Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    143s
  • max time network
    147s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    26/01/2024, 03:38

General

  • Target

    76496ea846f6caccbf78d201bf891f78.html

  • Size

    34KB

  • MD5

    76496ea846f6caccbf78d201bf891f78

  • SHA1

    cbea5856cfb0906b1d47adc88a465455b5adc9df

  • SHA256

    ef47a1890c43b2c32136a1fdd3d8083c148a2ba2946e595947cf64299886b295

  • SHA512

    851e2bbceab22435940b1e0f7368f3d7aa59834228ee7456e95238ceb25f213e845cc37a28eef328419b9d40e50f4b269667ac2049bd19752037140904ae17c5

  • SSDEEP

    768:vQLAX2i8VLD60Zcp0SUeVEq0ryi9Jwn9A:vQLAmiGLZZcp0SUeVEq0mi9Jwn9A

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\76496ea846f6caccbf78d201bf891f78.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2180
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2180 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2272

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    aca9514e779d4839dde46ad3789c337a

    SHA1

    7a6f52cd933abd8e0143207ff00f1ada849b23c6

    SHA256

    0a7690de0103871df9a378a1a109384588a285dd2c9de8cb05b183b3520d17f8

    SHA512

    c2e2c2ffe86abeabd9086512c567e3ba7bc35f11442778442b4723599ca8243e5d302bb9a26469ddd199ac51aa6e7916c82803cdb10d71d5e2b63c29bd8e3624

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fc9f51349e006672cc68acf80bfa126a

    SHA1

    a315442f0ef03060696ca8b0964669cbececefce

    SHA256

    edc6146f7acb47b0ac610ad665cd6ee8a7c51e7070a04a361d38bbd86887c8ff

    SHA512

    96295ecac5659a59457b108ed6757a9eb7df46ebb3ebe1d7ea646eba377bd3683cb04a43031e3453bf4b8f904ae35af39d0f3ccedac82baf364d26bbe99f8ee5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5185d376099e424f72c2584af7f37e7d

    SHA1

    c1c585dd708caf9068e834cf106bdb86f450cecd

    SHA256

    61ca5ad31fa1b4aef558e28e89b14b821522af7216a191d2a8e64d521fd6cb43

    SHA512

    b57217764ff554f32c8e6047bfeb19134c9b41c4884e0ecc4dd4929764a4acc293569e7c0c1e98c38e01ae686113f1bc541ea50d90ac93d24efec019b23fee27

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9b07299bf8a999f9e2e505206feb8b7b

    SHA1

    037383a443260a9816a3c18832803baec597026b

    SHA256

    2435b13c490f502168f965256883d348abee8532ddb92c28f94ceff87f187e22

    SHA512

    4249246e1380bb34e95c50b5f87b279e6a7ee8409c149b7e6a38b2905d7d4215507a6d50c59aa7a2efadb0e9a73ea6a2f86ac0341afc1495f5efe75434de3196

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5a438867b700386bc0c14188b72e1dbb

    SHA1

    3367b0f83a21070c221509b845631fd3d0ab467b

    SHA256

    55c0d72a34be50edf42c145d95593851ff14e62734177d1b552930a081fa150c

    SHA512

    33c9d02aa843e8158a149adfd16a30a29ff61533772679fa4fcaf4df6d9cdb454ba34165900fb6baa41a41fa454ea06dd4d65ed0dee63709da8518813975d097

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    242f6971cfac105f541ced21676682ff

    SHA1

    513efa094e3f0fa43a2a6aced6c22afa4ad02707

    SHA256

    73f73610e6e6332f7f3b1524bc970358e92ae55110966a9eba53478efa40de89

    SHA512

    966fe4da237ecb430edb0f694c6b1c6cb12a4d80c2b412fd46f37558fe315c6218258e7e93984c5012d304f567194441cf9debba7c69e2b8fbd09cf104f04677

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4cafdd60790b51f15b4009257817a723

    SHA1

    25c66cf6f44d47d46eccba54436abae491f091bd

    SHA256

    8d567c06e0c58a731183e7e2aff47e3732f9197ca9316b2ac80602be63061b9c

    SHA512

    c1019e1532e3ade741558d181a0c23a1117ec43729b57adfdfba5ec10c44188fa6c9c082892dcc9f77f2dcbb91a17d67441dbd2b354b88b5e52ac01154b69c5c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ae0d93068c61d94f13deb61cb705cdd6

    SHA1

    c488d40b7eb2da66ce01fd77ba739c31a339ecb1

    SHA256

    d37a19540ebc4766ff228487ef7e79efc4ba6081f2d435253f7b93f9d39231be

    SHA512

    016454b86da2dba969b7a5e1e1582673b9381f65755b8b4442d027f9a07c2a2bb68493b3350d453231dc3f21bdda2da1d2a4580da7c7321944665e01322d5274

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3d9078caa1f79b3f406388d0b4113b1b

    SHA1

    eafe64994a5fafca487fbde7498273a24eb3c7ec

    SHA256

    bd9ca23d835f74a7e51d257a92c20960733a23c334ed86cdcc7126a401538873

    SHA512

    5862ee7b0aa496cbbba7763058b29d7ea52a78df79129ee17e4b84b8f2a9e1fc88d700e19fd4a71843ee83f75d8de353e000d7fce3248cc3fb252df1e866e057

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f58f0e1181a281507cb688778d2a396a

    SHA1

    479dd4ef55d1f32dab67e57a4665bd85064e74df

    SHA256

    0b03664b7a70ac5ff7d591bbdfbb79b47738d3f8dd43656d521efc1e7af9785b

    SHA512

    e5e4c2f59f94f0d8d9805673bdf3505f37ceb6952d556153c0e70961f6d203fd0c9c0e5f99854775aec467f714435cc8f3d45118a5a24ffe011ed88b33ab4f86

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ac1ae9e302c7b46272e485e1ce41278a

    SHA1

    b944bb75c19331eba024202fe3f11a5617838416

    SHA256

    a18a86c5d1b57f6649c1d1ef0a53d36fd1ca0e1cf9333a0bb05e2ba6334ee307

    SHA512

    5a8ba0e310663dd513eaf1bc4dff6d90d56476f7ef4fa4dc7d335a948cdf0e64371a0e49a1ae5e1571767318a80748fa422ad465de1c93111cdb900e34962d3e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cb1e3cdd565974bb17b983fc338851d2

    SHA1

    1dd66ac00b23df09eeb411c03b9af397ae8674b5

    SHA256

    fe48264358c06978506f8518d182477faf9ec9ce96da9ae5f71fa9834508221d

    SHA512

    b39362116fc2797573e7093ff2a777789802ab05a0d5975b6711d1d77c463f87c28ebe2d64e1517ba87bcb1ede3e4bb24b8ed4a10b79d39a12a8c466c636644f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ee3c64403f31db49ad7a383748c3d850

    SHA1

    cf5e2e14451ada8acf17a35ed0232af11abb2df0

    SHA256

    b51efaa4bf06a00b8b530754cdcc60ef93c15423edb4a4e9b3c879355a94b6ab

    SHA512

    cd727428e669becf405d34acbc60888f7f616a3652194262b95079cbbfe2f814a4dcfda012c059206e5773ad1660cd36993cec45b7bb53a1744dc8e34b4c7b76

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2f60e3b33db404659d19b46fea5a1c70

    SHA1

    8cd3635e945625489f4c5a1ce58470d1f4b588f2

    SHA256

    7347547d0cfec3e1579731b3ef243e1bb31186c33606131528680c55ef091c2d

    SHA512

    fbf94208be9abc5ea200581aa44c5b78e58f5a02f15a45308c8fae4c2b43a6c192c97c98ffa172c0cb91f5a7e2ade502f063113e76425e3cc72de6ef85265fc2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f1ae2eb6a9b9d5e44e3742cbb1f1afba

    SHA1

    cc3934689a27932518069f8ba722193a91573ca9

    SHA256

    6600ccdd5c65a0cd4b97cc50a36735accadad7b8fce8994cefc56a9f8332902e

    SHA512

    0aed6a3b8d82551dc3fde77cfa1dbd66bfc604b77ce04a987b01467ef806684f27109ac6b7c6e0dbd01f2578befc6bf2e0427ef2d616ddcc9ccc366cafe5e264

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f0dfd87cd27be218fa24c2a01f5cbe80

    SHA1

    f019ee00770ff369b7de68299d6bf8a2ab1a5265

    SHA256

    bb694f1dca5456bf4fc220e4242e12acda2b7a8257bfa26a83b8cb58c7a166ee

    SHA512

    2382040dbb42e707c5f3f5628ed88c41fdce02d06803e4c901880573ee58b8faaa571e127a1eadc6b2eba14f6a36e584651c26474bffff7926737ac11fd94fc0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b50de5fd9cbac7841316231fe82f4d0b

    SHA1

    ad2c2f0ea47f27057c6f6bb4182b61c5a7d1e375

    SHA256

    f25649fdb25ad8ab719196ef939744587675516603a6fbd81e9448f27f147087

    SHA512

    e1326502ec0889328f57d417f814956691f26fc0f2f782ebad6f95d5372457b966cfffe20ff3367f5001975ccab73fa7ada8d2776f4e043f85b5f0d1488b3e93

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4e651cacb8bda4736731fbb851ff0e23

    SHA1

    10e5f56f993b1b2c84c36e33712a1145c0f80d06

    SHA256

    ade3f1fde57fcc50ce33598c275a31b07de17227a76cf14d6633acc226599c7c

    SHA512

    8a6e86cae4676f293c4ae36844a3a2079f97e93184f02eb09fed5eaf7116f8ae6ba577eaf7cc99a69be1be8ab031927aec4ba9c96be004a5c2a6b7d2e3793e08

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f2da96e8d2d4665ad91a15c35ab4d150

    SHA1

    a28232182e61a5eb2e6d8689990dba6d10af24bd

    SHA256

    cc667ceb524e93f5b9cee9b664fd39279d77ce7aa2041683b112077405649670

    SHA512

    6ffc527b407c4b2d437c7a4ba67d4dfa61cd092c2d47c84fcdbbbff8a5c9acce811e498bb3ad00f49df29e5aa38cb48d3d444aeb3bfa4606ab5f7dd790586208

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    08bb7c75893deed11d315c4503f1513d

    SHA1

    15d3f5d2384aad3f9866b1d524ff937c2afe5d03

    SHA256

    04b6118b31df88a5a4fa91ea3b3076c246dbbbd8d60d30b384ee1fbd433a72d9

    SHA512

    21e375efcded1e38517ffdc207bd26d5576cdb3c933183e1447ae36bc549be860b6d072def012efc9759fa99170b7b287e595110253ba74a314fe46cec108b55

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9dfb79ec56fc60509f47afe33b6a2495

    SHA1

    44cc86c61756af26215c4a54d0698c2c72e25889

    SHA256

    f1654300a76511f04085592ff18d04146f8461652b5844f50e8c98528c2659d6

    SHA512

    7029b1954a93ff80e4aefbbb42503f65023a5dc8c217c9bc91ecd69b9c246e20c45da03bb431a6ecd8c55bc763549d7669ffcfb77a730373af20ecb69d281a03

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4ea1c9dae43d4fa2e321460c9f9fda00

    SHA1

    8e7e6b0c3f5f11888a79e9a66aa3f188b6a32c3d

    SHA256

    08e2e0ad69a7b5120a6133ab56ccb0ba8ffe0335600e7c5a1f83af599c367323

    SHA512

    abac71afe36b6451f5b9cd8800cba838a647332c9644d28740a1065e50c1198eac76689f13168bc089634bd62d1ee41f1a7ca0be46525ae66ee698a1af0017eb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4c81e0bb2ae9c48d3b7f9c247fae388c

    SHA1

    c277bf23c31b792e88a6858175382d3df8bca18d

    SHA256

    eebc839a8ecd429220e42ffe02733565962f0288bb9db3d75a63b5cf8c63672b

    SHA512

    d7cf10d802555afeec0f64df26db496f53b28f715704c38a7ec726584e8ac8c648e462d847801b77d95bbc39c194ad23b6c55a9ba08ef9e20fb4df13057aa41a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ac84dd5a9b1bc05f328fd19c1c52b0aa

    SHA1

    65450c22d342c278057376b94d2f3e8f6b4c2c43

    SHA256

    72b083e42edce82097022438b19d6bfa1c71bff8726523654de6e19ef9b38ff9

    SHA512

    820993ea1e4e21521aaae114ad6e27590b19fe2046e9e9da886bb2bfad659ddbaeeecc33de81320313018d8d1a953e800e118bed6f16b3fd9ae6ca6dbdee3ee7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9b72821c5c99ed72aab3dba1d434d603

    SHA1

    2bfde6cb8999092894745b3b1e2233989e8289a4

    SHA256

    c9a4e10adb4e998a85604679e33feabca6ac34251dd4f32feea61f6a27e725b0

    SHA512

    58bec2df51578ce6a2d04ea0a911bb1630d97befe1b3b58d1d896d4c50f38d80caa6c30b0d75f59c02f323a56b5c5e9a2bfe3e45a3ce6be4245ddfbcd828ceaf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    f4e8a7f045a2e47d7f1ebc9f67fad39f

    SHA1

    117d2933ca64e5964c7f070066d7e9212ec54ed0

    SHA256

    8625acf760cde293bc7028e1a9785092d42be8d317668b957c835c525446f881

    SHA512

    fc7d96649025750be022642c35b1d4f46251e7570f8773d2cea5c77c151268f609165e05dbd493f562f339e8041b9e41b942d61382e8ed24a54bb5258b2b4871

  • C:\Users\Admin\AppData\Local\Temp\Cab569A.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar5749.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06