Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    143s
  • max time network
    147s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    14/01/2024, 01:15

General

  • Target

    59e432adf85542f06e2cdc7c75e395a0.html

  • Size

    213KB

  • MD5

    59e432adf85542f06e2cdc7c75e395a0

  • SHA1

    7467c314a4320a40a295484e6686801a11f217d5

  • SHA256

    dcec8a22ead0cc50d93be6c3f9f362ede206e39d4a26d7614f99347d5286452f

  • SHA512

    eeefd51e106a99a923027fee8fd60eca595690c93ce1ddeffd59b9a7dfd11b610484c6c5452edf876d5ae519ff2f957e10715b3dddb2a2e249e184914ea8579d

  • SSDEEP

    6144:SSJgf3QMKXLo1e2DPQZbYMTSRQL/d+oqQLk43Qnq6wzVY9IsUYt4GfVA47ySWmU1:FT

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 42 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\59e432adf85542f06e2cdc7c75e395a0.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2508
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2508 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2108

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    bd0eba54f0af9e58046a5b7b78ab2498

    SHA1

    687e370b8d2d163b08948f19b5fbccc3f76ddf03

    SHA256

    bec53c9b8b1706697a5c524dd8d891cd6904f890f246d4d3aeadb4a00e3dfae8

    SHA512

    4266e4b11bd9c9f903b6275608133b3353fc7ae074d70f215f3642f7ec1e249c85c7bf0b69eb0816a8e04b044370177f2b6760974101b5024122efd6ecb14c05

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0302c696a47339504208fa6abb640c65

    SHA1

    22126e0d2cb93ef6b616dcbf9d050bd57b86b3c6

    SHA256

    0a63d08f5c01ee23d10bd3c495f99375c2a4feca43bc78b2f80e2ab3eaba5848

    SHA512

    5d17f48a3465f2acdca63310957e3c9af5f2cf06fc8144f2335b819d492f0720f2c91b20a2aef806583da414b37d05cb558cf4b19035fee39af42d89f6c89da3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b86c5994fad4d73017c756349d84ad8a

    SHA1

    e89a72d414cd5235a3f8f3a15287d532c91fc210

    SHA256

    a5f0274876dad4248692b5bb8390bf8fae699b888b33eb6a3e46a24680e7fba1

    SHA512

    ad5ae1917068fafe877b3ca7c70a60e3eb8bbb1d27cdf7cb1cf7739abfa8b1ac626336cb152ac4e1107771dea8df206ad06c8c3ad3c0bfa320cd3f0d8f8ba656

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e85201a3e0a927d55899942caba71a9f

    SHA1

    d5c78f465a68633ca6b7770182d92668b55eef08

    SHA256

    19668c71afaeaa037792ff4f8b9c49f10e44c54e9a7a996a019a3a88260a9a56

    SHA512

    44115a14ba5f632cc982d341efc2b0be3b6fd97a9819b098a9e6e5bfa224391ce1e54b4b1a44ca6226d7f2d405efe2adcd9f8f6d15354be3b574df41b47871a8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    09513abecb03fed6bc60698b9be2f426

    SHA1

    e8a58343cb73c06c1c13aad99542b49348619559

    SHA256

    206f4abd1bc460ba20bcd96060841cde663ffb697733905783a45ac67b9a9713

    SHA512

    4bc1bc6fa93ccad0d3f16df710c46ae8b5723c8cff3562e04ca6e7040be52cc4b9fb9606f6dbeeefcbfb45cb486d5474ef83e24a32afafe649b1a13441d99b98

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f8cea1908c1284cdaee25b282d61e814

    SHA1

    7f071a24e7b62a4acd0998c3faec17157903d72f

    SHA256

    a6bd7696f94a3f535b91209aa16db4606689caa2a8b672e9bc5980a2adabbf1e

    SHA512

    bcd97ce7edaa535a0818bad340c97c4abd146ae0ab86e1f971cb1ea531cf038bb333e78609913deaf31b5289b76717ff55e2f2bd02bc9917b681cc7e0df03d21

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b31cc2ddc642b3cfd3cac73e867cf301

    SHA1

    be1bda84d911870c1943a462f8bfdfdb9f9263a7

    SHA256

    de8af1a3d46ca414fe868e3627e0901cac30bc1020f604311efe1ff59897563d

    SHA512

    5b8b9b5922f3eb00ca717a2db53b8bf3e9130059604f929ad047d51b4b260b706a78d0272f101599a788235a9048de6f11ddd08b753ca2922742ef17e195d989

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6c998f98e2c1db5b4f163ae5759e0b78

    SHA1

    ebd438f4dcda66bcbe04c23a9e18d59810d2f504

    SHA256

    1f1061b397722c5e141cfb1426dc4bfb1b23a053e31e255f5b66cec503c45ae7

    SHA512

    42786e2d59e2f0b0ddd5c494f68ac3c520048baea33232b02dccf9e3f415a5dfab3a55bb51db60865207a85657402e635b82847222b0726072d5de51e0189e24

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    320f9bfeb8b99aebbf60333b98c384c2

    SHA1

    307acde743c3eeece5616479114c13cd2e263cdc

    SHA256

    4ad92085de8fb137586b2bf634ebf7908996bd9a92befe065c1526f0d4e45cf6

    SHA512

    cab64d920db58290568b8fa575050566fcf23c92ee22801a1479c2f155c85a3f85bd020caeae29e6882a70f5c25701c9a0fd932b5adf3824ceb2e1c653bef3c7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e2488477ba137ddadfba598be826b397

    SHA1

    f8c980eec2043384842a412425bff66f00e211d2

    SHA256

    ed659ab5c239b87c565ef862dc4a147264f8e606948449ef88e42a2a867bf592

    SHA512

    1c73593940e1c76f92ddeed42d94b061b13515854b3a813973347bcd744e58ec1d7094e8bf884d130fa5877fb1d3607704881d0ddd9c3aa10b6e7dc7a6cbacdd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7cec7d5bd03993aa0a586e6f0a5d9d1e

    SHA1

    47143a217804cd9c277c3d43f27f1cc5aae7be19

    SHA256

    6614539e59fec0d8ac0868e640c3da05a3653b96cd85e95fce952e3c548c5e17

    SHA512

    17803b240652cc22e3c73308760d135c870c756aac69d59414b138ad704383664cb041a5bf310cc705e14708804ec05407ec9ef697d958324799793bc7c2d086

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    837ad29dc9fb03b765f826ad6f057ae8

    SHA1

    c467874cbc2c677a88a9465957dea17765271179

    SHA256

    3469cb3cc663a91af4e5d4173f8fb1ad667dff3ec8ba7d122bf165d42ca5f55a

    SHA512

    0ac2b4fd37e27b10c5cace0f08d6ac646b6209523aac232c98e7866e1a127a5857df8f3f6aa64fa2b13abcf0f5a37fad3796c594c227a7a70f428086b94a8ff8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3e72d25e12a4ed11799e309ddd0d4094

    SHA1

    06358215d823642cc435e817058c0ce5580d01d6

    SHA256

    b9b268ed56fa80226f342bbbd41e211c1cdaec252f0d028ff9c89f073e4de4a8

    SHA512

    4f463a2dc194d7927512ef0adc3054681ac37abf8e701731f69106c019c42541922635bddecd7ee6ac47a425978af1eff5322aed27debbf40bdb7e4250deefd3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b9c0fb1c42a097906c64bddb383c4936

    SHA1

    b571d7e5fa76dfe5ed4e40a8ad4ebece9e189b8f

    SHA256

    74a62060b7313795dc9eac7779c909641846a4f6274d8c1839e622c59c1b32c0

    SHA512

    213ef493e751e34cea10d6ad2234e77eed2c966287fbf619d673ce06ef80ac6025f29b0826eaa07ecfd885516cb4152f257bdd5e7fd84d8e044f66fc284865ef

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2b610ce3387c184c7e88fb1e1d8d87a1

    SHA1

    ea5130da343ab5fe22e6f479533addf5956da404

    SHA256

    3aee57909983eaa10a95e88cc6ae01db72a5923d7a761925f360f443c6b1f5ae

    SHA512

    f684a6bc1b3bc8d74d8e1d0d589223d3a3e5c98684c0505da0d12f4fe739841f92337a48ab4fa45257facec8a2fb182bbfb5a4b14f4913ac248306370af56cca

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8f093f5ad86537819c311bf19c47c556

    SHA1

    f1db761c729864cfeab1ea74805fa7b15340ea87

    SHA256

    704fe58470edcbe2570ac7848df675bfc40fc48d1752c40a9d6c13c77818e71a

    SHA512

    6e6f3ce6762d0ff88b6c1ac1f8ce8a84be0c5ab913af71218c7d4fdeacd58f911f760faf744fded8a9bc33b1ac105f5bcc483dff89c42a823d3db1f5088a5967

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    437023c8b1ceb3f517c234f79288f449

    SHA1

    2b0229bedb74a844d9fcbc474cc74f4cbc26dcc0

    SHA256

    3bb0763cbbf412840513729a2e57953d5ab60b31275c22e5f2cad91dd3c52dd6

    SHA512

    010a05604b273bcb602a006ee90822ca3a54e964295de86bb7c13c08ed168cc275c8ec93681879131df51f1eebf520aa174c9ffec60a3fcb9b2d12d8ad89d31a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    186ad1c5bb7acb90f10da004574563e6

    SHA1

    0d5a0b599031f5b492d14f3ae3afcf6a7926aa4f

    SHA256

    d00b7db5da78ebec5be564c14069acf68ee79c4d65c1b2ae907fc7b92d6b2f36

    SHA512

    b99660956b2fdcee31b0c569cc882d0ccae91da542264f417a0dfe633c19c78ed6c3665b2a7722fceb48de5362298c1de58bb4491c2febd79e11ba28d40be39f

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HJ0GGVIM\f[1].txt

    Filesize

    36KB

    MD5

    9af98660896d14277f5d37b56a4cf56d

    SHA1

    e5586335331e045b4e26a3e7ed93207bbb19b81d

    SHA256

    fae3c38d61f2ef3f953619ad0d49381b471df056bbdb164b667105cc29983992

    SHA512

    5d879df34a37c0ee269b04f32a480c17fa8d0099525cee8f6fbc43d2c6ead10a6a8f380a1d0b22a501fb1b5364e9fb0690ea1b60ac0838746f566a92a267eacb

  • C:\Users\Admin\AppData\Local\Temp\Cab4FE5.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar5056.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06