Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    120s
  • max time network
    149s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    06/01/2024, 10:01

General

  • Target

    45f1bd9a06c3c431896e3cae0268e093.html

  • Size

    3.5MB

  • MD5

    45f1bd9a06c3c431896e3cae0268e093

  • SHA1

    6d53b987aed42dc8a8e68188ce6286879583603b

  • SHA256

    0a3710e5f6e828c39f9620f224184b2ec73d45161c2c800b5fbf02b37c9aad36

  • SHA512

    7e58b212f4dbf245cb9637c455eea6fab58d58a1563db0e2f58c5f121ce958682d925b5967d361735738b741125c5f43ac4312c5492f4f0617c55afef20626ab

  • SSDEEP

    12288:jLZhBVKHfVfitmg11tmg1P16bf7axluxOT6NNp:jvpjte4tT6Dp

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\45f1bd9a06c3c431896e3cae0268e093.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2204
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2204 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2364

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7ab507e66483d577e5ac22d083866a1d

    SHA1

    ef57b4fa6ab332602667078262fcec9c3ea7acc0

    SHA256

    2a9fba894fc9cad0ca703610ef4c521d1ba39c61848733a2936d9d5e1c1875d1

    SHA512

    5c217b0b5cf3eb038fa75f4da253c75213cdb5100eeccd6affb0f50d6cacdaabff9186ffe35b6f0593f03f7d5434bd7961d67124f30d1d0722cd0ab7bee55a5c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f06c69e69573e19c05719c1785f7fb0d

    SHA1

    50732030344e643f06832a46c2febdc70078339e

    SHA256

    30ad5bb329ad58d32be320be1eb3cf5350c8ee4cf52e77b86053d664c05112a7

    SHA512

    94f7beca1de0299237e58226a71d4e2722a3c8f4434d7f85e74c242e46f50d626617c8945f749f82db48e1017c953f20ca9dc882e563c47046cb404bf6e2f46c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bfadec598f58809d1329e1a4db3c7d38

    SHA1

    186a721266e6a6a8aa4534fe590628e5fa8694ef

    SHA256

    55fd1c7bb51ddd43cb042fe4ef6b2a6f82a27e91a70abe1c1840b906abab1940

    SHA512

    2824db9597f658382437cec4c65f3ccdbd463bb8bbe4bf69458963952eab5de5362aa5e7f8bd3db66bdae706e9db7fa98c5f4aeada5a17c066e6d8c11f24e3f5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f6098c699b0ed3d709eb1e2fc72df162

    SHA1

    f92a947ef6e90114c53e64f44e3abff4ab397434

    SHA256

    3ea33f45e63e2648937ece4bb9f212f5dd123bedd71e037375d9d9fbcbf23295

    SHA512

    d45e4f5ea007f7b5aa39d4a3c7b72149bf82d1c0831c362c93dd32ca61f694f394fc41d4b498990474d7a31358d3594bba7830409dde99206827b3d3dd16cde0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    abc4a746b07fd3c2eb87c620e1341ab8

    SHA1

    68eb218f7ba3d82825d2c19b4f770cda3e729e88

    SHA256

    81626a1ac6769f14f1625e6ca8e66b7cdb56afa842efe3cd57ed1237e4016a21

    SHA512

    68817d39a1957b70c800c22b82e58957434db4b4d869a85a993eb27aca2d46d69ebb4b9de0dc4fd0d8e5622a42b6e20b5c133084c9f55f8821682b3ae576da1b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cdce47a32657cab3f3799cc632edab75

    SHA1

    32aba6ea397ab90c056b280efd08e6d87537a146

    SHA256

    19222cefa23ea7a59674450641725060f22b3ea77bf5da18e58b5ad0aa6dfdbf

    SHA512

    44dbf555079be99db06aeb6bb18dd79dfb487fb46315d36488c3069015d7c7c1571a48b57dcbadfdb321d53ca11d7d404b417400f5d3790ad084a4b9360205e6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3dca189905d64378b9cf00c6b0a5b14b

    SHA1

    bea931f1cec7403e4ba369d86a9b0ef0ab2cea3a

    SHA256

    9ac5212ec72e8f74f8a1a3371b9d52c6028afe49c0dc5c129653367a67e32ce7

    SHA512

    932abe1d734b61000d11cbbf54d10bc41b5221e18585073d5b6badc658fa67bbb766110510baeb79751e2075539ae81e3dd25c6653dd0918ca3f3283c594ad73

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4e5de1aefebd697f2e2aea9ac92a324f

    SHA1

    980d5bba4f33afabfac03c4bc0b7fc3cf098f9b1

    SHA256

    7c877c31978edd4516926eee1ff2f1331c867a8cb3794348f103cb42c10a81a7

    SHA512

    badf18943d2b3ef29f421553a4708624387a8d234d3e4291e26cca459ef2a1f74a33ae7fe76bcc0481471f65d3526f766058de87adfea74189c1679da1f95a22

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1c306186c3492d19d2e6d69ba6f13388

    SHA1

    77024ababffb53b1f125a07b17f24249e9724e46

    SHA256

    37368f8bb1d69db24e3c42f57f43351db2e1847aee56f6592d232020d492e414

    SHA512

    e61a236d0ea921c7643b5d4e6902f95965cb0b304be2c2f15380f5a417975d2e9d9c78491e26290dc7c50c3261edbe41345db37d477e79e907a9a379019921ba

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    702c7e2cb671ea1e7cce3acc88571bab

    SHA1

    1fcbae72e8cb992951f7702dbaa6a13d49c6662b

    SHA256

    aa58c8c8b08a27e88b0ac490774fde991ab07e36debfc0fce6e46153c2b5f3df

    SHA512

    8dfc837278b2bd8b01f0ccc0c1e35e59289f2be072868be932ec7c117e3a1866171c60792ce96da55166b98e4a2dbf67a52548db0fd8a0d1f75c977dafd33692

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    52b74aa844df25bb33f0967cab8a1ce9

    SHA1

    0d8f04664c58630f6ea4a10e3bb161fc97fae6de

    SHA256

    5ae2e1f578afd6cae1ddb6a71ddccc78f8ec1bccd64169c74d4b5670f58bd99f

    SHA512

    c09143585a363dfe434358f2800ecbe160358016c412c10666b8b89ef1f2f07d9466fbb6f59607cb79383aab56875cb85ea0929e3486d7bbe798176fcbbedd1a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9e274a7fe745e377c6be6bdc92ee3d18

    SHA1

    f912e83ad3f8d5a3bb85a79d02f1ebf8bc888ed7

    SHA256

    b625b072508c3adf47b1b637129ac78834b2b9f8456b9cc62c068f9aff5c07da

    SHA512

    f370fd56da0cdf109021e17bc2a1d499755f6b29e19e75f77d24ecc88e2cf90d4ddb88a501693ec53c3a2cfd4d157fa66f5b5a35e970b17c8889e422b1389717

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1e48cdf9fe1260486e915c5c635db0a7

    SHA1

    b1cb6ad362621a6850978127ec94bb3c91e6086e

    SHA256

    2470ec6ab335a2c181a2e9801bd8fe07c0e9cdf8de8631758e41f45ae1c1892c

    SHA512

    1070bed83cd7b040a74b45877faa476f752fcd1f63db3a7b6ea378ce6dd3da63fb8c3f5214459c07848457d4931b989a1fcbfd9529c9d5ea799ce0e98e831057

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    92c402a93b625c6745582904bcb16e02

    SHA1

    a19d45b591359aebbb3b2cbba675ffd293795be7

    SHA256

    40a1966e0a62723079e87bd099cc4093ef0aa148bd0bfdf5fe712836fbe0835a

    SHA512

    4a0d1a594c90bd76cf68b30ede05dbde8ade9cb1dbdea73050d3b3cfcfb2dc10a72f26b30d8f31ff2087751f1cae8276686cb2067781ead227da05c8ef17526d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5d8e41de20723f3506e7c31d0b5d7202

    SHA1

    b313fa30c4929f0610652adb87f512ac762373d9

    SHA256

    a848c9a69a55a75326c42af75407146480c03c3ab6bff4e75782dcef324ca6ab

    SHA512

    cb530fb560b2363a2458a74713d51ac8f56ac13a9954bc89c18e09e4ec77896e454b1a3e64c0269046b7694a9d13b9ff50db12785d2997bf41efb59517ea8f8a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f2b3937d8a9932ee465cb880d65ad920

    SHA1

    eb059bb36416a8ccbc762a7450e35c0a80849426

    SHA256

    2ecda2e075d60d4c48c40e29c4afcf0e06e879da4f1ddf428ae741c4d86fb80d

    SHA512

    6217d7674a89706c2578a58ec124804f4951b460d9a459cc285b2e2c5086c7f4d234b908b2b394e0f47f3c878e02ec8226694268f2daabc5dfbf3c26828938ff

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    94fdc9efe55c8af339b6730096e229aa

    SHA1

    9ecccdc83ee3e74af4b5eeda8231532298b0b545

    SHA256

    efb4fadee84b0eca85de42701cd68ff140f085f726aabdd2f5ec970a945aee83

    SHA512

    9617d3fd80d24a504d3893533edcf0f8bcc5c130df99f7a0d5e237d3428e9918a8c96d817e32415eecb34561260a155bf44c1eabc55e35afd3102d9da960f215

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c316da7b130db901d34b770f8805aba0

    SHA1

    1a6e212f8832a3b88222385e4732a9fdec29a1c4

    SHA256

    cb3cc1e187deac839204656078c694efe1af5c7a32ca3b06f2ab9b42df684275

    SHA512

    df826dd41709a4cef6834dbfcf6442060e3b7d5c407251c1c40f788becc7c21b69f5ecb9bf6e2fba014cd4739ccbe4e0bd3225925ba4fbb0bb3b4109b88a6037

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cb6e9cb3ecd0cf470018cbd43590f372

    SHA1

    062644bc40d5a68773d169f9c51fccf953bfaa8c

    SHA256

    4df16ca88a3abfb88887112602a14bfc7411420bd2bda0c9bc11e218ba393a02

    SHA512

    325a207d7871235d4b147d7ef33b7924143e866c5060ca527f01d6e8fa6760d961116bf686531ff85d7deec0cb1b88edccfc0946cc8777c5932c1568cda472bc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fa042d154159e3671ba9105f3558047e

    SHA1

    a75235c75099a9a72eac30a935dba0f314388279

    SHA256

    3e80617680fc366c7f7b03dbd3d172e35766cdb4f09d883b1145d118e078e671

    SHA512

    26b83b50d25dc5e1a52e1a4568825dc1a4a709bca190722460bccec9def6128ae0e37903b1ad29432cf0b6aada9ade6fa304bd0826109c9f1a542cb99244533e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b7ec3d45f87914caf767949cf5cca3e3

    SHA1

    a092eb72b25e41fccc54431a788453dc3b183fa7

    SHA256

    950a0f0a769017736d520fe14b6fa9a6a12fe190388e086c6b6d71d7ae2341cf

    SHA512

    459e6f667236c33b719434e2348785a344ef3e44edcf69f57c5d80a1f7ab49061d7bbc1057c350aff31d437fadf60d8951210e5ca3403f77d656ae6053f220d2

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HJ0GGVIM\jquery.min[1].js

    Filesize

    83KB

    MD5

    2f6b11a7e914718e0290410e85366fe9

    SHA1

    69bb69e25ca7d5ef0935317584e6153f3fd9a88c

    SHA256

    05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e

    SHA512

    0d40bccaa59fedecf7243d63b33c42592541d0330fefc78ec81a4c6b9689922d5b211011ca4be23ae22621cce4c658f52a1552c92d7ac3615241eb640f8514db

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\M2VO416U\beacon.min[1].js

    Filesize

    19KB

    MD5

    dd1d068fdb5fe90b6c05a5b3940e088c

    SHA1

    0d96f9df8772633a9df4c81cf323a4ef8998ba59

    SHA256

    6153d13804862b0fc1c016cf1129f34cb7c6185f2cf4bf1a3a862eecdab50101

    SHA512

    7aea051a8c2195a2ea5ec3d6438f2a4a4052085b370cf4728b056edc58d1f7a70c3f1f85afe82959184869f707c2ac02a964b8d9166122e74ebc423e0a47fa30

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\W79VKSP8\jquery-3.1.1.min[1].js

    Filesize

    84KB

    MD5

    e071abda8fe61194711cfc2ab99fe104

    SHA1

    f647a6d37dc4ca055ced3cf64bbc1f490070acba

    SHA256

    85556761a8800d14ced8fcd41a6b8b26bf012d44a318866c0d81a62092efd9bf

    SHA512

    53a2b560b20551672fbb0e6e72632d4fd1c7e2dd2ecf7337ebaaab179cb8be7c87e9d803ce7765706bc7fcbcf993c34587cd1237de5a279aea19911d69067b65

  • C:\Users\Admin\AppData\Local\Temp\Cab7033.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar70E1.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06