Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    149s
  • max time network
    153s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    26/01/2024, 04:26

General

  • Target

    7660f2a2de820ce9dc82b98df67a120c.html

  • Size

    96KB

  • MD5

    7660f2a2de820ce9dc82b98df67a120c

  • SHA1

    a3aebdaef2856b04e9f04f0056caa675b857de64

  • SHA256

    6844b99463df3364dc931a03c00cc6dcc812041525764ee22ac8146c981100f3

  • SHA512

    ece6a2c10ebbddc7183c17d684b0e9ce080ac79ea2d72c53ab1e7b5f3cb3d0ef959013996aa35ea3d56e2213986e4bbba1ebae8ebf0c611fed419f5e189420c1

  • SSDEEP

    3072:Vvi0afyhCJyOGbVdwLDxTHaQFxLD07cDw+9EWvK2:s0afyhC5Gm

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 42 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\7660f2a2de820ce9dc82b98df67a120c.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1752
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1752 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2248

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    1KB

    MD5

    73ce21ff1fb2989f6350ace9274ae9b5

    SHA1

    7db6c387eb8351f3e8e361d10224711c3477821e

    SHA256

    d7005273bab949c42fcc73eac7820c4c5f08df1e9095020cdb0e17fc9e282d50

    SHA512

    a43767a55a559a8bf51d5dcb9bc378167f63e15f571b6be35903048570d036fed2a3f6a37c91f469ee9808d245cdd875b9dad38556e6bf97258a82c7071aeab3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\CAF4703619713E3F18D8A9D5D88D6288_A7725538C46DE2D0088EE44974E2CEBA

    Filesize

    724B

    MD5

    ac89a852c2aaa3d389b2d2dd312ad367

    SHA1

    8f421dd6493c61dbda6b839e2debb7b50a20c930

    SHA256

    0b720e19270c672f9b6e0ec40b468ac49376807de08a814573fe038779534f45

    SHA512

    c6a88f33688cc0c287f04005e07d5b5e4a8721d204aa429f93ade2a56aeb86e05d89a8f7a44c1e93359a185a4c5f418240c6cdbc5a21314226681c744cf37f36

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\E87CE99F124623F95572A696C80EFCAF_33A22DC5622FDF6383E749748D25F47A

    Filesize

    472B

    MD5

    318e2e42b3bc01790c4ee3c62f89c18f

    SHA1

    3d702219ccd756f450a45bfc87633aae50fa9ac3

    SHA256

    7772e96ad368809ce3f3e5bc5dd0cc62bd2aa8e89d396ce46aa47f97fb526d55

    SHA512

    c5b857d47447a633bbf631b3294f1038c40ac5e4e31811fd9b59c41de3385370cae99708cc64d6ab9eda2c6c2fe562050088584ac0921fdf9b817aad2f011893

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    ae88e74db5d150c91001f3b3981105fe

    SHA1

    4e0ca876c518e02252f5a6b1259b0761e70be70f

    SHA256

    2589e101c8b3b3fa7c63ab280368261e798285d08d5e60b5c7eaae3d3f144538

    SHA512

    9be1f8cf8ab6c0911d3bf5bcf0751fcf8b61f9ecaba5184c93b3de9113c84c95cd64c9db57c31ca6cdc7a5b001132a2fe3a488f504b8db1a957bc0e6a4940e3a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    59038a963a81f4d3b1cb3c8bd0a25639

    SHA1

    448368956f381db657f1898acf843548d7810f73

    SHA256

    2d9ce37d71b681c8bc6999644b9893c71fc30a40d7cc0941776cb14bbdb33220

    SHA512

    905c4a14e9550654abed8552e9ce2d74fc44fa3d692dec7a5144945960c0bcb825767e86e53e73fc8e1736a3d17b84bdc1e1f9d380f404177e01402713361146

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f20c5bdea3172bba97495c1bb813593d

    SHA1

    9cf12ff1f80290906b9f74396b79b90b133b2999

    SHA256

    c09b62118c9234f178a8d9387b8b66c9cd0e198c1d8258eb92eecff87fc6f876

    SHA512

    49be1bca71e5e20777c127725d0b6ea698b707fe5c6dbcc2d7fadfb42ae5786564dc3146ad09b8f0d6c368f5ac07db7d0614866934614fb215499dc2bcf66435

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6ab2c55195cbc813408a2d40b658951d

    SHA1

    a35db30733da793ddb9fefc2270b65ba83d8c3d2

    SHA256

    fb7c815e79e3747d078c5f0decee262dc1d660b39b509b900113243266c749cb

    SHA512

    8f354af5b762d8e3ff68c1788382d87a5e1c7eacf7eb733931693e3c002c87192e623e37d1d7c2fe880bab80639a14924de02456b1391e4ca9ae54cbd556381e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8ee87b82ac5488d943699554e02a1c64

    SHA1

    1c265c4c92a1719ff2017cfc65dd2a266a6898e9

    SHA256

    4be66c31a0e5d958546d46ec77c9bc4f4af8f71c2cad56391bf9dd34e43888b9

    SHA512

    0eeb3b94a2ea028d852ca2c85653ec8e939ca05c619c032d4809fc72cd02cf6aff8477a6ac43f678ca32d60adde1a508033e1e3fe6f7ef8ddcc71f7d0eeb3449

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3b89d5956363d652f3ae98118fdf07a9

    SHA1

    17b7f57fe0a74e4bd1ae1feb7c80c961eb57754a

    SHA256

    94fdcaee69a407033cdd6e2f79ce0ef4c0786c47b30b27e5d4d867bf3dbe2097

    SHA512

    e31e5aaf62431fd3711b8ac776af4325277dc1ad5922c404770f1186436afa8bc4f8b3a1c2376b1a251cec25c786c5b1f7ed62ba79f9a26dedb6228e3b6ea212

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    535993d8712071e25c2b23618df55b67

    SHA1

    0f97a4689e8cf3d191510b61bec2f19c50c8d6b9

    SHA256

    d500269c355ece980e354acea819013c2b6fa455012c8217d34e3c4172c17e6e

    SHA512

    afd3bcc1eb4630c6a6bae43903eb5e7e362ff343dd9e02130d673fa39ba70743dfb78552a4a46bd145a234416ed06ef0eb3d6fcd3d145a97c5f775bb71a0b9ba

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7b37764934c176f26427b95e0fa4cac0

    SHA1

    f56f25aade7d0a599f42d15bf396d1de54cded63

    SHA256

    893d10c4d95183a79ccf2bb4a877fedd6cc2c136fa3d2ca71fcd7257cca93246

    SHA512

    ad4396ba6fd32fc1abd1073c150e429e0a26505afcc6e071538bb88b8b834b0c45b6b7c6f0218ed6985aed3350b4d7d2b7cc7fa6a5d8021ad5a522bd29f6378a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    291193611398e6670731f7153659761d

    SHA1

    5b1e642fa7327b36419592614580829e86d30927

    SHA256

    39e8b01ca90482f45f7a14067f1ccb8936e195b28646d75328ff32cba7d61865

    SHA512

    3a87404a77cc5e23ca7a4128e09c0d6652b75247b5afc847e0a2ff98989439ca02fe41b5de0cb62dda2f474cdac2a75fdc28826174d76e9958c3691007f333c5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    092e06691ed3f25102ac75825ab6d922

    SHA1

    8f841343eff8afc4623542b482ad90ab59a22702

    SHA256

    5031b16ada55c011cd57e3cfc193ba9e87a25fb04c257a7bdf19942b54747b3f

    SHA512

    2099938519c94f4195cc3744cb048964a14e8c1c4593725d8bf7719826031cbe0ed9f1134a7f5f0b9dee61a74e15a9ef853f5a41877cb80af616db3c322260cb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    75dc889579ad4b2d34b01ff88913e7a0

    SHA1

    ed053dd80c7dd29e1c8f988814d177a97e0e6f24

    SHA256

    af43d8791699d4a208508a8ea9dfe740122df80d1760fb50b21703b191b95619

    SHA512

    a5314e64bf468700aa69a2a9e1d1f469f625f2bc2c80431ae267e0a12f97fba12006616d5bbde90d76f4951651ece692abb4bb96ee7b6015bbd47607d0c6d33f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4367bf21bae083d0aef5455547fa609c

    SHA1

    f37853de144813ecd9b469b38c406346f2fa624a

    SHA256

    522551473000e8a0d4de8af8e46100a0464832e23e1659c182f30a928ce10cd9

    SHA512

    41409c319cc10b4827fd48be4bfb7ae6ec80ea96e25d79cb30eb964184ac3c04e248a021b01520a3dc0671163777e2bebd498f16600ed5ca23726d38396e73b1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bc93728e474ed9322bc0b4810928a0a3

    SHA1

    c148a1b2c6ac1a52a020ecc91b85b361918bdcc6

    SHA256

    44a5bbb0f2451d9c0e72eb2b767f5056355f1ef6366f44a42799a36ae80871c3

    SHA512

    f296c8e4f422201acb310df6b28018d8715a6c1b505218d7e74b4521ee41fe4f831552050cbe3e6db89c5bf05402f4cf832981ab21386c9807a3463a2b95b3ac

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    566c3b8eab126e28b15ae7683af9dfb1

    SHA1

    03f0665bee79e4ecd995f5bb28a518a7b202ec7b

    SHA256

    969d5cfa775fcbc6ee6405706a954ad2d7ba40a000331b8f331f2891c64d057b

    SHA512

    ed9a846cf845acce9e01cd4182b2d02274601d33eae41f4a7a5fb1abe4c6fb657c79683ba24a1e6baee5bc924f20421ad0f2ad794d4dadd46d83c9e855cc4627

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d263d38867b943c38a6af64b8a5aca72

    SHA1

    8dfbc68d9b7e266cc1ee0424c528263007383340

    SHA256

    0998256d12514845de07637b1751f7c3c82d430afeb77b3c6b1d184cea5e4b60

    SHA512

    916e00475845f8da6c334178034da5470d7489b9398d319b23ffd565112292834fb757f49c502fb92a249cffbe643df58bb541089353aadf0659ece4f30534c1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    93590efa19b6adca2287e86e59010aed

    SHA1

    2cf667f3700a832d12a229f06f69ac3428f61ba9

    SHA256

    23a4b6589c911fc4a04889adafb033f23874fd9aa0536efa9db4e899ec133ee1

    SHA512

    d4a855e0332263d1066054c38a707ff2e8ddbaa00713811e9f3585f2d282ae2d5e83b7588fcd068345baaabb3d5757f7d1e858726bbf7c26be3b3f8fd52523ac

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5c93403ec1ef601617db06c7ea455bc0

    SHA1

    610c8796990516400fc51cbb6c141e4af56d49d2

    SHA256

    977b508f92dee61e005530185612367c5d1b52d499ca9ab3cadc89e40edaacdf

    SHA512

    bbc914edc9385dbcc7a5efb3cf008e6014c4cb33f5637c1cf4e3ca8e74bf88bc4b9107a5009234ea7efdb1ce34f67517c348a9c3cb7ef5ac20a6ed1e5cde9a48

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    82f07df43a4f5faf4aad6c185ac66828

    SHA1

    bda3bf50e2ed1c7dd406798171ed16ff1f730cbb

    SHA256

    875b2229dcdfe01ecb6d44441c4a96232fa41af37c585c27b6ea654abe8672d1

    SHA512

    f6f5494491e0e1f7c40e4f1b5d4f9d51bfe721f2649a2c1990de6904188f58f8b92a900935ca6038e7cd60118631a04143a8565808aeddc2d8d397c4567757f1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    caed3be34c40382e77c9d80860748a67

    SHA1

    d5764baebd5237bb88e8afb89c90b03f20926e84

    SHA256

    55cc0dda6794c02291a84c16b77a055908b2ad1be6cad8437bd2d2dd7404627b

    SHA512

    df76b7f24c5e1c0a7de276e5d37dc91e4905311159594b5a9545fa19d286a95babbaa1400c21ca9ab222fc4ec7081d6f399e65386e925e79cc60cf5bca099edd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    28e203a9cd59f6c5f1c177d28fb07901

    SHA1

    c0a5e88f3648556a644c13476b564f6d46870dcb

    SHA256

    d697287fac7b5b78f01292f7230c7c90ac95ca7200408ea3f322454739696764

    SHA512

    94ed8b9d78806276286426d51f4b71a0d2a1af82cdd732875e2b2b5ced9d6719939d371c0730dae6200dbf653b91740fd7b38e3194a1c515f16b5563765e82a8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9986cdc10c2322841ea69327ebdace56

    SHA1

    fa67343328852efb12befd4bfa8bce40fd03a212

    SHA256

    0350d66a79050eaeb674764a037ce5d31c9fdd6069fce429ee7ef52999fdb889

    SHA512

    d2faa572c7c909209361263898950278c59b3d9dc0493dcbfc1c663f9f520af2b5dfe2e1e92d4ed5788b620fca210c38a5d6dbb92da9f3a2ddbf1da34d35744c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7b6d30aabd7ec1ebd7af98e1cff8d743

    SHA1

    c5e8fbb7942f2feb366e74d39b849ba1b99e00f9

    SHA256

    1422db160c0b5d1c39a4ab073f3ec5858124725053ce34ab9d4b598fcb34306b

    SHA512

    3f575d776dd1e483a191d927b766ad4cd30c1f05f1375f3f0488dc926c88c9e1495a43106f8ebe818b624fd67db417aa4a798f8e8a2653a0a213b674a7fcd293

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0c193c6b741cca789c5f7f2740d77eb0

    SHA1

    dcd6eec0d4c90f8190986676a4059ba38995b08e

    SHA256

    d289b1c993822686a980e9f64812146cf735401791b6553d3b4ef0a9843ce8e6

    SHA512

    0e142dfce76deca4ff8ffb0cff3c69141ce97060a5b7360750916ee09cc95f96a1a7771cfbbe018734393c56a6d0031c9f1146f136fcf879c90d86ff0b669ebd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\E87CE99F124623F95572A696C80EFCAF_33A22DC5622FDF6383E749748D25F47A

    Filesize

    406B

    MD5

    bbef617a8efd89205b0d8b62cf521a67

    SHA1

    8f8e828d85655862f1c054e58b76244594dd622f

    SHA256

    9a8e67a8856ee6d651f96c1bccfeac9030c7e5ebf4f6a618ef6920ffe750a35a

    SHA512

    b95c976d183f48a69533e6f620e0fc577eec68800c38af043bde6a79f12e806079c9e3a9ad8846d70ea941919985b04984aa68bf480df5afa89f3bd8f2d6b103

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    601feaa2273309e6d1c44b4a5899d60d

    SHA1

    babe280eae40e79743c79f2a460821de31853368

    SHA256

    1c27fa5fd4b0e407b198635c72b31db2781d9b0cfd1d24cc1647eb97d068e2fd

    SHA512

    7162225c86f290b247a86118b3e024dc9fff7192eba87c4ff81eb5750f10879badd5e6f6f0a6898d437433d99eeb1b70bd641ccf6c213f456a0b2f3b070feb4f

  • C:\Users\Admin\AppData\Local\Temp\Cab849C.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar84CD.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06