Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    142s
  • max time network
    143s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    24/01/2024, 02:23

General

  • Target

    7132283b20e5da5de116f0df84e33f58.html

  • Size

    70KB

  • MD5

    7132283b20e5da5de116f0df84e33f58

  • SHA1

    ec24c839cee160b555f6cbf879393a0ae0493ff1

  • SHA256

    f13a030ae8109acb7c4ab3c5cc61b42dffc699b5c2d6827fd4a5909c5ca110f1

  • SHA512

    ba7a13259b45555a77038c736c950113c0d3a2384673e441adb09004538f5baf1ef9f7dee26368fe79d8a9c28d36e6834616b45e7cc7b5541c7e6395b599341f

  • SSDEEP

    1536:SdpDK5Qk2op7tbvgfOMQeNKutadYglpaL+A:Sdx0tFuwYgWh

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 44 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\7132283b20e5da5de116f0df84e33f58.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:804
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:804 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1684

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\A16C6C16D94F76E0808C087DFC657D99_1362B7791428C28A832A1F1A09A6ACBB

    Filesize

    472B

    MD5

    c48a48b9d49408e9cac4d4f6579d7267

    SHA1

    38b42f3e2b31e4d856c751b2c983a6abe14c6098

    SHA256

    476a0d5da7cef139b2fe5176015505885e6f7fb4dee6da4edf0e96a4febff7cd

    SHA512

    b89c1ee4bf33fdffa4d6925078786142a1a7b4f287356b740b643127ef89beeb4a37a8131b56e19dee73448bd794e1ad8dc86870c6e5e7e6531690c46958b6ea

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    af1a24f8f276ecae156aaac3e21f7c46

    SHA1

    829e22541655939638ad5f2bf3ecda3104da6806

    SHA256

    ed6662bba992f25f9aee3db9c5a4aac96063e7df81b32f9ef753c73c572b1f5a

    SHA512

    76d979da31cd335a23b20dd810ab339a296b76e7facaf795a4c9ad76d60a89c38ce8786f2724e4843526a10d5db1101c8509abe4b45e8dd20d4e9bfa12c639d6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fae9a10468304f6d785be9ecd56157d5

    SHA1

    9c62d59b8c7514411b7f6db73d5757e879a7b3f2

    SHA256

    6317b94c4770cef4320b2a64774f9f49ed66b7927e786ec581dddff9a31ee7c3

    SHA512

    6f8e257b97a61649b91c3f80a61d071b048d3d93c7e504047a62210929d2df592e6d1d7a5f32dfa4ec464df1c45b41aba4e832d6512762d92bf994df1ed73a9e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c6b0a74a6f649adc62ae7b8fc2e10e81

    SHA1

    943e7e6f6e1ad5fce550aeab631fa8dd8c257f96

    SHA256

    df2c735e9c675e52a7323926e9d1f68c2fb315821623a36033c6042d18887df8

    SHA512

    7ede93a07347471ab7624f60cd06a416374ddc8452ca10b17e15cc541d68dd9917b5b5a505eb2ddaa379b27462dae78b6519c4a9cdbccfb9c6197f06bcc8ea8b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    191408f808dc968721c6a9ba3d10e88c

    SHA1

    8a4ff3196d1096bf385de75f4823ff6fa50622de

    SHA256

    88b22b8651cb83e1266b9b007e4976a610de58605d955b22d9f666c7ab339d8d

    SHA512

    21ec45a0f51e1a47916c8f0dce53115f04a07c020cd071dff6dc631ed82fe31033406fac27e60c31e0151a0da6ad54bf1ab288f6c007a00ad833647dc7368ad7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ba2b5edc3e76b4f82833154517c6a69e

    SHA1

    f32ca22b4f6c11ef1ac00f096c47e7383e25497c

    SHA256

    0237ce8cc114fba5def64ef4efacee89e5d0f08bbcec3a50a0d0e2be4308254a

    SHA512

    f10138d02913453124fa538a822f50dd81750b43b97ba0d3ac8b6cdc10b0decf680162462336b6999542b615e482bb038842e9a2d338522a85a35c70a49516e3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    294a383eb4192bfb3bfdc7c8b5c46026

    SHA1

    2d051c2cd528054741084126da50377ca18b639c

    SHA256

    1dbf945fcee44cb2d6742b9e23fa12bd5c161f4eb70528e4b973e89bbb83ef88

    SHA512

    983e823750eb5b9dfebb77f0f0424af18dd7ef975e72263465ad153544334ffc93f6cdc889e20932e1e77e2753e76a4e1a18d6c6ed5391d99499c2e97fde5125

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    50b3ba44192076ef440ed5abbd361fdf

    SHA1

    1598774c178ce746563331bde6fd49339d173bed

    SHA256

    55486e406cc9a0ee722a8d2cb755a68005949d8029706021bd988a383f9588ff

    SHA512

    43bcffaa6c29abf3f4886c62b3486db65e7ffd18259b9c8feb4f0bc7c2df7d981a0ae504346008c6b54f337702b3ae02befe7abe938216bf27df6296059e3ab8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e483a60432dab504f9747fc73336235b

    SHA1

    b3384c11362c9f6e7e1ff8565ca42efdbeec4ee7

    SHA256

    dfc13e3bdbb210249a2f99d712f0801cc96ee45af38eae69149ac8dd1d89991b

    SHA512

    d52b1028bc731611b845f2f7fa80200f342685a1ccb4ddb6e5fa555c885f3ec6c515a658156ca0c62a5e18bdc674af5a885d53b37d1f97f4365f79286a382151

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    12748fc348e63545eb0b84d7d1b35547

    SHA1

    78080ece141cb1bbd61e445bca31c2d6c41fab54

    SHA256

    290d43c9b30599d00b0110db4bef6f457b455e1b6581777b2261891625fd0989

    SHA512

    a4c11bfa7f20249976772907bc1679207be4a3cebf3a4f61b36144892a58d4ff8f89956e96bdd76bd3c495e2ea0b9144ea8d3bd6e4ab82f5926be0f86f3861ce

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1bb0026baf568cbe4b916668ef9b6a01

    SHA1

    54461319ab75587b8ae2e41adb395d41d9073f58

    SHA256

    3be360c1347c77ce66d001898dce352b985fb567f499df8c0f8cfcb63ad6772f

    SHA512

    f5ce7c78655eb7cea8aee22050a80f2f5972045ddc8e53e099efc96ce783fd765d68f8065b874ba15b6921105d975baf1406ff0d0703f14dc81de44285f33836

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e499059838ef57271b85f82016201abb

    SHA1

    03ebd4ca02b3b23b5d1ed8a05aaed4480c5a024b

    SHA256

    7994392070b209b94d74515331154af26658c7b54957d1fc39e187657a4567de

    SHA512

    ade1990923f517811bf93a937e129b4d6a6c469f3c5f2ddc493c308d4b106b39ebd631803a6692c7c7ae9dacadb416db16f05c90ed9e37cd6ca1103919921494

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7df0c7c860ff5931834a967c2e1f99e9

    SHA1

    d306ea373fd87b640f4a199b200e8d25a57af288

    SHA256

    12dd01f98fdde6df59e80e7af41d8a82f5f1f881f81a47158f4ec436c27f30a1

    SHA512

    cff1db3a7fe31b9b2473afa7e0934da89ef711772f2ad173acea504d509cdc0d3e785bece350827f2bbb923d77b5421ef82f4f912002936b61e1c406d0e6e897

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d6889d81489cd7b814af00f9f3d2eff1

    SHA1

    8ed8aa65b296c9b85362b178d61556e86a30211b

    SHA256

    216d6743ad0d53ff829a69ea911d28ff67f20cf3dddbced79617b7d181c50899

    SHA512

    780a429e5527325a6ec8b9bb78209b1762b7948946481baf24212bfff25c2e356bdd736906b0e0f450a40ebb534f33abfe3a0f2b6fc6c2cfc4c6d7a888f8b6b1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b28a18717c7191ce91ec84dfcf852848

    SHA1

    9414128498037df4a5d73a03b5d6ecffb845d430

    SHA256

    bc7830f3f0bfe7158ae7b89bec0f90feae7a1a5e619f3d31ec885a4b214fb090

    SHA512

    168ad2b1f6a92a724fd95113ae9c156aa639e13712171210787b083b0aef49274c044324271bb75d89d094502de12c3b4ef95b708e2b56a0ac05e599ba6fd910

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    45182f478e604ab0bd523d8adff5cd6a

    SHA1

    274134cc9be6a499b4775ab48f1d60328ebb9cf2

    SHA256

    fbf61f3563347cf2b985ed9059e5eb4eecaf76fe2f1c152e6440cd89e5fbe02c

    SHA512

    34912903f8adb8001cf882b525cf0c5a7705105011e501eef1e44cc9b27c3124988e1093ff93549b029302ae1055221acafaa468a93159cdae82ec491f99223a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cea2277d81940dd9711f7bfe6fddcef4

    SHA1

    1c9c0221e5b9f0cc13e5cac1fd90c0403bf166db

    SHA256

    50697eaf054c7413b8f4699fe3a5bae794160b43ec6b1f739e61546b2dfa3313

    SHA512

    6b5092b33fb2b56a7e9240af5a4895429cd558e2ee8d5ca9f632d05d7bfa1f3e5bb93db9df9776d8c1288ed85705210c292d571ea4de05d65f092551ec1916f4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    45e15dcf2ef4de2b00bf66e330b32966

    SHA1

    406f72ebedba6ff0857ca8750319578a548fd1c4

    SHA256

    e56228bd06be613dac633a4c1293fd13b123ac45c0a6dfe29071b999e957f150

    SHA512

    97aece3bd76f46e556d41924b9291042b471148586356debbce42346721a46c8b28b17fd356d0ca125f9429137ebafb8d183e9791f7772642aa08ab7f6d42de0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b4b9cf214ea0490ee4bb9c15fed24d1d

    SHA1

    5658fb304547dfbc17d7e1717cd0f422846a2037

    SHA256

    c2499558a5088a11f8c629a9e778e8c417e53863de5891e00f2c90267e208d47

    SHA512

    914dedae207902b8280fed853cccbc5ab660599fdee70088b64d8509b7a599913bdf4339ecc0a63e367f1a8febca7f097446aab55ad2db924066aa06098348be

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    024cf2f84bfe368a7f083ee28ae81786

    SHA1

    11826fa35ab3a4aa29c4537ae21f04c3287fb6bb

    SHA256

    fee765daa9c817c2b5b3e8a569c574bdd0a0616409906fe96cb4cb880b55f267

    SHA512

    5b976bd722806e327be0e5b01fa8e2ffdb1bff49efe750398d0e71e14dfdd2796557a7d2d0e93460081d2757cb1107979cc4d98f241af9be364018f36049c246

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9809fb2a1e2606e855783fc5f6ced6b0

    SHA1

    c0d44fd874566230e9e6d9829d7c944fb718e25c

    SHA256

    dc7a417da47bc94a58d0f75a4258a115125f356aec65f5362e65c327128715a9

    SHA512

    d6b5ccd25edbef3eff33cb52717e785cb102beb5f3f7976a30cf7b8303806d7b20b3eb6e9147bca136c26d31cc391d29493d25d7f2d7dcfe34437ca7f84e495c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8b654df03d06c60bc7b7b7fda60ee604

    SHA1

    d8f6c9665f3d7cedd0d91497c253be752d32d7a4

    SHA256

    f3cbcba55f8078437e4c99750bc0f28f73c189d9e30d8e15b09478757ffb2602

    SHA512

    9e36d0300bb9208ac73ac63d9ce177101580086835b89cb8a33c0862e52eda9df7a5a5065268945d7e4c4ceb7c7417036cd4bc6a031c0e4724ed340c64d3357e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a38528a621f4f62d766fd43011d7a04a

    SHA1

    d077c0e3ec86552fd282b1707a2ff7c560fedc03

    SHA256

    56ac49188e9ef4006f7c5edf8dbb8428db7de87cfdaf26c1752d21ce340889fd

    SHA512

    205fb9751d651fb44c5f49d46a60a6c89141d96acbc937937a2929faa13a03b89b0dfa86dab5d27e71f3e2337fb1a6fba20a31a89c37e4942d0db1d9c6a59b9f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    971d8727a24af21686c722bffbd380bb

    SHA1

    ab9e154ea2dc36a535d94597d4c079583b639e2f

    SHA256

    812d8eeb0510d7dc7813344b0bc2e11b13611ee8c32f0367fa8b7ba433b498e5

    SHA512

    9b7c43a223db48e0093a85b73d831167472b7178b590d80e69aa6d7c2e25c1a37039905e9bc7cf68b1a30f59a0ddd97220fa2b626af25cd821ccbd65db970c84

  • C:\Users\Admin\AppData\LocalLow\Microsoft\Internet Explorer\Services\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico

    Filesize

    4KB

    MD5

    da597791be3b6e732f0bc8b20e38ee62

    SHA1

    1125c45d285c360542027d7554a5c442288974de

    SHA256

    5b2c34b3c4e8dd898b664dba6c3786e2ff9869eff55d673aa48361f11325ed07

    SHA512

    d8dc8358727590a1ed74dc70356aedc0499552c2dc0cd4f7a01853dd85ceb3aead5fbdc7c75d7da36db6af2448ce5abdff64cebdca3533ecad953c061a9b338e

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\7ZGAC584\px[1].js

    Filesize

    346B

    MD5

    f84f931c0dd37448e03f0dabf4e4ca9f

    SHA1

    9c2c50edcf576453ccc07bf65668bd23c76e8663

    SHA256

    5c1d5fd46a88611c31ecbb8ffc1142a7e74ec7fb7d72bd3891131c880ef3f584

    SHA512

    afc3089d932fb030e932bf6414ac05681771051dd51d164f09635ca09cbd8525a52879524b6aa24e972e7766ddf529484cc1ec416de8b61255435a89ba781f8c

  • C:\Users\Admin\AppData\Local\Temp\Tar34DB.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06