Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
148s -
max time network
175s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system -
submitted
12/01/2024, 07:08
Static task
static1
Behavioral task
behavioral1
Sample
55cec179c3da6ea01d4723116ed2853c.html
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
55cec179c3da6ea01d4723116ed2853c.html
Resource
win10v2004-20231215-en
General
-
Target
55cec179c3da6ea01d4723116ed2853c.html
-
Size
432B
-
MD5
55cec179c3da6ea01d4723116ed2853c
-
SHA1
148714796b7ed6f805ee06ec533c712a2223211b
-
SHA256
2988e8a8cc0bc9367f6f573fb8653b7473f06a804602957dcc86946ec2fa1a0f
-
SHA512
d9f6cd61cb50d8de9fb3789375c62b8e9372523ba751b260e49cf79c88325f63faafe944f4837769ae0fbd83e64857a10bcebf3023e786fd97b509ebe789afd7
Malware Config
Signatures
-
description ioc Process Key created \REGISTRY\USER\S-1-5-21-1603059206-2004189698-4139800220-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-1603059206-2004189698-4139800220-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-1603059206-2004189698-4139800220-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1603059206-2004189698-4139800220-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-1603059206-2004189698-4139800220-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{8E874301-B119-11EE-9E63-EE9A2FAC8CC3} = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1603059206-2004189698-4139800220-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-1603059206-2004189698-4139800220-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1603059206-2004189698-4139800220-1000\Software\Microsoft\Internet Explorer\Main iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1603059206-2004189698-4139800220-1000\Software\Microsoft\Internet Explorer\InternetRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1603059206-2004189698-4139800220-1000\Software\Microsoft\Internet Explorer\Toolbar iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-1603059206-2004189698-4139800220-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1603059206-2004189698-4139800220-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-1603059206-2004189698-4139800220-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1603059206-2004189698-4139800220-1000\Software\Microsoft\Internet Explorer\Main IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-1603059206-2004189698-4139800220-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1603059206-2004189698-4139800220-1000\Software\Microsoft\Internet Explorer\LowRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1603059206-2004189698-4139800220-1000\Software\Microsoft\Internet Explorer\PageSetup iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-1603059206-2004189698-4139800220-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 6065225d2645da01 iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-1603059206-2004189698-4139800220-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "3" iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-1603059206-2004189698-4139800220-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1603059206-2004189698-4139800220-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-1603059206-2004189698-4139800220-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb010000002213d23592f6d648a137f9bf65c22cfa00000000020000000000106600000001000020000000fcc9fc28f60a49bc71ef2bcf5c149d767584be874a83819d4383a1ec5cdef1ec000000000e80000000020000200000006178385099f140d7f2ceec379703f18f089c43ff5323b012636978eaab947606200000004cb361f9833bb8f81debdf0a64851cef716abe57b6e1283d4544334cf442850d400000004dae1312becc417416e1a14c740c29ac3ac1a6893fcd7cf839fb8f2b9a9add89564eed831f5ea4af14c014dafe2ab0ac062200e251cf39f4b43408178f92a090 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1603059206-2004189698-4139800220-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-1603059206-2004189698-4139800220-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1603059206-2004189698-4139800220-1000\Software\Microsoft\Internet Explorer\SearchScopes iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1603059206-2004189698-4139800220-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-1603059206-2004189698-4139800220-1000\Software\Microsoft\Internet Explorer\DomainSuggestion iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-1603059206-2004189698-4139800220-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "411205257" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1603059206-2004189698-4139800220-1000\Software\Microsoft\Internet Explorer\IntelliForms iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1603059206-2004189698-4139800220-1000\Software\Microsoft\Internet Explorer\Zoom iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1603059206-2004189698-4139800220-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-1603059206-2004189698-4139800220-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-1603059206-2004189698-4139800220-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1603059206-2004189698-4139800220-1000\Software\Microsoft\Internet Explorer\GPU iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1603059206-2004189698-4139800220-1000\Software\Microsoft\Internet Explorer\IETld\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1603059206-2004189698-4139800220-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain iexplore.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2508 iexplore.exe -
Suspicious use of SetWindowsHookEx 6 IoCs
pid Process 2508 iexplore.exe 2508 iexplore.exe 2804 IEXPLORE.EXE 2804 IEXPLORE.EXE 2804 IEXPLORE.EXE 2804 IEXPLORE.EXE -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 2508 wrote to memory of 2804 2508 iexplore.exe 28 PID 2508 wrote to memory of 2804 2508 iexplore.exe 28 PID 2508 wrote to memory of 2804 2508 iexplore.exe 28 PID 2508 wrote to memory of 2804 2508 iexplore.exe 28
Processes
-
C:\Program Files\Internet Explorer\iexplore.exe"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\55cec179c3da6ea01d4723116ed2853c.html1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2508 -
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2508 CREDAT:275457 /prefetch:22⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:2804
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5dbc869e451332474c9c81e0039ab0f12
SHA1ebe0bcbfc002491f2535ce4b6b11b91256ad4543
SHA256c4f74e54da2f6a6d656c8f7b109081ff7c009ceb04c66b186fba092faea23e0a
SHA512e038d2d1d5b00e985e772f9f63e2d278615189dfe71b7349dad89d8535abfa297c3854bef1328e2e8c65b74cc0334a6c90abd593e7c9d2c9a3a0786a8b9a59c0
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5cad32eaa1971d86bf2ce34103fbfa973
SHA1df323085914a032e82fb3990d77e9e4cc2519fdc
SHA256761196ca371cc42b56a711966c9b44fc5a7e96f8c90776d015235fa3b6ff2162
SHA512961a6dfe1c8332791a1368ca9f230b7457938538f8ae56bdf535fff0e674dee54a317fe3c7151b024421ff3d0b8bf3f7f20fee343eab4f24f89ea7b235d1adec
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5d301ba1d776bfa03531320d2913506d8
SHA1b199bd03b902918ca924c3d35e878936e304df73
SHA256c9fb68b7ee072fcf5bbcc7067208c9c31e27faa9eb0d61ba6ec700e9a88809a7
SHA512df6f75dd56818d616eee833c44d92bd7532d5af7803e2b6c80e431879eb5c02d568ab9f62eb193cc89193ebf573d6e04939634fb76b7f0137cbbeb545cf885f6
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD59eb99969fa58599a63333569469b5df5
SHA17fe23042848901bacf32f7ec44e27d0562345703
SHA2560fef2947def1f52904a665ee08e5131042575bd5e35e2d87e5e141d798c8cd09
SHA512f2dcb6d18e5f0b5b5cd6380ac0a7bc30a354aede74cd60ed38e5cf7fe4955cc8352cac873e32c6b0f196978f1673979349c8e395006505c8cee517abd3ba6a77
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5b703ad61953e108a061643a1f978711b
SHA1d55bc87955ddf0bcda5d4270f57c0ba975aded2e
SHA2561dc2cc5f40511e2fbfea6ff8eb2805cfb550976ba469b0bc5bb7e9757be2d9c7
SHA512a92889d5d85d57591e50670c0af2e0172a6dcc973d0328d786014f3cc4172f1aea24912b825988120bdcfd0d87a8857b6406b376f73a88250e05888c4f86c418
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD508d4cc9d7fe9f8aa4520c19835d10a46
SHA11bbc8bae2727345397df832effd2988c68f1bd83
SHA256b781879f02fcf28c4b58479f508a9b11b316d902fb74d1e4e0d93a470ba83a1f
SHA512813af7c416d935f25b7f076515a2b54ec4f2fd24302524e50786306f802286d9411a7b514af00d9b496fe7dbd0dfa9b8123c9da572a5b265e0d80dea70ca8786
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD59665d6b0d175216e0995bc44689a7df2
SHA185f114227b037f645979ea6b97909cafc32605d2
SHA256ececa3be55cbf16650db5e47549d13a71250abba6321622b684c3329ee3a7e96
SHA5124b79835132e308c3246ccfabe81f0bfead3490b196a1a243ebdc99e7d6da3e0fdc4732790c4eb9b2e31a7cdb79acdfa2682a6787bae94cd663d1fc7b6cc18e7d
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD53c2ebc9170d2796d622c1e60eb677005
SHA1a5b9f14114f44518a1f5a40c543bf5c3b42af6c3
SHA2567f47764e351180798a9ce91b63e9dbacbaad68d5f32ca4c9e89f8b6cd0c040b0
SHA5127e4ca945db52fa3c66ffce73db977d9da5fafb419e6f1ab9ba0e6609005c9ed98d4e0d13881f73fd1abe7946e50702757ba62cc1582e034620b1094b84b8caa6
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD573f104e8c8efc582290ec67c29f8f550
SHA1f7a2e7123e60e309eecc9669d6a6eed3f52b3865
SHA256f32d98a3e91c513ab9751b95ee266c073412718b2b8de6f0f84e1eee0fcc0a33
SHA512d1091c987ce5eed95a2fa89674f8b07b1d991e1edeed42670e29c8ac46fc87f561a8ccf91d9d8b3d39c7442097af71a1d553c55e48678e73a154e99de309adaa
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5c828a2927eefa6c06ee55dc7c7f81119
SHA1ea5ef9ace1b4b123472e91895c9aea811834b38d
SHA256cdc16ff232f99f473febe8c282c24b9b580e6146df7581bdff7197aab37ee6a4
SHA512723cbfd55c3aa06e86896c882c34018e339a0988e42877e54e59dbfda1bf2fa63b767b8941a0bd66d0ad89e762250afa343b744a559018f7b1b3869c2a4133c1
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5f19af2564b4d69115f009be71f90cc61
SHA1481c33aecc92f44c9967eca95b40b827addc644b
SHA2561b703cc1c90dedfd1c55217be44857e0c29247f27e5e7d58ef6e8da929809d98
SHA5129ccb0bc4c69083429e7551f492bacc4091020c524421c7625d3d8752d12725c0169098f7b74cae7dfc384b2022cab08695117b8b0cbdf86069e88b8d1be9078f
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD56e9430b40374511f26f19dda65b8cbe9
SHA160d1f6ad5dacab909e060db5c1cf24aa6e6beecd
SHA256a972de680989afe8b3fcb386e63a1d295c72fc822dd3b9fbb9a8496e79991670
SHA512ac05ab0f6214b1b464c3a7cc8a24c6873f737e4a4c3781b109c4e609039be305aa9b92396cda8f5bb77a276f9941744fe6cc76c3055d8c25019e08f79edb3491
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5227f7ac78004884ae22cf345d590443c
SHA13e176d7056e97a02f771557877559c232c8db6dc
SHA256e4360f48a2fbfe444212cc29523ecf91bb0a12b6928d20cd43feb4c54761164f
SHA51207219b325bf9e6212afa905fafe14ce5d8e0f7d2275dfbc06b8d48806b63ceb0efad82a7a4927c3ad5591d19980d1a1d9d621dbfaa4fb9f98f0c3c5a70089b58
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD53a4263c3b559feed5aac51fad673cc52
SHA17fabc0627bd27bc5b0e3f7f3bc8d7c8bc0bd89df
SHA256cc902898addbff5347d0b84241754a6142cce728ff49c2d99d13a071f6597996
SHA51267a9a9f7470e10083f546853b69aa8227685de69dcdbc9d24558b767ce2986e769275c7b821fd240765a0c91f4055ddf8acee4b0230fb9e83f42ae5c41ac1cc3
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD56e82f097fc3a129b6512840279ca65e6
SHA16db6fa67fc3f1a58a99fe10c7dcbdb00b8ae1f07
SHA25680eed1fa8e628c271f0fa64e2735f01ea82d1114e59a55f0a324504a8261c727
SHA512f0831a753a78fd6f56dbae24efd8971cae474a819b187d6d4f78e769a8bdba6342611cb0324c81a8965011384ba2d09cb9896f1f6ebd4e92f110b8606e9fb10f
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD50bc46e2a99282b242aa53a80b6832d95
SHA1345032b218aa5233dc68da029a75abe321131a7d
SHA25697f82cea94a455f45888497baa8e6e991b54a81901e5e31e067e03125f914495
SHA51251e50ab6c27439d7dca351e78cbb17db47e537a165695c9f3ea70d3e81e2ae43dc5b7aa96dc8167db953723631e2b2f37e0c9f9515d3f387fcd27f90e538d550
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD55b6a042f8483e756681908f470153600
SHA16103e8469bf6115c10979f5102a3fb6e3d8e24c8
SHA2561f3311903045149b7424e2cbf3b8e5d21a1d1c01d36cb3cba5f0a5992ba16abb
SHA512320167880e511e0c9bb3a6d01e450f123bbd66b1b97797426fd9b577474da96a21449d365b84b290165d352466a8023384b3303958cd04ada74ac056ee654b5a
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5ec5f1676d153b0585e149e80eb5c8c8e
SHA130ac23a610bf07b003213a1be00c2f71c843701d
SHA256a301265d8c977a5168a4a00f9a902606623855d1d1c78b105855e429c47ebd9d
SHA512e1f72a752c65979f14aec3281b43d4798463cb65dcc632d87546ad3eab5955634e18488020579b534b02f8b915cb4c55084f4805980a30dc47756eb465ddefab
-
Filesize
1KB
MD5bde2adee9bac4b9757c5b7b9e1b8c178
SHA1039730c8b0bed77b35770a9c9ceba99c87ccbe4e
SHA25688addae0fb2c6ebf189b44808d29cca6e977458388c801c52d2c4633fa1c788b
SHA512b2c42da612421320c346a70846722a8d6b2b72854ee4688da8f5ca72a7eedd241f1e24645ca3e5cb66f4f28d90f294f1184be092e519ea1e4c4ae1b1245947f2
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\4R90HQQX\favicon[1].ico
Filesize1KB
MD591abe01116ab422c598e9c8af72cf4da
SHA10f2815fe8e067d48537ad168225ab4674271fa27
SHA256b1d7aef06456fe7431124129a28f0138bb5fccfa4f4161e3087de23c005e5edc
SHA512a4d5b20c3014153b6b382c43404917bd2cb5bd2a59bb1e981f5a19eb7dbdec185ace288e9700428d24e5ac623e45d04905e706f0c45a1642b1aa6c091213c23c
-
Filesize
7KB
MD53cc1dca6c9c72e26372fa89d8288e40a
SHA19cf9ce8105b5394aef5e5ed471ab0d83aee16459
SHA256f8165207f5eb7457040e1791b858ecc13394e86c336c978a12e9f6bb49dfbaab
SHA5126248a6cc9b11b27684b7e2d2ca64ecc614e0692fcb8e2418cfa45c950ff99038e732cf002b62ef986c02d952d6eab031c34d0a27cf6de2d09558a89c4f80c63b
-
Filesize
77KB
MD590b69bdff4dc1532f17a7348712f46cc
SHA1aa0cba46b62074496a8559b48d6aa8f6de1a6b59
SHA25621dba893f711648c8286b71aa3d2c9a7788cb0ca2e69426238759c1bafd2d7cc
SHA5127980d38df96f54e9858bec3b8d71b09a946a9f8a27ab53c1f0efbbe593fef00e44d808a912aac4e2ae2ec0fa7f310a2a11a960eef4d63395cd8bac1fb99c98fc