Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    117s
  • max time network
    150s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    05/01/2024, 12:31

General

  • Target

    43b12d7acb1d3ce240f9fb4d9e9a1ca9.html

  • Size

    3.5MB

  • MD5

    43b12d7acb1d3ce240f9fb4d9e9a1ca9

  • SHA1

    aeb109548670d04b3bd2675a625b2fb9599f8dc8

  • SHA256

    d348dccc26905b3e6a60acb6645b0d3458118f94882d54b45602bf6cdae32d2a

  • SHA512

    3db29919fbb7153dd68d3248116c64eaf75a5d38f7fe21b68921a436ff9f62d88532014438ec20bac37ab1dbbdd511e41755a0850ee701026a721ebdca06f67b

  • SSDEEP

    12288:jLZhBVKHfVfitmg11tmg1P16bf7axluxOT6NNR:jvpjte4tT6DR

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\43b12d7acb1d3ce240f9fb4d9e9a1ca9.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2224
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2224 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1372

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4cfa1e8bb062b977006f8c865dd37d8b

    SHA1

    273f152b44e91ec82a43ea9613ef94cd402ed4a3

    SHA256

    7b75d7733a69dc8d8080866cb0849ddc7d9e5adcbebe24b7aa6af233812645b9

    SHA512

    16a00e9c1f75c7d6ff1331d639307d00615c3711d7395af6bfc36604a08238f1eee2361ca86d4f3c6864216c0b42b12b5fce2bbe75f1419dadb7d40589775701

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    786f08e9139eba689fb8358373701230

    SHA1

    f02d3481a4da667748c462a0cfe8ca01e0bde1a6

    SHA256

    0b9d907b6246c6ec2f6e405b0488d3b2555b7d5ecee4baa7f1c9d3b63b267d15

    SHA512

    17ddbf62141a5d87f442a0fda4d0d17fe4c193d39397c123b80a6bb50a467aefb153e2e06377cfdb355e8873d0cfeb61275fb8c010624c8318d201ff3baf75ca

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d9fb402f267907aa8afb9a53e41d530c

    SHA1

    89d6559ed2498ad858c79ed64f7d51162b097f1e

    SHA256

    980e5b05b6f7f42d9098bbb694d15cf8348fbedc457c66e1d71fb15be71911e2

    SHA512

    98da6d5e98d7327f41799e125d8844e9d7523422f646c5fd7c2f17b12c35eb6d7c4fb8747c6d876f849187cb93694004acb6b3a8cb121fea6fc464cfab9c20d7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b3b1b49a83ca83925023afcb6972ee3d

    SHA1

    ab0d3397766bb689649b8463e8abc6b4e7632492

    SHA256

    74bbfa28ce6acd4e254b3d390cb65a3bf18a1e00c542d82aa7412e5fc7085979

    SHA512

    94d1718ae7724422bf9412d92b2556f2850b623f7e42cc1a642e87fed4e989c267e3fb0309094a22cebb8e31550d4dd87a4f06f03ca41dd54715285b69348693

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d0eeff34fb7b1539b676baa16d982823

    SHA1

    7634f342930d3bb419d73b0d3c973e960c65f23f

    SHA256

    74a004a183cbce73b85d726dbdd39f07f23e309186134190d64935d0ada319a4

    SHA512

    d54b133ecd3f47a8e7092434fe9ffe0d657eca30cc028b98e18104a828d488a082689a94cf6fa980a0287b6f9894faae8cd3167115a8f8a4410b5899d74916e7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    90099eeec904ba2bb26b950878bef9df

    SHA1

    0c195349569bb9dc4adb7391d1e3c7f210c04ad5

    SHA256

    91d8fc27ab15e06a8de8e96e6f46af31581ca7b1341eb4f79c9be5e3733fae41

    SHA512

    b677b3b82f820b8ac4faee1d1326db8e62cf01298815fcc9ab9a47b2ef8685a6f181907b642b0635db328635aa4417321a5546366e6d98032910e9126efb2414

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9be0d64db96ae91cc16db897b253a013

    SHA1

    bd6dd060c2b90569d37bc21f02c5bbf38fe9a37c

    SHA256

    34b38ae79bbe00e83db3a84e158f2684f589afc21c559ab10c018c2cdf3dc820

    SHA512

    621bff6f9c765c04532d3b427c61608a0ee988c4a8ef1e97b272f72e5b205fd82fffe64acc6a574ec0bab0a0c3fce22e40d768ec24fb751f6f63457eb2ed5292

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a4ba9100a0f12f0d033990a9bb065be4

    SHA1

    a4eb6a5c83d85abed7eaa51b6987aa1d6473b5e1

    SHA256

    40349fd0c7d8affdb6c7bf967b0d5a1af68a5dce1b1b8ba97318acfc8969862b

    SHA512

    d249a6c65cf2980dea47dcd5f79de6cd294fa7c977d64a700385711f94baf65fd641e246727a18fd964f137119b3e13848bb12d6536b79f788ae736cd722c54f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c17b1a32decc2a1d92278cb526fd2e76

    SHA1

    2252bdd98789dff2e41d563bc7bd01f39bcb4eb9

    SHA256

    e4ec7928ca536af6f45e28c58f494070ef9fd48a29ae163ed45cb033b3e77fca

    SHA512

    89c7639bb2a2d13dd3f43720fb34866eeec3890a09e5462aaea6a67ab47d6007d62018c1cc1567aabe43e2384a206d3a88c76cfbdc6d0fe2463c502228b0d2fa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d00a2c29b675bf109907afc3275fcd7c

    SHA1

    47a82fb9bdae507ecb77868e4e0195998413533d

    SHA256

    94915ac003c1aa348642fbe529aec58022ab219b4111474667dcf14de0567635

    SHA512

    50670cdf11df480bc3811cd68e6ef38b25c19328edf69f77c1971898517e073ba02f3b6519cd5fc5659afa39614090be3dcb4ef0758a8227d2ff96cacbaa88f6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    52cb23f9c46012f4fde630ff16bae7ae

    SHA1

    c603193f9c16ee9245a08dc2a0e5651431d1f3aa

    SHA256

    6317c8eb96e90aa7cdbc38c3d62eed4ab193713c0ae5445b689dd2bd7d735ab0

    SHA512

    eddc41bb1ad49244d42350ba9af6208264d74fa936a48ff8292f2e38eb16055a33b209a913100ec5efdd113023c3298ea20afd506baeeb9cfd7509cac9471365

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1a30e486da6d52384555420debe7c8a2

    SHA1

    0a8d8d9d55b286c4cafda9ba936669e82c67b3b7

    SHA256

    d500687a39df3f4a2d9eb4c22f3addde6b5520b6f340c208ab24a2356fa4d2bd

    SHA512

    980b0e06bdfdf8bd8edb7fe1b161ce6ee0c9d91e1f729f4707a9da372a139a4a20ff69a6f9e64f7f7ab50f2515d2154664263b5676cc337e323d7e67353d15c5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e2e69c134e4900d02fdaa27c9ecaf933

    SHA1

    b9fcaf9eaaff1cf5ff218c28172d8d66eabbef63

    SHA256

    3bd1d815a7aa9973c6b93764373b97cb6a14adc9f0cc653ffd3c80def8fb0813

    SHA512

    16354a3bfa3d5df0e6ca8c4a068cf415fc185e3e87b904c1829ba7b88060339d6445644a76d8eaa62bea37a6a98e9ac2ae0094c1049c0c20ecfdc61e87c0fdb8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ce9672afefd119b0cf05abdd3a09ca44

    SHA1

    ef0dc704432e40b1ae42a0496447397cbd4d0642

    SHA256

    3f1f73e84d356ee0f4c202063bfef3e785d14040b066e5d61a512b2cf084a7b6

    SHA512

    8d7edf541413de202bdb2ffddb74e25b401d1ec5d03229b54674acc58763c44dd2d6bb284356ec015a3ddf1aad5b8274c81aa93625ec4b898ac32e02e6da12d6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b4b1e8f1192f3a414fe97629e72b1e7a

    SHA1

    80dee2f52d88a78394b702a391217fc2d25e5bf9

    SHA256

    21ecd617d16ff733bf9c0b94a1e0efc54e610b8227d91ddd61709ee97835aed2

    SHA512

    ea1ec1826dde0f373dc1e26e3d109afb0c31cf2e499e850342244af9d899f0b86b200eaea5145681d1dfd0a89d6dfabb2344fa8033dceda3ecece3a363a9d8b7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c9b1d7cdcf9c4eb6be7b1b1f68fac3fe

    SHA1

    510e31a80f6de66c556c1f1e67f342e3d884934c

    SHA256

    d4f853610ca6c17f1e2a702fc71e02fe4d90a8761482a08719f51ca785aed104

    SHA512

    ba67894d7046638dc0670fab7174c97efd4cf67829f99db9aa1e3c45d4271d809916eba003e4fd9e5bccd52b79c9f603ce18ef816d5c716ec679f22665ea0e24

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    882c5a7d8d9a4ce5236dfd617a726576

    SHA1

    86375f298c8032aa2b3eafe26acf3750447fd502

    SHA256

    b98d7eb567578fbee861cfaf400f80224cc2c8e936f54eabdd57704a11c75db8

    SHA512

    5f8d2ce2a2dccd5f357b62f82709a9f95fcbdd0c757482dbb5f1b9ae911ffc2e0717c14873e4dbecfb92139d37dacc32244b89457765b55dc2d5f9cddf3ed2e8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    24fbcf65140996d099500dfca35dd83d

    SHA1

    8a8252f2b98a7b0c348162fb9a0c5e5e795e4cc8

    SHA256

    c15aa608f8a89a0fec5cadfe487fb3d013b86ed737f3e877e94e96c2781e517c

    SHA512

    2df631ad4866df1ccfa9f172fa40e264549e7cace5e7e14a6cde3a33ce401cf30af6957f430bfb207b502c4b79e73e3264e25888f5b75325e6e4769cbb810f50

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d5f7d4bbe88ae24df956016dae6074ad

    SHA1

    ad27fbdda188214b781ce063fa8202566ee41531

    SHA256

    862f9922252c9ca4c541144a8feb3759f249a1c69eccbee6e36e671aad8926cc

    SHA512

    2e62ef117b89452c0bcd1e7d88fd5f279bde3e81ed1a23720cfb3ca7fa712f1493d79559813ae2400e6883501ccf0c9d68db20533739a455c6df9e2a5dccdedc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4d8959d41fc994b2e81532d9b62fa1ff

    SHA1

    2da310068c72b3d870f28a4201f44def08e48e5f

    SHA256

    eacdaff0a231dbdb24a7f18dd107c578e74c2d7b4bc254097222fd37ce899993

    SHA512

    6176750c79fce483b52246c8ced498c17ccf61c42272cb77dda940e86b23582ca70b40ae48bad3d33427ddf94bb013a97c6e2630230e8821b5ce906ddac4433e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ec57cbfed0ce4277f649c14998968205

    SHA1

    c14f51d96ac3b1e988db5172752bc68eede45e48

    SHA256

    feced85adc491f10003bda0f09bc82538c33f424ea4124058a62915eeb4f94cb

    SHA512

    3bfef6d01d338847b7e87b20862b24d18d375775d6247c35a4398745c0a7115a613583455c003ca8801500782fc42d4f89d15bea397e83058b2ef9427c12c545

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9e20a0120dadb7500111e3e9343535e3

    SHA1

    71aba539af931da3df0eb1171a30cf3ac515b4c0

    SHA256

    7de40ec73409b228aa97d53679020231c7db9d078b772d4d658f8dc8e761427a

    SHA512

    b4f7c7627e65f39f6f58984ec1ef382240f9daf7d67680d78754e7d4592026465e15a9e4d279e11513492a78e4e6888f29970dad8d7383886db9cce0ab02f495

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f9461f3818954ffc08ce9356931d21c6

    SHA1

    84bfc292a1a9bc02b409aa54b184cff5c9f447a1

    SHA256

    e3159193a13f01212c3a8b8e66dec0f4ff9c441fe84b9ac8a6417f8cbc63005e

    SHA512

    42708389c832a4ed0c955fecaa3f3e95637cef14d4306eb249ac23bc0ecebc3c5f41fb7a6d6be5dc7a552f6c6cf5fc0c139d47583059411191541c3b792df574

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c9711d5458daf58c8a0e690959af1231

    SHA1

    29ff1790c69f700dacb24016bb7bad4d188ce758

    SHA256

    b1159338cbaa502934f5d0f6a5f146da9cf0bb41c4c45b7e6fae2d53f55c3d70

    SHA512

    6a89d05d4dab122031b4bee598c8a880a49ae897449e3e1d5b027571ae54091f7c20a9b224248d3d965e28456f6e955ac70201d82c610d71aa2c5aadc12b0614

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    522e71f1591c9ccacee1c600a80f190d

    SHA1

    0da9d7532530dc5c95f98ff8c5d9b484f182aceb

    SHA256

    f3d1bf830ed7752256652d6004d64fea6b0fa9d9aae6c68bba31403754340f35

    SHA512

    f4befa4330efc949c7fa3007a480e5289eb6322edbb5a0db0af506e6cd64272bbb28205d5bd8324718066f50b16a285c6718086df7f3daa7a578b31026631875

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7fc1de26ff0ae96c558189fb9ecf4568

    SHA1

    c16192f127c6241e12a1f9b51e7c56697a59131c

    SHA256

    8e665f393f701b65c54e50042f7ea9cec4aa3c31bc0c9385c868c0bfdea76c73

    SHA512

    32cf0fffa8150100b3518b3657ccd66ce46ecffe833174353fd1e80bd297cfd022e2002597ffe652a5a8afe1d73cc160169750a2cb370c4da95e9a5c6aaaabef

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HJ0GGVIM\beacon.min[1].js

    Filesize

    19KB

    MD5

    dd1d068fdb5fe90b6c05a5b3940e088c

    SHA1

    0d96f9df8772633a9df4c81cf323a4ef8998ba59

    SHA256

    6153d13804862b0fc1c016cf1129f34cb7c6185f2cf4bf1a3a862eecdab50101

    SHA512

    7aea051a8c2195a2ea5ec3d6438f2a4a4052085b370cf4728b056edc58d1f7a70c3f1f85afe82959184869f707c2ac02a964b8d9166122e74ebc423e0a47fa30

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HJ0GGVIM\jquery.min[1].js

    Filesize

    83KB

    MD5

    2f6b11a7e914718e0290410e85366fe9

    SHA1

    69bb69e25ca7d5ef0935317584e6153f3fd9a88c

    SHA256

    05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e

    SHA512

    0d40bccaa59fedecf7243d63b33c42592541d0330fefc78ec81a4c6b9689922d5b211011ca4be23ae22621cce4c658f52a1552c92d7ac3615241eb640f8514db

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\M2VO416U\jquery-3.1.1.min[1].js

    Filesize

    84KB

    MD5

    e071abda8fe61194711cfc2ab99fe104

    SHA1

    f647a6d37dc4ca055ced3cf64bbc1f490070acba

    SHA256

    85556761a8800d14ced8fcd41a6b8b26bf012d44a318866c0d81a62092efd9bf

    SHA512

    53a2b560b20551672fbb0e6e72632d4fd1c7e2dd2ecf7337ebaaab179cb8be7c87e9d803ce7765706bc7fcbcf993c34587cd1237de5a279aea19911d69067b65

  • C:\Users\Admin\AppData\Local\Temp\CabAB20.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\TarAC0D.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06