Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    118s
  • max time network
    133s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    23/01/2024, 18:32

General

  • Target

    70437a407b23b0168d37b810524cfe85.html

  • Size

    6KB

  • MD5

    70437a407b23b0168d37b810524cfe85

  • SHA1

    26b49afbbd2f9a251f295d9a2f1a810d98cd1fa0

  • SHA256

    e9b0eeba68c8274bb7c65b30d03a618003631e5f5d819220b2f9d8ecb0ca4d32

  • SHA512

    10cbb6fcb63f60acc2f2306b32f79759c9b0e8f709493c5a6030b08a999354c4345481e73c68953d146452155d3a9657205959ec3a783677cf13e03fb2fc8a11

  • SSDEEP

    96:uzVs+ux7kELLY1k9o84d12ef7CSTUJccEZ7ru7f:csz7kEAYS/fb76f

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\70437a407b23b0168d37b810524cfe85.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2028
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2028 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2664

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    828776daea6694758aca7368a3ff376b

    SHA1

    756eab42459b36f7aefb2c30e86fa458d5a4dbc1

    SHA256

    bfcc2ef585116a1b25606fefdcbde81a1a7020eefbe8714a0c0619ff5275404b

    SHA512

    0b1d51c9d119065aa8f764f3734ce14f456b27d50544f0cdcfab5681a05e2f7b213e963bafbdd10d94d5034f2275d7c2088bb004c3d57dabf0f0a4aa3451a9b4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9857a51a034dd7eb33bd6f4315c8b697

    SHA1

    808e156bedb897d6760bab2a871ba5c056eab473

    SHA256

    71b849681caaf7c7f6773c91d03382d58ca52e04443bd68822a7fe36ed5a5ed7

    SHA512

    9e4762fae94485d34f6f74c4472c054a0cca7e0ecc67176bdfffcc9eb012d50f45dc0fb5c81daafb3d7fa9249a435b5c5e7904359bf22b74af109ddeb2bf265d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a1f611ea9dca9fcdd073d39cc64e06d6

    SHA1

    4f936daf789aebd78667cf3d2738b6bb4ec42b40

    SHA256

    221fd0d88366945996020bb985e6fdba1072bec10083b6d2a1b592e8a01e281b

    SHA512

    a6d46897a64c065c064b15ec2b8562c4eed66eb0acbedb958a748e516d8f5f9749f51c289e3315fdee60b714b39f80a5889c065d1a57363ccebb44b1d1ab5874

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ef17467b0bf7ac690e994c02464146e3

    SHA1

    3bc178e18cb5f48cb83d5c49db8bf62620973abc

    SHA256

    e349ae77cc6e9b45e4544407c8be8494cac8680f0f0ed82af7dd6e4835cffec6

    SHA512

    5246fdf62888213863909c13388913c5a4600e69405544f27b8a2cf21c578eb83c3d7d130f7b1bac93bbfddc8cc038e7eec91d3091e086f267ed5808b7e07a3b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    049d773923df2f70bc0d88e71cf9f317

    SHA1

    f173ddbadf6d8398ad4749c97f044adc4fc6f448

    SHA256

    eb6fa7264ea56c5ae299b0501ff2212b9b2455b7c32411380eedce302e58103d

    SHA512

    f433ed6bbb3b12eee8fc770d2a41c68cb2e10009d26e2adb89d694e381c38ad7352c325893cf5b0ba737e19c1f8cfd6f64e83db723b96870abe4a704b9f179e1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6a4e1c96da49b4f05bf19dcf9913e5f8

    SHA1

    add05ec244da6b40a2c9ef2c002ec17f09500fbf

    SHA256

    0812c38f6236c1b5fad9a238e01cd1fbc76c93d663267f68e713572d15fc7c42

    SHA512

    38dd03a5f2bb20b07a7154b3a735230b8a87ccbd0b22fd52355ca25cbe5736457ce1b3567910a5eb9b86411d787308588d4a39cd86785c992c1c9e70b66ef776

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6f6155351fa7d3dc664e96da86990cce

    SHA1

    d03b52fe66038a027ca414283635fb2257bb396a

    SHA256

    510abac099fdb1d1d9d83e3e277ab62cae699aae198549a21eddb4da86ef7df4

    SHA512

    77ac32bbba2939ca0c7cfd0ec37a27244ddd7837601db66bbc1d94be09c9bce4159d99a1509b2d2265e311f4344b7418570841c7ac23b1038a746f6fd87b787e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b56ca006d7462244aa67eace095c3843

    SHA1

    e0804fcc4903f4565a3fd84332e323b197644905

    SHA256

    914c1c12580e05afa43b798fc027a58d2a3e146ec85005840ad7fd2ca4a497b4

    SHA512

    322e5002fa9428a71ead51bac5f261a9a65759b9f99db6eac7c09bf19ebc9d18210e0ad92db9370690248f74c7b401a15a5c991e8a69b32ecd19f1d0d09472bf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    158f9b150ebe43f629b758bf59fe5c38

    SHA1

    ec9a2679063a2d9099af068ff30cdd305a63f0fa

    SHA256

    3f46b7fd381a8a4a036372900a655fa04dafb5341279ce801c6bf7781b57990e

    SHA512

    1e564e55b501b1b55ee3639bd288586a8a5dfcbcf66b196323e34bffbac16e14afb0ad3aae313769e0f6e5d797a406b5514f7d2ee677ddcee3a41ac804e459cf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    342b795d3d3f1db8f8462dd05577bd64

    SHA1

    5f5c36dc12833097ac1e12bef46ab56e93b1897c

    SHA256

    af51df02a0d0494b7372d550e32b18dcb5adcb670358edda5fd6caef3f61a2bb

    SHA512

    8c847f682f5ff992a4d089c8946f36e2bc7ab428feab152f18d6843f69c027240b5d196449107c13d1de2afaf04b1a8be04e1838911c4cc330de4753e65bea7f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    58e7cfacb1faee38c4dcecec04de8d2e

    SHA1

    699db31c951857bbfa02b0863ae71e57948bdc34

    SHA256

    d2b4b793df58f9a4a856c9bd26b22b05c5174681e1a5a03b82c3ad8ea8e23370

    SHA512

    7ec8714c67b5666cf2472bdd7843e7bba39568b9414f821e6f314e9fa3aa301fd7204b3c3eec30776878a90bed31e6780ec2c0c6e499d61d7b40d34e8cf0080a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    661020ef408c9797a99092334abb17a6

    SHA1

    352854b11d72f71809b70ee0ba3d786979df9fe7

    SHA256

    887f6da28f233b6c8243220883e9a0ca6c53434310d2337dc75c78d4c039715c

    SHA512

    f267ba247ea151e26f50f61f1fe7315aab418a8337916b069d57719c525cfafe2289dc8c311fdfce532c4a9afe6e4e01a54a326ee39a423ea7d4924a0a970f76

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3449a05b54b89a9fcda1b0f2677a17f7

    SHA1

    d6dcb219e884d5c654cb58e3d445f7bf6f72ddcc

    SHA256

    5382a016d7aa797ecb9ea1561c61a5be2f11a7ef7ef614411481522258af543c

    SHA512

    cb6b5a6b31dae4db3a3da0c20d511c10e11374de4feb7b0c99d8458d3926dfffa799f1ee25ad74629f1cb5247b300528b64e92ea49e73f79e8a8ad8fe84e93f3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e7ff44a3d92d98057c78a6ef30a437b0

    SHA1

    d7af6cefe6761c490dc2f8ebb6f47866961380cd

    SHA256

    faa0ba88c07ad5241f4501790da37aedf4d3c8079683288479912a7179e8fb8f

    SHA512

    29197793039d81eeb0896fb9b80939b2931555edab06bbb9ca44fae6d6e42117400cd529fe0b1b69410a463a07c1eea69daacda8c8bf4b922405ef9d2a659bb7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    86b2a76e2a4b52542a6a235abc355e2f

    SHA1

    9c418bf798fa3471e2bd6e5b30628cb697810e19

    SHA256

    8d4f82dce1e8acf469ff9fffe82173d983e31f33b30331733c50213bb630273d

    SHA512

    67f7d605dc03acab83ff94b3ebd32d3115d1c4f07d8f723850d45fb30b5f687c4f003549b5258384e86e95541db0bb5895cf611af35c91fe3511bd41c260dcd8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9d4823bc4d95d9ee086ec4f06d959c78

    SHA1

    7fa1098d8a5a69a00a2f258cffe1567b04fc62d3

    SHA256

    8059113bba06c0d25381356929739100e39c311792dac509dfafea4ce47e230f

    SHA512

    5147a89fdf7480d5198030501dfcaf70f344925f997b9da48bd496ae7edb61fdd7b37a2d4a274711815a773d4b25e8edc77cb9af210e1046d98df1c958e41cc3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b9244bbb75869d00db4df006e0afd7c8

    SHA1

    0f405c93fd4c2c0f805d177866be6491952d03d6

    SHA256

    a01d60c33f3909fdd172de07a58e2c3d42437df82daf34de2ab015a4ba4cc5a8

    SHA512

    c6c5f3890625fc0786b7b0bbb3e1833fde0498a073f4326165e4c7ee58ac5434a54c03f46d77d50a45fc8d1bea84a0021441bd8f64a45c666a1f410e6bedeeeb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8cb540a6116f55a37957cb3a6274929a

    SHA1

    3d99c06e3d484087a23c317bc8aa64645be38b82

    SHA256

    7f7b31b5499863f4777c3504a658d71304df8d07c109d4bb6236a88b90b6c8b2

    SHA512

    6c224623584d1497cbddf6d3d74a00b01e2d874f688c49152ad8ba2b4d14079e8ebd36e20e5e8f2b7d673351a22667a95fbf4ca9ef6d4b583b387a379fdf0fac

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    dd974a0a3d382c6229083bf625588d16

    SHA1

    1df615c57471515809eba26ef40e984fdee20deb

    SHA256

    32a0ba6a6c07e2eed683abf8b0a9d46378917fbf801785691b6945af739f9e24

    SHA512

    49283be597fab476ff70f697e8c98e1853c80cc8931d7318a231d08c5b378e048a6ebb28dd86817567a05234cb2c5fc0e9efb0ffeb8dc35134e621ba4c06abe4

  • C:\Users\Admin\AppData\Local\Temp\Cab987B.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar992A.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06