Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    144s
  • max time network
    145s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    06/01/2024, 08:42

General

  • Target

    45c933f6ab795b1e1d03b3dca6ec449e.html

  • Size

    41KB

  • MD5

    45c933f6ab795b1e1d03b3dca6ec449e

  • SHA1

    9862ec29b6220b1a776e22cdb20b5b5322f70fb1

  • SHA256

    baa52bed95fdfd9cb0edb800a672b96bdaa8c4b9119eae378d366eb0ce8e1b68

  • SHA512

    7ce63bf1959660ab13dce0d1f93b97fa94aa7840ac848ea4cb61ce5801f3f3ab832420cb3fd2dd6e4853d664465bb8ebee9150bf788f7bea5054775f26f1a675

  • SSDEEP

    768:bayHHvPWl57jHj+HUyIGohL/OiCoMuqldzf:b3HH2l57jD+HUyIGQmiCZuqlt

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\45c933f6ab795b1e1d03b3dca6ec449e.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2148
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2148 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2208

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    1KB

    MD5

    d96a363cd037a2291a61a6dbc21fd087

    SHA1

    7cf499ceb50968a7d074de6f8cc3a8c12cbe819e

    SHA256

    89be3ff39366e74acf046fe58647b725218a3c25c9c3ed60bea93370955d8bff

    SHA512

    faf1d76c471e976aeaec14746dddb34bf0c94ecfb5eb4a3f44c4eba64f5939c4da2417c760a92250b08bae7e6373810c504f6e6e07b1e104f2e7b3f4cb942d59

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\265C0DEB29181DD1891051371C5F863A_1AE11409F57BC5D68541053A9AA94231

    Filesize

    471B

    MD5

    67b86e635c2feec9dd145a3a98d3aaf6

    SHA1

    8ba117bb2273df8e96099ae7e0ce181aae027ac9

    SHA256

    5af11ba1b706a17182ea2ce45dca4ced558478186000cd558d0c9e1f74d1f35b

    SHA512

    d781a76a504113058ec9277160b6326f266410f9f131bd0d5e2a4c78a30b9915f43c8cd35a6df044d53bb42f3d0699d4a94cc8e5f9968fc3ae9871270b071cb9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\CAF4703619713E3F18D8A9D5D88D6288_A7725538C46DE2D0088EE44974E2CEBA

    Filesize

    724B

    MD5

    ac89a852c2aaa3d389b2d2dd312ad367

    SHA1

    8f421dd6493c61dbda6b839e2debb7b50a20c930

    SHA256

    0b720e19270c672f9b6e0ec40b468ac49376807de08a814573fe038779534f45

    SHA512

    c6a88f33688cc0c287f04005e07d5b5e4a8721d204aa429f93ade2a56aeb86e05d89a8f7a44c1e93359a185a4c5f418240c6cdbc5a21314226681c744cf37f36

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    410B

    MD5

    3f7dcb1c6ad8dc45493baba759c8702c

    SHA1

    113399e366c7de890a35854f050a9d55a8de71c7

    SHA256

    904895b9100168d0fd7fe1f70d46262392aa1729aab1afd0dd4e13d7287ae8f4

    SHA512

    f1e04bf57d013e1f689f2a663b37a6d571eeea88c0e3e543770739dc396457c39450617e730c2805d7af37e3616ea8472d96059c52b5919c9960bee51b7e539f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\265C0DEB29181DD1891051371C5F863A_1AE11409F57BC5D68541053A9AA94231

    Filesize

    406B

    MD5

    aea7431557ec71d6945d71a13eec57a8

    SHA1

    ca5e54c581606d3ff847801afbc3642d07118225

    SHA256

    15eb7848b942ce569e50a1f4d777819b0cb63e1f46cf0b9f81400d222b3c56af

    SHA512

    8292749598467cdd13a5b154f0140a20af9b7f72cc2a5bdc7c449514173a9789c09bc0d972f8216174cd39fde456a1528956302783e95b627232287175035a26

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ea6bf4adb1ad55a2e222b98c24b20d23

    SHA1

    f35fce7338e9d2a6d4e27803c7c0a16c938686b0

    SHA256

    d2c937cc91438fc0a1c8ecc031b9fb8e3a0efa5884144c7b38fbb62b84ac2015

    SHA512

    3c877870e6f8a913d8f054b58f884a924a3e77480a0cea8b3247001975283d6fcd100fbfef40a038cdb86d31e2ed8774f50944e09928c02f7a8f692487d34d29

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    be49f4c57c638f94e7d14d3879e08c21

    SHA1

    6b321fdd7915cdd98038bc2634840264c94cfffd

    SHA256

    77f4d5e4e8e6e327f6e326982e5b99014865f02893205b8796cd497b4be5e3ef

    SHA512

    8c1c29ad39bb515c5d000bb698e0d7ef73c7bed8f64f269c419ca03fba27c2717dc0ee00165cbf83817018de74576e0b517ca65fc29f273e394e9433c7c58e31

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2b514ed9f50dd6692f2e9c355117e0a6

    SHA1

    2eec1a2871ca58785a0fc9280440cb1910d4b4a2

    SHA256

    d145d645df399d104aa79592bad32094f32b48c51e8997ef68756a1afed821fd

    SHA512

    d6a42076049043541641b4a36137ee2d3bc1d7bb28d892b1e463de306b34f02e0e78b922db551b8b18bdbc2d9c5c315a6827e272ec9a68d4c5fadbdd11f2c3f9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    54ef756c0e7ae074a1500cd4899f5c78

    SHA1

    3f822ae463e5e68a110f7e0b7701a694f84ee7ca

    SHA256

    caf964539625f083a8d2d970edfb80ce67926fae9f93f2d9db3a7a86d4a4fff4

    SHA512

    d7c0a260371587e9b34edaf324a0ab840b50aff93437aed3d1f0137e95e01c95f24cd29b3ca0231241a9476e8d6ac1f21a35b713b89d028c0c34e2176ba8fd41

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    157c62b335799795985e904ed7b87e9d

    SHA1

    c4940a3ad4b90b55291215f95b7206ae5c083bd9

    SHA256

    ced6842b6bacb0a0d9503b8cd739662d2bbe518ca5dbc963a8c48b9b7070814b

    SHA512

    9c3f94fa925bdaa811f919b5790a1735fd2fb837bf5c7155ec7ac12346bd3d1d96529ae440b986876029ba27412506e0c664a337a524d15388ac32e5b6318f26

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    14f0d78e607326e08528be16493b5eaa

    SHA1

    39a98c09cf66f33cd93808b2b4a6361160fd0489

    SHA256

    de775d7466c1fa92b6f3921a4519c31867d2d706617e9a42a893859638ab7de1

    SHA512

    830ca2c5901b37150c1f17b8fbc3b4d5cda8c1320c3c8031c60e4c8126fc0d8fbde5a5238e0124740544cd6448d0f323883420b671ef90fad197817407be64d0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2ab37c44506c7a7ce05a06c503077562

    SHA1

    4417fc8dd5307d69409e49acb8e49a1dd0e0f329

    SHA256

    8f66bb1a327f4eb49642e7a51e28fef953d03e06bb70199769583aaeefe013ca

    SHA512

    b50adc831f590081e683d2ebabe64b65c5e65fdeaa7b7befea8841ae2e1a75f751b24d064028087492f10400001bd7393e240cdc227d8a722a5c20612727972c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    799dfb4c24ea5f2780996801bf80a26c

    SHA1

    20b74ee8a3ec08ce830f6dabc9d6ed2b9413a14a

    SHA256

    a8905f6778be9958285123028cdad57c2f676c9e6fb98be79cb4a3db62cef0c1

    SHA512

    086edaf433a3b7870ac2d5654d08e354743821ea40ac46b389a644b2398b8ec5367038f5bbac44a6e3ac7429911f5afec1c0a99b4e49e99c715f4e8214b3c579

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ffc57b721deba3252cdf660ac759a718

    SHA1

    bb8ce3b61455d3a30cad53d9046e35dd5546fd10

    SHA256

    14140ca6e9587d9d7a04f8b96483dfa67021cdfd385fca4cd0079cdee57cd439

    SHA512

    b8dc0ba6c4aa623a7b8018cd14ec3067eda881687d86ea5e9b998b63079c3992c559b86e912f11ade3e781f1014ac47369c0b090a94cc36c39fbee54398d8013

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    390da2655188c307d35d0545293b5fd4

    SHA1

    6f8e91c52ff9bbab0b5ee7c40e6fdfcf04cbbf64

    SHA256

    909d8226c7b8a7572a57dd4c0c4aea4efcbbb9ac13a8b2ff4366305039328718

    SHA512

    3e42f465f73e0b404b772630501f744b164c7b0bd806085a59c53655e276fd87ee4b19ce9e3274ade18b99c46c01da263438a3636158ca3260c2123415d4594d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5aa7440563c893e2c7fdb415ae9e57d1

    SHA1

    b836c23e284a12bca4ef530a05e54e39988097b1

    SHA256

    9b2aab87bb634f8a9694052f8753f1b070f19e30f0e3e6b0914331c35ba64a13

    SHA512

    00c521ef48991db9fe570a9cfdccfd0d36eb22d6b065004b3a868f65a094975d6da9de0e1121a7cf91598499f372b3ee72aa49c0da6e5fa5da0bda1337014073

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    31038f863cd9fde8a9f663052f68a451

    SHA1

    e418d0be576072f8fe81928a8ca5408b7294f3a2

    SHA256

    fd9fc111393ce5f7765158674144bb118c345011b3b71ac869ec293ee5098c04

    SHA512

    5be755a2be76b32f669aa9011d01e017c5bc78029d7c5779ade7b394bfbe4feb313eeb3db5199375e677d0a7ff456479bf37ef57104918dd97f8760758302480

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2307385e870fd8e9c2ccad005d97018d

    SHA1

    240ee44e3c16178331621f04b1a018fc10fd30f6

    SHA256

    ee80411f9a95a43bcd48507f81107ae2e06f6522e478ed778c14a352c97d8e59

    SHA512

    71490d4b756313a6eeab1270801ab89ce9cdd3b5d81030c6242e3d42079ad62fc4f309d1174a0f4cbc1131d6e537608b6766012a091bd92fed5323dca327aea4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    64cf8179ecbff9ec974bcceb521f602f

    SHA1

    1a4348f5c853abd3413642c07b3b78715010b250

    SHA256

    b7ad0c6909e2019ee13bd5ae2eddf40a6c0df547bf56db673b0ec542944a0d46

    SHA512

    37f77921d117ac1e77422b3e0155502bcad46f59c92e4853e67e9dac28c54a88072516d708ce6c24454ae4dd360cb116b9307a53bc43be9454b3475d5c7ea331

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\E3F2LH07\cb=gapi[1].js

    Filesize

    133KB

    MD5

    288c5ba5b7001fe841c32f690f62cc93

    SHA1

    29aba9d8e4f7cbe25fa5e64b9ecbe256e51fc789

    SHA256

    c2f33dc18eae27d4e878bf837dd97f1bde5151e44b0271408535bb93265b8c52

    SHA512

    e375d41344a086d35accfb02bb1f91e2dd383db032af387fc3d6b1230057cc5e432e9b2cdd976e51425b4f587391d42f4d9d857c2e6f11e822a65edcb85f1c9f

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\E3F2LH07\platform_gapi.iframes.style.common[1].js

    Filesize

    56KB

    MD5

    f6140cf2e81a9d5b9bc96970fe1946f6

    SHA1

    e18cb20a08d0c13d44b72e36e9560aec2187abce

    SHA256

    68cc8a99c8ed5cc0eb3aa2146fd34bee0051bfd98faa3c03b83c78b4a12a8bd5

    SHA512

    1f61bf7228ae9fc1b36249223f4ca0675da05beaa6c00b28b7fff500e0527ee237d139eaf6793ece67f8730dfff0207bf945a848795aab7c57301433449a8acb

  • C:\Users\Admin\AppData\Local\Temp\Cab69EC.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar7342.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06