Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    124s
  • max time network
    135s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    10/01/2024, 04:33

General

  • Target

    4f97485ced87dcd1f495e73d5b66f0b6.html

  • Size

    59KB

  • MD5

    4f97485ced87dcd1f495e73d5b66f0b6

  • SHA1

    ee63072f78cf9d8f9b4d5d779f4a5b2e6bc9cc0a

  • SHA256

    7af2c5b281379c97a45892dbd9942a02f21e9264495813bef9eec0b11414e8af

  • SHA512

    c90be2d18ec17b6aa6bbe613ddd62287ae5251e06fa3dc8f80dd187d02cbe79909b7a522f9d7142339b55fc5eb7a90ac13935745b984d3914534f99e376cc3f5

  • SSDEEP

    1536:UDHRd/lYopYIYGHYfLGRpJ7ifw5803vpOHjgs2Vckcs/K8:8prYaJpJ795V3x272VNZ/K8

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\4f97485ced87dcd1f495e73d5b66f0b6.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2268
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2268 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2420

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\E0F5C59F9FA661F6F4C50B87FEF3A15A

    Filesize

    893B

    MD5

    d4ae187b4574036c2d76b6df8a8c1a30

    SHA1

    b06f409fa14bab33cbaf4a37811b8740b624d9e5

    SHA256

    a2ce3a0fa7d2a833d1801e01ec48e35b70d84f3467cc9f8fab370386e13879c7

    SHA512

    1f44a360e8bb8ada22bc5bfe001f1babb4e72005a46bc2a94c33c4bd149ff256cce6f35d65ca4f7fc2a5b9e15494155449830d2809c8cf218d0b9196ec646b0c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4cc2567609aa7be3d6f72122c827e6f7

    SHA1

    eceb0206dc43f8557540126c7153ceb587f11968

    SHA256

    3fcf719e7a1118d4c342468e83898f66ce5d5947e99da0e75ddb659178b7f042

    SHA512

    7bc69510982e7ace92a925c90d30e97bdfdbe4fbdfb4b0263686d5e69a7c889c13c2807bdba0a0cdd0d65f0f2ff84342224de73093f2dfcf77d0256dcb73c53e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    74711ef3f52cb633cefffbf066db3cf9

    SHA1

    f765620e89a0796df2d1b516a77f9da2379b85e0

    SHA256

    31028b0209af6011ad00cb3d6ce2f9acf9baa5ad3f683f9b70c312775c65c0db

    SHA512

    187edc16599b8a0b79dbfa82ce702f2876fd67ee35abc71344ee06b1858c6ceab0144e34c8158074d75fb0a57dbd17fc96e7a4dbc6d66f8203bf996d05751352

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9809fa0a345956f6d7d48f9a549b8c3e

    SHA1

    c8a5d4350236d5f47efd89483598f856821faad5

    SHA256

    54cb592bbe4e4fda64905731811b63213ad3c0d7099300100743273c0c8b3a28

    SHA512

    6851a2b64cc50cbaf17a5ba2d3b7fab6adac5075d28455077e123a47ebe31f07c800a3b803f6f8815463ba182232aa51e6b4928e19bb67b16205e791cc8ab329

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5f9325df271c666b0ce5e4a5360560f0

    SHA1

    5ec84c58cb41b2447c323b3563225e01733f8530

    SHA256

    2c9ef7aa8c150fbe2d939f09386e7c88cc9298cd7b206923193a195825016f04

    SHA512

    ada6d33d262c05d6aafb435c026fa32bac0378e349dbf580545d497f3242b5d8c9f46aab79d1d6c00aee5565b9ddd123f13786a83f0fa4054589e35ca80b855c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ad1e6120925e4906363a0bd57eecd9cb

    SHA1

    e75dedfb9f7388bd38b7ed0392280a727d2b440b

    SHA256

    1edacac2fba819865a4bd562ca4e610f7799872c49e17f294602b05cf764a9ec

    SHA512

    b1fc94b35db89f4cc908069a587c509e67e3f9190ab4e71c80333d666b293e701d2b9015d6a89a878bac6b852c320ac028b1b4503fc4ee5471d2324e0c6535af

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    38793108113c3875938fdd62de324ada

    SHA1

    42fb85880788e22e6276616c324356cd7f00576e

    SHA256

    5b9785d26e47c8da415e38bf1682b5e2bf434e88e46eaef7e84415f8fc8ca967

    SHA512

    ec7b40390ccc2017a3afa8fe863ab74e950f24344bf3ea980b4ef3e067eb513dd06f3c08a5440424e56c544f45f880adca5cff47b1e6421153f6304d228cf7ac

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ec9cd74ccb84d36137bc2bacb08edf45

    SHA1

    af150d7fb9159b667e739ec4abcd1ea71eb7fecb

    SHA256

    8ca3d7838f673c79cb57007b428dd8bade30c668e2948263735305ad5d151aae

    SHA512

    13ecf8e2fb175e00c6f6eb5105442beb246e65b63180575e2f9a4f42d68910ce0ff132a91bb94556195f1932b3fa5962367570cec6a0bc8d92d434148454e147

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0cffe6f6ed1ee65abdbec5dbfb1c30e0

    SHA1

    6a28e7a1e43d225e1a9c6f958a0b76b833ef9ed5

    SHA256

    e10a1c9e9287c4a914cdaf8d50da397a3dd2ba1f2053874a22d047eee88b9844

    SHA512

    6ba1167ddd342d4d3beb47f5236dd3082f262d939a3a89e9d555238faaef44437f5c01dce34cc426555ffc012308f2ab16e3071fd40cb3cc90e71b55edddd4b0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c3d54194e67624e702bfcba17fd8e6d2

    SHA1

    ec51a09754f3527d2ba6598561670dcc088e814b

    SHA256

    770293ac6d4dbebcfc97b308428875526f800cbf3c91290e80bc813928972fa4

    SHA512

    1cb051657233fbe7a09fb157046c4f6ca66c063b66bf0d356ac0aa656d0e30da94990901835bd4bf5a075a0bb643f024783997cbaee21a6c78697b8087f2200f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    23c62d675fff94cfe0fc3160f5d4b80b

    SHA1

    7fb1e6c2c3867111b1fe982ac2eafcaee77c80f1

    SHA256

    44508de3c35781c25844e9e6208399368e54a0cb668727393ee8f236a8e86906

    SHA512

    a2b504cd113b7c9c2321b8b828c7f5530fdd866c0317f789b08bdd30a5bf56159064f7020b5e30d22e0484e4fac1fc48c6c89862d0ba5e162b60f25889143174

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4a1dc7ec9167f6c39f7e20e5a8b812f8

    SHA1

    51375e84c266a32983f779cd011696d0fcd7a414

    SHA256

    4f4768be2f8e6de71d29a3624fd8e7a2f5c2f4c70d001b22ec2703823419f1ae

    SHA512

    9703cfd4c49599a6525bf7501e157bad0fc1045c93be20e94619d7aa3961186ea10e673022c8347b4c99cecacd492178c7dd2e425983c239f26bf98992f3b4e6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    96a402d8d396d0da6751ada9ca9356ce

    SHA1

    1ba9f90493fd66071e2a53ca76d411d4a4368cc1

    SHA256

    5114b72177fda32004b26e3eeb39b0dc99820b841a6b34ac0744559676ba456e

    SHA512

    cc776db80033539fa774eea020f405d0d7c2dd973c7a532b03028dd80c93926e0209969727005395b49cd9691267ae216a096a9a2486abd48149b58d7be0743d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0454a47bdb5e40cb5da9ee74b89c3b6f

    SHA1

    31dc747817b0a067c99b3ae6ef4aaccd052491de

    SHA256

    c8d3327b81a88452ec1dd727b525b066955c8aa6389e6a6b9ba9dc4b2d6f2ab1

    SHA512

    94c6e2db60ada267fb3e31414cee2e93c712be87316ee305337f8e38f7ef8d12dc97fa576082d1ad2b9906811c52b77cd8ebe970173b15fc063b1e040f941dda

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f7e62610eb792ac260933acd80828557

    SHA1

    4a92adf3d3c57afab51e81ab8f7ae857b7ef0d57

    SHA256

    b58dc43eb27598358ef513c21bacdaaa4db92ecab1d0845a64c12e0025fb62f8

    SHA512

    90b90b4d7af6c0b48a18506a87f13f31c879c2a3741dce96a2e2275326d64d21488f68bfa60c2cc395f9d20ebefd1bfa10a84add0c3c3de7dfcf21c508b43f69

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e837053a30e6f086c7662656a1ab7e42

    SHA1

    1a9f95f1be9d8bf6d7236b37c7e4307de287ad72

    SHA256

    2fe12327f21784843780de1c7fc1893dc00f4d2c17c86d8e618434bcf9935704

    SHA512

    d8752edc64f8a2e7db5971ae2f7e67a4d585a21b0d10d0d9a618e4a24d9305a9159256d96b3c9eef97213e57cbda30f6c1ba986df1aae05d6810e09c5930dced

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    614331b7e5aa7fe863be374920c20a48

    SHA1

    348b1f3bbc619de1add64a3ed0b3522dc35c21c5

    SHA256

    b1e56ae173f3570a04cadf45205f1c800dd5956ac41fd9679a4a174638e9da30

    SHA512

    15f55065d1353e89cd1f8b7cf4db8132c0c0393e3b32115bff9e8fbd9d02467d4a70efc0e7043500e4ca1934c3990c92701800c86cc4c9f61b67319cbd0e8a61

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3a68fa2c8cb88197c06fb9b4aae03937

    SHA1

    ab6134110f1133d9fd8184735451dab32eee450b

    SHA256

    505b6402bce8ce1a5bc6e02545e56220e8fea2c0b0773b12d2bb5ca023b8b1ed

    SHA512

    5202c270b4448cf0d6757af80ffc89b2d36e927f3672ed58d06f4ffb697c3e8b6309ae25e43b634995f6fdf0190d93139081949a0747a7a3cbf1d4a0db6368b4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0505fa2c9c7d996117b22ef304564ca9

    SHA1

    35fb022d470f4a8946e279c7524ef0285d12dafd

    SHA256

    7e69e71d810275519a0ea47cf1d94d0758959a4427a6a2c2fd5ffaf4a089c381

    SHA512

    d42d6152927988a004f2c88c40891fd45c1498cc5ee53714e3b8e59e5fbe1bfc286c3a23a2cc903f0255ff99fdd1653f4fab29655ffa4028ee488ffddfdea755

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ab9680398db380e414589c77842cfda2

    SHA1

    829e293bca1c9be112079e79f304792aa4bb1eca

    SHA256

    bc297a5d55ddfa16f1df80da259cf32ec0e1448982062da17632d0778e372f1b

    SHA512

    cbbf083a33f7dc969ca33116a7e44c7f0bf27bd6f5a501a0ad92c9d577fd44e61614d04030947689904413246772a3c77bd9ba9324af0b2f92da2f2a8929c56b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fd828829a7941661269dff6af4bac18a

    SHA1

    8122e3a4525c200555842b02cb1e39e37235f76a

    SHA256

    b3d55948640fa9be741fab305bab6785fc08c731170d4b17ba61bd20cac61803

    SHA512

    485cdc2cc173693887cf28251327df606bdb174c4fc0b0109b492e0e5bedc07e2d4adffea7113d1769db0672a721d5e9351b6aeb085394c248f937b470c8b097

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a69bfc9509a067c9f070c83212a68507

    SHA1

    44d2ee5a727ed50a356b12d15a378af603098778

    SHA256

    a3109381873faa1970e466275fd88778e325bfeed5b769a118ddd718c5f3e83b

    SHA512

    8e8236d1676aa1e6d01846573d3e88fa4acd16396a997249288b44688daf72f13d27448b3deb383a7a931a40c8727bf76920f1a5d3ef69852ab9844fe0a168c1

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D0I6KXNQ\flaticon[1].css

    Filesize

    1KB

    MD5

    82622c832429bbee618a7fae12d46d1d

    SHA1

    b7bfb35541a174ca69773286f826e45f07937e93

    SHA256

    409f00280c46549422b0801572fe3e9d01329ca0b4d9105c5fddc145f10fa607

    SHA512

    052668bee0aa467f684a1645e88998a86194c1c7e8928e32c7c52c47cfc2af53334daab0e5709d4ee72c0dc8b8c1ae8590029153fc8ca6c1a397c16c6e66178a

  • C:\Users\Admin\AppData\Local\Temp\Cab6250.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar6252.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06