Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    148s
  • max time network
    156s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    12/01/2024, 02:44

General

  • Target

    5544de6d6ceedd0de19c9a81f698ca87.html

  • Size

    13KB

  • MD5

    5544de6d6ceedd0de19c9a81f698ca87

  • SHA1

    63b1441ed7c39c01e95440544c995784e3fdabe2

  • SHA256

    e2a909e414040c59887502f0ebc54ec8afcab5badea98cd51926e6e430e3b9b8

  • SHA512

    129b1e8137cafdc6c07eadeb7843748f5e46cd56952004b0139124e3a8a57453dbd80f2dde6bb3db82d93f14cad13eb5cc110d83ca0ce97e13956993a83c789f

  • SSDEEP

    192:xK3c+1hw5jcHcyKOLw/G5lYey/rKQZUYVKNk70KqyY+95bIRK4hFKlLfQbBKnBc7:x4caocHzMrLiYVF70MM7jUst6ntKk2V

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 64 IoCs
  • Modifies registry class 1 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\5544de6d6ceedd0de19c9a81f698ca87.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:4780
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:4780 CREDAT:17410 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Modifies registry class
      • Suspicious use of SetWindowsHookEx
      PID:2772

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\SQ0K0YQG\www.youtube[1].xml

    Filesize

    13B

    MD5

    c1ddea3ef6bbef3e7060a1a9ad89e4c5

    SHA1

    35e3224fcbd3e1af306f2b6a2c6bbea9b0867966

    SHA256

    b71e4d17274636b97179ba2d97c742735b6510eb54f22893d3a2daff2ceb28db

    SHA512

    6be8cec7c862afae5b37aa32dc5bb45912881a3276606da41bf808a4ef92c318b355e616bf45a257b995520d72b7c08752c0be445dceade5cf79f73480910fed

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\SQ0K0YQG\www.youtube[1].xml

    Filesize

    17KB

    MD5

    4ffd80ac8cc341954c3b5215a2f65582

    SHA1

    6151835d8ed584a5057d76a26597d7e6d94401e0

    SHA256

    61530f46601b76f9b39d4e10bb4026791490c22fc146255dfb829f932888ba25

    SHA512

    c7771b14374700784397f83fb9d39e53352aa95a980fcbf72f18a9e382845735e0f8c546ff7df9716aa7998a3c30c6072e0f398a43e7ae05e54f75bb08f7d748

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\SQ0K0YQG\www.youtube[1].xml

    Filesize

    578B

    MD5

    a0117425bdceff3c5053a4307212d873

    SHA1

    f2a7a9f25046f5db4893b4f1e44e6dd341c17ae1

    SHA256

    cb471fde37544de74a6a4887b4ae17c1b88e1e944f48f9fe9b73a12b0c2368a8

    SHA512

    926bcc0609058f162d66455fc2e257c6f1eb5fee0b9043b09abec72a9f80e0a26bcc6519b07ff43eb091708634defef62d33e9e8c98eaae27da05dfa909c92f9

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\SQ0K0YQG\www.youtube[1].xml

    Filesize

    578B

    MD5

    53a61a81c2b81d71a6b8b128621cf74f

    SHA1

    81ed32dd1f48e512fe1c0984e52da8fac3eae086

    SHA256

    f88e16426c6309be0a5eaffa36afb914648da680b86b13e98742d4d0cbc1fc73

    SHA512

    b2ce38c96dc583417a19e68566280c80a03e665df892f69082b373199af89950d56ba296516bcd8e5cdc1cc17cc218f8d98670c1dae1ef8c7e46d45ed1e3fe67

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\imagestore\wx7tnv0\imagestore.dat

    Filesize

    1KB

    MD5

    fed94ea7fca3c152f88b8de571fa2d31

    SHA1

    e354a88de0171e04ec8e67c06a36ad632a1fa090

    SHA256

    da1f676d855a5e0aa1c196181ab1c8c19fbc082638c8ed92eda282208a3331a5

    SHA512

    463be137700a6b3e92e593b0113587338a66a72941dfef1c5c40378648a8d441992c45fad77957e916e2b79b3f6da8bd89ad76bfb765e76c62acdccc4bdf5ec2

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\L3T8W3B4\css[1].css

    Filesize

    530B

    MD5

    0a127ad39a8ebe4207492293b556adf6

    SHA1

    17d3dad64e4f9139cfb85bbcca6659a8aa532a48

    SHA256

    c1294965425b5028a83bbe5eeed0cd9b92733ec41efd07e34532522d4c97b6e1

    SHA512

    5aa845c5c6c20259d9c6bc0c9fdbd13ff178ba4008865f7113387767db0ad39cd53c1d276cfa4997186fd39f21d30bf00caf8d092e5c04119d992368b1563df3

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\L3T8W3B4\hd-js[1].js

    Filesize

    23KB

    MD5

    6761faa022e0371e84e74a5916ebaa44

    SHA1

    5320c3d53d5447bad2a02c63208deca7fb94b655

    SHA256

    da17fb5b54c0fcd77c7358ff274823cb6a02ba0c4b6fcdf347c1ef611818bd9e

    SHA512

    a8cdba92942f299b648e87109d193a1f7eeb8f243eb2bbe4224423b512c400fccf930d81cd403a925fdf99220fdffcf89da69305cdc054963a64da470072d019

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\L3T8W3B4\p[1].css

    Filesize

    5B

    MD5

    83d24d4b43cc7eef2b61e66c95f3d158

    SHA1

    f0cafc285ee23bb6c28c5166f305493c4331c84d

    SHA256

    1c0ff118a4290c99f39c90abb38703a866e47251b23cca20266c69c812ccafeb

    SHA512

    e6e84563d3a55767f8e5f36c4e217a0768120d6e15ce4d01aa63d36af7ec8d20b600ce96dcc56de91ec7e55e83a8267baddd68b61447069b82abdb2e92c6acb6

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\L3T8W3B4\script[1].js

    Filesize

    94KB

    MD5

    95e8ffa91ef91c1e68f9d647feebe119

    SHA1

    efbb044430afe01e2987f5f436ba0303c23e15c1

    SHA256

    693880fbbc65bb93b95798ce3559971dda0c635db8db33b3dd6d1d3d0414e6f5

    SHA512

    af3349e738142f141d4b6bea3aec0601dac3c3ceb40c38c6add87c1d7b0a54d4d9f9b4274e2e8215d81ba15803727a7751ba09295cbe86dbf1d42b9f0e61070d

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\M8F18HYR\common[1].js

    Filesize

    8KB

    MD5

    56b21f24437bfc88afae189f4c9a40ff

    SHA1

    a9d3acad3d4c35da454e4a654bdd38f8d2c4e9d0

    SHA256

    cfece1b609f896c5cd5e6dbe86be3ba30a444426a139aec7490305ebf4753ed4

    SHA512

    53d4718e60a47526be027c7829f9ad48f381e22765790f20db35ff646bd994f8085b12b8fbeefd5b29ecda8f71f4c6c62b64652bc9a7256e001b5e4047c21651

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\M8F18HYR\enterprise[1].js

    Filesize

    974B

    MD5

    af2bee43df94fe1199040d3aabe8e083

    SHA1

    e49b31a366891b2b59ccda75d9c5342ff517155a

    SHA256

    32b2b25fb2aeedd3d10f5e851c224a4ce0cd0ae69976db30ddd4ca9ec823d6cd

    SHA512

    8120e2ed5a2edc94b7197b64e89202568685c9b90d9198b7b35a4f09417ab13206cc025449a3035610dc5086e1fd6935ee8519d93433136ee385068ab9f961a9

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\M8F18HYR\intlTelInput[1].js

    Filesize

    41KB

    MD5

    0131b7c96ef8eda32ab47aba87d481bf

    SHA1

    0e5cd24a4797f3d3649254bb1e7ab1d22b7718c1

    SHA256

    1aafcc8aa40051234444fd47d973660991991d492048adafa92610c410418f83

    SHA512

    e5fa133d8c4b8da05b739057bdae7ee154b18fd5e317a21c50ca9aded6b3713fd534c919200b55930c1d37537a6c0a20be47bd62a947125b348e6bf97c4b0b9d

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\M8F18HYR\jquery.min[1].js

    Filesize

    84KB

    MD5

    c9f5aeeca3ad37bf2aa006139b935f0a

    SHA1

    1055018c28ab41087ef9ccefe411606893dabea2

    SHA256

    87083882cc6015984eb0411a99d3981817f5dc5c90ba24f0940420c5548d82de

    SHA512

    dcff2b5c2b8625d3593a7531ff4ddcd633939cc9f7acfeb79c18a9e6038fdaa99487960075502f159d44f902d965b0b5aed32b41bfa66a1dc07d85b5d5152b58

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\M8F18HYR\js[1].js

    Filesize

    187KB

    MD5

    229264990094366d2a20acefc5656e5e

    SHA1

    f15d1d990258e3f004fd40410cde7f30faf31ba8

    SHA256

    034e13edc128bb0b70fb69725a887df63cc7a1451de5b13ef09ae1a7365d7741

    SHA512

    a5940e502836276d552dd999da74d62ffc2b9e70095791f75873d05fa3d57446528fb89efeb4ef0679a6bc287c49f59931ee633ee40b4a793c73081dffa01295

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\M8F18HYR\reboot.min[1].css

    Filesize

    3KB

    MD5

    51b8b71098eeed2c55a4534e48579a16

    SHA1

    2ec1922d2bfaf67bf3ffabe43a11e3bf481dc5d7

    SHA256

    bd78e3bcc569d029e7c709144e4038dede4d92a143e77bc46e4f15913769758b

    SHA512

    2597223e603e095bf405998aacd8585f85e66de8d992a9078951dd85f462217305e215b4828188bf7840368d8116ed8fb5d95f3bfab00240b4a8ddab71ac760d

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\M8F18HYR\recaptcha__en[1].js

    Filesize

    502KB

    MD5

    37c6af40dd48a63fcc1be84eaaf44f05

    SHA1

    1d708ace806d9e78a21f2a5f89424372e249f718

    SHA256

    daf20b4dbc2ee9cc700e99c7be570105ecaf649d9c044adb62a2098cf4662d24

    SHA512

    a159bf35fc7f6efdbe911b2f24019dca5907db8cf9ba516bf18e3a228009055bcd9b26a3486823d56eacc391a3e0cc4ae917607bd95a3ad2f02676430de03e07

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\M8F18HYR\responsive[1].css

    Filesize

    66KB

    MD5

    781608aaede6e759fe48d7967b0a6c53

    SHA1

    bc595134b15c604ec6d42dded9f6d167d94084ac

    SHA256

    7371dd376a195424e3df2ee7877a045a2d60c307b3b3a119789c7160b7c21b92

    SHA512

    0eadd4bd38115eee3db9c62508143e7b93b5ff5fc5f8f05489af21c6499ccfc9e741d4de740e75ab933a32de2a1ca5cce7777a60b015ba53e503196e75bd0c71

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\WHUIQOC9\banner[1].js

    Filesize

    95KB

    MD5

    8ee1a595af3f234a8c8b37801673c61d

    SHA1

    9874d2cb057cf2effbfc793f76cd85261f8d6d83

    SHA256

    1278ae96ce63e87c53f529a7f549173f74097c4fa5d614afb93811a4dc3f9acf

    SHA512

    eb3e21f3557ef1e8f1fb2d882c4bdadad3e7e86fbba5d2ecc31be106932b9765967df4b0d5e33497d0ef1d3dd1b5bd0bc97ac04bd3c16bf84360146d8ae37b2a

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\WHUIQOC9\hd-style[1].css

    Filesize

    39KB

    MD5

    bae447f7dac29abb56af69a76870ee58

    SHA1

    cb199ec78c34156c2ae5eeadc8f2d180b65063d3

    SHA256

    054a73aeaa0e1f22005c3624045461bcd72c2df0be75eaa418dec26b954f4645

    SHA512

    fd207f3f73d282551d23f8b08ac3175ab64b94ec6cdda1229926ab5a57d29f17af8dd0c6ab27215b93a57d774501939cc07412f8d20211bf6bbe4d55512bb3ab

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\WHUIQOC9\jquery.fancybox.min[1].css

    Filesize

    12KB

    MD5

    a2d42584292f64c5827e8b67b1b38726

    SHA1

    1be9b79be02a1cfc5d96c4a5e0feb8f472babd95

    SHA256

    5736e3eec0c34bfc288854b7b8d2a8f1e22e9e2e7dae3c8d1ad5dfb2d4734ad0

    SHA512

    1fd8eb6628a8a5476c2e983de00df7dc47ee9a0501a4ef4c75bc52b5d7884e8f8a10831a35f1cdbf0ca38c325bf8444f6914ba0e9c9194a6ef3d46ac348b51cb

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\WHUIQOC9\js[1].js

    Filesize

    242KB

    MD5

    35ff0aa87d6245e68c119f82946e31a8

    SHA1

    2964f560265496768114cdea075372764a73b043

    SHA256

    a2e968d7461c0809b9824d67abc2aa6e13231f1476432ed82a9218c21c40a245

    SHA512

    fb96f499750248f4bc3159685db9dce1200ec6f7508e32d65758fa65027b7b83581549c830183750784a5bcd201eb38d521530a19d65fd55cc4d4d2297fe7e2f

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\Z0UNWU5J\favicon[1].ico

    Filesize

    1KB

    MD5

    0106d4fd24f36c561cf3e33bea3973e4

    SHA1

    84572f2157c0ac8bacc38b563069b223f93cb23c

    SHA256

    5a6c5f7923c7b5ba984f3c4b79b5c3005f3c2f1347a84a6a7b3c16ffbf11777d

    SHA512

    57b77c5d345eca415257e708a52a96e71d3ddf4a781c1f60e8ba175ea0c60b1d74749cd3fa2e33f56642ce42b7221f16491cf666dc4e795ecc6d1fbfdb54ab98

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\Z0UNWU5J\script[1].js

    Filesize

    9KB

    MD5

    defee0a43f53c0bd24b5420db2325418

    SHA1

    55e3fdbced6fb04f1a2a664209f6117110b206f3

    SHA256

    c1f8e55b298dc653477b557d4d9ef04951b3b8ba8362a836c54e2db10cda4d09

    SHA512

    33d1a6753a32ec06dcfc07637e9654af9321fe9fa2590efc70893eb58c8603505f2be69084fb2bcbf929218c4e7df9f7a8bc3f17a5b41ed38c4d8645296ebab5

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\Z0UNWU5J\style[1].css

    Filesize

    165KB

    MD5

    65760e3b3b198746b7e73e4de28efea1

    SHA1

    1d1a2cce09b28cffc89378b0a60cbb1aa8a08c4f

    SHA256

    10e40ea3a2ad69c08d13e194cf13eb4a28a093c939758a17a6a775ef603ac4fc

    SHA512

    fbcb91f26b7bd874d6a6a3b1d4d6f7277ded091cdae5706c285b4d5d17446a1bf58572c224af38393ce49b310a51d5c5d60711c7094e5d32abbaaf10d1107e1b

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\Z0UNWU5J\suggestions[1].en-US

    Filesize

    17KB

    MD5

    5a34cb996293fde2cb7a4ac89587393a

    SHA1

    3c96c993500690d1a77873cd62bc639b3a10653f

    SHA256

    c6a5377cbc07eece33790cfc70572e12c7a48ad8296be25c0cc805a1f384dbad

    SHA512

    e1b7d0107733f81937415104e70f68b1be6fd0ca65dccf4ff72637943d44278d3a77f704aedff59d2dbc0d56a609b2590c8ec0dd6bc48ab30f1dad0c07a0a3ee

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\Z0UNWU5J\zyw6mds[1].css

    Filesize

    1KB

    MD5

    4c2e266587bb622926747856f9bdb65d

    SHA1

    16999e0d2a01b96b70a0ef191461388c5047f1ed

    SHA256

    cfddcd1ab28963d8219ef42d0b455b1e062521bfe7b100d4c47e0b9dd0a79023

    SHA512

    c9526cd6537aa068b48641fd2dfb93843fc5f535faa4cd856d4d3427c8f1e97d79c969215a9291fd50a96597c43dba3c45a3fe2ad32c78677e38f93dbfc32ca0