Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    166s
  • max time network
    174s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    05/01/2024, 02:24

General

  • Target

    42873c067dd207e1a0a24d4e274dc850.html

  • Size

    182KB

  • MD5

    42873c067dd207e1a0a24d4e274dc850

  • SHA1

    f856b98dfa7ff58a7cc9c6428c4ed4e76ba55c33

  • SHA256

    d07242445ca21c99ea9a3135272a32c6868b403772ff2cf4f11124ba66cd2e7f

  • SHA512

    fa20fc79f8c322fdd8dd90a58dc7ff9a3dba40bbddac37ac3f6bbc939d5968b2bca8912c1389c57900caa1494ce6b849e245d64145a0423af3b5d26fe4ceb1ee

  • SSDEEP

    3072:ryAmQ2GxXeVK9i1wPDP8p4fJpnD7rQJJw4w7BisMXw0Nrh:r/mQ2CXeVUusMJD

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 64 IoCs
  • Modifies registry class 1 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\42873c067dd207e1a0a24d4e274dc850.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2716
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2716 CREDAT:17410 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Modifies registry class
      • Suspicious use of SetWindowsHookEx
      PID:2752

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\CAF4703619713E3F18D8A9D5D88D6288_F2DAF19C1F776537105D08FC8D978464

    Filesize

    724B

    MD5

    8202a1cd02e7d69597995cabbe881a12

    SHA1

    8858d9d934b7aa9330ee73de6c476acf19929ff6

    SHA256

    58f381c3a0a0ace6321da22e40bd44a597bd98b9c9390ab9258426b5cf75a7a5

    SHA512

    97ba9fceab995d4bef706f8deef99e06862999734ebe6a05832c710104479c6337cbf0a76e1c1e0f91566a61334dc100d837dfd049e20da765fe49def684f9c9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\CAF4703619713E3F18D8A9D5D88D6288_F2DAF19C1F776537105D08FC8D978464

    Filesize

    392B

    MD5

    60c1172e4c4e3319c66083ac506bc7f0

    SHA1

    16788e2c314633e7a986b46cf4be5147c56a5a36

    SHA256

    a47876148b76a93d59a6c2647f7773ffbaf0d323771adfa5944b644cded0b5cc

    SHA512

    8810aee8c058208b074b7ea9820b52c6eeeb940f99f243f44257242c0aad910ad648c0322bf4fab322bfbea7b4bac71d15b8ad1f8321802a63e00fcaca373f59

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\P3TWPKHB\www.youtube[1].xml

    Filesize

    17B

    MD5

    3ff4d575d1d04c3b54f67a6310f2fc95

    SHA1

    1308937c1a46e6c331d5456bcd4b2182dc444040

    SHA256

    021a5868b6c9e8beba07848ba30586c693f87ac02ee2ccaa0f26b7163c0c6b44

    SHA512

    2b26501c4bf86ed66e941735c49ac445d683ad49ed94c5d87cc96228081ae2c8f4a8f44a2a5276b9f4b0962decfce6b9eeee38e42262ce8d865d5df0df7ec3d6

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\P3TWPKHB\www.youtube[1].xml

    Filesize

    13B

    MD5

    c1ddea3ef6bbef3e7060a1a9ad89e4c5

    SHA1

    35e3224fcbd3e1af306f2b6a2c6bbea9b0867966

    SHA256

    b71e4d17274636b97179ba2d97c742735b6510eb54f22893d3a2daff2ceb28db

    SHA512

    6be8cec7c862afae5b37aa32dc5bb45912881a3276606da41bf808a4ef92c318b355e616bf45a257b995520d72b7c08752c0be445dceade5cf79f73480910fed

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\P3TWPKHB\www.youtube[1].xml

    Filesize

    641B

    MD5

    b31f343da3cb3c2a46a23e0cc7f76afa

    SHA1

    88ba7ab662ea06dcbce813440d4360f60fcb3cba

    SHA256

    425cc246d49ecd404958449de58105e1c675ade2ce419f877f4b888ad0ae138c

    SHA512

    b2147975b5966bc967a3c5b991b531333953ec5fc29114963e888eb0a2318b61af63d3b8c594b8125465d4e2bda4481662355191d40768f4343e745113a2b0cd

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\P3TWPKHB\www.youtube[1].xml

    Filesize

    48KB

    MD5

    f9f9a10e98a82a5faeba58fb21f691d5

    SHA1

    3405955cc203fded6f80a855484945832c65d0e6

    SHA256

    6d4e13d60a211d099c76b578c07182c0bfda63ce18ef50585833390df6aca905

    SHA512

    8ba2ff19cfcf1214614793bc4724c6e9db5bddb3ae0eaaf8ac9d749e6f64385917b27c9b6f5fcd89790ae366862aa495321ac612ce278b422453f2f0683e01ae

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\VersionManager\versionlist.xml

    Filesize

    15KB

    MD5

    1a545d0052b581fbb2ab4c52133846bc

    SHA1

    62f3266a9b9925cd6d98658b92adec673cbe3dd3

    SHA256

    557472aeaebf4c1c800b9df14c190f66d62cbabb011300dbedde2dcddd27a6c1

    SHA512

    bd326d111589d87cd6d019378ec725ac9ac7ad4c36f22453941f7d52f90b747ede4783a83dfff6cae1b3bb46690ad49cffa77f2afda019b22863ac485b406e8d

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\58G7K3A9\FM3W9NGZ.htm

    Filesize

    83KB

    MD5

    d2c6efc4812b95b1c1d3660a0f13c5c5

    SHA1

    fa52cef88822a4ff24ec43ca51f4b27ae661e084

    SHA256

    d8e6609f3d36ae45890464c5f9ca0b442227b4434ad34d6942302e5bdcf5ad51

    SHA512

    7dd96112310b046e084f7a65bc09e9b5528e067c53c137b8147419af1705fa78434538fefeea847ac148af86772e1a74d7a5f7ea20e9265be7fd9a25e1887e40

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\58G7K3A9\suggestions[1].en-US

    Filesize

    17KB

    MD5

    5a34cb996293fde2cb7a4ac89587393a

    SHA1

    3c96c993500690d1a77873cd62bc639b3a10653f

    SHA256

    c6a5377cbc07eece33790cfc70572e12c7a48ad8296be25c0cc805a1f384dbad

    SHA512

    e1b7d0107733f81937415104e70f68b1be6fd0ca65dccf4ff72637943d44278d3a77f704aedff59d2dbc0d56a609b2590c8ec0dd6bc48ab30f1dad0c07a0a3ee