Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    122s
  • max time network
    172s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    11/01/2024, 01:41

General

  • Target

    5231b585f2d3b2e26ba5866f9a525b70.html

  • Size

    3.0MB

  • MD5

    5231b585f2d3b2e26ba5866f9a525b70

  • SHA1

    f31cf18d90b06a7dd86910d69bc2d3f81dee58c4

  • SHA256

    598a3933c43f5c603ce29b397ff2f1b08fb195478c6b86185e44f6f8a4d9ce78

  • SHA512

    8afad63d0401dfc1b595b926eeca813caa7ddac42f40950d9dc388370d14832c711196d535815b2382af498828db94524e4ba6e7103c84f092808c2da10b2adc

  • SSDEEP

    12288:jLZhBE6ffVfitmg11tmg1P16bf7axluxOT6NAW:jvQjte4tT62W

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\5231b585f2d3b2e26ba5866f9a525b70.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:3044
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:3044 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2668

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    66305c58973319d3e81e1110b215c227

    SHA1

    558510d17dcebe20f743efe1a23c2d4fa1fc480d

    SHA256

    bde80f5a4b09dcf98857e744a67fc1107c0e682bee055eaecc1bbfbfa1254eac

    SHA512

    8f9a29cb8e70e3188966842fc309842c4bfc08e8df27cccfd1c680d9064457ef728ed485afc19c957f77c95ea8259560579e44a9d1b5f2266022507b5adecb2e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a8ca655a421f817d39e6bdd80dd62451

    SHA1

    ca822b5bf5c5753e21230188ff5b1e798bbdbe1c

    SHA256

    9642612d5f65fe0a2a453dd3e0d23e470f88c8ed7f8488acd5b631aa08478f96

    SHA512

    07fa52dbbfe18b58b7bd9303447b07e6b860eb5d3ca4b7d5c03577e0de3505090e883a95201d11fd3397342f70ee55e1ef38ab25ae5d82cb504e46c13a65fb7a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ad8db9bd943407d867e57da41a74a9e2

    SHA1

    730d1db36e2cc9a55da7a4106c7dc942d3c9605d

    SHA256

    0cfb9185a9b92cce0b800fb40b2dafb62bf8cf8fdfaf13bee1c61b99897a8844

    SHA512

    b9a5bb08f1fa52706914b2a8d11e972083bf9925fdb1ee128e99c52025a29f5550af11defdecf298540832a68a633d3c6c343f9e2d306195e9600cedf016ee9c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e4504b6f20a5a8a4a8e2f2fdc9e52bf8

    SHA1

    2ce1ebc1bf3a9c0182af5773f4fc2c1d24e5026b

    SHA256

    66911716390f0b4bc21bc4e483184eacdd2e041ee0e83794aaee791abd7a39a0

    SHA512

    91f0bcbcb4bfd049d31b7e4f38d234a72b651667133aff4b6fc7bed7174b1f5e4a08f3a4f6dc6e4ca701cabc4cc2656c75d2d1f180357e2ed44df21cee080b9d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3cad1ee8436d4bab82f66f002320437b

    SHA1

    1032c7f87da255544f2bd7721fc83ceeb91a2d36

    SHA256

    a074f795ea74e2b350808208d412cac81c4c912fc23586f29f5433526117ce60

    SHA512

    0cec3b8965794ead46d6694f00a391372a83cc7b7779f74c35d1f6409e62033c1f7b9da8803db2eeb04426d94f0ecdd41531c525ebcf3c82f6de0477bc0c3580

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1ecc90173c3591e416169512716a3386

    SHA1

    41dcc3b133fc3a3c9741c94e2557f0d34ae87d3f

    SHA256

    4a2e6e62453b95d4024e04b4cdc78b21e2fa83f225aac43dd6a7196117465b64

    SHA512

    78311f7b67017cac6adad47cbeaa91589a5ded2804b73fb50535319350778e81b25c46e4f782c46e8e3de29aaef5fb9b4b8c599ee1215257bddb50415f59f3c4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cb76824b6d941ac49225e54b0b84fa70

    SHA1

    6dd44cd3ab70318b448ef8cbe14588ec44fd57fe

    SHA256

    adae40a3675c855141817e43ec488c843d3e25b52171441402d0727caea82fa9

    SHA512

    804cd392ab9b6c2e567912c85558abfac87b832445f25eb000316ffef1884191912e9205c97e9dff15ea89df639df6bcb859aad723d72404684ce0f44522002b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c87c9164f2184a8341bc9da9fa8d09b6

    SHA1

    57404685e0bbe428a87b964df031c5747d4f2691

    SHA256

    f002d45db04a3672338f42b03a804e74758fd9b6408d47a197c2ff33c05a8cde

    SHA512

    59ffa3ab410af30735265a6618d5d90291cc57ac4854f0d27005f24aa5cb3825967312357a28703f5a00d622855cc425ddb405374f854f01ed2be335538251d4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f1c2de8e8c931d4ab42309f693fbee9d

    SHA1

    13a95a8c465413efdd8c0d5ada912c8e1e78ac1a

    SHA256

    204cb4b7c851ec5cde9262883ee5972c77387232aa3280035d33b0db4b3a03d4

    SHA512

    53510c54967381becaa3a1e611b24d84b78e1555ee20f8355cc8ba090db5839fdd76a8af44a77e96a7735575d6db75f8abafcba13701bbc55fc3a78471a11e20

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c5313ee5bd2786113eb79f37ece9b592

    SHA1

    02a1af4846b65638e0a0faf392bd873fdae5cea6

    SHA256

    cde8542362ed121b251cd55d21561d6db8699b12247365a5ed44a7985e7836ee

    SHA512

    158c10161525efbfbd835f0f8c8a59c3cf3821650408718e488d7b57dcfdc9edf4428e2cfb0f1a50c667aed629efbac0c8da2d0812e63354015aa412ba01d61e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    47349d393bbdda1f072a878813e8b5ce

    SHA1

    4fd4e07d47f494ac459ea391c6db3ceae5bf535c

    SHA256

    51f1cc38f0481c296558cc6a87ed5a5b388ad953d10777acf4b16bcb0fd871ba

    SHA512

    17556b1e1af60734fefeda9fa581d1e3ea36a1cc035a42204a84c463464595fd6d49b712202202f835ff0e6ab9510149a1a7e6ac96c8e022ef733bcc3e8fbbba

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f33dc5f87c2011ded5a38f75e15393b8

    SHA1

    618df7afe1435c5054fb4560b623f8e6cbed51ba

    SHA256

    5bee6fce20764991798b14ce670db050e4a2e4d4a4fb7681b3cddc976bee30ba

    SHA512

    bb5218b89c69225d49c8a3d494ed15664767137ef31f75942974782dbd8b9ec738ba0be867f526fd78b0e7b360233e554adfb9d1a402604d82b2f1927071ae14

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    259b29988a723ef009b2c2bcd5f55532

    SHA1

    0d924c5441a4f6d68ecf00bb50edba6ac1e9da26

    SHA256

    ed7ca758ff333618bb00cda16221c951d63a2b9347dd5d93d9124c14a33dec11

    SHA512

    312bd6fe39d828bc1f246862c7def54794928d380068ef5110012a4bd553ea79f0a11c5f74d0774b4a131af2de45bd3cb79badd8f91637ef257001c3d3a43dd8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3fd4ed6eef8280d754d31df47d0922a5

    SHA1

    0416206233c84fe6b177c632181e282caab62e15

    SHA256

    03698a2877f8a93a2296b618cd2711ff8dd538ca1e7eaa51f838751a82732296

    SHA512

    2df124fb18a8ac543a26e4c28aedebdcf5c6562ef6f902276b29740fb90a04c770dd29c2f07427bb7a5fbbe17dce26afb32f7f52565b5131ea7b02f5d8310aa0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    35010e7048bf710cca2e16c67056c346

    SHA1

    6853de30ac388d00079c523d5e57a0d996a4953e

    SHA256

    0895ec35af882303b09ad00a11a737b101a779982db233c3b3592116d398256f

    SHA512

    e516133c5fbab76fa229e34576dd9cec5bf04079a5ca97b3512a3029ee56808b629780749423ea2e7700d23af9e3654782c638bc0ebf8794fe7218e4c09fe479

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    471cba76223cee92cdbffb72cfed3ac6

    SHA1

    5d51c6c97d815c7d318aecac4558201fcba01ca6

    SHA256

    bf69314198cca10fb46a7e5be63f21c6bac7943d4ec2792710c86008f1b9cfd2

    SHA512

    79f315676ce7966c20564af6faf006fb255f120d056349dc4764793740ba3f23d5439a43854c9ee4501c5093be932bf68f9f99019aaf837c67ec9597ebaa977e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    869094e37975487dd3a1908c49983fe7

    SHA1

    638bdadf311abf6f5ec05fbe1613753ad482a3a6

    SHA256

    5a7b79a099490c4133b2e63536aa5cb779c2f2a5c7b9a0befe24edaaa7075624

    SHA512

    b6f0d2e9a4f390b4176ca2c615b75f4b9e0d4772f9ea0af2634a1a959872b0e3f467c268dbf7734ea40512d38f9ef38dac11c2195a965db76373b65d24b4c06a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e8eada44aec1b87b31dcc433efcf30d8

    SHA1

    f79e71d60a8a7cd51a911f4736c37d4d0a061f55

    SHA256

    6eacb3a1da4a8e69eb1661fd570a39c5a6c0ce7c670ef2ba4e31a398ebd26a10

    SHA512

    ba486c6acf8a1f547adf64e5c8257d9a33a7d69e089428e447b6f4ee38ce1427a98f75b1535441d3f2d9c1b4c273bb5a999033c7cc03690bb91c02b5111296d7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f9172f93fa7664ef180bf92d3c4b5698

    SHA1

    27a3d03158bf8a4f8afb324062e217484fc6cf75

    SHA256

    9fe2a513da709bf78d9965c050c71f6843968df409112877859a80f71a36bf3b

    SHA512

    ee92bef92fdd3bdcefbf560298571107debb461ec629707237b1bef1693acd67e6401bf9cecf880e833650f5e2705892c9c38e80327e967949c32ec2a8f8296a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5524a69719de77e6334886e48065f291

    SHA1

    22a3d98cc95df0c97754556cefbd4d4450c54fc1

    SHA256

    7412d4f3fe2faa1b1fc125f4dfdda5b7393a6f9b63459cf44b87758d16474b64

    SHA512

    ec48a233982b609458bb3b24850623da468861acac8ad63a2b559f7e0e081ede949d3fd32600880d0cb8cc34fcfa72c591fcf66a2ca90746b31f61869852994c

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RU3RPYUN\jquery-3.1.1.min[1].js

    Filesize

    84KB

    MD5

    e071abda8fe61194711cfc2ab99fe104

    SHA1

    f647a6d37dc4ca055ced3cf64bbc1f490070acba

    SHA256

    85556761a8800d14ced8fcd41a6b8b26bf012d44a318866c0d81a62092efd9bf

    SHA512

    53a2b560b20551672fbb0e6e72632d4fd1c7e2dd2ecf7337ebaaab179cb8be7c87e9d803ce7765706bc7fcbcf993c34587cd1237de5a279aea19911d69067b65

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\U9VC31Q9\jquery.min[1].js

    Filesize

    83KB

    MD5

    2f6b11a7e914718e0290410e85366fe9

    SHA1

    69bb69e25ca7d5ef0935317584e6153f3fd9a88c

    SHA256

    05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e

    SHA512

    0d40bccaa59fedecf7243d63b33c42592541d0330fefc78ec81a4c6b9689922d5b211011ca4be23ae22621cce4c658f52a1552c92d7ac3615241eb640f8514db

  • C:\Users\Admin\AppData\Local\Temp\CabCBC9.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\TarCC3A.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06