Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    120s
  • max time network
    133s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    06/01/2024, 07:47

General

  • Target

    45ad1c3c7bd16774da2ced77474a7708.html

  • Size

    3.5MB

  • MD5

    45ad1c3c7bd16774da2ced77474a7708

  • SHA1

    fc6d1e3b9a148bd363beabf50dec690474603b09

  • SHA256

    6ee289ae9b4589603125b130b3cbb3eb7a5d183d311122b579cd297f9bedc444

  • SHA512

    d9bff01a5dc724c39f5509cb149710312b1ece0f0994501f772e30ce9f6453e548786f5718834bbdc5cc2b65eae15f1d8aa793eed5136fc2352531170df6b609

  • SSDEEP

    12288:jLZhBE6ffVfitmg11tmg1P16bf7axluxOT6N9K:jvQjte4tT6fK

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\45ad1c3c7bd16774da2ced77474a7708.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2492
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2492 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2680

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    13e51005b6bb8a3e91b3cc1364c7bf44

    SHA1

    69555f8495de189d6aeafdd6df1ca22b90036613

    SHA256

    b2b66b215bf72214700a77cb7cde17ace73422a36ad39889b4d9ddde358a635e

    SHA512

    b2ab6873043787b6fd5156cd44c574e84a2e1e8d51e2c7718dff7eaf7477c7351d5d22b863b61e96b56c9081932c435e5b6371348cbebed31ed1ca20bd688d87

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8e90212103ec9636fe95fc12d7ab911b

    SHA1

    6362952525ddc78d937a436c045d48d0f9a1c3f3

    SHA256

    aeff4d8d82eedcf21a9f33db25eaaf28c0eb3e554a6bbecb6706de6624382d15

    SHA512

    ee8de78a8027f01e20d9dddbe4c694eaa36a03ef65b661ae1de654e7e74c89d43f150622af088a3d0bbf614f023b72841b3f97884b604f10f51a2ba89b185f04

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0f4aacab792d609b745bc3d5b30a353a

    SHA1

    3986516d477650aac0d67819fcbe0d207c10b11d

    SHA256

    aadde318d2571a85b53b82348bc68bd0be3075d8b32f36353a42749bab0a7975

    SHA512

    c39a94eb04c67eecb4d290e22f067a48305152f684accb30ab9fb22f61ffd6ea00b3565a8eaf666bcb017ff11dddf97f6dfdd9cb9ea003c5f35e2d7cefa5ee11

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6d9a9a784db47e65f78344a516da1333

    SHA1

    551287921e7f47af464f19485027ff49c305cd61

    SHA256

    ab6e4b3ce880d682d03f48a1aaca9b41d9ba1ff902743f6b4d29944a56773be8

    SHA512

    cde96414f09dc36125bdb4013d3919bc9538c3ad3af8d75b9b116909e65489ded6ae1f6c5ed4152e140b186a64983317554ad76331f3b247d6fa7032b3c0cb35

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    818af35bd4a6180b4c7314a363ad6aed

    SHA1

    ac17cc7e163865fefb73fd9aaedef961b521a5e4

    SHA256

    764de29b1fcef7b9ad8be1f1b9d138ab39c3dc63f1debca66eaaeb98f84b623d

    SHA512

    a3e665f17ef1ad162be5a85c48941a6f924ee8067cbba9c25c6f37f72b2941f242bc9b96a4d4dbdfb030f50085a168cdfe07121618d8f16353f9cc622e1eb8c2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9f0c6731e67605d156ef1b3d50e7ae9b

    SHA1

    11ee7d3edbc90527752bdad4f4b1d6d62a96c7be

    SHA256

    2cc71af0d4693680be5e671843ff68233b159800d1889ca4c7fec7d6dbdac161

    SHA512

    b44aaa8a9f7c2accbabcc53533363ddee4c51f7f53a9d76745a11a98199ff7ac6d6a5021920d7456bb9feb37a4c36e01439c5e61efebeea8ad20b0944b2ea00c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fcf73625f8b4e37f7549a219cb1a5c07

    SHA1

    26e5ec1b3c9e2a419c89779df8db87e783f1ff43

    SHA256

    d1503c471d1626a2e6eef08eaf73c9139af303a969dda2d6622bf6106f4a660b

    SHA512

    69bd8b7ad996c5024ab3dd4c413c03edc80376604ff07446d24926e4ee47956092594ca42661d7251871f5cba252af2fb9d64a4330ae8ca7f0854eacfcb3c0a4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    96569930e45c007198d5f386f6ef84c2

    SHA1

    638cbfcd20820b5fc8b4841ce41aa11866ef8ec2

    SHA256

    00b49c79f36a40c5aecabd202f7aeadbe4e9b72b32450f0b3ab0a6a40d363383

    SHA512

    787682f4697b054e4e8c55dc680f0e5909a0cd6c61c1e629463df958101bc14e04d25deeb43a327b93dadcef416be36bed35268843a63223e00a25adc442fbb0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    82b3b468a9e6fe5e46d3a126410c5478

    SHA1

    c0d2b7c17daae24bea1626adf33f2fd496cf9371

    SHA256

    2ffd04c19c0b511e28c8d90447b1992e9a5e5de98bd41543a98d6463adbff7dc

    SHA512

    febbcb9fdfa777f60b07523c5e9685e68f038da3a0719a2fbaf0f3bb1afdc49d6847d3d3c8673c0b4045b3f9cdc3f4dbd122c3f7c274676f93ad170f6bd75c7f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    463053cebc1ee336f9b494433f7e9cb3

    SHA1

    f72527470dba6230a5b2f3cc9b3dab0fabcd1d5c

    SHA256

    3d8120198a34cfa636a87a9205d9c36f9fb96cf9f96af885fc4ffb504f96032d

    SHA512

    c0e56b2f6e2add3514c1f2685a2402ea540298b3f0e6ce37544d2ac04ae0da7d25582c206ebeb7cdf0c62d8eead750b99a7d2cb79852b526505ee82ca1868d9d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cafa58577e01ce5753aced1264d4ec68

    SHA1

    daff495333bb60d4b38ec0f84e159d700aa49e8e

    SHA256

    94bb050cb296978dde6221615b6937a0fad6da745def9cc32b8759ab43049dd4

    SHA512

    f9092eb0f647c92c2c4a8c113d0bf674b77c0c8311c3c6e4d4fd7bbb4ecff8675c31698f76fcf42b27bb2f8328f307c6081b7e961a8f427765e8bc1a52efa45e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c40b45d6e453a3386e8e503613cf69b9

    SHA1

    4226e480506b8b455d3a0448909e6e7a03073ce8

    SHA256

    49b7c4944002dcb0f5b3a8e41ee3fecbb8b32465d73fc1b75397201037e2c187

    SHA512

    d11b116b26d915f063466838d56cca5f4031e92ddf5d0ff9f1be234ec602442612c45ee039c5718ba4d2a773b7d9042e80bc2890480062b61e029d97b28f375d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f9ffdfc5d248fc0397f40f4562fc0892

    SHA1

    03808220aaedc675077880ececaf4d5126cf1e8e

    SHA256

    905e9fc51b3e1a2ef96cd7127cb6d1efdc3985d21db6d8bc8ae8f3c4b98579e4

    SHA512

    87f25ae101cfb3d19210b9596141e9b948f36be484eda6700af1b6fca5eda60e4935174cdf0c18a7973fe158eb4c74cc437b8d365fafb3185009e5d58768e1c7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    40821314be7a649ebd280c9e7232d5e4

    SHA1

    ddbfe97e691ebc32a3eb3d9c3acd95df6a2b582d

    SHA256

    9c9518a426b0b1e2ddb74e414dac05b780996154481d5bd45c6d1bec20ec8355

    SHA512

    75e1ca5eb072b299762ac3ed1f8b8fb29f9aace31979b6d208e50a052e4ab455584889f78beb71916d7cf66aa378e204be4ac6f53430efb07c878e631b668186

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c566460d2d17f362abe53d39c709ac13

    SHA1

    37dc3846684f0eef96c7aa40940c9a17c51da0d6

    SHA256

    03b1acc67611bc16d07fa8975c725fc04fe363fdfd1181fa3d3b82bc7a7e6fd0

    SHA512

    23eddb3eb28d7704d8204272afd74bb5a0fb6e1db896688848e4f8b677eb43dfc8224c2ef4dc4fca8ee4cabbc37791c4979465ba76b3ef33b42b0e31e56dccd0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9d7b71ff7a27c8c4eb6ee09f4e100171

    SHA1

    cc48a0938a7e97bf0c7e641a642547139a54293f

    SHA256

    6613337fe7bb98e476682d567acf7c45885eb00839cef2f5e033c213d0d8fa12

    SHA512

    244f95b1b39d448f89305d505e699e3dfbf3a5b1484b0f7069ed9686a7c7336d0258db09c74dd66d949141d4e7461fec0404709924956bffb0f98c2ffcc9ba66

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fd688fe89c5beaeed3be0235bf337d86

    SHA1

    cffcbec75c92d25c3187f405a098e5f81b4634d9

    SHA256

    e51726c60f42cf0c7722885518aaa24ec152f188868f94dab202d156697a4d5e

    SHA512

    f4959cb95f4460896e0dc612c8377e3d6e220b8c9a472dc3feba671135fffd268e8776af225e3e019c295a9b5da0153684fb9557bb99c424970b461fab22c0d3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bc5c9c5eeb5414504a97e7cf3ef19667

    SHA1

    f5a3ad0e60ecee0cb984ed1d0db9eafc1d297c15

    SHA256

    aa024dd1fdfeaecb918e12ca515237958e192c09023d1a698a50efc5e1411616

    SHA512

    d9ada663c26945c1313f55ecde6c037aa0e878504e6a77ca6f6ffbbf0a8352073f1c276c927c54f87b2d74ca9a79af6863e957abfdee14c555f9910b96d13931

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3ffa2bc72302cedca30cb9863be254e5

    SHA1

    5109da96571e5386136ef7b46581671ebf4f15c5

    SHA256

    7d92fd14933adb28e8914c80728cfb46398bafd711485dc22f52ae3e91b12016

    SHA512

    0403b2680e77a6cca401861c0f9cfb83a8b5488a345b7ad19a4895b0d41ed00d5a86db3b347348729b1a7ee1576f43c48deb7e45b1166df22b7ca6a3e6b9c81f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    36673acacf09876605983473afba0aca

    SHA1

    0daf10ff161a7b77c5645045bd0ed6e8a6dba499

    SHA256

    72a35e2bd00bd93afb12e2fe5d5fb5afcbe06ed5b861a9c36bbfa6323feed345

    SHA512

    a59bee6e5dda19edfe5bebea2f4dd59c0f4090fbc2c5f77779e8ed32ce275d6c922694e16134b1cb44e308e1f6443ca617efa46963a518a1dc1a5999f7c5c6c3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9f7a24dd60380a3f6ac8dd5ef84cc63c

    SHA1

    f6366ef77ad3cddad24d29b91beb4baf02cd2067

    SHA256

    3464d954287b50ea2bfd468c35194383d501929485db3c566fc9d2e16447b005

    SHA512

    4dd069809bad2f79dbd488c58020e075d4c60832923374d224621f37cd172666137bad79825f2c1a5f2791b1b8423aa0d307ea8fa83da331e425f94936787f43

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RU3RPYUN\jquery-3.1.1.min[1].js

    Filesize

    84KB

    MD5

    e071abda8fe61194711cfc2ab99fe104

    SHA1

    f647a6d37dc4ca055ced3cf64bbc1f490070acba

    SHA256

    85556761a8800d14ced8fcd41a6b8b26bf012d44a318866c0d81a62092efd9bf

    SHA512

    53a2b560b20551672fbb0e6e72632d4fd1c7e2dd2ecf7337ebaaab179cb8be7c87e9d803ce7765706bc7fcbcf993c34587cd1237de5a279aea19911d69067b65

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\U9VC31Q9\jquery.min[1].js

    Filesize

    83KB

    MD5

    2f6b11a7e914718e0290410e85366fe9

    SHA1

    69bb69e25ca7d5ef0935317584e6153f3fd9a88c

    SHA256

    05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e

    SHA512

    0d40bccaa59fedecf7243d63b33c42592541d0330fefc78ec81a4c6b9689922d5b211011ca4be23ae22621cce4c658f52a1552c92d7ac3615241eb640f8514db

  • C:\Users\Admin\AppData\Local\Temp\Cab5E29.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar66D3.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06