Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    153s
  • max time network
    166s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    12/01/2024, 06:24

General

  • Target

    55b8226c5a5a6c49033aa42b064977ec.html

  • Size

    55KB

  • MD5

    55b8226c5a5a6c49033aa42b064977ec

  • SHA1

    d2a9ee99cb8b064b1fc025a467e85faf1eaacb22

  • SHA256

    e110c48e7f67af2e9d95742f638c04b081d769e6d97b4b2bdb16fd7cf39a383c

  • SHA512

    26541805b1e948d8aa35312aac6b9cb7184ec24c547e0dec4e8f0f41c600b80cd2d081579b64f7e1edae76ba550ed6c1c6a8b2940673cad62376bcf2fdf98b4f

  • SSDEEP

    1536:gQZBCCOdY0IxCbBGjzvYQ9e3Qtl+YyCcCSFslytbkIF4mDS3hFmysCX5jN8UCj2a:gk2C0IxLjzvYQ9e3Qtl+YyCcCSFslytD

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 50 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\55b8226c5a5a6c49033aa42b064977ec.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:676
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:676 CREDAT:17410 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:4876

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\imagestore\mtw0pfb\imagestore.dat

    Filesize

    1KB

    MD5

    540cb727bae5f98faf6c2155c022932d

    SHA1

    4ee636873e220a0336b497b67f989922e523be41

    SHA256

    83c6915be599640976772f8f8eaee8d59a979568f9d3857f5d94aa1864dcc033

    SHA512

    aa7de655612c06f847b2b8f74d616abaadc80b5c781dad4c18a45ebe7af3e0ffab83578bebf8253a893fb045a4041f78da35efdf0edb9db9e59b01229c4bb309

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\8PO8IKDM\KFOlCnqEu92Fr1MmEU9fBBc9[1].ttf

    Filesize

    34KB

    MD5

    4d88404f733741eaacfda2e318840a98

    SHA1

    49e0f3d32666ac36205f84ac7457030ca0a9d95f

    SHA256

    b464107219af95400af44c949574d9617de760e100712d4dec8f51a76c50dda1

    SHA512

    2e5d3280d5f7e70ca3ea29e7c01f47feb57fe93fc55fd0ea63641e99e5d699bb4b1f1f686da25c91ba4f64833f9946070f7546558cbd68249b0d853949ff85c5

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\8PO8IKDM\KFOlCnqEu92Fr1MmYUtfBBc9[1].ttf

    Filesize

    34KB

    MD5

    4d99b85fa964307056c1410f78f51439

    SHA1

    f8e30a1a61011f1ee42435d7e18ba7e21d4ee894

    SHA256

    01027695832f4a3850663c9e798eb03eadfd1462d0b76e7c5ac6465d2d77dbd0

    SHA512

    13d93544b16453fe9ac9fc025c3d4320c1c83a2eca4cd01132ce5c68b12e150bc7d96341f10cbaa2777526cf72b2ca0cd64458b3df1875a184bbb907c5e3d731

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\8PO8IKDM\emoji.min[1].js

    Filesize

    108KB

    MD5

    0fea00b1cb51b87b11031522b2c72439

    SHA1

    4ec519434855399874a25ed9ea72a06627315275

    SHA256

    be2795756f0406335dea295c4259ca16dbdbacd449b424e2e19c66f070b55b34

    SHA512

    401ac7e5da5e7c86f0374373a2ce390fcf02ba232a5d0fbd0a8c02e9113a82d6f276ab7c2af921b216c33528f70e4f33df10a55d203d6d151993dc7377927ccb

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\8PO8IKDM\iepngfix_tilebg[1].js

    Filesize

    4KB

    MD5

    f784a2dfd0ed53c79fbd8fa1b659c148

    SHA1

    208dbaddda3ad773a79c37190be7271534cd5632

    SHA256

    06b38ee5447491fe18209a2daf425004d6ba4155821bd4873ca31ba7b1145544

    SHA512

    53414e72f3c1645fe4ab558f750302273356f73d245a0447ad709757674c182efa5dbabb0e7d690bc2c169291088d700d506a6a6cd2d6f36ab6e942b618e2d88

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\8PO8IKDM\jquery.emojipicker[1].js

    Filesize

    21KB

    MD5

    2525208de98ed6592e2543220cb7ef3a

    SHA1

    900aa82c233ba55ad082783ca50fdf8d6132e5b9

    SHA256

    168939f6e774b8e271eda5913b17d5452f1267b141fa3cb30f64836e2c314656

    SHA512

    6d92d245ab561f3d9575d4aaa873643675ae6b9d78e0599e9b3e43cc80f1d4608fdd7f062a0ac050ef0af653e2eb2537d913a25857c496ed63d734d9cff35ccd

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\8PO8IKDM\jquery.emojis[1].js

    Filesize

    289KB

    MD5

    f2d51c2a4beb43201876449bc2ecb764

    SHA1

    41dd3b479f1f77504d58c2a4d1a5053d6cd529ed

    SHA256

    83df4bca0fe9f4b0a18302b6b0194186077f04c352659f244b406d957af70cda

    SHA512

    097bad43d11055bc3e441d4df0e5183d91e35d8306dc92e4c4e2acf73130fc9a515a69b833194e820116b7f688b190d57bd91fa98f693d7bb112c672e6323084

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\8PO8IKDM\jquery.md5[1].js

    Filesize

    9KB

    MD5

    8177a4f468b58a79687e752ef4cb8c67

    SHA1

    3b3edb565f76e55e6185fa7f45a9cd4a00b50b13

    SHA256

    50d474e9a0f04527cc54d2e81cf176de5023e14482805f59e1ede1713dd2e224

    SHA512

    3891387742c5fc261345da42feebccdaf4c078aa288bfffa5f2a369852ecf315d689897326d9c7e08c166bbf64c60f634472ff462d5d336297bc6e43598cc07d

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\8PO8IKDM\oxWLEMHTm-PHlM2WIB4aObzPVh9OT9KDjPiSBgvqk10[1].js

    Filesize

    23KB

    MD5

    3b4f49bd3bc99583bcd4c79da82d7787

    SHA1

    474d35727e1544a4ec3871f5a446036b8597b635

    SHA256

    a3158b10c1d39be3c794cd96201e1a39bccf561f4e4fd2838cf892060bea935d

    SHA512

    41ec47da01ba75580969fe76201399fbee12eaf4dac101c5bb09432492404b08bb77780a41dcea397183da96b68ef096e53c64b0615449dce7676212ef0cd992

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\8PO8IKDM\webworker[1].js

    Filesize

    102B

    MD5

    74a981e3aaaa1f7200e5f87b03883703

    SHA1

    22cf9554c2d813a219b2982ae769695119ac1092

    SHA256

    55052d853a3f144505dc773ef237ac838af312c0180ff293f7cf1a3847345eab

    SHA512

    0e3190f7e3de1b0127001342b33bcd3f23ad1bf113fea94a97f9d4a59c9c6bfeec61a5889bb69fb0d16bded2656529dffd69e48d4a4b32e436346772d7d8fbf2

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\AAZL0E9Q\KFOmCnqEu92Fr1Mu4mxP[1].ttf

    Filesize

    34KB

    MD5

    372d0cc3288fe8e97df49742baefce90

    SHA1

    754d9eaa4a009c42e8d6d40c632a1dad6d44ec21

    SHA256

    466989fd178ca6ed13641893b7003e5d6ec36e42c2a816dee71f87b775ea097f

    SHA512

    8447bc59795b16877974cd77c52729f6ff08a1e741f68ff445c087ecc09c8c4822b83e8907d156a00be81cb2c0259081926e758c12b3aea023ac574e4a6c9885

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\AAZL0E9Q\cookie-alert[1].js

    Filesize

    691B

    MD5

    6b25a652eeb29ad487753cd1c96dbf44

    SHA1

    513219db4b4fa00ce5d242b82c0ac552a1816d04

    SHA256

    0f2ba354ae263b13bbe671e8e8cfa994b154ec12a088d0005eda0abe307d8a04

    SHA512

    13484c9a40486509e3c70387e83041fa9a609b3f053a2b0776e929373268ccb388c0da73dcc70e26fe9e00ffdf0dc88a77e14b28c4798b1523c75ec8aec9a405

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\AAZL0E9Q\cufon-yui[1].js

    Filesize

    17KB

    MD5

    461958e1e515e8e0f372e73b4c819d53

    SHA1

    3745471542e7992dd2f5d85b2948da66845ade37

    SHA256

    186707c7ae0d45cba1490a5556f59fc371f6ab88cc16c452fef8b70072cb5e54

    SHA512

    734f8cde6780c2deeb1f23b21097fc381193ef0c3492d16b411984bacaf807b2799e340d254e8371ecbb73b104d29ee8a46448e26e0ef14b26460ebdde100d50

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\AAZL0E9Q\favicon[2].ico

    Filesize

    2KB

    MD5

    cb546f0ce2ca2505cbc9088d8a4592e5

    SHA1

    d87b70b1a34f4313d085de80da3aa4e8845af904

    SHA256

    0c3851f8f6d7b9dc63645a68b0db991edc9162620b9d757684a4a20206c458fb

    SHA512

    b6fcd078f43082daf299a49646280ac3a30b91d10dcfaf8e9fb9e8317af417e34d45ae7397af9507d4101b7bcc58169c2f64adcaa253fc08204b98020b20b551

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\AAZL0E9Q\jquery-3.5.0.min[1].js

    Filesize

    87KB

    MD5

    12108007906290015100837a6a61e9f4

    SHA1

    1d6ae46f2ffa213dede37a521b011ec1cd8d1ad3

    SHA256

    c4dccdd9ae25b64078e0c73f273de94f8894d5c99e4741645ece29aeefc9c5a4

    SHA512

    93658f3eb4a044523a7136871e125d73c9005da44ce09045103a35a4f18695888ecafe2f9c0d0fa741b95cc618c6000f9ad9affc821a400ea7e5f2c0c8968530

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\AAZL0E9Q\jquery-migrate-3.0.0[1].js

    Filesize

    16KB

    MD5

    7bc46cd787fd2b6d3336e056301d4b84

    SHA1

    60062992ac61926ac3e1604b7f89cc373639c66a

    SHA256

    7fe32e1f272b3c300aca9d573ab228d87c605b4a705369d3c459523c52c9428d

    SHA512

    37ae02c8da88d3ff585d85035162f4e927cf1ed4d77d6b83264abc12a94af5b484095f2f46e9f3a6ef80436593ab482646b80479bebb8e782667eb86e98d3397

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\AAZL0E9Q\roboto.cufonfonts[1].js

    Filesize

    20KB

    MD5

    301d51da906e6cd41dea529d764dc504

    SHA1

    15dc16d366325aea102fa46c11edf04ea83a0283

    SHA256

    d49065ed2e4f7cb5eafab0fb03611563146102e514a5946bfcf08de6db58b85b

    SHA512

    6d50fea1d52b5bf19d1c758465d054dd3b0f03dbd754c29177e7f7248c275dfea2f61368857b54da914187966539f2eb5dead4308dcc331980fc26ca42255ca1

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\CCM17AA0\emoji[1].css

    Filesize

    841B

    MD5

    e7afdc59ac3db2e735bca0105b3fcd6d

    SHA1

    15b9055b555854c519549aa4c01dca887191d945

    SHA256

    8376faa9ea3b31a84f476ab14bdcd9110051f2e74f99d8a5459658d48a5e8cda

    SHA512

    6f4dfbec2348bf4bfcce6f9282b227d92d905448aacfdce547a8bcd952eae2de820ce61a0b4fef85f8590512d455cfc20e315bb88b6528f28d618b9558643405

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\CCM17AA0\emoji[1].js

    Filesize

    3KB

    MD5

    61e2a760dc00df1902b71fb2c476f080

    SHA1

    8b8be8ee045c78a8309089e4ed72c46b635d5852

    SHA256

    5ab20bf6ee7f7ba9688e7e5e4aef4804ec97734e2345df45dae48490e7dd0a58

    SHA512

    fa3e17d56957df605b492ebf33b175de40f9caddb46acfd205af9caed0984eb455d89fe39667dda3f8364e43f2d9b9405f5c0d76173f5ae286a9185f92c52389

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\CCM17AA0\jquery.emojipicker.a[1].css

    Filesize

    113KB

    MD5

    11af30548d129f207d171711eca973b6

    SHA1

    54e9ce151fccba2ab2bae5aae06e694f05382631

    SHA256

    c457764ac4f7ae60acf301cf441b93fc3ee07c22a5409b26818b79e57648f842

    SHA512

    9c787860e8cebc27e906506c24895f0658c486b30c5b4ae43992064b3acc932594cf307a472aa4de7ef4a166d2ba489fca27da6ea130c98f8ec18d04a34dbfa7

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\CCM17AA0\jquery.emojipicker[1].css

    Filesize

    18KB

    MD5

    13df51261863c362f5069d24f9d3cbab

    SHA1

    3a6a8948514aac9ae6528e22955ec047d9c2eb32

    SHA256

    fd7e31503e9caff128415b2745022938ba6ccb929e1f494fd1b8d7777793cb7e

    SHA512

    d48f2f33e6ac4801614049f7d9009ad18d58134b3fb8974c4cf6fe109ea82949407e2b0a4ed488426aa117a501f71ac1c6ed19941e5cc098a9058fe2e965c267

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\CCM17AA0\layout[1].css

    Filesize

    42KB

    MD5

    e57c81f3a17073a78a7c3c865f74f89a

    SHA1

    587d7c955432f1e5a87460ecbf9086ae2589346f

    SHA256

    e36f1f796e538f826beb42510edc0354133c61c7f711b827def7f91d3f7c8bda

    SHA512

    630aa9dba2aee1125103954b093af8b24907d98761e1a9b93fb6f6c43abfec3afdf53825e3f12fc3cf87fa14855daadfdbc90b1e49b503fb2917599dd77daf52

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\CCM17AA0\recaptcha__en[1].js

    Filesize

    502KB

    MD5

    37c6af40dd48a63fcc1be84eaaf44f05

    SHA1

    1d708ace806d9e78a21f2a5f89424372e249f718

    SHA256

    daf20b4dbc2ee9cc700e99c7be570105ecaf649d9c044adb62a2098cf4662d24

    SHA512

    a159bf35fc7f6efdbe911b2f24019dca5907db8cf9ba516bf18e3a228009055bcd9b26a3486823d56eacc391a3e0cc4ae917607bd95a3ad2f02676430de03e07

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\CCM17AA0\styles__ltr[1].css

    Filesize

    55KB

    MD5

    eb4bc511f79f7a1573b45f5775b3a99b

    SHA1

    d910fb51ad7316aa54f055079374574698e74b35

    SHA256

    7859a62e04b0acb06516eb12454de6673883ecfaeaed6c254659bca7cd59c050

    SHA512

    ec9bdf1c91b6262b183fd23f640eac22016d1f42db631380676ed34b962e01badda91f9cbdfa189b42fe3182a992f1b95a7353af41e41b2d6e1dab17e87637a0

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\CCM17AA0\suggestions[1].en-US

    Filesize

    17KB

    MD5

    5a34cb996293fde2cb7a4ac89587393a

    SHA1

    3c96c993500690d1a77873cd62bc639b3a10653f

    SHA256

    c6a5377cbc07eece33790cfc70572e12c7a48ad8296be25c0cc805a1f384dbad

    SHA512

    e1b7d0107733f81937415104e70f68b1be6fd0ca65dccf4ff72637943d44278d3a77f704aedff59d2dbc0d56a609b2590c8ec0dd6bc48ab30f1dad0c07a0a3ee

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\PG47MANB\Rockwell_400.font[1].js

    Filesize

    17KB

    MD5

    55a0d8277a94894a8b40f72717adf869

    SHA1

    84ec2afd66e38aeaab8988fb18787e32ac6e3bb0

    SHA256

    f8bf624dd3d3247c58ddf95b43c5bbce5c12404158d466ff8235af41e595f29c

    SHA512

    152d99198ebf5e5ab18de1bd1ffb804912934a8fede44826a08c4b7b30e17be222acdb406e8e005819f1e40a4e2d63c91a01a19e672c309c74f2ce19b09efb3c

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\PG47MANB\js-loader[1].js

    Filesize

    650B

    MD5

    ea5a5798612df63ab0532174aaf62634

    SHA1

    0f4713eef39ab07510d3703ef201885475ef0b42

    SHA256

    ee44a690e6d7ba27656d9a013b7803d69461a19444d834c918d16c1c56598a31

    SHA512

    8cfd3dc5eb7f2ab4f27abf80bea6955a00112b84ba074cfb8a1bce0207c36f6f12e2f3e90b8ebb8fedd56a5520a4a0d09397af9e6f4885addd890df7bf3b8907

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\PG47MANB\menu[1].js

    Filesize

    2KB

    MD5

    2856c298fdbfae3fe0b2da07c6a6d408

    SHA1

    8e0c11e12995b54c96eaefca4c0cfa23d568161d

    SHA256

    e2db2f5f3145f0ca152fe10b95e173d34dce603778d86e136fa58562ab1f556f

    SHA512

    049ab495fca3c3dbd8290f50baac10ed21dd8d0cd11d07f0c132e569b1b187ac141a051b4a9e67c6abd591b77524efbfeae71d75d20e6a2cc8bd492a60b6dbd2

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\PG47MANB\thickbox[1].js

    Filesize

    11KB

    MD5

    431e020ed3f165c36b9c455c1abdfe03

    SHA1

    8ce16c47d4ff3bf17e1440701e001ccae77c6013

    SHA256

    20b74f32cbe2437ec79c1607092220b9c050fc28daa6d70875e0c926c56dfa6a

    SHA512

    749824d25ca49b010a4f42837cb9f9a4157163b76aa30d67a47457e271a3936e300420d0478ead894b1af4ef166edc6ea65d137da88f1291ea73a5efd6938fc0