Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    141s
  • max time network
    138s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    03/01/2024, 20:00

General

  • Target

    3ef1bd0201cbf4f19bc76c305f352eec.html

  • Size

    3.5MB

  • MD5

    3ef1bd0201cbf4f19bc76c305f352eec

  • SHA1

    df35f62bd43560a18ab9164ad564b424ddcb1adf

  • SHA256

    fa4d269009f53513c95395cc4a58c9f914090d4954c70115ab8816f5f4745a76

  • SHA512

    4061891a3ef0158bf7b34b4b77b60072ae44aed3d7da1217d7055502d387a6e3b03a847d2c98c6e8379734d4cb25fb89333caf49ab01182e986a524931fa2ca4

  • SSDEEP

    12288:jLZhBVKHfVfitmg11tmg1P16bf7axluxOT6NyO:jvpjte4tT6sO

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\3ef1bd0201cbf4f19bc76c305f352eec.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2152
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2152 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2368

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b3b5bc6a90e7ba3c24f13dedf3e19af7

    SHA1

    df94ebb7b0a33dccb003b89a2793059bfaf97d2e

    SHA256

    49ce2ced1f7784c5c97118b29398936fa88ffb51fe59aba2554d4f9d93d0dff1

    SHA512

    0265896106ab9bad23034bf8a290eebc31ba362701bafd2b5126a4324fe04e803ddbf2710f7440c6328d608e73b1dbab2ebc88a4a05a6e3812187e54b89e0076

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9ab27904de7bd4046ada5cbbc4a6bd60

    SHA1

    5ff189f7fd4a8fd7318bc3291f3e8675e0f662bb

    SHA256

    228cc0224c0fe469eb4ef457fb6848121f6f75d4b4f2ae1289345cf7b6b2c479

    SHA512

    bc2702505e7958b1e33b04807c732d900983c9e92c3c0663eb6347e1f613ac2bd3f97a5316fb31a90866a874e11c9cd0b7edb09746de3348ab33af4a4be05e89

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e5b06868f2f16379aa6b3e269662c608

    SHA1

    645396da5ca96f0490fe8a76be1686204d8fd062

    SHA256

    421d5096fac8a82fe195f4a3a087d3ce7d710d82bf9962064c9250e59be1d723

    SHA512

    afd8c5d6ea8494f18076666f9efe5fea818f2a0060c6bf47feee20a37811095dbf9782b26a27575117b9a3c09fad132fa4a5b052017e7d80243b997aee5af16d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fd34791a1c83b6e765cf836cfae09888

    SHA1

    d753177b7d99397f0ad34394646b833dcebd9a7c

    SHA256

    32a0ab0f1f77f704391f98ad276c81a4470e3b73677d6ca82e35f1e19ce73a7c

    SHA512

    1b0e7852ad767ee9a633b0d5eaa9c63299193b27b9e5c57c27164bd86798e759de78647e1c9e19a1916df3d8b584b1cb239b7539e5bca301ed55713c508ee167

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f1c49042f014adf9225b3e84ae70d51b

    SHA1

    1103e514b40da8e5666e44af02e6db2f738d17b7

    SHA256

    b3a1ba1fd09b2743381972694ac508b98f2345fc460e114239cdce671a6204a2

    SHA512

    006e84881ec75148836896a37203efaa51bef90e4b553234b32b8f560232649d8462411a6d9cdf2b9817da0a7976af1934b5aca04b7971619bd51af20a55fac4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e5bb5103a08fb81f9adf59a6eb610fc5

    SHA1

    0f3449b2090faff85da8520b3b67b79a5f02e54d

    SHA256

    e462fa73957bda03034a58a784605ce05dc9c1203a609c11bb7e749ac95357c0

    SHA512

    0837ae4345d5eefe78db115eee854feb6513958cf5e14359034791ea565b285335b5a1d5c97d5704fdfc94620edbed030d22912234b3184f2af663857b053a65

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    60985ab10a5ee4815091916a78293dda

    SHA1

    b8a6cd8e60188e7733ec1a60fd95fd0cd4468e9d

    SHA256

    370bddb1fd736b12a1c0fcac3d11b3a3880c9af6c103440528ff508ba0197d38

    SHA512

    ab5561ab16e389a7f39ad131e8bd269fb6f083f6ab69b8011035923de2ad519fe01a5b720d9b9767a1278a5c127bc153072fda72de0d0f195369e91b1c4f4b00

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1e37006004c88611d10678c74df16cdc

    SHA1

    65a32405f2adb4e9f6d306ebae077b6a9fd763e0

    SHA256

    b7a67b650099f5b97543a11345257d760396a2b01ed8af68de002d232ac83fbb

    SHA512

    fcbe4cd8184cc453205b6f21ba7a4f398f8067da766892ac5b438e100a1450aba2502288fd93eea75a76b58941ab4ecba72b7ae969d4556a47d54d540cb6a6d3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    77f7c6ac0867e36914c1d69597a37bbb

    SHA1

    dc4688317f0a4f788476c71f97696ecdd1715c99

    SHA256

    4f1193b9da110941aa39c48097c8149ba4fef1ac5c6389a21c787c968d377ce7

    SHA512

    05a1a647c639d4ab142bcff61e848a3735472b9e21a6d426fc14b63dd2c387b6cb1b83e3d7996a53bab1b9587981859b77940c39ea71f5aa3089ab02ca8e3928

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b3fa24170ba88b2e89d23251c61c3bbd

    SHA1

    3f487f96b645849e732ff72cce873ac904162820

    SHA256

    15451ec92e55cd279490e23382c8e60b88f4c02959589a53710128dc4e6cfe0a

    SHA512

    99280453a5d8fae3ba22487dcf6a0a65b327dca500505c4c3b51fa09198e4e829f6e9d65f5b1d9552d68ab3d1e8c94db4a57797f51a32fb61df07a05d21dd85d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    957ab9ca796bfdddea4174b562c3dd6a

    SHA1

    0a637449fdc8da5e76162ebcf959c6422f82419c

    SHA256

    aa7bfa2ee6d29efd0ec98da84d41f07b8098e9c5d5ec3edc238981755651f5b4

    SHA512

    0253f8f6441b26b3e9e275ff5860db2f8f0e49f72eaebd860b2f8420714d6c4191e68e26172d7971547ab43ec2411892427b401101b4300953e09a074c3a4f0b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c2fa458cd11bfdd0bcb72f6bb32a8f66

    SHA1

    5be2143b398c723b6f92860977a99a663726ba39

    SHA256

    e18308a5a44ea1d835bd42d4cb883a8524b0e63ade6bed3fb7fbf88350f24f48

    SHA512

    e5bfc72d46673c5ddd142a7a72342edff07bf953e554b7cd31c84dcb28e50580f9c5ba00dbb36fbd024e506c2798d83487e68e45552c4c144753b5363242c02c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    385d71d64155fa6148810aa73b570b58

    SHA1

    26b64b5d516b3d8808b74943ba584e65e2ccf368

    SHA256

    856a38e7a03073055f28f0f04a77d6905ee30340e46c1bb42da5510d4422b04d

    SHA512

    d4e72957eb04034631b0c2f38396f65a612ce77d76a81724439d7ab0e5833149b4732ae2ccfe2d4a388b94b98e6f26ce6f1fd32fa087d272534015fda7a1cd35

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b99abbe86715f056e301485d0eb80738

    SHA1

    b871f76ca3247e6a5e92b57818071dac352acda2

    SHA256

    5a4bb3ac41c48ee8eca595893d64d280dcf3c845f40a60585af061811f4ce225

    SHA512

    d2df0a966bd8d8e1a18084fc3c91a2406af42002af4a3a8b4bc2b4ca9c39fc500b990c3d3cc83a92e3e144b27e37d0e8fecd60fcbee11b55e2082f3b552b6be4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4f7c5f115ab2e328a184f1017d6c21d5

    SHA1

    4291c4266068e64920279fdd585336d0b70db59e

    SHA256

    9ac7c90caf1b187f1eeaa0b63bedc46dc37cbee59a87c6ad119a884d328c422d

    SHA512

    2626e3a294bacab06c2d0070d7f3df1c0d777c9557629a46f622fd1a2d44086eacb16a4fcd4f9f7b1a241dec95734944476db17a697cab229d6459319e9d7575

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7ccba29de68b63f1fb3b1f52950e1a14

    SHA1

    31b76f592b3659ad086e64a6ee953eeddb280040

    SHA256

    37a041ebd704197c60c63718fa644088f318023a32777c02527a4d1f4b28667f

    SHA512

    4fde79a482e3e887c9b8335ead882dd24091a54d135b19f2d35ed83e9fdb9e8ccab4d35709314906d95df83ff04099ccb393f8a8334885d8ce8abd488d4ce5aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b0de6c04e2d4be214cc94d296a57bffe

    SHA1

    662934553b6afea6e2c1be33f556a5fee4b2bbe2

    SHA256

    7ecf71ea1765c8c65b829111ddf2d23567f89b5e0774f3edb3d7b6eddbcfafb2

    SHA512

    0b7e492e2073e8368a21d8b6d5465fbd1804a763220554ca6762b833b9c519c2d9728f86a351b69c5656e830a5fd247c266e4fd51ba0fbbfc92ba3c40d564211

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    097ff0f88caabc287a7d2b059d31051d

    SHA1

    b1441bbaf6693bba61c42681e6e4f87b87b9ec6c

    SHA256

    3e73f2cd54775d3be5de00fe01102106b82fbd717551eb015f37b3e4cd6ab833

    SHA512

    c1792a255c5d3d0f0370aeb873b25b718c9830c6eb3f5b14d4306c27ec7ee8899bd4ba47701813f700470d36ad7f6cfa5c43314e54a7f21bbf8bf46d55a30887

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    35d2afd3ab8b9de9d95d7226a0c6fa98

    SHA1

    dbc7315bac453938cc672809284216d09eae59ac

    SHA256

    fce443920cb97e60eb615d35cb1c5b762de2950f937bed513c8248264cd7893d

    SHA512

    04d3e2bd24bce9eef3bdd0861a13d0045f984254eff058c410a2e9a35f4c6797a5fa966cc5803ae3d001dac2add345b249bd2c5852d6ee22f37d7cbedd224153

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    98960e591ce846d242475c75a82ad85e

    SHA1

    556e3c30b1b566ee811990f1c766172b1d318e51

    SHA256

    b5e91d85c9434b6e50e3c1c1822aa7680a9387e8d6c266c4a113c9f722584c25

    SHA512

    d2385e997913c53666566bf17ab514ea37e555349928d903e669497702f47b831c9b6f256bc9467bd5072aa35d4722d58c71b92507f8c89d1465491f3a3aa91b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    651f808e758a62fb685939e824d04e94

    SHA1

    d4842be0016db9693164a1a726d0da5e1fe89470

    SHA256

    9c70a68fcd33337700e41f5472c23b82494eac680328374a41e4457345e0639f

    SHA512

    8bab38cf516215b6132ab1dc303c6f9fd8e22fff52cb1a9dd39d57fea644c422b14e7a368b97c292449d23da97a701fa79e83719283ce4719f04760bdac9b6c0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ec83d8d495848e55aeae1c32f2711785

    SHA1

    126754f18d77e85c6c025544070baaa4c05e4707

    SHA256

    ad22bb81f3df77af89467cc9722ad558c6dfa996cc6161c800b95311049116da

    SHA512

    0e20ce0b51e58cdd8b9280fdb0b741225bcde478517b430cc68115b9fc86ca17d695abb03eb56b0521996c2db9eae8262c2e1659d47a7380dbcfbd36f5702e9a

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\4K0WM73A\jquery.min[1].js

    Filesize

    83KB

    MD5

    2f6b11a7e914718e0290410e85366fe9

    SHA1

    69bb69e25ca7d5ef0935317584e6153f3fd9a88c

    SHA256

    05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e

    SHA512

    0d40bccaa59fedecf7243d63b33c42592541d0330fefc78ec81a4c6b9689922d5b211011ca4be23ae22621cce4c658f52a1552c92d7ac3615241eb640f8514db

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JGM5U0T3\jquery-3.1.1.min[1].js

    Filesize

    84KB

    MD5

    e071abda8fe61194711cfc2ab99fe104

    SHA1

    f647a6d37dc4ca055ced3cf64bbc1f490070acba

    SHA256

    85556761a8800d14ced8fcd41a6b8b26bf012d44a318866c0d81a62092efd9bf

    SHA512

    53a2b560b20551672fbb0e6e72632d4fd1c7e2dd2ecf7337ebaaab179cb8be7c87e9d803ce7765706bc7fcbcf993c34587cd1237de5a279aea19911d69067b65

  • C:\Users\Admin\AppData\Local\Temp\Cab43B8.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar43C9.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06