Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    120s
  • max time network
    136s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    11/01/2024, 22:35

General

  • Target

    54c3627e65034dcf85bcfd19ccb75d99.html

  • Size

    17KB

  • MD5

    54c3627e65034dcf85bcfd19ccb75d99

  • SHA1

    8c20b26644572022a23c0c9019651732a19c75e1

  • SHA256

    64fcc0f69649a0d77fd4f809408f537328e13bfa81f9010b967519a440c88a50

  • SHA512

    d4ffe5791f06845f0da6876dea296f8d98daa764e7c5a62f39c756b7bc699358cd753e1ddcfcbd756ede3381bbd675293ac2a96945350967149a1509dd0139b9

  • SSDEEP

    384:xk9u0nhb3pp4Wjgv6sfOl86zB3E65027QjfPtyPQ:xklnh1p4Wj06v+er0yQjfPkPQ

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\54c3627e65034dcf85bcfd19ccb75d99.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2236
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2236 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2988

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    60a4971a30c93fb22b232bec179efbc0

    SHA1

    1eda8df2a48c8f353ef0b3725c89fc44d9e4e5ba

    SHA256

    9fb26738094695031e8439594a92eb22b3a185201b8a5bbd4a4e72e9120dd368

    SHA512

    a65d0eb52bc4e3284a7c1cf34f5de628435fb253b04e574a76d723f84ea488786297ed44e68268a5551ee1341b36a8ec7e5d9a5679d2ea5dc9fbaf7f5b71a97a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c9f92216bc1953b8336135ec0bbf9535

    SHA1

    b36d278a74eb2afe6eca1a405edae8c3f8c11549

    SHA256

    53a1f7e2fcce22c369fd96585024ab62ab87a907c1aea7cdc95103bb59e33065

    SHA512

    5fd6576dfe7d345754b4553ea9a1fb4dea197bdbd3c75d39b3395b857fe217cca333e9cd3fc83d03750b5daf5d5a91054fa8aa983c46df3b7f4adeb3629601f6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8c0922bfbeff0815f019b6dad89f1847

    SHA1

    1b75c3af084dbb0d0a85d0caf9232d9584221b47

    SHA256

    6c1777b6f895f3cb6c360cba7a68de0251bb09b037b4a801a72750ece99d9ce2

    SHA512

    e249f88ed223cc7b4028ec062c5f084df5734aaa02a05641a5516610bf51436d5999293a6c43ea182f58db01e343242f7e168c851ae81fd3f796dc7fc35cc57f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    806ddc44d7e7185ac1e2e62d1c08e6b0

    SHA1

    6de004cb81c165c4f8a9ed3f398d8d44ed564fac

    SHA256

    63df60a4599087a69f98803a1c899deee967e53b9c5e1dcfe7644401302fc329

    SHA512

    6ff8e11b92ef667c5230ed36ec2ae19810ec999a3d6c8202f44d1b5c359f81ed0210fc7c459c608b1d02053b14b8cd17936ad27f302a0b41f7294ab96214a337

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f50c2bcf4ed9892dbf244f0097ea94c5

    SHA1

    f96000c9a996c0eb7707ea7228be82072412e109

    SHA256

    c13862998d5e33653937467b11582036092d1cbe8e355184306df19f50d0e0cd

    SHA512

    d755c508de3689b627b43b175702dc7d2abecfe8de072641202ba445bc6991e572c9db645150597d6c4e0831bd10e11b8a5e826726d09b4b1c7fb81a5dc17670

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d04303b7cd329bd6c6262536ca539219

    SHA1

    f11e526dd9c3583ffef63dc63a9c4ab7bcea04f5

    SHA256

    d6524dfe8eb30d1ba39aac62254fa7ed91176ccb04bade764230c33c8e36a849

    SHA512

    fb1549a979c9be5a24dd6ecd909c185b2ce8f6392be8d33b5fa50ef9f72d2cc29b26c8e78ce48e8617c50ff6a81a0b63113923c96f1c3aae966eadb47cf6f885

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8f443437365596720f7a837469459105

    SHA1

    93f241d3f35f1b8a3afc7c9f0b63d92d6fa1ca5f

    SHA256

    28fcd421edbe39d9d752e1bb8047c8caa76acf3b3c8a0cf311368e6145bfea49

    SHA512

    937dfdd25b814f8f7dc5b4184b999e82e6467898e49ce7f2ac16f75a6df5c2cac2efd1f9817319bca7a49b1fc2469900196855fbcd1d301c05d96aec9e393d47

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4a28c921fac8ba76bf1bfc6490391682

    SHA1

    78d98d544e91a8c5c38fc5469ef08aa39fcb93cf

    SHA256

    484c3816e16dc8b21e1133d8b5c348ae94f8f98afddfadefa6ff61f06418887e

    SHA512

    8eae38a0f31e04e1676ab2f7997753d1495702510a4dcd8b100077aa45e69f8ff62f3a5e243f271e7ca06463bc006060fcfda81e0f9da9b670986f0a38642675

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1a990ef59f46ef0f62c849373c798569

    SHA1

    8f9ea38fa58cba2d3649c06c60cb2fc8560b8f3a

    SHA256

    01ccb9c87c678999bb7e2b83a3a620b6ddfc44a35159935fdb5436abfe7c568e

    SHA512

    99297f27b0c6852a46711bd2b5d4af83e622981727bf6a69890b1f41cbc026d978bfb601557e34fa2ce084873c8a8c212a21619c80c6bd50901e5d47b05f5bd9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    858aacf5be08918f7c34c5b1b213fc04

    SHA1

    dd99f368c2a225afeb4b352bb30a665381c7f767

    SHA256

    ca4b84a2b1f8e67c775a261d62836ecb2e017145d00c54624cda1dd44a585204

    SHA512

    586f9ae7c3ce8912fc40b9da215fe82641ac5399539fef42810cc5626201a8fabf0eeb1309cacb70c3df9393ffebffa8d6963980e28ffeecca63325c1b72032a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a8ca0319a7fb4575d604042ef0d21c74

    SHA1

    2bf55b260458dea4836c157e304a956ea12d10ef

    SHA256

    33fecf4294e2219294c5455ddd9a899a3268a51b386c59295859bbcb11547755

    SHA512

    a67a60a8a97f76459e2391afa63cc12e151757d8d6db0ed75bebd386609d2727865f78b4dc31c56a029707eb5219f9a4c54f637389a758c2f31a7fef17af0096

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7184940a2940bca6e5d272dcc4759815

    SHA1

    5e8648d3d61f9b953e6225106f6456de549a2ab1

    SHA256

    f09cc26913323074e029acf62fa9a8a6a222c658365b47787f2bc74eff347936

    SHA512

    db563f4ac23f5691fc68bb0b487f65b57d02a78d64a8c6fe760e1d5561f080e0e835603e4f1a26bc5f03a79546a928a6d8968efaf191c3d64bb62f32891fcf52

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    24fcbaae5de75b61bda04bcff18de51f

    SHA1

    3137bd9290afda20c42558afa4b9ff98720542ae

    SHA256

    e62bc9dfaad20b9b324e78378311b09bf2f18418f62bb8dccfacd401a8a30901

    SHA512

    9587ef8bcacf472ed52a8a5f0c45a1a3033dfdf6c97492cf1f410bf932d168db0179243cc07aaca500621767b44a77c36f9e1adb7eb9cbc13c3d25fc9b855954

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    abb36af954227e65176c242294a31f01

    SHA1

    b8ad335a8ba4e56962e9ce8b5648a3ce6068f887

    SHA256

    b23ca2f6c5f1b1a4794566c57eaa754021071e7619020eb23daf85b3f8735c4d

    SHA512

    95618428e49624c88090baf38698bcc6e94123a6ed6005a80899f93571f6f7831fa83eba4342c875836a23d16b68c13976c0f8c9ba6d1584dc4219c68018bfac

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    518e2c743afde24ad981cac96fd69c69

    SHA1

    1212a810f9849e7e4216e1dc21f66c9bb1e25a45

    SHA256

    54abe52e14c4203b11d576051de7de03883f1516e664002e91a101b5ff2ad4e1

    SHA512

    bb4b9ce07e104538f73f96be8e6cd8aa977a2a8c864fcef9aa18e3690c72ba4783516fbf6e56f21a6d9140eeac8a13598f2a60eb895d752ae3b0b8f4010950fb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    30fee19c01706c546db1bf339cfefb1b

    SHA1

    bb8fa313786f4dd1151aae97ca8eb1fe122940b1

    SHA256

    5158a79d4939203c27e2a5cf537f3eaef3f225a9e14c6092b8f83e1ffc07b72a

    SHA512

    64e725e56d6ab3bc2008120c885f8dc5bcc803f7da01f8fa721d313622acb0a343c928ba7ae927fb9126e62fda3ba0008689883b5631fa7d0a5803160f62f041

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    60e470c6245139cdedd32aedf95c7f45

    SHA1

    5305b1bb384266995b492530fc93555bdce15016

    SHA256

    d3a3ca399fd867523c7a6e8958805051bdf2bc98bf0cb121f14349bca6c0f679

    SHA512

    05eb30eb50d9685250ac3aff46b06c251b594d1b4da6a555f9c183c0a569765aee3d01162c12b87c95655555d21804864c1fbdaad90cfda286e32a8566afeb5c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    17a1ab176732cde3690b053c22886ab2

    SHA1

    7473bf3108892cbb742f83f7c9842dd7994c0a81

    SHA256

    26d82cd046e65d1fa92787e4eed00b3cb92240f2bf885762a3c4050efdadbf50

    SHA512

    942e8a0b6a91aaffdd0ceac19696e19c1237f4bd46dcaa9d6aa8ffc21fda88c1c2572006404d7f71a8ae706eee6953d5a91ec4668223a46c5355ca55d2d95b49

  • C:\Users\Admin\AppData\Local\Temp\CabC459.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\TarC587.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06