Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    142s
  • max time network
    143s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    14/01/2024, 07:26

General

  • Target

    5aa2b560da8c02bdcc3f0eafac042075.html

  • Size

    58KB

  • MD5

    5aa2b560da8c02bdcc3f0eafac042075

  • SHA1

    c8a2cffba8ea0975ac1f3cb8171ff4f55a222c09

  • SHA256

    dbaf6fe183b999ff728c307c807582a57e66be38eb8bed644aa3174f7625ee2e

  • SHA512

    d4881dc2e88f268864025a92c319ac3957ec4730faf8a512ab37303f65ecf4d4c99416f02e4c01e5a111b7d4eeadec04c8d00ca1580515a63812f216432bd5a9

  • SSDEEP

    1536:gQZBCCOdk0IxCxVVSf0f6f+fmfSf6fuflfbfRf/fSfufrfJfXfhf0fsfDf11f+fb:gk2a0IxX8Cm+6SmNjJXKWzB/pskbXWoG

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 38 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\5aa2b560da8c02bdcc3f0eafac042075.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2736
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2736 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2436

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    5fb7afb9c4861686d26edc99d1beecb5

    SHA1

    b845e638909328d71aceb6c6fdde2351820c27dc

    SHA256

    ad2b882b42667546def58b57ba712b959066b57c03c2a9fb461d91d11859860f

    SHA512

    76236ca84027ba3ccc6cf41834db31b90b0c2f540b20a5eb6b8bff9679b2b259342a46f642979fbcc712a766e3aa12ab94c41b9cc71a4c5b7403885812b988d4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5d52d179129da28e0c1d16691c2dcc5c

    SHA1

    95c83e35ae1ff9020766e79d3793db2bd6cee536

    SHA256

    a7bd5dd689fe9668f6bbd5e3d7dbbef17de3c95d92459e3f9abd6be4cf6e3986

    SHA512

    02a7bd9b7a0f7f158c6b112dbe3f413e271e270ba2d19d3b3a81e79970e08e8e35eb844a89a06c400a2b15b92ad7e18c4b531ecf92b75eda1111ca180804d435

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    91e8296ae58a8bd92d83484921c7f2c9

    SHA1

    b62d6dd445567ce9dd9e945881cb7f02f522fabe

    SHA256

    1c23f6cd71c33340ee159e8975ddb5b425314cb728f35dcf4bad9ef1a4e9a95e

    SHA512

    f583e42482511f75b6cd6fe01df493a416b5fa82a10300c24e161159ca02bb5906e897e6e882097309eac0a55df9d162c108aa17e4366bff292537f66d88e4f8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f4f47558db69fe8bfe44cb51069d28b3

    SHA1

    fbfcceab6941bf3994460c2078c80e04c1d45ebe

    SHA256

    1c74357854c749d60a0e749cc3f7b99075ef75d452c0257e4b3488b51ccf587c

    SHA512

    13a53bd6852b620eaba907aa20c4b498c5cd0dd871e861e306457a229e785dfe9dede4aa57ae1016561c9daaf0621c623c436ab385c859fb328f8a4a988af0bc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d6b64a9d65df0e31eb46dee65f7b5e3c

    SHA1

    688a79826b997c1ab82bfda6e8701820274a0282

    SHA256

    2e072e12a565af8137823ac31fb137d38a94e3d6efb42af6c713f1f251a07b98

    SHA512

    91432b0a90d174a39e93fa74773fd6cf633e6140d086c0cc4f541533e6d11543cae8cbcd0af429d48a8139e298a4165f53366cf8a51bb5133dd00f6410c0ae39

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    24ef89f40b14f14a9c1858daee077177

    SHA1

    c06227628a717972ea5b7140fd4b9bba167a8369

    SHA256

    cf593179f466cda4e48daf7f2b3ac46547171bc5b64a4ca2dff2cc144ac6cf78

    SHA512

    5360c773c2bd2b38f63729e3ff1bc6134d5f8d45251c7d6a8f70a9cd6ba9fe3f6c5cf76b00d7c5ea56880159f40d37fe19c15b111e2df57692d3346574435562

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f5583e18f397f55180c887390bb85b22

    SHA1

    f73eec4baed7195b7a23bc566edce38942caa424

    SHA256

    f4cea82f8081c206aeb781b0778351cab96a3c659de186028eb4f3a9bb394a7c

    SHA512

    8fea94cedd0033f1648f5177db2782096d061cddd3b68f5a00bd0b404bf535dedecccaef42fe9085404623b8d281f5ed95c924ec68d61ed9a1e4bff1c90c85d4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    62e75b77dd52ab0fcd3804ee85ff907c

    SHA1

    88eb17c16543db86d7f51c931285ea7e7faa56db

    SHA256

    fe7f725ba4cc4e7f675408277afa0bc7ad65c332464f269748fe9ade78ab07e9

    SHA512

    a93060c746dcb8eec5a429f1a05201859c3c0d7a0e6f30438e390f3c5d7a5bd5e25065fadd1c24181d99cc54d65aa3f0ac4edefcfbae4fdce3b7217b02238f6d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5ea07612731d5eff3704a3b8ac7e7620

    SHA1

    d52c455e71154c22e8a2eb443f5c709c44a0e334

    SHA256

    1b2db4edb2ab1921cacf4b64fe001c67aca34dea9b760597835c2a371e83bee8

    SHA512

    83ef8ddb42f1160c143fe53c99412200071885da1a567fd029fe779ee3c9b2d9ec0ab74381ad2702f8a7846a09374447260cf5e59943722c55a986d0afaa9b0d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    398c82ae435958e9b49f2513ea3af57a

    SHA1

    b90bbb1ae30dae72748ec174a02a71f5943d9186

    SHA256

    29faa228a4dad8eaf68e69cee5119471aee06815a31795c7a35552babcdd27bd

    SHA512

    0b59db939c91f670377d9f4d838881694251f9fcbbdf6f1bc3fba518994699874f00cbb4af9476779fa236393af1271c46d71f5d533025dd8208aac70468908e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6c1604b57561c969dfa336c674f7f7ae

    SHA1

    d2a2ee3502358a3119509f9b682f9db2614d3edb

    SHA256

    cce0aa456c7202a795f3e887364f3678921637444fa006aa5e904db8688861a9

    SHA512

    e89dde6b4092223c0f1811f8ef4eed03c44f36c9a0554ee74a889a4110c366cd9a90546c3db1cf153e32b37e0279d125621a75b86ad1852340d3ec37cd95dae8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c65e5d86a0194776a03af9ed322df78a

    SHA1

    3829a03481797b907fef5d7bc7581cf0c274268e

    SHA256

    d185f01d15d1dd4c22d0362848f6880f2f4de9b0001323b735b6501670bef7b1

    SHA512

    cd1b3f91b44dc1d3c912d6f4030d120037229fb4176c5e23b488f74e9cfc56ac751d4dd36d3c40d6111a781cb9a9c2133a89e409ca73ff99cec4ce53e69a41ff

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ae7ada9b8754dee3ca5cf472a45d5ed5

    SHA1

    646cbbd58a0d7a6c64531f40c6f0b869f0ed1274

    SHA256

    5885672a888dea5de870e6770b192b2636fd7dd93aa1be919c1c287e38b445ef

    SHA512

    db11fe7709acfbff5bc1e25e4bf935ee188cdface166b2d8ebecd2719eda9f9d19122510c72fb5002208d8584a8a369e394027338ed662d2601aba1c14f96d9d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    9432f853b85504a53b90293fed3084ae

    SHA1

    42405591b2729a113e4e9fcc22ceaaf7c9e47b32

    SHA256

    0e2969e0fdaaccf940270ef35c7df543443cb2206192079891334eebc3564962

    SHA512

    d3cc1f9456f9f94358fdc8cb783b73876ba97149ccea57fed03c9b16b372cfe2ac33bcdbd2d70dbaa92ca5fec4adf85229d619e3ed6a5bbc4bb21ae144685179

  • C:\Users\Admin\AppData\LocalLow\Microsoft\Internet Explorer\Services\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico

    Filesize

    4KB

    MD5

    da597791be3b6e732f0bc8b20e38ee62

    SHA1

    1125c45d285c360542027d7554a5c442288974de

    SHA256

    5b2c34b3c4e8dd898b664dba6c3786e2ff9869eff55d673aa48361f11325ed07

    SHA512

    d8dc8358727590a1ed74dc70356aedc0499552c2dc0cd4f7a01853dd85ceb3aead5fbdc7c75d7da36db6af2448ce5abdff64cebdca3533ecad953c061a9b338e

  • C:\Users\Admin\AppData\Local\Temp\Tar2245.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06