Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    120s
  • max time network
    134s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    15/01/2024, 01:39

General

  • Target

    5bcd710625b5f95b2d1f16a52b61dccd.html

  • Size

    6KB

  • MD5

    5bcd710625b5f95b2d1f16a52b61dccd

  • SHA1

    025edf6d70404281eafbfd5d422d94807e132d3c

  • SHA256

    e82fbc328a019610816a23dee2b2996b271327603dc79db2195c1444fd264899

  • SHA512

    619b2ac8013ddd99af9a68522ec1b12e668d1454617ad7db20580a331a6b76c8bf99db6145b5f4fe69f428600e1b669f2d0964d743262c9d43a58968c5025add

  • SSDEEP

    96:uzVs+ux7C/LLY1k9o84d12ef7CSTUzm/6/NcEZ7ru7f:csz7C/AYS/T4Nb76f

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\5bcd710625b5f95b2d1f16a52b61dccd.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1664
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1664 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2608

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    794769c7133e5971e9d5916de846028b

    SHA1

    28f7f223c67f6fd074f142d58d229d3ef4ff82fd

    SHA256

    8e01d24121dcc93ad81e76ff7c15b7e1d116c3468504daa7795bdf25b4995cd7

    SHA512

    da95b31fc074cff8eadf9688224d7b5b23fb50c4feacb2a679109ea3972092830126eb478848062a27c84b519f9eaa4b398a674f93a82cf3900f659d2dc77483

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    98208736785fabc9c67abd1166d121d2

    SHA1

    a60fb09c29c2a26fad02e5ced91b1469c72e4821

    SHA256

    8c12d8620d45e8d09d4453e78b22b094c7f1c03dec495f8273df668d40392235

    SHA512

    1092a774afb1a1c9b1f9a7f3d458c40d6983d3e432001bb41e1fda798bc8b91b69a55202c8977781535ea8696625529a9b1f320e2579bbb1b6f4cf117e89fb11

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c51f18ba25932b081f0ce1b327ca4a99

    SHA1

    02e03ad2ae6112284adb2cc5fe816abbd5b1221f

    SHA256

    836847cfa3aec55a32c65052827c23cab0e05758f8653538a8544b2977ff30cd

    SHA512

    8c92d2cc393c699db217432cbc9c49ee751b81f84af9375adcbacc1409cfe4a418a1e70ce7404f5469b1b0e973eec786d81b064c2936226b60744d1aeb15102f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    816e7ab62ba3987b65da7b8f2ce68b87

    SHA1

    3eb61eb0db9758346e0fe95bf859b92fd3032b6d

    SHA256

    1be35356242675a9e1e7ab96e73bdb597df3b1d71d349c836117defe85ed1c7f

    SHA512

    73291c116542f8b5293eeb15160d48b8412afe038b64ae73d5c3c5547d73ea26e8dff6b7fdefddcdf4e851d0dd9640630d1594da5cb039e4727049c46e643e3a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4ac2bedc23133b360864a590cdf91c2a

    SHA1

    7988ce3605466cb7535164c71cb71ac2ae9be22d

    SHA256

    280335dab8a6103e9e375a18059768f3f8cc2e641f5ed8d6783528924682864b

    SHA512

    3626a771c29bae6d7d1643c7a8927ee174264232ee6eb44f94092f663ee19209f73984aeac7407485da80209dd24c7e2dcfe2c3dbd16705e0879625ac73bbddd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a4f6d868b1bb1e74cdf79db87c10e4b9

    SHA1

    9ec25397db35bff257bdb51cafca8c2cbc904a17

    SHA256

    a9c3dd964983637473c392583566e9377cc72796f4e1639cc825a655ebc753be

    SHA512

    1d248087af4379e5abbee366895fd76cf8a61293f991b96f8e72dae0f5ca5114e72fa65f21f8abe23232542b3784fa87fe4a0fded989a949b3e91fc8e480beb5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a196ecc8c313b871e7c6bc75ff80bdd3

    SHA1

    a9ddd30944556a3bbf1b2ac2462e408f07ff9687

    SHA256

    f54838022244e396cf36388bbe899cf37d73c31859fd07b6dd6f0020cc4484c8

    SHA512

    efbd05da87f03e02c5997140298a6a560ecbb06b95e33499a473c7810d27df152a42049498dd55f590f6c2098168e6f61e091fbadb74120b9911c671ba244556

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    48b5f3f37f397447ad3dadefbc03f0b4

    SHA1

    ee6fea1cef56d1f158848c9a6b4afe7c6c357ffa

    SHA256

    d6c97cc7ad585c64fa6c6e1c0d93d6f91f3d27978f882832591b0094b36dccf6

    SHA512

    8a61f1ee9287cf19dc2e9d06289e13e76cef148fea4b42baef70c094b19b0d8fc388acc996e11e577caabe278dac71dc94d02a12eb1399b99542c9906319828c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e034ea485c2eeb8553dad22bb616591e

    SHA1

    b781d9b0c936e739c819208ec13ed0f830126954

    SHA256

    8f66a9fc58e719f236f3acad6b247f294f4a22da1c46f30e8d81acf1894afe87

    SHA512

    e149e4245e2c6b140e3387b9bc2712183649c2782c3b60cf6413954a411dfa28a6d39bb56d8c29b20a42ee1e1d309012a9bf1bc93a1972a6a3cceadbb5067ff1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    17289c9b922e69e49c8800fd34b9961a

    SHA1

    fb04fb79463cb7a52a2dd81115ffc5016c1b5464

    SHA256

    a8b767ac4f3c1febdb81ea48564bdb5eb33c06bb3978c23eb2fdee5ec14fec82

    SHA512

    78bc36ab91e6d1a84379d47781ead08d75fb17e840f3d3bfacc8ccd440d00783f3df1ee4246c4a74becfbb3e7310f2a21ae4eb81cca870a64ff5427eca70b1e5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0220ede972cfa404a07392f03ec45134

    SHA1

    7dbb96c0d8db5302fafdc1435d20d48b405591a1

    SHA256

    85b614b5b6841a5d84bc8f194dfd12a521a380fc2ebbc6c8fad31c7ee79863e3

    SHA512

    3a16c7f7c4fd93061f0135e8c8cad87d58cce18cad85767a9f56ab19318f008d6e50e06e3c4d956c0acf627582e777b74f0925618bfa73a833b3e0be5f6b01a5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ac26dbddec01168afe67b4570f96239a

    SHA1

    f9bd9ddc42c572aef352dbbcde706e48f9cc27d7

    SHA256

    de2dfcea3e537a34cb4b1ff62d723b70e04070867b1cb582b42e03fe68fd02fc

    SHA512

    cefc3e687563a301fbef387e64306d1d5988e86e7864639b32381ac959e6f4e6f688ad1a78db7e276ed90d913f96364e5a86f4d96c50ee6e0d1b1f7c7a8d4d04

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ec0f35bfd1038ad8186c65554319428f

    SHA1

    5b63aacdd583e5a8bbd520a92569dfb0a0977d1a

    SHA256

    10dcbf686bf90ff71f98db15bc808c22d3f1f9b94c88e4343f7904c644f8ece6

    SHA512

    63766c7dbb8e2b4a6487585ce055df791632639ba87e7404d5303bb429f40f97ed12503ec2ebfd97cb41491276fe85530a165f0d910b2a1aca9950551e5c61b3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a4e108782b546ee6fc89620404890330

    SHA1

    5bf620543b92d190ffada2d366dc0ca752a84da5

    SHA256

    c32fe0e0ff1418c68a4f5ca51477cefe31ed254698893c14c9fc71585e59ecd0

    SHA512

    b0b339c3f49d2920dc7961ea90ca1f543c2325b11efa934815ef8a6bf2543b5233c5c000a42d8578d7f23885c525b2372db85c0e3f60b7df042023cdf106f533

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    11f2fea525417432cf9be4dd1c14de3f

    SHA1

    c0e02271d51448ab6e3d98fa467186a711438131

    SHA256

    546ac40fe2fbfa1a2a0665401113586080dc12af3f0efd9370d6db3db476eb6c

    SHA512

    e7dea97c0789c30d0001e2ea085a7485943a54d9982b5504e33fc5b767a8281237093490b959f4ef55c3ff13a32102cf6dbb97971242ab011350af72607a33c0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fd4979abd9bc6b9afcd04974f304091e

    SHA1

    0e09d91a618ed6b80e1ae35ac7af1c09f7d27ce3

    SHA256

    ed861847d42fd7a09001714df0b7d46a3026e3c67b543bfe75a4150a8ab93684

    SHA512

    636df0ead7f243ca9f164c202d35d60010abb2544ef4cca3600f8b12624266b0ad053a771edbe38458c571bae30c99e6a4103cdb502bbeeb1a4cb9f6985137bb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a38b3621cf81d256657f1653270c0d5e

    SHA1

    38fee6291c0cf5baf4e83e833a8c20afffedf710

    SHA256

    80f9a13e7b5b435878c1d04bef0710ce278d79a6444abf81f9a0b9a71b0732e2

    SHA512

    a55ee4c915423f88bdeeb7b26a607edd96ce36ea54bd091f38e751a2e56e7cfc61f4faee587a27485ee0e109591f0303703379348b830893304820a31f461096

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bb2f1c3cde0fa38a36ebfa8ed52160e8

    SHA1

    b0af249bd825709c1a03c2eab4f137adf0471fbe

    SHA256

    7170995ac9c47418826bc8bac800c24ab9eed6e5181075643d1f74e30b927832

    SHA512

    b08c40a19fb0e2d5af1859e066e0039e538b6b4b09da921c95c4360cae6ddd8fc41192faf7f8a00595da2813eb9134e72cf30274d29bbaa8804384bbf303fba2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    31a52de27b3d5190f74f8b1251bf5639

    SHA1

    8340924e0a1e1e6450599e221db97daedb2ccc1b

    SHA256

    8edefa758d0437f45715bc087414b9ea77df8969d21f7487b4c44306e7964b2e

    SHA512

    c99a53ec3ea2eddd1214b626c32d5c4ddb7eb7bfa16c75ec80b8a136921b4f6ab94fcf7f69deea589a0c57a391398260bffac6d3a66a00abe60895427c915a92

  • C:\Users\Admin\AppData\Local\Temp\Cab26C5.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar27C2.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06