Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    120s
  • max time network
    131s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    24/01/2024, 12:07

General

  • Target

    7232ac26bc3669c89fe083ae79a473f8.html

  • Size

    40KB

  • MD5

    7232ac26bc3669c89fe083ae79a473f8

  • SHA1

    7c04fb87d73fbc8dbb2c1876e18108856aa877c8

  • SHA256

    de6a2a86b1e9c0902f037f1e8e0a47b8da7858d47414e720638c33eb9595362c

  • SHA512

    b266d92dae28c0ab46c69a6b7e114d5120759953a92ce8ebd8d7bcb9d39f6c2a99780074dcefe4792f4bbb0827ab2e0837ef626ff22e63670b40aaf431d1dc95

  • SSDEEP

    768:zkGFSNv6ePZzF/MUMO1p7Rx0QBy94B3YNVBFxaqYFGUT8K5Yvv3kviX/SI47962X:zFDeBzhpn7RyQBy949k1xaqYFGUD5Qv0

Score
6/10

Malware Config

Signatures

  • Legitimate hosting services abused for malware hosting/C2 1 TTPs
  • Modifies Internet Explorer settings 1 TTPs 34 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\7232ac26bc3669c89fe083ae79a473f8.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2540
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2540 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2656

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    1KB

    MD5

    efa4b88e2d59d3346fa831f27046768f

    SHA1

    112077d5657b43f8db821e9d79b69649a5d236e9

    SHA256

    e98284629449afe65f682f73f6d1e6d78df677b8b9afeb8d4ad00317c1eee71d

    SHA512

    261ffe5e7febadf6476ba03e3a1076aebd425619176518419a7f110f6decc16d083d19fa7c98710d713542846fd0b0251ac5bf16e0ae7fce8a9ee234a89b775d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\CAF4703619713E3F18D8A9D5D88D6288_A7725538C46DE2D0088EE44974E2CEBA

    Filesize

    724B

    MD5

    ac89a852c2aaa3d389b2d2dd312ad367

    SHA1

    8f421dd6493c61dbda6b839e2debb7b50a20c930

    SHA256

    0b720e19270c672f9b6e0ec40b468ac49376807de08a814573fe038779534f45

    SHA512

    c6a88f33688cc0c287f04005e07d5b5e4a8721d204aa429f93ade2a56aeb86e05d89a8f7a44c1e93359a185a4c5f418240c6cdbc5a21314226681c744cf37f36

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    410B

    MD5

    a069c2e9c0931b664aef8b1874334ef7

    SHA1

    806b2a0f988c4138ec919e0abceded070b638017

    SHA256

    e8c4a0f76021e1c4adcab2295644fcc59a080f8ace0fd1f5097e045cfc15725f

    SHA512

    389bc9cad44d721966375deac3ae88a59a11f849d713b48972875d2be0dee325014ee00682e60d77cb0a65ac3c8382f69b8419e45f7f04752d0baec730f5661b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    28eea13e6bfa6eb123067c652a3d42cc

    SHA1

    b78d2b3f94b44d502df7c78a2f4545baea777c29

    SHA256

    b0ff9b9894a8bc5a921e3eabcdf664012c905d96ab838c921ed710121df51bf3

    SHA512

    57f2979cfa65050d2b7667c8f58e3869faf493ec0df15bdbfba151ba5a4fc0df59f079b68de1ac5a7814849a6180bea5e6c919805de44259b99091ccb88ab70c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c02e3d410a8b46ffe95b60d562e58494

    SHA1

    9bcddc7cd941e94249f75ac62586fae8aea773f4

    SHA256

    f440658c49d0f560f73be1136551b93ac8493a116a8fbfc241f30cd92d1a3bf8

    SHA512

    9cc0810efc93b5f9fa182c77d3549602f3d0e1dd9de467582aca777d4b32b4a4d981ccd3635ce3d3f2c9082504df6ba55f9ed513df0cc368bd89d5dd880f1e2a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9ab9fef49bc61581b4859a9f38672fc9

    SHA1

    dc1f1463ee96fa979e07ef8410653f7fc4e78852

    SHA256

    bacd7465683be1ab08aea77a625476d4852f0cfb7a6b629fc5a20f81c73f34eb

    SHA512

    e6f74f0ef78fc41693e5c8f24c59d26af2cf7d90ca31ebec0739a9c5457f60fe5abd491e674ef6cf1c757c5ac1d28420f000a482a90ada2f35f31ef7715e9724

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    85821f4d769f2c74827864bed8bcefe2

    SHA1

    9baad1b53cdfa61f876f764f3395bcd54d4c786e

    SHA256

    68afc84a33cf785685db8e229083488e6034c96b0cab45ee51e3463e5eb65c84

    SHA512

    0973e6a255452bbb7be426f063919c76bd16a0a4b8c5f28f58257025042f4a7891f931959dd261cb5d139c8f3ac343c9e62b0687512bc1b0e72ce685618ca641

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0b907f3df0b84aeb9dabeeb8e55a61ff

    SHA1

    f6a68352a96585bcfcb58948e7b8f1b55cd15c07

    SHA256

    75ed299aa0001a6ed9368f2e11c3e5d97b94581cdbde57e5383ba5243b8846c6

    SHA512

    3464b7323c5ac0e90a0502bc25d9e999cdce87be89d0630a4387ca330e3d14ed3ab759a01df53defbeee2e7268c461a67b88f850782a4fddfec51acabb400f9e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f1ba106b3a9c895d71ceacfa0e379cc7

    SHA1

    6a619c2c2fbcf888221f2cb200431d95fb8ab340

    SHA256

    eac4b2d73604517d4e077ab19cc584b7ed0dc9b5cfc1cd59113c9176046a618f

    SHA512

    cf059f2e84fc7e14848d742bbf5a84935c308220d9cb040ed5ac77e8b065dc03efd1410cd09e51c29e7311e2b6f687668da11300d82ea4bc1accb1b7654a2c93

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    04c117007234004b394d639618906281

    SHA1

    2ea654868f8d2400b65e88446b9efad2e40fc8eb

    SHA256

    94bcfb52891571a7717f65a44813d658f09080a8c92a1021576d435c96e68cd7

    SHA512

    8b4ba194c6b9d04a10a8b63c9e26be228311ea21730326afd7ffab4262c855e5775409c42793b3a11c04732cf5c270f320ee5e3ce83e0c258bf9661e719f62ee

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    171ff6326da22f2fee80708ee24bf0b8

    SHA1

    fb33ad402b8a0d496bb1d115a9dda74e219441d7

    SHA256

    9edb0783b05855d58d15b7c9c69b085f7665d92e4eb426b7b5459906d93ec790

    SHA512

    7a292904866566cfb03249965d5566ade3b84bbed67f1035d21380ada9239f236e5b3b294ee5bf7edabe99761aa8ad85bfcd5c1d9be731739f043b6a5a574dd8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    794e5f91d73a59635e6bd375da66b100

    SHA1

    bb8dae28c8f04601e5ac5e0f51c67c251ac716ae

    SHA256

    2b1e1bb960708acdd027eeae41c1053777fbc9a628e98a3136e350f96f9bfd05

    SHA512

    0c3cd7b03213bb39b6fe4a93d16841f298200c5da248623ab6dc98f90356ac11d09b2e263e040d40783db2a80efd529a0861f5a4297c8689096bc3360352d0c8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    96330780900d2734aa3f88f3f51e467d

    SHA1

    65e318e47bec220b4895d18aa380f84529cbff1b

    SHA256

    66c379355dc5d2e519e17e23ed7889d659c00fa7a152a233a42d0b06a0565274

    SHA512

    39b6be5f47c2fad947694ca3cf083b711cf39cc1abfd40b3f51e4997b6b57fbc718901768d781de99eca5ac72b4e7824f9809eea43072eeb6cc103ca00dbfaf7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c51891fd6af2796284bea8c6726951f2

    SHA1

    6652a7e6ef173bfd6dcecfc2150d348ac9cd8cd6

    SHA256

    336e547d9f7b3c977e2b449d89c0fee5b688e57eb2e984bad2fd00c1b99218db

    SHA512

    d0936175194498f35812f416d70140ff7ef13e36822a86b7872d94a4b1c4ad7efbdc79ec2f51e1e9692fe7e51916caa58bcee6e60991b5ac03eea25d0309489d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    36e01851392159be7d0b7ce906673f6f

    SHA1

    febc4d060a1c37132d66e5c94ab542f53114f54c

    SHA256

    eee2e2bbbbf5cf006f6c8c8d2b113d8a916402e092f9398a16e8b2870b19e9fb

    SHA512

    7efd6681cd661a6273ae1fe9df537d93e8780dd19303665ae656f65d0f0d511be2dc7b2c76e0c2d6a1b68c9056edb7a8475771aaff5d69abd5f3cd8171128613

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0c19c6dffc8de6bfe64f63b66fbe4e85

    SHA1

    ab4ca83784f1de113b2f43098d1a1997a7061423

    SHA256

    6dcaacdf69f980b209c6ef45d6a28d30c033b3825b4ed0ff1326d000972953f8

    SHA512

    a6eb71cad53f925f4932e0c9fc549f1f9054fd1abcb64ea35b778de998fb6e0013133a900a59a5e10755c8440c3a392f7157ee536672ff4fafdc6d857dddfcff

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    787634425a578face4f15b523d0f1081

    SHA1

    8a2af0ce512c452aa3e746bc1e49491ac5fc6915

    SHA256

    33be046680bfdc49b424d64cfeb04903453eefc19b5f9b836ef7a1f7b81655ba

    SHA512

    bedef7c82c9935518c0b59f27d09d0ff58cdbf91888c53c6aa991dcc099abe5a7cc02f12912737dca1fde8d222f107da0b7962640a0b796f9b4708e5dedab3bc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f635d6fd2e7d25021bdd0246f5d8ed9a

    SHA1

    36dc7da8795029e7a9feb3e92e082f6f7a0485e9

    SHA256

    8faea9e888da819361afe75c855a2ae785f380c6fa727be14d8fbaff4fc1a605

    SHA512

    395c4bb0d81854fa6dbf6b3dbd1026204c40bfb9d462caade6817707ecfdcf58c06ea36a209bc9e2fe759d5d89f70f87cf5707519231c1881350afa0f7a8fd5a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6df63f52e1be25ecc1d9ebb2d69f1aff

    SHA1

    ec7610be928d9b2cb08395af1732f53a6bd0d7f8

    SHA256

    abae0a91ba98b97955beeb739abac7831d485b53ddd230166ea929d80cf79269

    SHA512

    637303ca338d7d6d50766c14589270ae7d39e7fd725be21ea325d11ef2e94eb1bf8a969b808ba006b3726afdfd38de86a264efa2e31b9f97a58b6361a0d18f28

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    846162aa5c61d2c87f16f3c4b7aa1b5e

    SHA1

    1ee41ed27394c8547308b3403ac1fc052f86dc7d

    SHA256

    55cd2b6346e9b5b95583d046ee5cbc6c0f9e9f7820fd85d358ac3aefd1aa74ed

    SHA512

    52e41aa8cf78741144086959c663400b4608d38f769cd05d1b4b5a09927e7b90fef2150df6a986348528d32a421f6f0b73e04c3d619189e255530701c655d000

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f6c242fcc6dd3346bcd0bf37c4626b87

    SHA1

    07b6351f0ea3615d88ffc47ff108aa875bb77cfa

    SHA256

    aa08937a806dd564656082be455a246ed21b76896d36d3661285af1d19e652e4

    SHA512

    971dbae6b98a6ab70ed72aac42a87f961b9823b385c578a4efb4f2fc7ce3654028f7fcb51ebe41a0d226a2ca14d011518852ece26711fef9279be8ecb7a476e9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ffc5ee45f46bcaf248b61b80439ba05a

    SHA1

    48dd51f4a9f15440710e1806a8e3ee438fae1471

    SHA256

    6698693ea828f59715fa47779a48a3c95c3316fe076d7a10a5282b8148751b4b

    SHA512

    7ccae2e756a5fd0be22dcdcafff0d7d18ddb6efe362f894bbdf18e0bbad5262420c63dffa935ead923ef443bcb210c0b92cca49c695201506bc7bacdee2ef869

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    10a359ce3f37df2881e65a6206f92db8

    SHA1

    f52ec6b41bf6377b5c23bf872db8c805fa3d63f2

    SHA256

    f70ca3de6dd38bfbdc1bf7d64fe8742e7575d4a23442be8226b85db51bd9140c

    SHA512

    e80e5aed49e42b7a85fc33b91e93843f139fed46dce61b9347fc791fb81646c204ec091607a6750fd674140476764ba7cd97edd984be1b68e4aa6c9f12814102

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    345c274261089dd59cbfc36039990ebf

    SHA1

    9697624035cd954277080376da1f32b15b5cc9d6

    SHA256

    555725bf6f0219babfe0fdfcb4872e946eae29d87d9b34fec7533d3fc8d3d17f

    SHA512

    46c9955c998472ddc73e08692880f460b7e3e1ab1b9c72dcbccdf72e62940fa9e84fa1ca02717415cce7de011a58d9f93c8b3ded295a866cb69ba7e30555a05a

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\E324WJ9A\platform_gapi.iframes.style.common[1].js

    Filesize

    56KB

    MD5

    f6140cf2e81a9d5b9bc96970fe1946f6

    SHA1

    e18cb20a08d0c13d44b72e36e9560aec2187abce

    SHA256

    68cc8a99c8ed5cc0eb3aa2146fd34bee0051bfd98faa3c03b83c78b4a12a8bd5

    SHA512

    1f61bf7228ae9fc1b36249223f4ca0675da05beaa6c00b28b7fff500e0527ee237d139eaf6793ece67f8730dfff0207bf945a848795aab7c57301433449a8acb

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JGM5U0T3\cb=gapi[2].js

    Filesize

    133KB

    MD5

    288c5ba5b7001fe841c32f690f62cc93

    SHA1

    29aba9d8e4f7cbe25fa5e64b9ecbe256e51fc789

    SHA256

    c2f33dc18eae27d4e878bf837dd97f1bde5151e44b0271408535bb93265b8c52

    SHA512

    e375d41344a086d35accfb02bb1f91e2dd383db032af387fc3d6b1230057cc5e432e9b2cdd976e51425b4f587391d42f4d9d857c2e6f11e822a65edcb85f1c9f

  • C:\Users\Admin\AppData\Local\Temp\CabFA67.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\TarFA79.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06