Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    122s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    06/01/2024, 01:59

General

  • Target

    44fe3caa129131e416087b887e39ee24.html

  • Size

    69KB

  • MD5

    44fe3caa129131e416087b887e39ee24

  • SHA1

    bafb11b7e4112f3501020856c8fcf676b6be1bd1

  • SHA256

    d155846935de946f629b8c04818076e69434ed45235809315d5ed518ffd46760

  • SHA512

    b1df85fa18e2d39646608731cad27f0e08b3b39b3bf57c610d4af8ab50ba69e4a345329d7c91fb6a254d6ac48569bb2f0c7b18733a7a73005cb3990c0582f408

  • SSDEEP

    768:Drtsjhp++ffk8V/N7/Jtavr4+ZuvFU81cPZw:Drtsjh8IN7/Js4+ZuvF0w

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 38 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\44fe3caa129131e416087b887e39ee24.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2360
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2360 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2948

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\4A9377E7E528F7E56B69A81C500ABC24

    Filesize

    889B

    MD5

    3e455215095192e1b75d379fb187298a

    SHA1

    b1bc968bd4f49d622aa89a81f2150152a41d829c

    SHA256

    ebd41040e4bb3ec742c9e381d31ef2a41a48b6685c96e7cef3c1df6cd4331c99

    SHA512

    54ba004d5435e8b10531431c392ed99776120d363808137de7eb59030463f863cadd02bdf918f596b6d20964b31725c2363cd7601799caa9360a1c36fe819fbd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    b19b65a5512061cb0b43eaee5b477b8e

    SHA1

    fccacf744c1b01b84ec74f24d0850a88cfefd77d

    SHA256

    a42c527f0b8e16eb06502979754e111b49893dbf19a2f777ad9adc55a3e7e76c

    SHA512

    3a98a1aa7385d4fae54a58c93e426e4c5803501f78d0f7c7b43c82bb55fe33f8b844f99695e5c939730e7c198ba11c92b7250e1f2c7288c15ed91d39c1bc3171

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f0aabefcdfe8d51f5245000bc70583ea

    SHA1

    3dd5f26b560206140460571a55a65054c56d86b7

    SHA256

    f6aa34af7fccd4958f651da32a3da88364ef7adff1f4283ce68c978e76b75ebd

    SHA512

    0ed7cf00e85ebc7d87ae6eb4c05d0442595d82654ffd0bfaa86642fd2d049aaf65add03281d17355d1875700dac9578b59d0bbde7f9578b623d63873a1433aca

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d851d20a9a60595f0d77a632de14c90c

    SHA1

    9ce6c9c8d37f7cc4ed44089371dd14728e067700

    SHA256

    f2553fae0432966905f23fe08c6d9407659142691005fa6504fa095cefcc35fb

    SHA512

    fd14f0b03705c37806f0e3c7c093632fa37f3c507aee1b83641af11cd4878afed5c80735a542b066de49145c753d6c631b61c684a219a2e58e3d537a97f28f12

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a48200ef7da243d54c354382a330bfb8

    SHA1

    a7d812d1498d87a617e43dbe998e2574699d2a38

    SHA256

    b9b2a26d20ce27b5a9b7734b3edb9d3ff2a87601bfd2176860f37b499a4e7d93

    SHA512

    108e4e04b0c856869d46786ec32548747505bd4972d93b61c529a0cff447d875a68b4c4d6cb49a9f49fba75f2c4f0bc4fbe8edf822cc86d02b74ac4ee230ef22

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b8b6906922f16648e59ceaf10a5e12e8

    SHA1

    fbb57884c37dd62f3235f5659f5ed621810a4cc6

    SHA256

    7f2d079c97105d8411c5148b8d3247f415f16348645f5217d420cec646d87b91

    SHA512

    ff7caa4baa61243b91d79ffd4dcbc576a2f5883fa3bd809e7b4d811cadd124f9db74478e8fd43eb9a3de3eba6abc8a26a33e4f17f2ae5d2a0cc67b0124e844aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a1aa5dfdcc59b18434b60d1022b6ef00

    SHA1

    48c90be8ca83e7c187a568c1faa46d1c6450b637

    SHA256

    2edfeb399f5edaa20bedb061fe27d903077366e045a272b76b6ce4b032ebd4c6

    SHA512

    d6cb40bffca83c4dafa13469c5eeb742e2cadc7e6d2d7d35146f4a08a371f42a891e653e447988eab850bf7cfde47cfdaec33c23c596a0170cc03934b69f782e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    733bb5de5ab24e473fa3d47d53dea47e

    SHA1

    db43298d44df718fa43d08b8d4ae7857471d9c86

    SHA256

    6a8eff723ba514fe2b0294e70d314d207820cb41e87aa684a5bcdacd65294c98

    SHA512

    7d68e9c153761837f79db1164fe39d73ce54d28fe1485a3e715129799a3bfb60d67fcfa926d010a9aaa5c80ffd83552f1259bc1804820c26f7b41507ac43a571

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    01aaf1a32dbef1152de598f7ca5a09c1

    SHA1

    0f3415b2aa1ef2dd9dc1462ea7e8dc6d43e2f784

    SHA256

    d4948c65a0bcd1eaae453e9187ae53c1b7678f045eee1a7d6d276d63fc455ec9

    SHA512

    fa1f7d8b2dbe44dd792c581b7eddfbd0ed3eb883f29169b9f949c6c08020b459afd4e67a443ec6aa19ebaf5769e08e269a75fa5fe1b778cb4e75492eaf8a33bf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b11de835a6ad29d87c8546d7b7e8ea6a

    SHA1

    77050c4263dd0b88c0677fe2f37828447cb7c6c2

    SHA256

    e7728f1a6434dd776a34264325351ab2a5ebab9ecad4667817982c8b3da2ff83

    SHA512

    51fa10ea08f56e9a6fc888679a01ec05c334d2f02e82879cd32a34c948f7a1a69f02413edd4d25f71c45149af33e0d1fd7d355ca688e99295d882b2347cbcc71

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    cbff08e0ce5619cf8ed64eee925fbc1b

    SHA1

    49e803426df0bfd3d9604a92098622c3d4dce39f

    SHA256

    90ed7b53f1e4f3c16622cc29d21066a6a68a4b7f28c16d06214d36686b01db33

    SHA512

    3b1e1442553f0ca9e84e4e9aec24dd76ab4f1ff4dc2928dc2b72a9b0ea8187488f449da38eba8b5154205b31764738cf408bc5d7e8869e44bc854733a3c07edf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\Internet Explorer\Services\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico

    Filesize

    4KB

    MD5

    da597791be3b6e732f0bc8b20e38ee62

    SHA1

    1125c45d285c360542027d7554a5c442288974de

    SHA256

    5b2c34b3c4e8dd898b664dba6c3786e2ff9869eff55d673aa48361f11325ed07

    SHA512

    d8dc8358727590a1ed74dc70356aedc0499552c2dc0cd4f7a01853dd85ceb3aead5fbdc7c75d7da36db6af2448ce5abdff64cebdca3533ecad953c061a9b338e

  • C:\Users\Admin\AppData\Local\Temp\TarCF1.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06