Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
120s -
max time network
136s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system -
submitted
11/01/2024, 22:35
Static task
static1
Behavioral task
behavioral1
Sample
54c3627e65034dcf85bcfd19ccb75d99.html
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
54c3627e65034dcf85bcfd19ccb75d99.html
Resource
win10v2004-20231222-en
General
-
Target
54c3627e65034dcf85bcfd19ccb75d99.html
-
Size
17KB
-
MD5
54c3627e65034dcf85bcfd19ccb75d99
-
SHA1
8c20b26644572022a23c0c9019651732a19c75e1
-
SHA256
64fcc0f69649a0d77fd4f809408f537328e13bfa81f9010b967519a440c88a50
-
SHA512
d4ffe5791f06845f0da6876dea296f8d98daa764e7c5a62f39c756b7bc699358cd753e1ddcfcbd756ede3381bbd675293ac2a96945350967149a1509dd0139b9
-
SSDEEP
384:xk9u0nhb3pp4Wjgv6sfOl86zB3E65027QjfPtyPQ:xklnh1p4Wj06v+er0yQjfPkPQ
Malware Config
Signatures
-
description ioc Process Key created \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 90ec079ade44da01 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\InternetRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\SearchScopes iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000 iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Enable = "1" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\International\CpMRU\InitHits = "100" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\DomainSuggestion iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\GPU iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\IETld\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000d80bef292bee784c8e3c940d61fdfeb800000000020000000000106600000001000020000000cbf4ae2590f7ad77dc39964da696587573f2c15e7c1d541e83d3de2ce7e9e8e1000000000e8000000002000020000000844b1c1ce899e2d75e2c738de8204cd334291a1082e8e1cb91276fb30d01f8542000000095e27b6e3df489f90f6fb81196954b10b0b091150eac8a78f83bc09ce2afdcf54000000045671829a47b214bde75d6d471e83c4acf6b8e72ca2e9141eef21d520bc50aed4ecc81b5ce3e9462d779e1907a69ad4382d70a70d48741d24fac1d91eb851cda iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "411174411" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\IntelliForms iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\Toolbar iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Factor = "20" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "2" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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 iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\International\CpMRU IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch IEXPLORE.EXE Set value (str) \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\Zoom iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\LowRegistry iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{BF7AFD51-B0D1-11EE-B754-4A7F2EE8F0A9} = "0" iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Size = "10" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\Main iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\PageSetup iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\Main IEXPLORE.EXE -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2236 iexplore.exe -
Suspicious use of SetWindowsHookEx 6 IoCs
pid Process 2236 iexplore.exe 2236 iexplore.exe 2988 IEXPLORE.EXE 2988 IEXPLORE.EXE 2988 IEXPLORE.EXE 2988 IEXPLORE.EXE -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 2236 wrote to memory of 2988 2236 iexplore.exe 28 PID 2236 wrote to memory of 2988 2236 iexplore.exe 28 PID 2236 wrote to memory of 2988 2236 iexplore.exe 28 PID 2236 wrote to memory of 2988 2236 iexplore.exe 28
Processes
-
C:\Program Files\Internet Explorer\iexplore.exe"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\54c3627e65034dcf85bcfd19ccb75d99.html1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2236 -
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2236 CREDAT:275457 /prefetch:22⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:2988
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD560a4971a30c93fb22b232bec179efbc0
SHA11eda8df2a48c8f353ef0b3725c89fc44d9e4e5ba
SHA2569fb26738094695031e8439594a92eb22b3a185201b8a5bbd4a4e72e9120dd368
SHA512a65d0eb52bc4e3284a7c1cf34f5de628435fb253b04e574a76d723f84ea488786297ed44e68268a5551ee1341b36a8ec7e5d9a5679d2ea5dc9fbaf7f5b71a97a
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5c9f92216bc1953b8336135ec0bbf9535
SHA1b36d278a74eb2afe6eca1a405edae8c3f8c11549
SHA25653a1f7e2fcce22c369fd96585024ab62ab87a907c1aea7cdc95103bb59e33065
SHA5125fd6576dfe7d345754b4553ea9a1fb4dea197bdbd3c75d39b3395b857fe217cca333e9cd3fc83d03750b5daf5d5a91054fa8aa983c46df3b7f4adeb3629601f6
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD58c0922bfbeff0815f019b6dad89f1847
SHA11b75c3af084dbb0d0a85d0caf9232d9584221b47
SHA2566c1777b6f895f3cb6c360cba7a68de0251bb09b037b4a801a72750ece99d9ce2
SHA512e249f88ed223cc7b4028ec062c5f084df5734aaa02a05641a5516610bf51436d5999293a6c43ea182f58db01e343242f7e168c851ae81fd3f796dc7fc35cc57f
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5806ddc44d7e7185ac1e2e62d1c08e6b0
SHA16de004cb81c165c4f8a9ed3f398d8d44ed564fac
SHA25663df60a4599087a69f98803a1c899deee967e53b9c5e1dcfe7644401302fc329
SHA5126ff8e11b92ef667c5230ed36ec2ae19810ec999a3d6c8202f44d1b5c359f81ed0210fc7c459c608b1d02053b14b8cd17936ad27f302a0b41f7294ab96214a337
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5f50c2bcf4ed9892dbf244f0097ea94c5
SHA1f96000c9a996c0eb7707ea7228be82072412e109
SHA256c13862998d5e33653937467b11582036092d1cbe8e355184306df19f50d0e0cd
SHA512d755c508de3689b627b43b175702dc7d2abecfe8de072641202ba445bc6991e572c9db645150597d6c4e0831bd10e11b8a5e826726d09b4b1c7fb81a5dc17670
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5d04303b7cd329bd6c6262536ca539219
SHA1f11e526dd9c3583ffef63dc63a9c4ab7bcea04f5
SHA256d6524dfe8eb30d1ba39aac62254fa7ed91176ccb04bade764230c33c8e36a849
SHA512fb1549a979c9be5a24dd6ecd909c185b2ce8f6392be8d33b5fa50ef9f72d2cc29b26c8e78ce48e8617c50ff6a81a0b63113923c96f1c3aae966eadb47cf6f885
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD58f443437365596720f7a837469459105
SHA193f241d3f35f1b8a3afc7c9f0b63d92d6fa1ca5f
SHA25628fcd421edbe39d9d752e1bb8047c8caa76acf3b3c8a0cf311368e6145bfea49
SHA512937dfdd25b814f8f7dc5b4184b999e82e6467898e49ce7f2ac16f75a6df5c2cac2efd1f9817319bca7a49b1fc2469900196855fbcd1d301c05d96aec9e393d47
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD54a28c921fac8ba76bf1bfc6490391682
SHA178d98d544e91a8c5c38fc5469ef08aa39fcb93cf
SHA256484c3816e16dc8b21e1133d8b5c348ae94f8f98afddfadefa6ff61f06418887e
SHA5128eae38a0f31e04e1676ab2f7997753d1495702510a4dcd8b100077aa45e69f8ff62f3a5e243f271e7ca06463bc006060fcfda81e0f9da9b670986f0a38642675
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD51a990ef59f46ef0f62c849373c798569
SHA18f9ea38fa58cba2d3649c06c60cb2fc8560b8f3a
SHA25601ccb9c87c678999bb7e2b83a3a620b6ddfc44a35159935fdb5436abfe7c568e
SHA51299297f27b0c6852a46711bd2b5d4af83e622981727bf6a69890b1f41cbc026d978bfb601557e34fa2ce084873c8a8c212a21619c80c6bd50901e5d47b05f5bd9
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5858aacf5be08918f7c34c5b1b213fc04
SHA1dd99f368c2a225afeb4b352bb30a665381c7f767
SHA256ca4b84a2b1f8e67c775a261d62836ecb2e017145d00c54624cda1dd44a585204
SHA512586f9ae7c3ce8912fc40b9da215fe82641ac5399539fef42810cc5626201a8fabf0eeb1309cacb70c3df9393ffebffa8d6963980e28ffeecca63325c1b72032a
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5a8ca0319a7fb4575d604042ef0d21c74
SHA12bf55b260458dea4836c157e304a956ea12d10ef
SHA25633fecf4294e2219294c5455ddd9a899a3268a51b386c59295859bbcb11547755
SHA512a67a60a8a97f76459e2391afa63cc12e151757d8d6db0ed75bebd386609d2727865f78b4dc31c56a029707eb5219f9a4c54f637389a758c2f31a7fef17af0096
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD57184940a2940bca6e5d272dcc4759815
SHA15e8648d3d61f9b953e6225106f6456de549a2ab1
SHA256f09cc26913323074e029acf62fa9a8a6a222c658365b47787f2bc74eff347936
SHA512db563f4ac23f5691fc68bb0b487f65b57d02a78d64a8c6fe760e1d5561f080e0e835603e4f1a26bc5f03a79546a928a6d8968efaf191c3d64bb62f32891fcf52
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD524fcbaae5de75b61bda04bcff18de51f
SHA13137bd9290afda20c42558afa4b9ff98720542ae
SHA256e62bc9dfaad20b9b324e78378311b09bf2f18418f62bb8dccfacd401a8a30901
SHA5129587ef8bcacf472ed52a8a5f0c45a1a3033dfdf6c97492cf1f410bf932d168db0179243cc07aaca500621767b44a77c36f9e1adb7eb9cbc13c3d25fc9b855954
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5abb36af954227e65176c242294a31f01
SHA1b8ad335a8ba4e56962e9ce8b5648a3ce6068f887
SHA256b23ca2f6c5f1b1a4794566c57eaa754021071e7619020eb23daf85b3f8735c4d
SHA51295618428e49624c88090baf38698bcc6e94123a6ed6005a80899f93571f6f7831fa83eba4342c875836a23d16b68c13976c0f8c9ba6d1584dc4219c68018bfac
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5518e2c743afde24ad981cac96fd69c69
SHA11212a810f9849e7e4216e1dc21f66c9bb1e25a45
SHA25654abe52e14c4203b11d576051de7de03883f1516e664002e91a101b5ff2ad4e1
SHA512bb4b9ce07e104538f73f96be8e6cd8aa977a2a8c864fcef9aa18e3690c72ba4783516fbf6e56f21a6d9140eeac8a13598f2a60eb895d752ae3b0b8f4010950fb
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD530fee19c01706c546db1bf339cfefb1b
SHA1bb8fa313786f4dd1151aae97ca8eb1fe122940b1
SHA2565158a79d4939203c27e2a5cf537f3eaef3f225a9e14c6092b8f83e1ffc07b72a
SHA51264e725e56d6ab3bc2008120c885f8dc5bcc803f7da01f8fa721d313622acb0a343c928ba7ae927fb9126e62fda3ba0008689883b5631fa7d0a5803160f62f041
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD560e470c6245139cdedd32aedf95c7f45
SHA15305b1bb384266995b492530fc93555bdce15016
SHA256d3a3ca399fd867523c7a6e8958805051bdf2bc98bf0cb121f14349bca6c0f679
SHA51205eb30eb50d9685250ac3aff46b06c251b594d1b4da6a555f9c183c0a569765aee3d01162c12b87c95655555d21804864c1fbdaad90cfda286e32a8566afeb5c
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD517a1ab176732cde3690b053c22886ab2
SHA17473bf3108892cbb742f83f7c9842dd7994c0a81
SHA25626d82cd046e65d1fa92787e4eed00b3cb92240f2bf885762a3c4050efdadbf50
SHA512942e8a0b6a91aaffdd0ceac19696e19c1237f4bd46dcaa9d6aa8ffc21fda88c1c2572006404d7f71a8ae706eee6953d5a91ec4668223a46c5355ca55d2d95b49
-
Filesize
65KB
MD5ac05d27423a85adc1622c714f2cb6184
SHA1b0fe2b1abddb97837ea0195be70ab2ff14d43198
SHA256c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d
SHA5126d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d
-
Filesize
171KB
MD59c0c641c06238516f27941aa1166d427
SHA164cd549fb8cf014fcd9312aa7a5b023847b6c977
SHA2564276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f
SHA512936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06