Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    140s
  • max time network
    160s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    10/01/2024, 19:42

General

  • Target

    51701991a538dcea97ed931e14f1efa5.html

  • Size

    36KB

  • MD5

    51701991a538dcea97ed931e14f1efa5

  • SHA1

    1a16fa6a13da07c1fc9c257f861f0cf4e8161dc0

  • SHA256

    984d0f79e4b14d931103753c3ffb4e3f01b04c6b4b14cca6ded0f8b8e5aa34c3

  • SHA512

    0b480fbede3b9b9883c339fc63c1041b476887bdd6660b274d52b122a07d25178af4c0f661b39f6ca7b15b9f73a74f8ebe8694aaac81cd084f59849e6368a30c

  • SSDEEP

    768:z3pwjkAph0g4XbWJR4UhSImzZ85Jvwtvywh24/BKMIhwVY6QOxsI/MWQ9t+k0u1+:z5WkAKvhVBQOxsI/0Ek0QuqZG

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\51701991a538dcea97ed931e14f1efa5.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2000
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2000 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1744

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\070E0202839D9D67350CD2613E78E416

    Filesize

    1KB

    MD5

    55540a230bdab55187a841cfe1aa1545

    SHA1

    363e4734f757bdeb89868efe94907774a327695e

    SHA256

    d73494e3446b02167573b3cde3ae1c8584ac26e15e45ac3ec0326708425d90fb

    SHA512

    c899cb1d31d3214fd9dc8626a55e40580d3b2224bf34310c2abd85d0f63e2dedaeae57832f048c2f500cb2cbf83683fcb14139af3f0b5251606076cdb4689c54

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    da6a8b6bf3b243d9ef75c0070be07106

    SHA1

    8f1bebf1b458e5d22d2e8be803b4688d81a816e7

    SHA256

    2918765fd9b9a90be8bd9059c2940614c841cd63d2e5fb7077a5f448ccfd87fe

    SHA512

    2257320822b2b0f4d3271db2784e2aa2d9e5405d27ccec78dc547c64e245b7a9a7baa0395139085b44c76a95dc6f188d37ad33304136ace8971f5ac8adbe623d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8a3fe45ba07f619f2354d496ab52627b

    SHA1

    81edc2df1f61ce265e86585f7c69f07bf2b887ab

    SHA256

    7e39937b1c4080251147cac5df1ca9e87ca17f8fe8554365f88467bc08650ba6

    SHA512

    55a9c8cd4fb2a288d1b92001e5adc0b5aaf438b217da718282821a1ec8041cb15181125b7f9cf8c7bb5f5ef806116ab409d74a5e4507b457db99b04c8e0d5c80

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    23b486edfc2bcc4e3ccf3b83f8406563

    SHA1

    7f56b7ed48369b6c90716d60d749a88a139975a4

    SHA256

    7ef2663228ac858267ea6e73be31698e07b295708bea4391abeccca536c29a08

    SHA512

    0c3ca35477ec89fe1a971b3b524665c6130246ef8932039f4683d99f223cd0d71f9f98bcdd506f854d41e562e9135a573140bad0a85785d1d3eb99784e79f4ce

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2609415eff92a36703567898333d7dda

    SHA1

    09bdaa03dc41a9a63db7f616eeb60a593443ff05

    SHA256

    cbdad3df09bb6dba5f5164f171dec45b1e71ced02d3af43fa29c061b806869c6

    SHA512

    15ec80f51e720a13bd5f21297ffe244279867316f911af827afca63dab375b19fe29f354685e9ddddd5077e81a3bdd474ae81391b04c0f3032d205f2851847b7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ce64694148abe90df6873cfa867187ea

    SHA1

    db9a4f3c03f720bfe724688762d85ec4fb088f5b

    SHA256

    54124d7f2769186c20f4136e8c557ba9163780f04b301e813a8771a5725a0f63

    SHA512

    9f6feca2b6f81d69f29349a16d8e17a826b3868371caca4320559b4118bf44bf516f57f6d6bfb159cabca92ddfb5b39d84845e6c79fdbd1e01287d726462da25

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    622a68cb010fa3167d8908a8502d40a1

    SHA1

    1bc5fc9bac25e26f840f03326fe4c5391e72f50e

    SHA256

    6ae134ed0e856eae1774b2819f16cb57d233e54cb074010b971981e16b623e7d

    SHA512

    8f54a186b85c63aa0fde43ed737454cdfe49bda969f438259e9bb469c1533247875c5e77a02a49743fb1f55a8a9dc2d01bb318efa7677d173bacd7d6bb9a7cd9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c93b4bda4ef782cf584ebc9de75cf00b

    SHA1

    9328e2e60e192667c4e0a2a52b01aa7ef3c0f943

    SHA256

    5180ceb1637390bbccf1a5acc63d53615386c2fd698b65d7b8ee3e21835b2088

    SHA512

    a88b56ec9a920718f5cf3a0bfe3cc25d88ccab5f55c0aa3fbbd489522e1cac687bfc0b8ab707d6759af54f4660bbd2560552641d72409d59f4fab1aa3a918797

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\A89I98IL\platform_gapi.iframes.style.common[1].js

    Filesize

    56KB

    MD5

    f6140cf2e81a9d5b9bc96970fe1946f6

    SHA1

    e18cb20a08d0c13d44b72e36e9560aec2187abce

    SHA256

    68cc8a99c8ed5cc0eb3aa2146fd34bee0051bfd98faa3c03b83c78b4a12a8bd5

    SHA512

    1f61bf7228ae9fc1b36249223f4ca0675da05beaa6c00b28b7fff500e0527ee237d139eaf6793ece67f8730dfff0207bf945a848795aab7c57301433449a8acb

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\YV6H14B0\cb=gapi[1].js

    Filesize

    133KB

    MD5

    288c5ba5b7001fe841c32f690f62cc93

    SHA1

    29aba9d8e4f7cbe25fa5e64b9ecbe256e51fc789

    SHA256

    c2f33dc18eae27d4e878bf837dd97f1bde5151e44b0271408535bb93265b8c52

    SHA512

    e375d41344a086d35accfb02bb1f91e2dd383db032af387fc3d6b1230057cc5e432e9b2cdd976e51425b4f587391d42f4d9d857c2e6f11e822a65edcb85f1c9f

  • C:\Users\Admin\AppData\Local\Temp\Cab87C8.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar899F.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06