Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    121s
  • max time network
    134s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    10/01/2024, 04:26

General

  • Target

    4f93b40f17b647dfc6a2f12370605f91.html

  • Size

    3KB

  • MD5

    4f93b40f17b647dfc6a2f12370605f91

  • SHA1

    79ad3f1b258722927de64ddecdce1d8c90de72de

  • SHA256

    1c363693fbbf446c2629b57437aada6a3367ac3741003b89eacd849ba6779aa7

  • SHA512

    ff6baa7793b0fa0be17fe6e326ed1c515e86d9acfff504c6eb678bb440e4f9ab84c973c94c7bc6c78a88cbc932ccd39c4a4702472e5bd61b7a24521d513ed004

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 38 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\4f93b40f17b647dfc6a2f12370605f91.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2012
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2012 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2376

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    39KB

    MD5

    877fd9911f03b2bc9b964eb7301779d6

    SHA1

    8364bf46e1175594c99a81914181530df36fb329

    SHA256

    f0ea92a3a61ca934c96d3c59c602f157e3f7fc346d142f371cf9f3b1c75735a2

    SHA512

    a2922436d3a6c507def42555fddd8fb92941b7066a321c119bbcabdab09bd370d0aa2aaab940479f72b6dd30a6ccf3a2bc2c0f9537b94261a285fcf76eb38727

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    68637f89882807b36c4bdbbc965d1bbc

    SHA1

    2524a5f38c0456e53a3c64b7eb2ef1c06b2cb2fc

    SHA256

    d32f6db8cdb47cf03f872b741d37f7a591a2992fffea97f0236eb96cc6e33406

    SHA512

    2afb85422a52cf140c61b8179be9dd0a8a5820cc794a30c66040c425199527f40beb36f28b6d4f4ca99b7ba3bfa17121e3d7c63fc4eef930b7b837dd92ea06d1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    83f24c5b794ff2189da83452461c9180

    SHA1

    e22f88a443efd108e7bc7c22236fbcbf7015ffcc

    SHA256

    972ca7827f5c85b330ae3cc6a2016e7eb4e199879c362123551558df134308da

    SHA512

    ac73662df3b4a6fb660e896f57044c9ce5503c26c9faf928239f177b145f821eee0c1cd59bd3388c1180222d72997fa26cee49eeb8e29e3647703620e98f9e9a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7a4ea8c907c2b9ca186bca195004c9e8

    SHA1

    c7e1553bca1feed9f602a36d723da2e854713c6c

    SHA256

    e9e1672d6fd3d07372174bfecc78d38f6b386afd1d9e9c8ae2545a72ce2cec4b

    SHA512

    8854e30c3231ad54f7ce1eb2a57b18978826463678d39aa6edfcb73027cddcd684aaeb8884c38fc99504b9d7b67be274049a34251a3d3cb93361d4d5d705846c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    99b560f3feb976adcf218e01359d5303

    SHA1

    226fe381f1a22af25e29739996303f866009b6ce

    SHA256

    e5d6c81633d046b78feb14dded040ff546150ad8fb721bac8b631484b3e77617

    SHA512

    a5251cae57ceb902e1c00fc1df6ee19b6dc6829f28460b9db740dbffc8787cb338d91128bca03c9d14a80c61b2d2cb73fb236320d4430c3454ea2d2909f0b222

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    25658fe4cc3d67a73e1d7fa9dd8d131a

    SHA1

    bff1ee884f038d3dac21a8f92869f8f9ac9828a9

    SHA256

    36ceb42dda3afaa1591fce409e389c711a6e804c94e546f721de06e7984f7d06

    SHA512

    4f3a7377c69961d04f52ef6b225236eac0288d140e437b713a0085e7af3dcb0b6f27a6c28f0965223878c5e5e4589635a68088b49a4000bdeda909720272599a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6e0463d2412f51e77b1773bec2000068

    SHA1

    789ec970a7f898b85f9651b3962a9a7f01c462f1

    SHA256

    6470abd7cdf34b1c234350184cfd2309fbb16c7852414110399075c8bf66896d

    SHA512

    36743884aecb58ef627be76d487ad166798d52646aed89701617bdf17bef51f5cdcd21e51822160d90d31391ca67d87a0c1c58ecfbc349e6610cae344a8c0f0c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b14ab84356c485d0fd20efc7a68f6c75

    SHA1

    36ec633e69450e7c6790dc4d3c2be7c501473495

    SHA256

    3e75adeab6d7e2de560c8f4b66e1f2f91dd02677ff689d69399a7266997036ec

    SHA512

    f339e394e8043cef9203eeb3518f760ce8d910d242c8455e0abe7c7fc7529228408079cfa768cf7e7788249dc271f67500239d5d66f976ec7f767f42782f6329

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    abfb974c7c6ba337d38d620798e1162d

    SHA1

    cdf8bd5f1e3e7d4e83a316feb3a6b5cfa935de09

    SHA256

    da8d624dc37a544207b7c0655e4f3a489f78b5ee4ba63af44d03313b20c4a5b7

    SHA512

    7aa4c5c651c3e6dc12b43a402d746671b7932b20eb6f41629d266b876e49a26c98cb6c11a23294b44d807bc3aa1fe01420f2b5f0b3af349b6fcf362923e66f96

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    379762aa49cef3b77e40cab208460d3e

    SHA1

    0c41ec6f8855adb456eb039bf51e6f5cf749c9e3

    SHA256

    a7662fb47dd0bb7006cfd38eb865ee46913cf8949526f16488274015e1e5ff42

    SHA512

    c3f743631d7e8bd3c4b69aa3229cedbddf92171e34c6274632bcd392cb54297d3c1bb783cca5e543484d78b5447d18fe7634ac3062322bfa38ab56f23a2608df

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e40c3aadaf4b6f5a7e07112822b38736

    SHA1

    66cbac9cc0340e0cd5039b750a064b510105208d

    SHA256

    efafec0e2b3273e32200fe1f2349737533e59feb40157642b544e72e791a8588

    SHA512

    d2bb98af4e3e148aa319367a5f0f82077f0768b31c12643c0aacd91b1f5c70d4fbb05b8a7227bea4fee842e6dd722542825ef0014b8ea88dca5f715cc8b6b079

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    471c925f2a11717c62244d90ebc09f15

    SHA1

    14d589adfb15c81b9792ea6d4dd0d1cec8c1e893

    SHA256

    1ea26657d1c3b70a58b877c54913d087928c83b95ca8316ccffdc152ed71f793

    SHA512

    1c280411a81ef7962419b5fcb63b7974748358c9b31ce035f4746d203fe59544badca18002ac776a089145d99a16d3fe6654293f9846821e3c8911e3d66c5796

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    24862e588bb13fff42b1528750ddca52

    SHA1

    494ee0c3a495198df544c9819ca0885da848df83

    SHA256

    234abed4bd343f660a4c8d119453a05a134e19306ad947e195d9267b41f46b0e

    SHA512

    45c0727399540d733db042639def888f5cdda4fae9f2e8bdfb0e1460b1ff7da2498bc30b963c4b6a426d939d277f81f2c6d13e011cfb787dd6fcc5d391356cb4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    19c765393af74027c9ba2448f4533023

    SHA1

    b26d041b42d7ddabacf5dbecf26806e2edef1d4d

    SHA256

    fb66adfc0d50fe0dcf3f90da81915de4c1801a17b9c7fa7603dfdb092ff77e03

    SHA512

    cc17c1512b692cd6967090ba9923999edd001b677c1ad3b064f19a20ddb3df675d858f76e5345724ea39c4073e6ea26cdad0407eacd43dc2fd4aa726f96b7e97

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0657485095ff735c0aad86a3feaacfdf

    SHA1

    0967b7c0e3ac08e3be65e5035dbfa4a8c92dd745

    SHA256

    36c1731c3dd30c87717d522c99365d09737cd4795df340cd804e11b2af5bf28d

    SHA512

    6f7cb91cebf6f7000625bf95aa13f966154c804582c431a2ad2b1e82a4dc3bfcc8d83f0ac5367118c95f3f4a5d281b08bf0facfa3f60e5aa52260e1305932ecc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    253ae6918a73b2d6ea340119ec1c6bd6

    SHA1

    ad94a8f24177d06c188aaad79dd1ac9117bf7d66

    SHA256

    004670425ad999fdb95a7f88a787aec42887bb640fefdeece69d5297f75ff176

    SHA512

    771d22c8274000bd6fc00400535ba04c450e73cb0b6b7b674d15c10c5d4a4318f43c1a803d0db6bdf1194b35c8ef5d721c7be7ee3a79e17038283aa489cbe185

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1d1699a07ac5796ff31f8305b618dad1

    SHA1

    273f64e3102ca36266d4854fa0f1bc4825b1069c

    SHA256

    10b9b7c83fbfbe609c0dec591a29a3b3c09dee84ca276cfc7be316d3cae1924c

    SHA512

    d436c7ff9cab0b3c625cd207c460352e15e638c07b08c78cf17f7cbbd5271cbc5a9603f09eee78d900474dd93b8088bdef1a5136100e71db6ef2555b5b92d9bd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e9906c97c63740ffe838fdda14868bd9

    SHA1

    38c82ee988eaf76d4239540ea3a6df8f06527615

    SHA256

    b8a2762fa33b77e9a0e1a4ca99d9e0fb7553bcfc0c56cf986cdffb817d7eca69

    SHA512

    5bc0a0e0608d44c3aa0d26873cbf01e640798bf9b17fe220bafeb7c1dbc5d5aa465d323bf2cfaf4d283f5cdc271c0e58676e558551d79930452f4247bb9c3350

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    292bcd55b2755354c2296fce1911921f

    SHA1

    fa8da6d83dec93e23e568cca2b835fc8ce33f89b

    SHA256

    a4ce116729e39b45352df6c6390d0ed5f95281788e6b5b29a5dfe2b935cae033

    SHA512

    4245a08055d0c88171e4f96771d6543c3c9a54ac2b3bc24e1dd487f009a459d5847b4c25c796ecc875cc8835fd96829323d15f205209c4f8059523abe7b6100c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\Internet Explorer\Services\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico

    Filesize

    4KB

    MD5

    da597791be3b6e732f0bc8b20e38ee62

    SHA1

    1125c45d285c360542027d7554a5c442288974de

    SHA256

    5b2c34b3c4e8dd898b664dba6c3786e2ff9869eff55d673aa48361f11325ed07

    SHA512

    d8dc8358727590a1ed74dc70356aedc0499552c2dc0cd4f7a01853dd85ceb3aead5fbdc7c75d7da36db6af2448ce5abdff64cebdca3533ecad953c061a9b338e

  • C:\Users\Admin\AppData\Local\Temp\Tar4A4F.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06