Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    137s
  • max time network
    144s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    07/01/2024, 03:07

General

  • Target

    47dcd82b61796002a2f9aaf3cccf81fd.html

  • Size

    99KB

  • MD5

    47dcd82b61796002a2f9aaf3cccf81fd

  • SHA1

    f5558c76e840ab7400ee739b7efcc7ad8f35d481

  • SHA256

    5a8171748d0d2082b39905eddb0966c4cd3a26e738340765f8988a3a922f82df

  • SHA512

    0b1bc62a2f401d5b13486cae71e9cdc3ec7114ed5da601ebe9ab5e3ad4b4628b1e2c26c636404d15d4c25a2a4f233998ffb328881b125d0532c469b4667986e7

  • SSDEEP

    768:2vIZBMlXwsBiwylzzdwRf72KRzHM8yXJPZGWBFPJGZDEBDEBHEis3Ld42StGp5u:2/94zYaKuZGWBFPJGZEEHEv3Ld1ps

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 38 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\47dcd82b61796002a2f9aaf3cccf81fd.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2904
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2904 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2220

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    1KB

    MD5

    e5692b14d044768097810c2da10b57af

    SHA1

    129308aaa30624c6a91e98fc3f59624577652646

    SHA256

    250a3f79ffbf76251f72f25963327a1a83ce2e94e5254149c67d359c6ecb3795

    SHA512

    b2cfb3d89d336b2be99c36ed5951c4532556645cbea137364a6b01284d35c0e34b353cb24947407817db982fab8c6a1c5d47be4e1e507d665bf77bea67c93388

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\4A9377E7E528F7E56B69A81C500ABC24

    Filesize

    889B

    MD5

    3e455215095192e1b75d379fb187298a

    SHA1

    b1bc968bd4f49d622aa89a81f2150152a41d829c

    SHA256

    ebd41040e4bb3ec742c9e381d31ef2a41a48b6685c96e7cef3c1df6cd4331c99

    SHA512

    54ba004d5435e8b10531431c392ed99776120d363808137de7eb59030463f863cadd02bdf918f596b6d20964b31725c2363cd7601799caa9360a1c36fe819fbd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    94dbfb375d5cb213871e3e4019e880a6

    SHA1

    f204c8cac36b43377ca50f61ae4f56aeb6a413bb

    SHA256

    ccb78e1f7a3a5660ed4722cf6d99d58986393d3858897cc7013c271f790ccc33

    SHA512

    a504631bc4e9187ec0c4889f6cfcf60dacb549bdaf6691ee03cfab5f723873d3c239692f444aaf6cd0be292b00c63880a1641ffc90d85bd2a9058e5365c45880

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\4A9377E7E528F7E56B69A81C500ABC24

    Filesize

    176B

    MD5

    a6b0ff2c14ce592cb9056cdb157f5194

    SHA1

    a953afd77fa1d331904fe1aafe103fd0f6875272

    SHA256

    77e418550107c4a1095e650fa2ee686a5ec7e7f69aa543901072e11bc784cc65

    SHA512

    18d4b9a4e8b530462c06fa55e9c70c4274350edf351fa78af21e47a52def983daad1605323b1a6f958406e6706f7e9e0f09ac35d91b8b6689a1469994d6aa2c0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2b90ceb678a6f26ffec8820a985cfbaa

    SHA1

    adada69f3f2884e94081f8c21b2e72ef1ad67362

    SHA256

    f994c37fe7bcba9ae51f4e38cbfd5816b86061045834a13757c430f84841ebde

    SHA512

    a39d64e0760b2457e845aa3f2a2408ea437b88bac1e829bf6e06d26deaf00efcfe811c133ceecc001aa3fddcdfe1e952c34b6c97139036bc67d11fd50035c0e0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    776bbf972ca77f346163440ae9e4598f

    SHA1

    7eeaf1bdf3ce78fe7c34883ac0aab68ca36fc805

    SHA256

    8119521360c5402ac2c9b87b726e7f3759a031320b16e6709e6cb67f77fd9b24

    SHA512

    1bd5b9e9a4d244a2003ff92039839c3c6be3691065057f8bf75f8dcf6e0ab92bc9137cab59583f3c6c53e579a7213a0b25a57e065e9ad4c81e1ae00803f2d428

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    046f92ca0804d0a00e5514eecb02c93b

    SHA1

    81a4a9d7fe588d1d25f962d333a493a5e7b3a3ee

    SHA256

    e5ad490debb8b7225881aaa141b484611ddeddd43848ff6ef602952332abf638

    SHA512

    e5cdf963501404481a05a0b3a438e6afc2314f8947061ab18d9e891389067f0fe9dd28e0444bdbec82ebe6b1703227cd537dae66f2bd86d383e0b65556b3cc9c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5e57db5c39791bdd1567a4a61aa6b83c

    SHA1

    85ae899bf0dcf27d865b10484da305524a8bc7b5

    SHA256

    562a4b1b526459d9412c0139cba080bcc2a01eb3383e94a8b70f55d594749d02

    SHA512

    9bb84761c08b37729ee370b7eceb8c451eba1db38f42c8705f8de99e43451833b027f869d00c4b02fe2956e174cd8b825b542e428da0e3265bba6439e8747b2c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    71eb0a52976d06e33882371f6b75fa77

    SHA1

    d70f3685c2a7dd95669ecd24ed4945919dbef775

    SHA256

    965dae2d0118acdaea524d4a2cacb1d414be842effae0f2f8f97ae1589e14da8

    SHA512

    527b652892f16ec7fae38d97ffb41ca643e9edb94544b8b9c6e5624bb4f2a3969453919b84bf6dbacfab3f6373c9f730fa13515105596d138bb80d050c4a8e39

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6c1d3f5fa55f5c1547e60a109d9814cb

    SHA1

    777278bbd8a6eae93e9959e21b8a1976921ab3f4

    SHA256

    06c0989546cb5157330c7c1d11e2f1cf5cbe853bbe16ee983631405997a665a6

    SHA512

    cee11d6accd0797e7ad711df6fdf3a68200bf3a70223bf51d627db1315dca470535266fd75c6bf9fae4519f74b60dc64759b04d0e0160093f7b563e26e88d8f4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8b968fbdd10ccf214af7ef548cc832c2

    SHA1

    43c5cf81e71566a80d3225d37fc12e135be754ff

    SHA256

    5a1736179d4456be6a4c94f8e1640236019dabf8f76d37b87305c8baf8abfdb2

    SHA512

    f850e6ae72e7d8d6090818217bde07527a8b6286c8b16497c93724c79ff2a3a327391ff2e536075affe4a18cb9afab9950bfe4bcf4d4061b47c9917fcd7e7a2b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    03bfe4a2f6d6f0c5b031af22cfed1df8

    SHA1

    b147b6685f096faae823cc0f9b4b8544584a4a31

    SHA256

    e5810baf5a88e53ac1ec731f0908253392daa40c68175339142386aa923f45dd

    SHA512

    5d4d982305063ebf4981ca5d7149c47b0e4911778922c9e984f2c8dd6e831532063c1e726b3e53b0a6ff4ac6556f8c8e5c68388573a20c35d50d45e851f84379

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    86263ad4eb66959e24aefc55750aa1bc

    SHA1

    18a13cbb362a1a35ac3c66d2b0fb657780404cc2

    SHA256

    0bd634594f2856db84903b90f5a0ec0ad4e58a3f6020146f30dbd75b03ab5da4

    SHA512

    29561e33b2b06aada2ad1806cb9950c405e97d827d048a5fde9816fdb6a503ab533adb8cc3dd4d0f5544a66aeed1a9def384849433ee7f3fcd4a09358fa18b6f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    722ddfc9bb52c8cee7b97e7a2a89afce

    SHA1

    de45371452f418f67e3bfd7e710dd1cf1efa1e01

    SHA256

    99f963782b582bd64c64aa896d5492d8f3f174f978f9e7fae8c6116921276bbb

    SHA512

    f4ee75aa4c69bd391cabf6634a4fe373984ffb499c15f24f09c2fb8642c8e26aa2d04eed255680e30164d9e49380c83b6b6e8ebaa01c1d4bf3a92b4516d3cd05

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7a276c30179a73521ae51a876f3284c1

    SHA1

    8352271bb531e06bf59461819804c62ca77f25b8

    SHA256

    b1e1090135ff0ea6e9200c87510a07ec95e55ae665c9c46854534b3e6de00436

    SHA512

    47996ccff82b1b7510a6003f60ea9dcdffa4bf35c4c9d15993a1d99d30b2bc09c9642828faca5f7cdc944b8789ff6b50b011a3843258190c47dc2edf4a7f6d5e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6cba17ebd81c979154d171e12fe906c5

    SHA1

    976f5035493487abf205aef67d51cd1eaf010845

    SHA256

    c652a20ed2c53004516e362713656ea220873d72f0206671cfc6d8282341405f

    SHA512

    4b14bcf383347924455e3c5ad01e8dad1b473aa32671730442620cb648cceb90ada7e955d92dc3e17e4c2e335eac23ed4bda7b86ac20ccf086bd044baa5b37b6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    604f730cf260d693d1c4400b281bfcb7

    SHA1

    2667373c6d4a4de05dd17d8eb75d6c238a86a4af

    SHA256

    cafb98759c8c02bfe6edd6296a6fe2a9a3a4880da6f25c295be5784d7974ec05

    SHA512

    642bf17c770d4ac7836cca4caa729f71053f043b27cab2bae5dd7c8ae1d3b68a426e7be218876a1fda235cbc48896255ff6a0127eaad55742978a0ef741f7b6e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    debbbf5453469dd56dc70d5f4a786315

    SHA1

    cd3e57e9dd78984cafeacb0ba35ad75e07a92d7c

    SHA256

    73d0f3354564a6c1837e4c2f31440f60bfed85db8836ae39466e7457db764903

    SHA512

    a835f84def1ece1b15f337cd8110a1957eeeea87407d22c39f0f8b7d885537abfc255c964df6e365c839016da6872d43e9d4b4da57bfa7fb4ea5e70824fbd249

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    271974dbebcde4c50e1f39ac80a48fce

    SHA1

    92973496da00b6b2ffb1dc109646ef92e610f454

    SHA256

    391d39add64dc3d09f1df2ee169e3b4f1bbed14ad78b37a41e463a02a8d7acf7

    SHA512

    2f5e5ce6e49f15c03e15480364261405797d008eb5cd9037e1e45b5dcaa7af5fe8fead03f1d3eb038f2260798da0d38dc99cc6f0979ff2d2ebeea2993a60ea8d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a028deb84e1b883e83e0526d95e176cb

    SHA1

    ad41f6bb9fbf356612c3250657357afcdaccc614

    SHA256

    7a50c4e3cb1f82a997c8b5cc3e21bfb18b45cea8f4434cbb2e405fdddfa79469

    SHA512

    a9d56339787b099bc42176c8e8b3548de2213909782558e4388e89e37c8643750ee6d354dbdb7ebc6f3aeaebfbaef080492a81ea0d2c82eccc515d919d405137

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    3fac97005d5ef3eb475f96b45eb52071

    SHA1

    19209ce63a40108ca10f3c14e1caec886f59a263

    SHA256

    167d61d939442be154a1455b0083252f3257d43b24dc709c2ace982e471d4c67

    SHA512

    c5831a06b7c85cb2c7059433adc3b82ba2cc57b4d0f4bac39bd8e5d3b28e0c7cf02f9a4ff58107add5de6fe7e051b3263e0951deb6200315f7d3ca98192b480a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\Internet Explorer\Services\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico

    Filesize

    4KB

    MD5

    da597791be3b6e732f0bc8b20e38ee62

    SHA1

    1125c45d285c360542027d7554a5c442288974de

    SHA256

    5b2c34b3c4e8dd898b664dba6c3786e2ff9869eff55d673aa48361f11325ed07

    SHA512

    d8dc8358727590a1ed74dc70356aedc0499552c2dc0cd4f7a01853dd85ceb3aead5fbdc7c75d7da36db6af2448ce5abdff64cebdca3533ecad953c061a9b338e

  • C:\Users\Admin\AppData\Local\Temp\Cab13FE.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar147F.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06