Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    140s
  • max time network
    143s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    24/01/2024, 18:14

General

  • Target

    72b63f1012d3664c0592fde50826037b.html

  • Size

    40KB

  • MD5

    72b63f1012d3664c0592fde50826037b

  • SHA1

    d64dc86c7e379dc7ae0b4a9852697bc0423d835c

  • SHA256

    cac9c4f2288299f74d5a6f8c8d8e8920973d4c80cf532287ee954db3cc3fcb01

  • SHA512

    ebd2f1f9969e622916ed0e9dd39df6448f7abf15ee5edafb7eb2a15e130b925c50ae67463d546b3050eaba5fc1871592fecb1eace7c3b1ff3c4002e4bf78299f

  • SSDEEP

    384:xQ60hakxpfLGqZnenYz8a4pacp0SUeVEq0ryZF9YooS3wnDc+UT:xQLay8Facp0SUeVEq0ryj9Jwn9A

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\72b63f1012d3664c0592fde50826037b.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2116
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2116 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2648

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\103621DE9CD5414CC2538780B4B75751

    Filesize

    717B

    MD5

    60fe01df86be2e5331b0cdbe86165686

    SHA1

    2a79f9713c3f192862ff80508062e64e8e0b29bd

    SHA256

    c08ccbc876cd5a7cdfa9670f9637da57f6a1282198a9bc71fc7d7247a6e5b7a8

    SHA512

    ef9f9a4dedcbfe339f4f3d07fb614645596c6f2b15608bdccdad492578b735f7cb075bdaa07178c764582ee345857ec4665f90342694e6a60786bb3d9b3a3d23

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\952665A85C3C6B581D1B9AEC9BB41CF4

    Filesize

    503B

    MD5

    96d53857c583305adb847585e2e583be

    SHA1

    ff347003eb5586cf5e1934c7027362d08fda99d8

    SHA256

    fa25b5186d42dea61fc3b43db8eee319e31cbf98fd9f229e1a2724ab74b4ff18

    SHA512

    05f2c665fbacc516aba7970e64378f582afe66293c531ef90b5c0f2736a2423a73a3da482b00e2d32d75d36c570a46cc23bac045b72c12db1d2f3fa02c079842

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\E0F5C59F9FA661F6F4C50B87FEF3A15A

    Filesize

    893B

    MD5

    d4ae187b4574036c2d76b6df8a8c1a30

    SHA1

    b06f409fa14bab33cbaf4a37811b8740b624d9e5

    SHA256

    a2ce3a0fa7d2a833d1801e01ec48e35b70d84f3467cc9f8fab370386e13879c7

    SHA512

    1f44a360e8bb8ada22bc5bfe001f1babb4e72005a46bc2a94c33c4bd149ff256cce6f35d65ca4f7fc2a5b9e15494155449830d2809c8cf218d0b9196ec646b0c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    c1eebc2f59ea7a325cc2194faf0b18df

    SHA1

    2b24a827a14e54215547adef490e4224bed85eb6

    SHA256

    5d0780f53a4f7dff0a19a5611b17c3829e4c08948495602196ccd813cb911e80

    SHA512

    ef33e45cccaf930c9769808f021d347110cfb3f229d50bf079acdb1c6e4ea4519baa93aeacfc8d24c38196ed02deda4cf3f15577d81a2870428434b51a40c645

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fc8b5303f6ba9fb0e16eaa0a7f2bda65

    SHA1

    33c788814ff52aac88fab60a6daf6c316aa9a6a4

    SHA256

    927fb9c6090ff8761f1346a35593168c970489d878a0367da0224840674a57a1

    SHA512

    40ad43c0f02dafb5e42ed3a862cb00b9213a9e01a7a53e2a34bbd65a90e4b1a8b87e4fb995b5dac536c77cd785668152b1fd04bf772d249d3fa15d3a5c082889

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bb63a60f8ab3135f35316fe9f66d56dd

    SHA1

    0269a68e6a9db11f4f3772e3a8e0bff5af9e724f

    SHA256

    226ac4e047644e50491fb397f8830b8560f4f5d0132af1dbe7fcf0fea0ecd740

    SHA512

    c6ff32d65480f2791458da5d4580e0dbf325a5ad657c9a1ea1ac58b6dd7d8e77a38f1986ac840cf4000f0832e74dfc1739496e425d69177682a215dab2580593

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    293534868c2f91fbba5a81819b118f01

    SHA1

    d8cb9c87cbc042d0aa0bc2f2e24a8f6d9d80a0d6

    SHA256

    006c58ff90c655d83a7639ef973765dcc211e174c8db7478e256c9ede2081180

    SHA512

    e9f6c397a9ab8f9228fd22751b49d3bbf7e81a3a690b6f1eb6fb47de25512a31ee3b610b7d93d3e52dfeb327879773c1632f9e38559aef9de5c101e08a2f3144

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    98b37871f3d4289d1273a1de08d08553

    SHA1

    fc06744f6c82ed0631651aab0eab520398faa73f

    SHA256

    39396863d55f53dd7b870fb0099dd922d1b14937943f8d04ba1139fb70c6fe88

    SHA512

    4537a1eec2c37ae0d564cff09acec09033637ef4f28e5ea3c11c6f45fcc74785ef1e628de3dc4bdd8af82cce78b86b83dc4254d59f1aa10434533cc7aada2a80

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    932ad0c02996536a028f5b3ed7d791f0

    SHA1

    4f19fba1ae456c279393180eb5b6c4b945f1753a

    SHA256

    8430ef7830c06efd7bdbb1f48e4811b0653026ccf2dad9dade7eea9a8990b208

    SHA512

    1be4c9b9dd7e4604abedb122bdacc2061f9033dc2d331ad24d0115b0b190db7a5efa4456eb8c4525cbd2d0cdd9f2fd0d51393826a6ba5f3a7f5eec28848a15ad

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ca67f5dbf67b4496009939879e1bdb6f

    SHA1

    5b0c2171c6aad9787fafe75346f4c3fb92bdc565

    SHA256

    e4b2b80727e0518463e766c06e0e3dd8c272cf1d3446b64b469aaa12039258ef

    SHA512

    8d49804144493eff95e3d0aaec9e6eee63a0c4f2c7b8b716aedcf6c1af1c07fa7ff099146725a95c19b95356c72c1d8a75adc4d3384bb319b6d17b8bd932c7c3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    159d9f5ea66f981432a0a8fa7a48110c

    SHA1

    aed059f34604d0b09484085e96a844cc6c5070a2

    SHA256

    f1290fe927d353e89b388802e2a5afc64b950055e91882757d6b7d0ebbadd94f

    SHA512

    dc4cc657da72107c8dafe64da11a2ccff0758798874788119b7eae4bde0bd81856e3e9bd6cd1d5ad8839ba93a58a658306466e3a31a1cab0a996f9724f1061de

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ac7083b01993bdee72c97252d529cb9f

    SHA1

    7aed4a9c477250d4438fe29a2411bb96c625571a

    SHA256

    d2821ff0ea9ec9053cdd4004733882effb9379273b1e21f2f935ab1283ef2b54

    SHA512

    ab59d1cfd6baa7f7b8e77056a499166d89583fe1fb60f4fac58341bfce8afdc14226615b623efe29f77919f61476603af5fa2090301e9921435eabdb2c4fd666

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5ad148b8cff419e0748bad848b56057c

    SHA1

    153ecab565cd2e483edfb64e889ba0e95b5f04e1

    SHA256

    83026b2f47387e1a372bfda121e7d5bd712b3552d5956e033472075cf63068a9

    SHA512

    de9980ad83709ffea4ccff698445e57b8da6f7f011aa47d5a3849b5f56bc55549a6137a01db52d4cfa28aa6fa38474980c0a37d2b6ab9ae93b6e4eade2e570ef

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f80282aa596d9ca549b9384d525c82b7

    SHA1

    67f5990188b2e0c23c35d60cb2cb4d44a515ab75

    SHA256

    70fff55de2b524a388153b498b5034bbed16bbd1e2aa4727d303ebc6c5c87edb

    SHA512

    4c0471758632bde411ef730c32e5577345af566e7b738d57f22d88ec09f1af092d24986823e25c1e869c4c28361ffa37b7a79d0b6dede0918330fbc64417c6e6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ed9530ae6b2fce01df41cbfa88c4b545

    SHA1

    bc67fea82ed76fc8729cddc16b65f8d39505a3d1

    SHA256

    76f40c8dfc3ea45519490167f8967a806998bbfa1ae3d4f0a66a51e3a10e1348

    SHA512

    f2e3b0bb6bdcd4c9f374ec530a644a37baa570956bb7be016ca0c5619e597bec3b621241a22e03362678e7affc43884eee8677215d05c95ad383a39471eacf3c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b5f5c1c3b90e2611ebb5deb08e79d999

    SHA1

    b8c1afcb7e255216f659c8e85916311c8ccb6661

    SHA256

    f598ec4c78d16d87d8ea91fefcdbeb46d9aaabd1ce543fea883fda24bf36ac89

    SHA512

    a20463bba979d2b345b042cbbc8d797827e8efc6aabe2e4a37d0ca964344c17709226e59cdfea88460bc6aea2fd5a41e1d69e4b6a03312f65fbe2e54984da176

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    24384d350cc398098e4ad705230c69f0

    SHA1

    30679b6e62214bf408a0331584e2418052246b91

    SHA256

    a29250406d0ca7f88e8c246cb6c4b2f74592cb451415ae89d00d6a3632a19a0f

    SHA512

    eb9ca7993a334c18062d452b0fe4959290d49c77382ac2cae1edfba47bcc7953cf465c501d822b84b3f5ac07f744beacb78bf23cbae7e77508521b2adcc42098

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d323519ea9d30a3255d292b5dbbbc743

    SHA1

    cd0ad3bd7703b40a34efa52c412fba2e1d6f5bfb

    SHA256

    f3006ddb864092f2106447dc3519e0351cbcad2d4d6a5be6f916f40574b5b4f2

    SHA512

    c0564d68a8af58c67e022ba7c2a91cff3516f5aa11def978061aea3f74cfa93153c3355443fe6d4a5fb82de9ef15f98060c12de8755de8fffce325a02c771bfd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    560add5f159da306dce8a8e2f2a40e02

    SHA1

    c24815d784084124e8cfa1721f7e39050d9d068d

    SHA256

    15bbddc22c46db262b53cd44faa0b77f24dbfdab19119d965325b206d243e0f5

    SHA512

    858bdcf63c98031fa4744d7b7e36b5ce90dafb69001c34a8ca362c7d921b6b12781b3d228a3b51919566fafa4f0c0ea28372bb23934af875f17c3f20060b6f4e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7d4d5f145012a7ea872d79099c42a487

    SHA1

    de6099357aae0d37530dac033c8f8f469d6a7e7e

    SHA256

    9ce20ce3657d650cc62bff70c670b7c2cc1da8e9593f072ae49555f54e6e2a64

    SHA512

    45c2080d4a1a465f430ab2e8bc1e0fce8b0933c930604d9d3344414081f033d14e17982df71e2f1309d1b81f0853aa30c90d6bc9f0571746d7e9d93af53cad82

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    46958d755f12513b06c6feb24686b48f

    SHA1

    924f4d4cfa588c138390063040a3d7c65cd975d8

    SHA256

    e0597a8e585005b3c32ae5789510bbfa5c56ad0c69003c808a672652ef864e0f

    SHA512

    2df60cbf0905d334e171a473a43bb2f097dcba34ec9b729fe41845492312230e6f2b07e896bbbeafc06607f1bd8a1fdc52065411e8765bc7e4031e99c7de0abf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d95e2ca04cf01c154ccfa8290a19cbc1

    SHA1

    704ed21e62fd2f2f9abf79d54c49ae31207622d4

    SHA256

    d9db6ec7aac996859ab9aa569f34edc43770ea71921d6665e436b8d2f5402240

    SHA512

    463d4c1bc69648ee0b73b5057298c925e5efd03806161e6a4b7fba797f047aca0babec2b8df3ef053b02d14c0b1d72725b1de284bf5398dffad1be341f8441c8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    881ead0ec48793301a14cecae1beac43

    SHA1

    4cc94a00a78590c3c8b88bc47b402500708b0b90

    SHA256

    5516d62579b7cffe6e650812129745a746ff25b1701d2971ccf852947d236f46

    SHA512

    bb88e4fec42fb40d6a18a26593f15bc42f808d84e26db29e37ec5cc71b3d6527dc5bbec097dfc6738f796c9ee9ad88c9b72861c6c3a8139307079db462fac85b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c17791b4cc7e2372aa35d76185497764

    SHA1

    f71f13ff0e30b6ef7a19124aa9155e89e51559ae

    SHA256

    0e313a83c891d8a0290fd958f44ac8be19a5318cbd93764d5f906183d5a8748a

    SHA512

    ae462ee417b31607e3ce18a113d41226c9322f6cea2ea22cc60a8d9a2200004c8c06f2eb6a007bcd754baa6af777cd278f4fa1fe67212d3be343c3431a92150b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    821f6d6215d95f3e89b917a1bf538a89

    SHA1

    eb497f339600987d33405f688bf91e8c74fd4897

    SHA256

    cc19b66252461d3631ede25c12f488723abbdd8136076cf568e5bb8ed063e8f3

    SHA512

    d8e46672c3b9e27d77dc381da05394f60add65bd74b986de59adb891fa91c2a0d368c82c7416e4a50d4a31b4eadb9da0f7aaa9b3b05989924da3abb0d88012c8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cf27d03984108016cd109694a5730845

    SHA1

    89d80b6a0d4690c376fdb0b7bd7b908a6223c7c2

    SHA256

    287441b98375c6b8cfad061068bde46308cdc38c9333897062991b3f5fe45263

    SHA512

    0c563a8dfc1cd796a5d7517b6a80bcedceb1fd672b804c65bdf1f6a5af982474d5f724a88a174f18adc0dd4e39e984a8807f38943be7d42a66168a77ac26adef

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\952665A85C3C6B581D1B9AEC9BB41CF4

    Filesize

    548B

    MD5

    d432e3f7b0b010c5cb722440eb0f4590

    SHA1

    8afd0ca9dc12df03bfb656652dd71efe5c7ca165

    SHA256

    6b8a3e100e5f5933c6eb671930715e17684c9aecbd9d664ad92954e83f064bac

    SHA512

    6ede8786292f2c5c614edb95041e63644b31d23d4736cb49a939ba6de6713aee5fcf2d37f9d65d2791b99a0687cfee3e466fd155eb690a04dea12897cf1d717f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    b1517466665d1cebc9f921cfae353a95

    SHA1

    88cd8fcd7de8059fb249f83bde67c724f58054d3

    SHA256

    6eaeab8986b33adec6a06cb7055062a444b15bf30004dad1cd4f34ecf3448032

    SHA512

    8a9fbb44922fa4e2e59846de362c236808046f288c173220f91529f9ba1a9172400d3a2b04b80dd5a66ecdd6997d2a25f8a5962afd676aa3578ddb4ce0e9304f

  • C:\Users\Admin\AppData\Local\Temp\Cab5FDC.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar5FE1.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06