Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    118s
  • max time network
    138s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    13/01/2024, 05:49

General

  • Target

    5823adba6fec506a0c21f66868f124ca.html

  • Size

    26KB

  • MD5

    5823adba6fec506a0c21f66868f124ca

  • SHA1

    4f1f818a7835a36d987ab8a62e0b0fef21b3da81

  • SHA256

    2a098b0c0660e2ffefd7689a440fd897441de1a4a2a3299a96eecdef81e9d7c3

  • SHA512

    549ef6d5058d37e6261966fad5850ee555cc75d6388d226f6777f2e5520d505234a7021922d4403c24bc73e8a7981853cc58a24d955f55d3c951e8c007935445

  • SSDEEP

    768:z9P+NsWE0i6opNt0BXnP3PfXvpvxFfq6fBC9CriuYg/sFk:JP+NsWE0i6opNt0BXnP3PfXvpvxFfq6/

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\5823adba6fec506a0c21f66868f124ca.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2844
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2844 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2072

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\04FC23A773A43B5EED263BBAF545D686_0131B1D765A2E20775EC0B017972E396

    Filesize

    1KB

    MD5

    b0824ae30af509a1424d9b59b1948032

    SHA1

    033bd70c7cfb23927240bd033872c85de0331fb3

    SHA256

    90bb28c0c3c1689f51b333cd489e7765bb198861a0b111b961ec52a4b6119525

    SHA512

    49511d4c9267b463401289639c2aaf67f85b4c7fd151fb32dd9553691b35de3ace373ebdbe76f6218e161be3fddc594bb0e06774476d4edaf2efa712e3d1a77f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\1B1F4BA66CDBFEC85A20E11BF729AF23_AA85F8F9DAFF33153B5AEC2E983B94B6

    Filesize

    1KB

    MD5

    fe30f0308c8eff49e2dd1efc90cc689a

    SHA1

    90d5feeda1464b2e2481692075c89094d1f05c45

    SHA256

    6609fbf24a96417273a7198f4c907b17dee335b677d0ba206dec0ba2e5f9d6d7

    SHA512

    c4009ca723fb6da1777cde85905bc8703fbafda385717c6229e73becea2ef231f1098d171bc7944444268ff433d05625fb6f60c7a89b49252b917309899ad71a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\68FAF71AF355126BCA00CE2E73CC7374_A88E46230AD93776AD6952BFE1EC0FFF

    Filesize

    1KB

    MD5

    ab7cd9743f41554ece6762b0a1b2a2a5

    SHA1

    9add5316abfbd2e3e8e40a2e1b0e6efb5d4aa645

    SHA256

    ecf403b6c5322354870cbe0a32b0fc7ae53ecf6f412854c415a8b5fcfc550cdf

    SHA512

    91761f1aae4f835dc713da2ad6193f209a9deada193ae722fad4b30b452a5722004ce15f8ac2c58fe5b4cfbf65c2108e1f6d352180ac130ddb5173045161d43a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\C70BFA2D9DC40914ACED8BBED973B1E3_0AAC2086786434F6533EB54D1FBF050C

    Filesize

    1KB

    MD5

    f19563704f5db6fb263472da408cff49

    SHA1

    acb7ff767cf81eaa12682666e8a194c765afa9ec

    SHA256

    93686be1b307896c422609b4a78e709851a4a02ccd920da4639762411a419d6c

    SHA512

    78e8be3e64b2106bf11572b4ad8e0551dc473f654b7594d30df71ac40a85be17b59a8c3c57bf0293fff2c8a4282485348b066c54243891184479b46f8c5af728

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\04FC23A773A43B5EED263BBAF545D686_0131B1D765A2E20775EC0B017972E396

    Filesize

    404B

    MD5

    94d069e94a5db83239a3cee96926b703

    SHA1

    110f655111f6e65bcca36670d9efa43a8f66b985

    SHA256

    5c420174ef5827f067b7da35c04b17dc3cb1898d33e214e468c03a023b2c35c2

    SHA512

    32cbfe012b117de6ef635f881106f8737279862132e8ee704ace4e59675508af95f85e0498b007a75cbde048862921817612552a6c7c5e58dd1ed59def257c56

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\1B1F4BA66CDBFEC85A20E11BF729AF23_AA85F8F9DAFF33153B5AEC2E983B94B6

    Filesize

    412B

    MD5

    e3f4cc5ffc8493b8c270c462373135e6

    SHA1

    c9dfb93e05cd8468b5c6750ccf18f58550cface5

    SHA256

    7e2eabb69edc4e3f4127dd3681c194f84a2d3d606dc002771d6a73d28bfa9d3d

    SHA512

    3c99bec354b8a935d3fef00106e3bf13b05dfe6922967b5ecc3ab61fc25723a7cc84d617dfe86eaa1bee7bb3139191efa0ea7a9c4d884297cce2a53442e7bc8f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    6aecb265df078199e5a320a069c2646f

    SHA1

    86699574423b716d5d6a59acb9259a8eedc0590c

    SHA256

    632ae4c48c9f0f54a6aca423f97c521db9bede6bba279dade4b63414d03690d9

    SHA512

    ec792de8dbbd545e15591ad3ff2c7c070441451155e35d5a9c7d00e26a624b58514e513af2444e321717b8dfd89fc698306f4e9781e84ef79d1ac9789de2a335

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\68FAF71AF355126BCA00CE2E73CC7374_A88E46230AD93776AD6952BFE1EC0FFF

    Filesize

    408B

    MD5

    b0a1d62d044cc99f8d6252d3d43a9578

    SHA1

    c9b1d1c9d0ddbdb15f9570399e5e90180371c3d5

    SHA256

    e6520279a54209d5593083396706cd00f7cc150085811db1b17132ea87df3578

    SHA512

    0bf601d8a69ec562a50dd2fafc6f335a9f3cd3755b4439da023f24af7267519c594151de6121e5a13a199f72f58c9a2a3154482055b35ed4cc2f91d4d78c4197

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\68FAF71AF355126BCA00CE2E73CC7374_A88E46230AD93776AD6952BFE1EC0FFF

    Filesize

    408B

    MD5

    ef878c7cdae743692789ad0976b77de2

    SHA1

    99437dd535b2e2465b0c584c34a802d48765d6bc

    SHA256

    c73d4793adb558cf612fac340a94d7aa68354eb3dc77c68f724c6660756473c3

    SHA512

    e6fc67d8c0bb4ac3605765e497f04071ce5368b46cdedaf00b617fab2f23ef0e07d42b20a0e49afa3eee96789bddca64341d88a27e9674229d8c742cdaeecf04

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b0bd4820039e071803bd31a9921494c2

    SHA1

    ec93a60c2f50a0dbfd116201c5d269a715a7b95f

    SHA256

    196531e094ec4781704a0279db6c337273090bff4e218c22829ef7713945b0de

    SHA512

    4f155ea192d0ae514ab843c9b56e467a881ba3799ce09d0b2b3d3ef1239e8b2084261f5f7c6b7a15d4eb41406b035c0e7cbad87b81f6a0d8535f6257a3e7b069

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a132acc86b1fc4776ed07ddd5d78c864

    SHA1

    21e3c2dc601bf7c56db4ab5d9f96b4ac77878846

    SHA256

    8fbe4d1b16c6778f9ef3dc78cb4f505eab3cd803d5530a02a7f4b3d9a04a4ab7

    SHA512

    83780db16a45ac4214fafcd1c1b9d90b42a725b8fe6027ae0e0bc0e8718f791491115b8c47046220b7df94bbec66d1bab8f690be1f6d4a34fa44df688bd5821b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    69c2e0927b63226b82545021338b5477

    SHA1

    ac264cc1f0b1fe8693c06d883314e9b946d4f8d3

    SHA256

    c472e0fa5ba81834ddcbe528fa4729a8367cbf66552c31cc060b5d5a59cee350

    SHA512

    edac710fa78f726822deba3db78797d1388f63c70e9f9c2df27bc27577abe27e9e27e98cc8de4d577a0de5c705557318dda9c741815c19c276ededdc50f6d4d6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    08e26d1d8b81c38abff6a5e233253c3a

    SHA1

    812b8430f0c957565a82d4adba4c2a22fbbe73a0

    SHA256

    f16d8744faef9e753c2796b506ffdaaefe0d7b05cbbb704b75d473162f605256

    SHA512

    6409be7b30591d006c95f4dc0e6c0cf9436653fea1ed62092403f0b737e1b2e3b86083a5a36d87fe44329c9cf2e94a6f17e4a9223f95e60f2a0b33a25ebed121

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5e06bbc78b425bcf3c432ec03c08910c

    SHA1

    2c17ad85094a20d451add3cc7b25b780f793d9c0

    SHA256

    5c5862652cae0c56f67bf19076b1009a3e457faed7796c49377d7a6797331f0c

    SHA512

    59b20317d57a68be0d9be5d33aef1a6fc656882184059ad21eaa6dcd18c8f3f35badd984b07fb2c9e28d995be91a1112f00a2a435c0f684fd3beedc87e43a448

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    00f6a47bfd0e1385afcdab4c0fef35e6

    SHA1

    c20dce27db9cf589c6cf5a859e83a6c3c7a67ee1

    SHA256

    31d5d70af7eb4cea116ddb210e7a047679d4d2edc5bace4e20f990942cd47870

    SHA512

    ed8e24fd3703a5b80872bfbaf6e9f427bf40c22a8b1c16c45a4893361bf595bcf987f128f14abb1dca2758f5850c9efd8e3db0031c7a867afc7df35a71ad8786

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5772deb34c0e1729d756750dbf91b15d

    SHA1

    d70bd1899a02e3952f3c40809425b22cc9a41c8b

    SHA256

    e0e5c65f8eaf8f9c19c6d459e7790a1b507bab0b82323fb5be66eb17447a1d72

    SHA512

    e13a97f94f5c8a4f53f5133c7ee416ae1cde69721156325e09d5ba4ec69d18f13d22c86ac9c0b84239627e933907f841114113f3416326cc4f0758f8a5e9404b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    913ee99beb76b76e3367e56da5b60abc

    SHA1

    c21f618fed2587133f2e3a285d8537818b0b8ede

    SHA256

    23fd3da25e10d317501a83ad0edf53963877690f95b18c232efa31a61ef74dc7

    SHA512

    d1b3f4a550ed7fce45d8610b39b289b7fc95a1acc24cf4c8648449bf5afa59f5d8eaee6ea9bb70e655b97801992b51f6eab23a3dcea113f9a7673bcb3c635a36

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    80e56e091dda61624592ec9cfeb1328a

    SHA1

    80242e0b661bee9a69af686667dc3a27b71ee353

    SHA256

    5a025e5f0c825d8cc0f7e45c79fc46e5f9da1d02dc7b3e0d0e5eac2a97e46b83

    SHA512

    50ca57b901f8fbd23a7e9f9fae6b5f20728c5d7c128c01e01a686a88a69af71a1d4e57c6f2f2768c6ec2060a00a20c0e792bde6dcaffabef2b08848e639419f6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\C70BFA2D9DC40914ACED8BBED973B1E3_0AAC2086786434F6533EB54D1FBF050C

    Filesize

    416B

    MD5

    daca95006b671cd6f2995c029f424faa

    SHA1

    f9c3b8251122f1e120f8b86bb7287d9e8238c8a7

    SHA256

    bd8e320ffbb2e22f0ae7372066442f8655e05230ecbf23e935d239a3a7d81c76

    SHA512

    1bb6ed0130e34fc4fa4b9ff7e7811aafddfd53074fd78decd1f876208e5f04c24cc78543be00ed884ab52f0e164f78bb38a0ab6c0e545edadfe043b8eb1ad930

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    b4e4816541badeea6a0a3576236026fa

    SHA1

    11cf7c7840e56fd090c32377e7aad4e685802aef

    SHA256

    ca2428b74298370ec0b785e7ddaacdbc142f35533905a7e364ef7a56cd1e9776

    SHA512

    4b0decde9d6c29bc732a93a310e220dc8c85531b1a7037085538c0c09fa1019954dbf2fc0334a5f811ee2423bd728f5e694160af0a05aace8b17202720ed4c74

  • C:\Users\Admin\AppData\Local\Temp\Cab3ED6.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar3EFD.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06