Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    136s
  • max time network
    133s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    12/01/2024, 13:36

General

  • Target

    569a89c0d3a2e22a6b2c1f3cc7046551.html

  • Size

    3.5MB

  • MD5

    569a89c0d3a2e22a6b2c1f3cc7046551

  • SHA1

    fdd2f612662571914ed4c4e6c3f281f6001d40d8

  • SHA256

    09f242f24388394214e5f443d19d0e6eaaf58c9c7f0b7e2e536669f5c18d3dfc

  • SHA512

    ec8f8370ab86c61aa02c828a2b7417cfb97f9682339b89c26d81680dae6eb3fcc1375340b0d4d94370e36f612f00d3304754ecea7d3608ed13c94ffe71c9273d

  • SSDEEP

    12288:jLZhBVKHfVfitmg11tmg1P16bf7axluxOT6NSV:jvpjte4tT64V

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\569a89c0d3a2e22a6b2c1f3cc7046551.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2380
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2380 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2716

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    565a0e85f3f0b26c6f6144ea9e3bc71d

    SHA1

    f9b9806b6c794837f1e9ea9c470ff7213b20009a

    SHA256

    8939991dbd9935097be39b0670c8844d30a6c6137bddf28e125aba88e6ff883a

    SHA512

    6148ceeb2f30ceb0401aef96eb78327e1840d1c596caf46b29bdf0e2112a244b73cbde520e1566cbaf34494e47c0fdd51f52dfdf4425e55a9d8b1d45cfb22586

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c6445f9ba74ab86296cd41f702a74d3c

    SHA1

    c19de2c7755e3ef7534c8641e1c1669ba17f065b

    SHA256

    99cb1a5ca74d4ce39debfe6a91926d7a282a14e30bad8d93a073ddb016aafde4

    SHA512

    638e0683b93caffa717ba7c1964d86815833e02d886e371f8017e89170b20e397608e96dbf096f510169dd22eb217c7420187807f80978137d7ab65ac86097f7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f7442a27018c4e2b97fd2c8fc55eaf4a

    SHA1

    ad022d44ae1f0240bff520a92e7165f1387757ac

    SHA256

    d12269aa4720cd5ef36a713b915288387b72683fe210ee4113d393a69de1ae86

    SHA512

    036122ac8914e3e95c91d5529e3f5fd724d0adf8315996ca0d1a5adbc4b6a43edbf1ab6cc3aecbf911ff25cbf0291ed2b89fc884b49e41e1002d52fac40a1981

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d30831bbc7480a0d9c526eddaac9228e

    SHA1

    bdb2a1747af9be362d35c68c3c0c7bb49da0495a

    SHA256

    b36a0aa014a847028ed69bced550e1941b1a97f905817055cc4c94968448753b

    SHA512

    37072c7840d66d5eb7dbc9c399e04dde19e5505f2a4985ec4f89ef87b17d77a79d53386cdb55dcc08aea5411b6346d65bee1e3cfc2d903b39e117f6d5db10e7e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fb9a63f2881d8eac8a1988a08aba7f8f

    SHA1

    c2d8d6538e1f443646f04d247eafd9cad46f8f75

    SHA256

    558cbdfd766af6ed077bfc272f33d0c3199d371a9e60de78cedeaa1fd0fa74ef

    SHA512

    d491f3e4387007a027d89f9167d14d417d3b4d4d45ee0a093e3eed08a3f543f43461e71b7018a5982cd96381e5bd5d3b135e6ef645e4620c0ee000794553ca72

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ff967814428b70e9a7dd7032efd619dc

    SHA1

    6d8236810cc6e3bd01bf1537e6a4850b64012312

    SHA256

    7283f32cd22c61d6eaa0841fe0bb46b989f22008dafe08db23573914c222fbf5

    SHA512

    9a1b9ea1cf21ae9c0c3f25447f22b2d49b0ecab515324c83f2eec2f23a4726111e481486f74ec5db4f241ca340e9b8053441a1829c17a34ca090a3677a3b6d7d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a7010f0ba8c989a96dce15ff7b35b981

    SHA1

    ae9111a681b33005d2c24b96f617e7dd33a791e1

    SHA256

    3cebf2d371744dac87655c69dd239a86866f2e7cca5a2025eedc1ff43e2c95e8

    SHA512

    f80e89d3b15c31aa6911badab6749a647d25109b27f1a6d783c08ae0fd9a63d656fa43db60311bc6ab543b4e5e8b89298a3861a537a6a3858c8fc363409d8523

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8be10f97180fbb8faf9dc0aa6c0e90b9

    SHA1

    5bc08e6d9b0ae8683345dcb867f1e62307e40695

    SHA256

    8bdbcc64d4cd99fd743631648fd59d68c4fab7e6be4cede15178f0326ed2291f

    SHA512

    23d559df1bb6cacb755567a252f1e72d052f7d9eda1a52f34598c47771975b1f5893b20e1b09970bb02b94d18af0e3636be32e26b7ff2801ca71259854b2a79b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e19043edd667f1151634567c5fbf039b

    SHA1

    a669349cf32f78f9303937ea269025f0094803ed

    SHA256

    3f69d829651b5b84f388d2085d6f3c92f261d1f39c86a62d472ebaf069640176

    SHA512

    3234f03ba9a568dc9fdebc3cb88cf7cf43ea516c1778b1dbe4e7d9c74d55bff13339287ce407c2a81eaa5e67118bfbc0e5bad24772e34541dc5a2569cf72c37a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b096a23d1e804e5600ae7cd1d64bd85a

    SHA1

    cd7e90b07e27c8b52b8c13f9c3aff17c3efe2422

    SHA256

    b1a2a80461b8ebb8763c43aa5bcb3896332ca3c96719c01a191529ff5a5dddf5

    SHA512

    f37516a0c2ad5ca97007f6c7152194beede81580d3f866e1a85f6e80f6f78a340fc4cfdfe8f28031ec5f0885848cf4159abc362429195e34cc64394e1246c1f1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    475c29f94f053b6ee9af27fb6ce79367

    SHA1

    a949068d1de3d501402ca822ec0a57a0077c1bbe

    SHA256

    e2fdeb4c888a0904c8de2ba9a899bf261de93046b47a633f64d607727943a8bd

    SHA512

    ad5a3de24ab29ce8c0e30ba0326ba7bac9198fc82f3385e327791b44104324e9972994f62db21ff05eef14d667e326065e2b7117e4f2b61b0323db6f7d2f077b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e69ae518e8073fbd3bbdcd336f2f374d

    SHA1

    8d37b91e2a09b428eab18aa58a84d0ddad2d4b75

    SHA256

    00edd4a93769e7805bbf8b32b8b545f9f33de3679c723898182d4b33ae3aa34c

    SHA512

    ee246f682b1cd7f754941afe0267955145a25c4e299d867e9b1cb0f2ab9dda9c7652010327cbc0fd81e1a654fa4cee2a51b20d59b871a60ce04ccf6c9840dd6f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b6278bb6544351a06592bf66e60edf5c

    SHA1

    513273900d14226a0142d5782821f4a645142efa

    SHA256

    7bddcfdc29b735d22c5d1a462b3848d98ad8f7e8f20cf6478a251e2749dd1c57

    SHA512

    2f5ed36408b6a362bc803752c0812cbb2632bda000fbc2cbefe48b8da4a0df42365e484c1276409611f50fddef4946b5a58bd59415a2ebfff8c1c573acca2fe8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    22fddd00eec18e884f4fbe184c4dd175

    SHA1

    52f67a9bdd3dec32477c264303d72a35e3442fd1

    SHA256

    6c54539691e9f22519b426a344191a97c2dba23720874606fd7b868e24bb026a

    SHA512

    50d70f6856cb4bccfe22e5c1d913355ded6526321a4a7236e21a83b5d92c6d31eb9b762ca4262227e5db21cc2ce1e6d20f0958f9d99c09924d30829e458a7144

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ca58f73f7c013083a898d3a2c974cbc2

    SHA1

    85d3b26c7083b68ba00043ca291db515a2c45029

    SHA256

    797846d60d7fc4c478765e73fe88c35812389ee3e71bd4d1f05a426bb18b4e71

    SHA512

    4122c2db6bcd7f0d4a26d70860f1bc84326a2b1157a3ec5ad77759fe63471286776c0309d5c995b6c7f9fd71c3a90dab2d87cb866d5b77520b291f1c426bee74

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9a31412d81bdc3887578cf0d9d8f7910

    SHA1

    eed823cf568cd4808ac4afaff83dbadbed269df7

    SHA256

    e4e7f51e372d1aa083d74846f6485419c16765a46fad2d9bb22ffa1cfd28d5af

    SHA512

    54c2b03018143f4ccab73338304ad54b4998e4c723ca7eeaff7aca08c1038263f0dfe1be66c793fd86fa7e4c6b76be9384a4441e86b2461be3e49d01d68fea24

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    77a1ce9364de894622eb7a49e94dc528

    SHA1

    7f041f37348b1869b2a87c5c78298f87bc8f43ff

    SHA256

    6ecf0f0a7aa4a48dcf501f0c523d8224682a48992af50fafd6a668e2744aab1a

    SHA512

    41ae5eff1a50de27401da6c8551051ad3be0ac1caad6e31d27d6fa3dfb6f98bf3de32360fdd7e868b25003f0c9a7eba23748ad73966b276e84a7ac4691509a6d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    80e79cee36bda8c2847dc97316ac9fa6

    SHA1

    a9b954a383a0d0fd7776e2293f16de9d8a33b940

    SHA256

    2bf464ee92deffb98972708fe8191656225461b3f6f7113171b90381e39b66af

    SHA512

    268944affbff8a3b9a2b28739d9bd702e3e071f87ca4190924dab14bb0bd04fb09475c5a0a48ea48464c02a0efdded490dd356b98e8153b21180c562f94d2275

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    36280b18ccff1eea1bd20678ca380996

    SHA1

    d9a0d402314004a66d2141380c1b276400f01e07

    SHA256

    092c5a456c1625c75872d4d3b601b43d759de2a26bb998828331558452defd87

    SHA512

    c321e15cfa49357b382e24c9d448fee40e2b3f940f075786adea5636698c9bf34077e3bc19ece5297dbe3b1c03c451ce3bc6bfc706796da0f34b3caa33d7ab79

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    79598cf14b100bc2b03608da052a211d

    SHA1

    1266653cf80dab0202d1bc318965fe1966902575

    SHA256

    7125666568f5f2f3778058adc89ad8a0ac56ba0feea805dfc5099a0a82426118

    SHA512

    0e05079f112df54b742b4297e231e789436d3b77f10947020cca527d2792661750fb0c2c14fe9bfd7cbba8213a43bebaa1e93a404dd5ba8db1913e98bb023e18

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a43d8bc7fc9c2272ab290b4d9e4fbf10

    SHA1

    3e844cec3b81dba33a97bf264269785535231179

    SHA256

    ada68417fe48e5e2c931c49e0690a8f78fa826dce02fa2f0ed4b0675377a3845

    SHA512

    f749a556013c8e819dddcbeb02ab8a971bf02941ffdf6981b2fd8cb562a4b3da498a0e206dc81fe505e0349f2d820fe05be617700f239501fce4a68189a7472a

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RU3RPYUN\jquery-3.1.1.min[1].js

    Filesize

    84KB

    MD5

    e071abda8fe61194711cfc2ab99fe104

    SHA1

    f647a6d37dc4ca055ced3cf64bbc1f490070acba

    SHA256

    85556761a8800d14ced8fcd41a6b8b26bf012d44a318866c0d81a62092efd9bf

    SHA512

    53a2b560b20551672fbb0e6e72632d4fd1c7e2dd2ecf7337ebaaab179cb8be7c87e9d803ce7765706bc7fcbcf993c34587cd1237de5a279aea19911d69067b65

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\U9VC31Q9\jquery.min[1].js

    Filesize

    83KB

    MD5

    2f6b11a7e914718e0290410e85366fe9

    SHA1

    69bb69e25ca7d5ef0935317584e6153f3fd9a88c

    SHA256

    05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e

    SHA512

    0d40bccaa59fedecf7243d63b33c42592541d0330fefc78ec81a4c6b9689922d5b211011ca4be23ae22621cce4c658f52a1552c92d7ac3615241eb640f8514db

  • C:\Users\Admin\AppData\Local\Temp\Cab4672.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar56EB.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06