d4955770b0876db5de5ff6bf5d0f2d25f93d6dc54298b58ef7b3631bca201ca662322ea425e07b0724080cf889f24f544

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    78b1456792fa0245c55f37de8a913910

    SHA1

    82a7d412ceeb4dce396a47922ee66ec2655f5000

    SHA256

    25cef468ef8c55a6ca0df84e2e8795361118b63571eeb9206e7b6bade4ee6a57

    SHA512

    e9c7b9cda4ba31808b6633bc7266a1682d1e94126564c5f5f05c9950d7cf21a6e721f00f99c9976b0419829e77b59ee31e72f933b2ee8a60f196dbe9130f262d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    af1e8655f23f0d86342da4416776a232

    SHA1

    85f0920affe3c301d3c0f4ba5e510073fca8f8dc

    SHA256

    b8e3811acee0cb248652471de11a93ae3263d1b323a6104dccc8827556430c75

    SHA512

    392f926b9c4e7364da01195a90e3846404fa0a71074a1081ee333ef36e3d55ba081d16089c17ebd7df41e1411f75b2b5826cac946943cb0d8caf5969ce098b40

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4f824265f28fd67afb84643042ba3721

    SHA1

    194056332c3fd3a0aaae73f5a54dfb018888ebd7

    SHA256

    3fa99a194af92bee39fb2a9a434f3295cc9eb473d872ee1085f49d181dc34cca

    SHA512

    8ef9373b5625c46a03b2282d12e46b3861e8bed209bf9ba5d2da9129640cd7054532e1ab8ed1ac6e7a7ecc62f865f90712e247421a30f88f7b6fcfffeb1f1b21

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a036200018aef79fcb8201edffc3b3c3

    SHA1

    a1a44dbb91019f716442aa7ea84040e5bd7e3342

    SHA256

    2b63a0afae51eaff4967ee6034061882c243a3fc58163eb1e9f894b7d7aebbd0

    SHA512

    5a094efe69abfce21cac4003d0cdae321b60753c3be89919170f1c47bafb7b081aad60f94401939ca18c57bf22dadf2f67e2253a703c5286ccd115f191f3653b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d2f36433c669d880f607326a4be0a743

    SHA1

    170f6c3f2e66a51f0707dd6e44868503c0b58153

    SHA256

    99c4d898390bed3de5bb7692d14ee027a0fd791cfd1e62bb25e5f49b2b2ed325

    SHA512

    193b44f5dae09cac8f3b7bf943feac56b41ff3cbae0a0d48a4d2ff4d0f6e8372789e00417e768ce3c91d4ddeeaea00b524e60792e446f43aeb5d3a291711e38f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7566c2495b45e623be2d9f8c0b104e15

    SHA1

    e7147188f284eb001e66449cd4c2cefd04fc2b1d

    SHA256

    ccd6b5c224da320c413b3352f429a746d0b5613e81ae8f322709d298ea634158

    SHA512

    ea4038db6eaaccdd771f8718db9d872f43af31800c4008bba9f1d74ac981fa84162ccf940352d0fc91a40b954fddd6264f3cba55c58fe29993225bba096ea698

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5834608cf1e8995401dcd11a6bfcf3f9

    SHA1

    de111769dece3fa024e54a64250f77a3f84b01ab

    SHA256

    747b2c153d1d9761e3edbcfc50ae5e743050c3507498747730e22abd9ab45090

    SHA512

    336f84aab6939a5627b93bf4f8acf7d51f9d79be10f55534ecf7d02b920640a110770435e454e811909e4c81a349ca4ea86266db941ceb1eabca93986a2d293d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d8ac027cfe5bc22ff858f8df58270cbb

    SHA1

    e1f8a6dee406c43df5a38c65869663952875d3c6

    SHA256

    7263d9143d9b3c577c4ac56ae0765fe5c4087f36c0476174edca204bd1d2d38f

    SHA512

    a45f23d8b56b0b736cc04a2e2f4d26c188b1c82b810cf3a97522da899f4aa011b73967c3cbc5020a32f8731bceb69160577c9354dedd920f7014fb92b9036829

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7ddb16648ec1fd9fb5b2d32100cb284b

    SHA1

    97bfda83dca978be7312ee26c25e844bddec3fa7

    SHA256

    afb344b36f1c0ef90e5c722281a51a3ec542c13f260fcd75545a5b07be334045

    SHA512

    774cd722c1b63a1b681d39d249e64ca8c29750748b5437699214ba6253f1183c7f13f46c77669505e073ae90bf26a9de96888e9c97fd0cfd9b55407f9de35b06

  • C:\Users\Admin\AppData\Local\Temp\CabC3CF.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\TarC42F.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06