Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    120s
  • max time network
    140s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    06/01/2024, 21:34

General

  • Target

    4739d24ef553612c1e8967f4514fafac.html

  • Size

    432B

  • MD5

    4739d24ef553612c1e8967f4514fafac

  • SHA1

    3e2695987968581414f3d54eb8feb1c287436c40

  • SHA256

    44f98ef3bc848b32c93b96977a2d4f7160d9d85e009ab1361899262f22cff49e

  • SHA512

    6432691a828cd5f08296b7bea490afe299a9386dcd5cd4fa1dd4ca9f916c62e3c451555c8083cbea67f1f50faaded1a9db6992851c6fb197cd189bfb1fd8bd3d

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 38 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\4739d24ef553612c1e8967f4514fafac.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2512
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2512 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2800

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    48a15de842d32629722e652f785a5894

    SHA1

    f0a1b08fcd67999f2d4f79d185e46c5bebe34589

    SHA256

    da0b191c1dfd7361ec2b883afb581d525e85e55536f66fd6082263263abed675

    SHA512

    eeb6db83fcadcd5a7db5b6bd2ef88bf39e65ad1013981a91ddd6d4955c8f9301253da117889812bed05bc8a5fed3f9d3a3e26c2d240af0b980a995be9a35ae37

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    11e6fb9a0d83bafe1d441411bf164b71

    SHA1

    ad9a5e1f334fb3654da7301a6a1235e4d42b1ef9

    SHA256

    404a13971bb8b9d6b3b540693bf4ae764dd827b5ab1259b97e9301696635eb99

    SHA512

    64db843af6e1f40f877e1eed1bd22b377192d43a8a2d89c42c0c1c9e1aad7f3bfd8267e64055cf649875048985b7699f07f10293d2a7d038081dacc95e239a45

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fb798597fef7a22dc841f018f5eed65e

    SHA1

    915b7e4182df825cc1dd63d4e0c0eb05507cc2a4

    SHA256

    276f8f4b1112dbcf4ca4c428d02d01b93918ae8f2fb658d5a425a4ef579db498

    SHA512

    52a87a074b8ac397c339c06b9a33c5dfb622da9c1915e0d2c98c30bfb1bf054305d74cfd1f9d57a3718bc8f6f44645c94cc3c32c94320ba50bf2b4f863b0454b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    00967bd8489a01075afdf0158a4ef1cd

    SHA1

    99d6a8abfee832c9a94a1ec1fbac4aaee8908a2a

    SHA256

    ce95bead334e5a2fe66b5a9cd4cda58cd986bdc7c88974d005f19893b6f780c9

    SHA512

    6053063c3279e976bf35ba13c930df34754676c24e23ba0dd3f507e9d98e90fedfe60bf6e10970d7d085810d73014e422955eae38e9e133af441ff03045aa941

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    85d659a0a6747272229c6ef84200c8c9

    SHA1

    db4a3e36facb35944f6ceef57e2b29cd2b453a68

    SHA256

    2966aba6657a19105ea04a222516d3f79ca41dfeabeb41aee42f25475deb2a23

    SHA512

    39566d803ce94d6746f6c0714daeddfedb8c4b70b0a85d89df717290d0122c98fb4936e70d36050e41b0ab919f03752bb1b03bc99c89a07458ec0a3870d341d3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fc9e6c66576ae4f7c257122c32936b70

    SHA1

    d2fbe1b887263b44cb794fd93171a3858701ecba

    SHA256

    ba1607f78cacd0629b9896c2b3c5234cebdd04ba13cfd5094d3f149dfda9cdee

    SHA512

    5fa3d9b3f2fec7dc121de99de1bbcba301961780b8db6f3003497739b47d1866fa48956bcaa5f04708197ef94caaec4d13d405603fcea415089874e2b740d84a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fa059274e832db78a5224d5e5e9ba09a

    SHA1

    614bc9937769fe099eaa77593f0e6c9937f670f7

    SHA256

    edea11e67d54e6382af5abb3454afbfd31b6b01b3ec77a20dd63f8372ed6e36e

    SHA512

    8a80d160cfa4550abbaf42b768b83c2aba5ef6dc95f4d01cf74ce3b314dd17b77ceb7de0fd5cdedd49e07ec208dae209fc5f47c282a979665b4a370029806bd6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3ad2b0574ad7ea54f639a4a3112618e1

    SHA1

    0baf7b482a3406631bb89abe87cd348c07e12785

    SHA256

    60f1ce21ccb9f29766d56217693e87dab1bd78df890e42e4b54ad6921b18c84c

    SHA512

    36aaf61ac2f4e1ec28f07e347a9d71e2ee911b41d30bfb97a2abcf1d20ab3cb306e1bca14cdd659d416d851045988c06c85b275af24c8d47efb0e1d969acf455

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cce890a6d757905fb64920ea6fe690ab

    SHA1

    d1088b1279fbd6d8128c8196d928d77b656a25e2

    SHA256

    33c33d07554c64c8f6ed45b04347c364be65e164ff6ab76d2cca81b414f51ecb

    SHA512

    e44daa12e2fff14bb35ab016ab8b845ba8e615ed9524e94692cb0fe4b3b7b1d17dd3c33b785468dcea825ac04aa3859a59976e996598eb354d434bd762aa7fe5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ef74bf6345d6cbc51e65903c76096c14

    SHA1

    09dc5657e3a04ff29179c0e3077da4c1dd1a3cc2

    SHA256

    a607d045cdf8cfff51f9967e119c4378ed95920c08be74a00ac8eb318d485f23

    SHA512

    6b4000b3e9aca24283fe69b6f48378be6986457c690eacd3b6a4e2080c5d6430ca16f9c05812e4eb56b4e4fd11a8247d1739210d0f59c6ea0c6da1a5dfefcff1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    f6fc908fe1afcb3d28e814f9f2eeef68

    SHA1

    3c69b5d075fb9d65d5ce3458f3bc16452b0dfe1a

    SHA256

    19558abd1d05d78a9adb7aa6e1f93e60792baf1e1149de640ed6ecde50093ea3

    SHA512

    154874e4053d0d5cc8d41554301267e43aec2c7f3231459bf01641d441f9013e080f277bb17a4a4908ed8080cb26ecafe15b203dda47d23a8dfe51478e300912

  • C:\Users\Admin\AppData\LocalLow\Microsoft\Internet Explorer\Services\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico

    Filesize

    4KB

    MD5

    da597791be3b6e732f0bc8b20e38ee62

    SHA1

    1125c45d285c360542027d7554a5c442288974de

    SHA256

    5b2c34b3c4e8dd898b664dba6c3786e2ff9869eff55d673aa48361f11325ed07

    SHA512

    d8dc8358727590a1ed74dc70356aedc0499552c2dc0cd4f7a01853dd85ceb3aead5fbdc7c75d7da36db6af2448ce5abdff64cebdca3533ecad953c061a9b338e

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\imagestore\s8rbov0\imagestore.dat

    Filesize

    1KB

    MD5

    951ccb75092063422fe0c62a9d3b71da

    SHA1

    e525c40332b973fdb47ebce5dca94382f306dfc8

    SHA256

    524570cf24a60e684ae3cb71044b30d2954d3a582639125775ac7ea425952e60

    SHA512

    a357e7e469013ed1a34689937b9142d537367cd96c0b936e711a9a496cd3d24057b5708793df99fb9ef6722c551c988651ec826afb695b44313831fdffc0d778

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\YGIY6H0R\favicon[2].ico

    Filesize

    1KB

    MD5

    91abe01116ab422c598e9c8af72cf4da

    SHA1

    0f2815fe8e067d48537ad168225ab4674271fa27

    SHA256

    b1d7aef06456fe7431124129a28f0138bb5fccfa4f4161e3087de23c005e5edc

    SHA512

    a4d5b20c3014153b6b382c43404917bd2cb5bd2a59bb1e981f5a19eb7dbdec185ace288e9700428d24e5ac623e45d04905e706f0c45a1642b1aa6c091213c23c

  • C:\Users\Admin\AppData\Local\Temp\Tar22B2.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06