Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    145s
  • max time network
    152s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    19/01/2024, 11:52

General

  • Target

    678e754e8695ee470cfe94683766b393.html

  • Size

    13KB

  • MD5

    678e754e8695ee470cfe94683766b393

  • SHA1

    67d00fdad814cd839733ce17e4f09897b76d77de

  • SHA256

    fadab2a0476d32834c2ab2e77444b42713f221da82463cb1c5b3ee89f8805b80

  • SHA512

    d663bdb6499a0a44a74585e454d4f9722ea8d1cc73a11534f32bb63fa8bd1aba26cae3093ce200b6602a63c7c95c43d64cfbd7e060e6896326e18eb9a423d4df

  • SSDEEP

    384:ZtESCbhBwks4x4CGhB8hMUw20Pa0+9rxb2ksoNUPBUw26Gn6v28saNNUPOjNUPEE:ZOS2hBwks4x4CGhB8hMUw20Pa0+9rxbb

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\678e754e8695ee470cfe94683766b393.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2084
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2084 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2448

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4736f624aaaacefefd526f1c80549d3c

    SHA1

    2f8d56a25b6b87667a87bf1aebc5e751c9e2c1c2

    SHA256

    17255c0836d130089ce9836a0bc1b149591e0f26e5da7fc6a5e2ab59d8e89af1

    SHA512

    1d8efe247944f45a46ef9bb77383ff6f2d140d640ccfbb8fa1f74160572ee93b7ba82debbc674b983d00ecfa3147b2b0997af9ab376f0fc279ea394afea11dfc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fa4494930fb8897173e7b4ad1ef31bf2

    SHA1

    e2fb88305766f843e99a0573efe03a2d05edb041

    SHA256

    48bae2ce2c3d0f59a0dba41ca4c2393a67e30e1453e63b057ccb0edf9e0f144f

    SHA512

    72bd836c095770981f6d6efee3fff8216ba5a9f9e3d15273545f50cd2e5e482e827b61401d5c45bb381dfa9a22a763441f9c8b31bac57690fcedb55912cb5747

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2dadeb0a56011ba0b54c2ddc085815fd

    SHA1

    be79566ad5186268c1241f68ebbb1f2dbed43eb5

    SHA256

    4f132225e08b023f3081642561ede1a67aa0dcaf5f7beed085d0f3d10c9dca2d

    SHA512

    1fcbf020dc0f7f626fff26352de42cea46996110485e876076e935e6cbb4b21b994798ca4fb2f4f69afc2c817bd0a55fdaaff7bbed18b50f6ae159141d8280cf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0357f66582528f30cff5172fc34a064f

    SHA1

    d1214e38fe7a3dfff5e47537a6d9d50ef030cfcb

    SHA256

    171a20063d1854535b3d0e1302e914179bde6d88adb95394308d0731a7dbc142

    SHA512

    fc40d34d58a282fa95301a3edc6996c2652d118156e17b62c60fa46ead4d6010009f5d1d72417780f73d6b74f7371a51ba7ea8d8d4b6ccd97d11672749c3797e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8e31d3341c4d816dc8375cb41f62540b

    SHA1

    380d9a30a66030d8ef741b724f56f568a00d8858

    SHA256

    6a3c579c7786a7ee5e1c648977092bdc86a57612212b4306a0dc32d1b66ac01b

    SHA512

    7bb58a7987816f3055efef991b93840b90cf59c89a319d7efdef34e060827e81aa36a6306192cb8defc54865295eb94744224a0fbeb8ef33d4a4b6e2c3752207

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    01e3b1ea9f36a39b876174c737b13c52

    SHA1

    76a2ca4cd5c5e052707833b4738f5ddd6709fad3

    SHA256

    b3c9faf6f3e9afeed5feceda1ee350f455079c98ea293746139480804075e583

    SHA512

    08f52e6835ebdf20694dc786ae1c5bc25d65720ffde7f29584838695ddd0776b5ca82ff492a736afa631f2abc8c4b5af01d10803fca55d1d4ded33242c16e74f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    24e91ccd3f9b06299243699c501a8055

    SHA1

    1b537602562d457fcf50b808396a32862a17e7e7

    SHA256

    2b34ae39a08811db0c98b64141565944bf40ed232a903efe735f98e90ad9074c

    SHA512

    26a42a908ba66fe92a200f3c3fb0c8742a81eaf9d113330cdd64ec8e75a77099790b27316f7e7b18a679b2153e8190f9f5ea20182453dd5c2c7e59eb8d61c99e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    04a9318d73b24a8ff63095d2a7ec1f3e

    SHA1

    5a00e824836a93889b33d5e7e1f73fb43485c4f9

    SHA256

    094aecd927fa6950d4bcaca2804566f2bc4c7e8772384afa513a15440ba24617

    SHA512

    215b69c77d07da9921498c5596e543b4029500922380a0f7f446f550b66adf310b38a1fffaeb84e1b2636ed43721f5251e21c36c11fc32cc5099c3a320d72076

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cc9cab987006a0a4b38fcf79c44ef76f

    SHA1

    38434fd83f55e460b06e58b5357ca408a3ce5010

    SHA256

    4ce168bc2797062fd2ca686add81122039b264e09fd7c9ee91a7d86483b71b7e

    SHA512

    581b1b9b22794e549ca10ad018df06211025193184b4ce674feff1dbe1c1650e1390ad3264a1b8b16a527e750dbcfe8b76f3844297667faf52522795c8aca1a3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e03d7d889de7e301eb3112894cfc098c

    SHA1

    eab3a4da10512cbc90e8cc554ecb6ab9c8ce69e6

    SHA256

    983c3d4afd70cef01297359ea459851c3956275df7a0efabfa25499250bb15d3

    SHA512

    acfb6dfa0765d0bc5ac604fa33a573790db243edc2d9256b1f34559f6e9bdc76f6592791aec6d5c0e40943fa995591a6f369b45f0c6d7e98f299bc21619e7969

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    dc533c89a10283769eaeba2c1b5bba38

    SHA1

    402a2588a16a0e7bc78eae5654778f70de709609

    SHA256

    ca93475a9880087649071e47f99fee9e53c9cb532cbb3c74e41c23d3c10b6bf9

    SHA512

    fc8ce394c5c93d6ac32f063a87ab6a4131aaf52e09d71315e6db16b67e53b4ba3f0713eda55aa0d738e661cc890c3921ede50ea617463294950b02c2e70778a8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8d043d5a9204f2aba6af07d576e8f0fb

    SHA1

    111e1060d4a57e2d0b455756bf4e5da7fe45a22b

    SHA256

    f2cda3731ff25e9712825c3e7e6d4726f2081b5770a2d2f6bea5f7ac683b45b1

    SHA512

    ff6689753f2c1984ecad992c36888542480d8965a2bc9568e931afd558e77b4b5629e875056b44b50da6ccc857b3f22efe3a3f578f51084f63ddd4c63b688ab0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fa779bf8acb79f5af67f4e65cd161698

    SHA1

    110db834ceb1bafb69abd9cdc02010ea2a3ec377

    SHA256

    04645a65dfdb5cf1be73d90c93e13e7c7ea62bf85b07c8f547b553d2d3f85420

    SHA512

    ddd8699b43b573817ce2e639a1d1044a2c1bba8da51a41ca94ae0f3e3963dc4ed6f2e8fc218a65eb9566e5e1d1b739990d873648891b23da12ae6fd46e7f30cf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    083d05227ffced4bbe575549bc05e535

    SHA1

    bf94480174f652662d1f2c1ce370041ab8be3deb

    SHA256

    69a2e30850d9d5eb57a86b7ab3588b6d467401155a0e0fc33b4357b4394836a9

    SHA512

    6c4c7d1937cff5c3afd67e0a23e68a7f278959ceebb9e9d56a67c7555f14b41e1b876f2674c8f0f77f7acb7b924dee9fc5bb96d3689b516e8501b267e1542a6c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    635fb450735ef229cff77543370a05a3

    SHA1

    85f9b103abaa6a939fa796f5b897a28345b60800

    SHA256

    3361102616c5fe4d6357b11437fff77c33abecf47177309796cc78267ac876e7

    SHA512

    0cfb18763f92a31f4fcdd025f79e9cb58f0dd4ec6213015067aa1afb8165bf5d936d54d1a109976f5c7102c7b11c2022e64ca81a2626ab2a7d354d2dcb31307e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b2f8a777ef0bf5b62fbda1a7e9de9a25

    SHA1

    0a7744b3b4f027ae2e5ff3a29cf230945e62b553

    SHA256

    ab8c102562684e3096e9411b776263b48c582d9a31a6df399b6a3b10bec139b1

    SHA512

    e149f7782469b340259e0d977b43ad6eeaf20b4b0cad1721070ba16dbfecb49a0c98d97a18855bf4eaab23c5bf3e7e97e733933607c61192f4d24ea2e9eeaf3b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    03ce9593c6df715b9487005d05fd2bbf

    SHA1

    9780fee1264d60aada83890225e346a7acc6e28f

    SHA256

    5d44d044ec6aa3382066b80dea281f940f0ac2d7d44668fc61f6b34b5677b68c

    SHA512

    ce163d700a82bb9eaa8732c932000777578df7c5818817ce7a6ebd19e32d1bd6cb051ce9771a9d6ac6e2738a70dc0a6a0e42f0ada7e421b3461b4bff93cbe16c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    59bdfc035b5ab78f6bc8554622e8900d

    SHA1

    5c3c807a8de2ba659afb6f8fca0e752557d30f72

    SHA256

    3f161c123d47cc2e32e60c5d53cd2cd50b89bbcb56988b486137ba4980181b7f

    SHA512

    182106260bd0a7b9ea985d4df457055222aa0b7a7daa2e0ce9968bb8d97f7808bf69607b72dc172b0a3fadf59cd731426f1c65196026f4b3029e1280e6900200

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bad682fac96c0c1b2fe0f77194a584b9

    SHA1

    09aca8f965ee8747d915048735d3dca2bd649808

    SHA256

    27b443869dc7987615393c1a634b77acb0d42a89ad00b2ed67bcd4a6bbbc8f57

    SHA512

    209038e7adfe951ddad8ff75f759ea49f0c6e2d99007a4d357c7b91b7a171c1378118bfe9d4834c4c906b91330f031dc5292a91360fda1e7ba65f506f9a225f8

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\SP6DRJYJ\blbbbrvyR[1].js

    Filesize

    31KB

    MD5

    fa133158899ce726ba4d5115f081260a

    SHA1

    940f498582631778544e43e1ab078bf5c0da788a

    SHA256

    abbae5b2df429f91ece4082fa7814c941f11d82bb7a7b1d15f5a617e909741a4

    SHA512

    2b4a90abd1a9843dd6941818614bd128f72632871fc36ab8cf4d0d2f740b63e342cc9e592d243583b9f2175a62111bf7474408373ae0cbdf02b06a7907e51f91

  • C:\Users\Admin\AppData\Local\Temp\Cab67EA.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar68A8.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06