Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    148s
  • max time network
    151s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    08/01/2024, 09:38

General

  • Target

    windows.html

  • Size

    38KB

  • MD5

    829d8b84c19a1ed75a3aafa241eb4a34

  • SHA1

    981e96d4839addf42c16b886cdf121a60baf3970

  • SHA256

    e08031f88c98127f61d1bcf816a16e598d99f1d3ac5644087f201d671b0c8ddd

  • SHA512

    3fea93601eeecf20469a024ead8a369744c554f11ba3d2c2170c0ded4d754058f6b5fa5a8801a3823f3d2e32bc258ceabba7e5fad5736464c46539f95e27bd03

  • SSDEEP

    768:xQCz928iLZLIoXgL0iO1A+77J/dLKUw2FmZ6oNCj7SDoORU1BAle72abLmG2sTfL:k5qahH

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 42 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\windows.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2428
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2428 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2660

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\070E0202839D9D67350CD2613E78E416

    Filesize

    1KB

    MD5

    55540a230bdab55187a841cfe1aa1545

    SHA1

    363e4734f757bdeb89868efe94907774a327695e

    SHA256

    d73494e3446b02167573b3cde3ae1c8584ac26e15e45ac3ec0326708425d90fb

    SHA512

    c899cb1d31d3214fd9dc8626a55e40580d3b2224bf34310c2abd85d0f63e2dedaeae57832f048c2f500cb2cbf83683fcb14139af3f0b5251606076cdb4689c54

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\75CA58072B9926F763A91F0CC2798706_056B48C93C4964C2E64C0A8958238656

    Filesize

    1KB

    MD5

    399dbe3069772489099968415d0b028a

    SHA1

    00b2a654bb742cfc7054c12372967fefc2865efa

    SHA256

    bc04e157a11371cc6c301520ce79c10abc0e73e1aa0a9da07409fb6daa63bf6c

    SHA512

    00a9957b0298ec82d39b9895f015092d4154b7df63130359b5240a993c61c6da3f30b228d9bd034a5d9d3a318c0b81065288e5a5017134f7611dfebdda0ff85e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\BAD725C80F9E10846F35D039A996E4A8_88B6AE015495C1ECC395D19C1DD02894

    Filesize

    1KB

    MD5

    4ba90842eb632c75c55f6c6676dddb55

    SHA1

    3fb95a40f5fbe111c383fd45fda3bccac123af92

    SHA256

    0666f9738bd0ebcb448ca9242855ab0ed523371342a80bc01d3783e5c713305c

    SHA512

    263e1ffbe9e1704493b9b70a008cd0557911eea055c1feaf9f241b30b45e517cba53e22d4572c5b4a5a8bb56cbf6a42b2822ad6bb5acee6a2586a65634fe1f1d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\070E0202839D9D67350CD2613E78E416

    Filesize

    230B

    MD5

    a8cce0b2a25c664f17a0f2e034fa4524

    SHA1

    cabd502b5b7ee0b29a1054bf043f9fd79337492f

    SHA256

    9cbc6fb0d95ee40208136b83acc81fdaec74e87c03999fb93ce537cefdd2a469

    SHA512

    31e550c0bc8f4945e18dc9ee2bf23be17f7fd0226156641d253b1dff68c2e50f1c71cf451eeefd535b6a5dc42483ccad391ed75fa38e4c1b4ad3398e23d86e21

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a3fbeb77936b0c3b68581d338b375ba0

    SHA1

    d9cf6594d31e5c58b26da39da6b116201e59a0bf

    SHA256

    7fc5b5f868571959af30a6bbce062c5327aeba433a5835850b00d6582302dd0e

    SHA512

    083b128d4aa23135a268baf94391b65751f2c2a6fc2a849cce317c2999b4794f9df4a29f2691cb85fdb9ffb7da30c97f0d2daebd3bfe3b9405ef5d27d7fee8c0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3b4c7b68d876f364c1c0e35e3982dced

    SHA1

    071b70344c79aa5e5ead68e599885fddf3c32019

    SHA256

    96672d767a6c3a779579703a65b8730c1f396703c867f48d508a5ae6d2ebce11

    SHA512

    a03c31dac38835084cad0b3e169e969a963a6eb05c37bb8dedbad961fca64883ed0ee769692af909af53c31a9c4f60993cf8ad09170a08d02f440d51a6a37bb9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f2717ad6f613e92186ad3c46a49e6293

    SHA1

    9df73d4bbc935713432cb5e7afca196bf19df98f

    SHA256

    cacdb24417ad6c33a09ec13138c46b7a1bf9160f2072a46deca4b3c0ec64dd2f

    SHA512

    40b65b8781c1d28143479cac1712bdc5f44bdfc7e7b5036aa0bbf6979107a92b378282f25e75930e3a08aa7ed42cc81132cf94dbc8127626a8f1b0a4617169f3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4b92f6ba780e8ddd53f608133435d87b

    SHA1

    a5901c060f56d95e28fb361530b33b0c989a6fb8

    SHA256

    de883cabe5a07ddc49ec4456876b3f99efb118769c1eaf4e8d5040e6da7c87fc

    SHA512

    114f336bde2d805233e35d57c445630c238c0b7b0a96680a7cc7d327f2ffb2ae8a23e72b83249dbf3aa4f3312fc8b1cb08d338b81513a0ec09d138d2fbb3989f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2033ef01f9c4d8149f8bb27268d0ad06

    SHA1

    c2ca81ab32e6d1dd9f8292d277019d3fde5d92da

    SHA256

    827412307cc17aa39c534ad79b6f658ae6ae1a8cb80c6fe69d2078907d32d13e

    SHA512

    49e82da87610268f1e287d4504159e38056404e78989a87387fe90130b50ee207dd308d8691f6f911a8f8ac4013380c269eb5de783b910e6563f69f1082228bf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f48c7c08c79b738fb809459c1b66abce

    SHA1

    1c52d79322613ba747cd48a893b0ccc4f33336b0

    SHA256

    70056530e710ab1cde5c45e9a253f31268e66a77e591deaf599d8d0987e4e8a9

    SHA512

    1ae3de52c4375074497ca0711ee2a966bc40bc06b22e494f2e86e7a273f5bf243e8a0ba54a96c7b9cbf64ecca108e139b5162efe8bab926f927c9af6fa43b907

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    975e38a1ce9975782c053e75cbed2988

    SHA1

    c02e46fb23801167f34f88ebbb644576d719394f

    SHA256

    1fbcaf8671cd25b3d1249c0a3bf7eb921a5c97ffc2d9f1b9fd514e7471732cb1

    SHA512

    6073822690c00d830b95630648398c1f2180928c4e298119042a0d38f7fb81af7ab36764639da9ef75cebd3d50855063c614f0108eef7b20b882cabe85bae42f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bb23d0232055dcad88a93f7d1256bbb2

    SHA1

    a8d198e7315cb443c5560ba29accfd2b9c264506

    SHA256

    d7e984ad1654715414b636b616d24822a9a258d3fd15533bbd46e56c1c304f63

    SHA512

    daa9ef15b6643610371782bd48d66a7f53a2485495e4a5465f7a0ea6f1619e3c1c95a4499b5e7cc201b85bf29b9893d61291051e02a9e37642484a06f07d934f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    de338ad2a6bae00666ff72356f965303

    SHA1

    e55a58d35a72e8756173e57d93ee569b7a41043c

    SHA256

    1929c6f8c27617375b1cbd58bd522c66656501321397bf9c8ccf4d85f8078f87

    SHA512

    951c9d3a9ce4b7af31cf48ea0d425976166b04529674e43446563b5f70af8b73d8be6fe16d1585d105e76f23f5809dee437a485628351513544ce34d61270bda

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f2d7afe9e5464831f11db7dce5eaad78

    SHA1

    70ea947629fa5c96c9d8bd1e347f6a3570430150

    SHA256

    53144409831ace4cd6bafd8a9e51c19c9f9cfb1e4fc23221ac012ea7ec31ebc4

    SHA512

    816e703e5d16ec15ea8802727d66dda668d60eaeb0b7ff66e1c174cba5f0e394f289aa29d432a3c5bba8333a13f000ebeedc7e56774670ef763723a17755bc9a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    532c1ad2a0eda43a5d3f4e3241c0ff23

    SHA1

    dbb51def97f3d265307c56ac054b8ec14542b5a3

    SHA256

    61b48e70550cc4d7ba1c07ea9ff7530fd8aa1397b3b58927978149b4a12ecd1d

    SHA512

    428fa5f42452b8c5241d078e76df2279e1f2797dc47172e864a2561a33f86d0c38a0c02668d3bd7fbea82e3b5384c63a6811120f7dd753adeb5b1e38f55669c2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b77eec150e09edec0df7abcbcf407c6d

    SHA1

    34a625c32899031df98654b1695eec6c9f0bb54f

    SHA256

    5b9f9f929f9a60bf173d4b9d5fe2bb3933a3c498be8e506933075e9242dae0ec

    SHA512

    f3958259ffbd3e617d274021ee7bd805a920b66717d4d46d954f87e3fe07e7e986bd24eadeae99c68af6d509effe46662a5741f41b13b69b2ef05f035ce746d9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    91ebaae91990eaca035edd42b06d7f4c

    SHA1

    460ac7078113400b10dfe2cad8f34dddcc9db28e

    SHA256

    ca4d902c8a329ccf112bef801c024867a9e3312f06501b4c8b6ad4c210b62270

    SHA512

    fe82e6a7416f537987b8a5c8f7e2e080ce68849c2e2b0dcb67b3e6b5a2aad424804b9a037894c854cfc1f980ed5035c5c88c7f8b678e279cbed650e02211714e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9c3c895d3219b61996c0e0f85366624e

    SHA1

    cf2b1189965e9e6b75f5d8b0d4c97468896894f0

    SHA256

    9c9d2280921b726cec53f12e2d5e0f40c8d4b61d4ec3126fb506c976a294d5cd

    SHA512

    5b77588606cf6fb69cbe65f3dacfb375fa7126afccce01e6531e18b8633ead1111535a657b16309be08e42eead91be12b687aa793fcf1bd0b319aab7cfc3dd25

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    55186db54747ff21499702d3a176a2f0

    SHA1

    bcdd45e23d1ca28929fa771bee2451d6d74f4372

    SHA256

    ae4af367bf64c257659586e537c4dffb4e004d165e24885987a236901c3ceaa9

    SHA512

    0aa3de2d1e122530c95280a12b3994ba7da037c7665289e2d35025ee490c0731829bc629c546a0f01f3d8f6c963baa4746cff29ef7fd2c18d58c820bf351e592

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6937bbf4a558a5064ab4236a9f0ade38

    SHA1

    9773baf14bda5bbc776a95ca25c9e46f362a9154

    SHA256

    99fd13e2340da9369f3efecc491772ae47ce36f7637703d9adcb8bc9bd9aa19e

    SHA512

    df6ab896f9d842ed37b9863bdca747f624f056856eb331adb00010c288ebe929cb41cb475048e1ab330c2949b7140a62b6499865e1dc0656dec5ae5287d4dd92

  • C:\Users\Admin\AppData\Local\Temp\Cab476C.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar49A3.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06