Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    118s
  • max time network
    142s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    08/01/2024, 17:44

General

  • Target

    4c1164dd147f10c595573ade1d1de0dd.html

  • Size

    56KB

  • MD5

    4c1164dd147f10c595573ade1d1de0dd

  • SHA1

    655b0b559987861ade0e9c90ab00125f606303ef

  • SHA256

    fc68ce48f5697169aefd07cbe26b1f86f86770372a145067e4e489ecfea55fcb

  • SHA512

    eed1d75d8f2c22f5ddd1ad8882aedc4f3688aa93f7d5346be2a16f550a9bd823bb23aeacb40d55b88a0fba616663509b007cae93e9ff90414ad6fe176ba51700

  • SSDEEP

    768:4LnpHvvCIoodr2cRxfeim9RDWNPJ7KyySqJ/+xpaBgVp:4NHv7oqr2Iwim9RDWNPJ7Kyu+xp1

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 38 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\4c1164dd147f10c595573ade1d1de0dd.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2024
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2024 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1768

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\4A9377E7E528F7E56B69A81C500ABC24

    Filesize

    889B

    MD5

    3e455215095192e1b75d379fb187298a

    SHA1

    b1bc968bd4f49d622aa89a81f2150152a41d829c

    SHA256

    ebd41040e4bb3ec742c9e381d31ef2a41a48b6685c96e7cef3c1df6cd4331c99

    SHA512

    54ba004d5435e8b10531431c392ed99776120d363808137de7eb59030463f863cadd02bdf918f596b6d20964b31725c2363cd7601799caa9360a1c36fe819fbd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    0ff771dd97eecfb100ef349a6f0e324a

    SHA1

    d959aff36801dd8975b6e1ce938983c879b6c4b2

    SHA256

    1b4f0e306dcb573da1b1559f026161665d1fdcd36d8e660bc23df4de6c11c175

    SHA512

    6193b95162e43aeb3b833f7ba512be285c925db47a6ec2628a6efbd8f423f9d326d7a6ee48a983ff884f242e55e3219c55e065b9992c2f3a6520e00ecad3d1d0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    44c1d0e4cf33eed7c232e6711220eb03

    SHA1

    dcad383aa9a7db18f59d74cdcd9d9d2036a15c9d

    SHA256

    892bc985cde83081df43f5eaa47041e794da8270b9e9659403fe72b5ba029359

    SHA512

    eb19ef5b503a7fc839abfa9eba862f0e4b9f368ee79e09c58ac0a7abad5060be5a89a6e6bf8fa23023b26c75d5789a47749cf5b2e9fc776076d04957d7b3614e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ffbcfd7376d3b14d183ba2cd49196dba

    SHA1

    70bcf4d687d994adbe043ecda9818e1b9697a451

    SHA256

    9c5900c08eb60355ab74c3c4855308d40d302c8c47f4c5fc192dcfc682e199c5

    SHA512

    fde907b744733244a83fdcb9e06c9f9f8031c07c1bb0f4fa8a43ee6eec9877e815bec87390beecefee3e6caff7c3828257b4dfb131e34fbc4653e19c42f54bcb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    36bc2cf856306e11f98fdc239dabd636

    SHA1

    26e4e56d33712efe306e5248905034a0faa6f63d

    SHA256

    fa31c902ce9f09125cec2461eb3dd8df12d3c764977922c4c78d725d41db7af8

    SHA512

    d2f95d86b657a3a94b5704126a1e10af71b5854254f2a77f2b002b79d64cfdc613009c5c0b1fcbd9dc10740de50f55b5f3659c28a1e8a032afce7c8ac200b113

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    436c171f93aad52dc71b9da025283223

    SHA1

    35274a8cd2fd25d660ca0d33cd9f0904e5a2e989

    SHA256

    1c3b5db3566a2f4a94be155e1a63b718bd9d189aea05ec3dfee7f1f7ddbc300a

    SHA512

    b928b84d4ecf33eaf767f93ad911608542afce656b920cf7646b577f3065782fded8a8127517051b6d3efff92945394606363f581eee9fed30e0a11d5e22feb5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e6979233a4cec07469166a834133a1ca

    SHA1

    073f4495f3d36a1d3e99d2c60049ebbedaafc357

    SHA256

    ddb51f2a91f72f4ac50766ca24514a015929df2049776edbc5e0364a56f322eb

    SHA512

    46fdb378a17160f412f17b4eb6037c125d6a0a8623153a24561a0b3644450025b122155e73e390746cb29e45d6b5727181b1cb6c2fb7ca0f9b9306413f2d7185

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2acae0e237e39c56badc28068eab19a1

    SHA1

    d0c96ba75a862ebd31e7c1df299ce1570f6ee174

    SHA256

    6ccf5d8d256c4b38a004f3b5c90b2459302765b3dfc68cb57546b8423663a6e8

    SHA512

    9cbf5cebe755284edfe733b29500e3e54d618b315ff78583bf4880b63f2b750614c6f27c0c77f83bcb6e01edc78b7005de8ff9f7292e2ef1d7410262f5df8964

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a5777cba7ee119df0f0268cd000b92d2

    SHA1

    7c88beba61ea9d3221f943548aa3a93fb2fdd36d

    SHA256

    012b7e7b8f8a230c3cbe771f187736aea08307fb36e79a239b0fc658af6adbb0

    SHA512

    2b0eb2f53bc99f3bf7f01b36818844ca7265b753f964205c6d53b4747207045a7716942667b8fb319d5a751e5bdd1222b450d24660b189cd621253a09400b897

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5747604185c3682466ed3ac25a3e2ace

    SHA1

    e22e8c5d21acc3c26727cbd10a3f92cd711675c8

    SHA256

    a26cbdce653e7d119593aaeb0e11a7f056519535772aa7204277cfad41e60384

    SHA512

    13e1b24b46cf22a5dbd3d23ec4ddeae34de3932089a77666dba4edc2ca14acf1c9da30b1248a74ba47a1550c53d3c2a000954da6a9685455b866a19308774875

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    03458148a2b6bcc9c4093fb8da006641

    SHA1

    8cd802f801cee4cf7aff66d6f5becf16c2ddc067

    SHA256

    5e30314ad8b27920b0e6f4bbf09de4de157ed9e06662c687e27415dac5cf7ece

    SHA512

    acada4d80ca06be5edd4c9f73f79bc79b73740ff1f11eb2afe064576349351bf3c70eed6147358088078309aad5e7e199a5467a49d39f44ae527de67b546c09d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6a10ff397e70598d8330fa603651340f

    SHA1

    75bd372ecb633d2b1753d8bd316fe64d5c0dfe30

    SHA256

    1a12cbb6665d7161191d959aadd29d531dc43ac6003e8fab6ff270cf21bf70fb

    SHA512

    d37481dc49b039b006efb5cba7d782bbdad76c18469db9f234a22dd337b04402a30ac721eae949b0386b3be688c7efda6e29ad728c0be927a3fa81c4b24c82ed

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    63c99c9bc5401e2a1949ba1967f0c90e

    SHA1

    dd7e583eb0e3c941e4f374c7f1ab43b08e92ccc2

    SHA256

    b9e44b1e84cf3aa8f863139a494f8a6c39b75d58f2804aab6c5f4c104dd2eb0b

    SHA512

    5e929e6bc31d43ed4f3f5f6adeb7f571ceeb82a339fb305f995493bb1e9fb2f8947961188e3b567fa7df3d61033fa83aa8ffeaf2308d7daf911178e50a0e93a6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\Internet Explorer\Services\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico

    Filesize

    4KB

    MD5

    da597791be3b6e732f0bc8b20e38ee62

    SHA1

    1125c45d285c360542027d7554a5c442288974de

    SHA256

    5b2c34b3c4e8dd898b664dba6c3786e2ff9869eff55d673aa48361f11325ed07

    SHA512

    d8dc8358727590a1ed74dc70356aedc0499552c2dc0cd4f7a01853dd85ceb3aead5fbdc7c75d7da36db6af2448ce5abdff64cebdca3533ecad953c061a9b338e

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\AZUUFZ9K\cb=gapi[1].js

    Filesize

    133KB

    MD5

    288c5ba5b7001fe841c32f690f62cc93

    SHA1

    29aba9d8e4f7cbe25fa5e64b9ecbe256e51fc789

    SHA256

    c2f33dc18eae27d4e878bf837dd97f1bde5151e44b0271408535bb93265b8c52

    SHA512

    e375d41344a086d35accfb02bb1f91e2dd383db032af387fc3d6b1230057cc5e432e9b2cdd976e51425b4f587391d42f4d9d857c2e6f11e822a65edcb85f1c9f

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\DAPXAK17\platform_gapi.iframes.style.common[1].js

    Filesize

    56KB

    MD5

    f6140cf2e81a9d5b9bc96970fe1946f6

    SHA1

    e18cb20a08d0c13d44b72e36e9560aec2187abce

    SHA256

    68cc8a99c8ed5cc0eb3aa2146fd34bee0051bfd98faa3c03b83c78b4a12a8bd5

    SHA512

    1f61bf7228ae9fc1b36249223f4ca0675da05beaa6c00b28b7fff500e0527ee237d139eaf6793ece67f8730dfff0207bf945a848795aab7c57301433449a8acb

  • C:\Users\Admin\AppData\Local\Temp\Tar2033.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06