Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    144s
  • max time network
    145s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231222-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system
  • submitted
    26/01/2024, 17:51

General

  • Target

    77fe798b982ff49ae9238440b2bb54a7.html

  • Size

    12KB

  • MD5

    77fe798b982ff49ae9238440b2bb54a7

  • SHA1

    47ffc783965bd1bef48e66414f46ea90debf9c51

  • SHA256

    e0b8e79cde82e2434ce27b38d59a85a5fc3b60348af953a4d96d8d57b065adcd

  • SHA512

    9d3b6277ebfefb4a18863927f47cd7f24ec616aa10cd0d7f9a1012dcbb1724d161ad7c789039b901df2b011e59dc1de5ad5612eaae9ee9828539ecedd3ff7d19

  • SSDEEP

    192:+4QhE5jcbceZff8XuLsnsQZ3ZCkUiQnmRs0MeuItvSsGaF545S6PFfy3+Pbd71qQ:Ukcb4Micmi0hSIEG+PbdE2V

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 64 IoCs
  • Modifies registry class 1 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\77fe798b982ff49ae9238440b2bb54a7.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:3720
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:3720 CREDAT:17410 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Modifies registry class
      • Suspicious use of SetWindowsHookEx
      PID:3268

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\7423F88C7F265F0DEFC08EA88C3BDE45_AA1E8580D4EBC816148CE81268683776

    Filesize

    471B

    MD5

    b610bd5c61e2121914699e4b6cb9f7f4

    SHA1

    514f5ad7770f18e1c5b62253d95d6aa3c63c83ee

    SHA256

    3a418958f81aae04aa13719238c42d24adc5258b95246b3df0b32a1bf7676b51

    SHA512

    9ebb50a5b4942dfbf1a037e8a1b6308502d5bd337abaf90cca0d44f3a88001b25c6f82787f13b2d5a6f2bcb81209f831c16422d4c1a6cb6e07d55e8dccd7b3b5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\CAF4703619713E3F18D8A9D5D88D6288_A7725538C46DE2D0088EE44974E2CEBA

    Filesize

    724B

    MD5

    ac89a852c2aaa3d389b2d2dd312ad367

    SHA1

    8f421dd6493c61dbda6b839e2debb7b50a20c930

    SHA256

    0b720e19270c672f9b6e0ec40b468ac49376807de08a814573fe038779534f45

    SHA512

    c6a88f33688cc0c287f04005e07d5b5e4a8721d204aa429f93ade2a56aeb86e05d89a8f7a44c1e93359a185a4c5f418240c6cdbc5a21314226681c744cf37f36

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7423F88C7F265F0DEFC08EA88C3BDE45_AA1E8580D4EBC816148CE81268683776

    Filesize

    404B

    MD5

    14114b43a6918540715a149ab4d9b35f

    SHA1

    e9afa5e9e5df0f7ee547f56f176182eefc92ec12

    SHA256

    fc7802486af252ef16de0e99d1d43d4899c4ba580e1733a25baca3af05674661

    SHA512

    a5e1e37013bfd7b511d012e4d46d201d244f13ff76a584bfc46abe4c3b3293f59b3cc29730474157bd7209ccfa0cbe1b551a9867762574b4022662dc72fad9e0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\A16C6C16D94F76E0808C087DFC657D99_94C1D6A45E9FF1EA81CCD165811FFC09

    Filesize

    402B

    MD5

    9a06b69b3be83bd481b695c914fc10e7

    SHA1

    fd720f6df266eb84dc31ac3368197342934fccad

    SHA256

    e363f8ca732bc52c9a26a7ec0cd1ce02f0d26e618ab5c1ded8e86d84dd4ed36f

    SHA512

    9f9b14e1ebc188e8d40d9aa208079bb4dc04c09ae9c6062222935094bdd52c9e113db5ed297c99713108b83e1c47f0dc099d6093b4830bd1a32d9556cdf5bfdb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\CAF4703619713E3F18D8A9D5D88D6288_A7725538C46DE2D0088EE44974E2CEBA

    Filesize

    392B

    MD5

    fcc7098d2a8d64b6e7ca92c8f967ec36

    SHA1

    5ea8012abf5d8015342cc5559396bc8c64cb1994

    SHA256

    d1a6b4e8586b8c2645d9b35ca8aa18124d52dc521e5f5a5e7392998f69625a3d

    SHA512

    9f5d229a023b8c36b30af22ecae1c180915ea5885b60fcdef65138caaa37b6bacec43c82b38b13ae069e2ae146d5eb78b09c25c294ddff5252a42eaf30e93076

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\CF2CS07T\www.youtube[1].xml

    Filesize

    13B

    MD5

    c1ddea3ef6bbef3e7060a1a9ad89e4c5

    SHA1

    35e3224fcbd3e1af306f2b6a2c6bbea9b0867966

    SHA256

    b71e4d17274636b97179ba2d97c742735b6510eb54f22893d3a2daff2ceb28db

    SHA512

    6be8cec7c862afae5b37aa32dc5bb45912881a3276606da41bf808a4ef92c318b355e616bf45a257b995520d72b7c08752c0be445dceade5cf79f73480910fed

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\CF2CS07T\www.youtube[1].xml

    Filesize

    229B

    MD5

    db388104ab7b8f7703b83af4fadb67b5

    SHA1

    a073fbee6b2535ed33e179c9154cb5af0dd5bc2b

    SHA256

    ffbd731c4e2ba2216ada946fb9313b3019787c9634179a3dc9b42c488938986e

    SHA512

    f706401c430c8d29a52d690e2554c57f549690c21bc4b218cedcfe01a41c88b1f3a5650427a6eb6489df6a742fd04e532a51ca3732d075afaf84d8a9f2d52f46

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\imagestore\flj0k7l\imagestore.dat

    Filesize

    1KB

    MD5

    3fa6ea0756c2fdf4f6b823a4deb12a0e

    SHA1

    8169c5fb6461a1e16b83be75fd0552d47ccadbda

    SHA256

    d4d42f39e566027186ee361f020ebaf710df28774cdcd9a5516465037070757e

    SHA512

    cdfb9ca06d3bb4e935f657899d83bc3c428c34f7c319f54598b6ee1b2ba05281a58fa01e4a4f613ae9f8a7fb0f7b7f215e99ec75629882bc62d8fab1b3ca4b25

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\BJCNBC62\css[1].css

    Filesize

    530B

    MD5

    0a127ad39a8ebe4207492293b556adf6

    SHA1

    17d3dad64e4f9139cfb85bbcca6659a8aa532a48

    SHA256

    c1294965425b5028a83bbe5eeed0cd9b92733ec41efd07e34532522d4c97b6e1

    SHA512

    5aa845c5c6c20259d9c6bc0c9fdbd13ff178ba4008865f7113387767db0ad39cd53c1d276cfa4997186fd39f21d30bf00caf8d092e5c04119d992368b1563df3

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\BJCNBC62\jquery.min[1].js

    Filesize

    84KB

    MD5

    c9f5aeeca3ad37bf2aa006139b935f0a

    SHA1

    1055018c28ab41087ef9ccefe411606893dabea2

    SHA256

    87083882cc6015984eb0411a99d3981817f5dc5c90ba24f0940420c5548d82de

    SHA512

    dcff2b5c2b8625d3593a7531ff4ddcd633939cc9f7acfeb79c18a9e6038fdaa99487960075502f159d44f902d965b0b5aed32b41bfa66a1dc07d85b5d5152b58

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\BJCNBC62\script[1].js

    Filesize

    94KB

    MD5

    1382f09764f50b7e6b128cc70e6b3579

    SHA1

    c37e39f32968a394d854454c425dbb64afd0ab81

    SHA256

    5de1b6de9a88c7fa83b1b88e2aa160e39fd069e9a7ad0dce7f453ec02724abee

    SHA512

    6af4b902ef59ff58105eb9b70287492d7154f952fe525ec4ce1d743b72b979bd9b82b3c99fd5e05770b125f5295ef20470b1401dea5256e241129f98f4313e95

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\NSWVVUXL\analytics[1].js

    Filesize

    51KB

    MD5

    575b5480531da4d14e7453e2016fe0bc

    SHA1

    e5c5f3134fe29e60b591c87ea85951f0aea36ee1

    SHA256

    de36e50194320a7d3ef1ace9bd34a875a8bd458b253c061979dd628e9bf49afd

    SHA512

    174e48f4fb2a7e7a0be1e16564f9ed2d0bbcc8b4af18cb89ad49cf42b1c3894c8f8e29ce673bc5d9bc8552f88d1d47294ee0e216402566a3f446f04aca24857a

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\NSWVVUXL\common[1].js

    Filesize

    8KB

    MD5

    56b21f24437bfc88afae189f4c9a40ff

    SHA1

    a9d3acad3d4c35da454e4a654bdd38f8d2c4e9d0

    SHA256

    cfece1b609f896c5cd5e6dbe86be3ba30a444426a139aec7490305ebf4753ed4

    SHA512

    53d4718e60a47526be027c7829f9ad48f381e22765790f20db35ff646bd994f8085b12b8fbeefd5b29ecda8f71f4c6c62b64652bc9a7256e001b5e4047c21651

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\NSWVVUXL\js[1].js

    Filesize

    188KB

    MD5

    d256f385bc6bbd1486505029cd4a6ce5

    SHA1

    4204debb2bb82f3792e2a039927f88600c2c93d2

    SHA256

    6be4163feb822654ca332c3e3b6d4095495baf83f29a565081ead92ec497b471

    SHA512

    da028494ad2214d442d8d391a13e55670e2fae5b87abf727a91d183fd8a0837042c93d7d9e2af44f355c604d569099155b507dd2a1f9b5039ef1dd7213a169c5

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\NSWVVUXL\recaptcha__en[1].js

    Filesize

    481KB

    MD5

    2b4a2c0d107bc671d4b39568a47aad66

    SHA1

    779b0775413e557f972fb43d07c4e1a09d2dbf01

    SHA256

    cccbd316b2e050d41ebf62c8c613d5bfae33cd43104ac3b772c9e10950a3dbd2

    SHA512

    26d41601eabd090a6f6fb2e99d270f1631e2a4ecbade927705cc1ade3495757b097f0832a8a1f915688fb6072322b10071c93bf81d4304863ed53ec41c71fbd6

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\NSWVVUXL\script[1].js

    Filesize

    9KB

    MD5

    defee0a43f53c0bd24b5420db2325418

    SHA1

    55e3fdbced6fb04f1a2a664209f6117110b206f3

    SHA256

    c1f8e55b298dc653477b557d4d9ef04951b3b8ba8362a836c54e2db10cda4d09

    SHA512

    33d1a6753a32ec06dcfc07637e9654af9321fe9fa2590efc70893eb58c8603505f2be69084fb2bcbf929218c4e7df9f7a8bc3f17a5b41ed38c4d8645296ebab5

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\QSO8CY24\banner[1].js

    Filesize

    95KB

    MD5

    2617fbe67f06b4f943b5fc8672bbe193

    SHA1

    98ccc655f61215f02dc43f0af6ca6320a8f0ac42

    SHA256

    c42431f1fdc3624846072164c0fd27f43af6582eab30d2c9658a159cb5a45931

    SHA512

    fcc3dc136a5ca96563e578f093f913e3e1920a142737a60edcb93e4adc6ce892748ce20e96449529d0bca5e38bf13fb8806b6bdc01b7d2e6c1e37f4fe1618dfe

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\QSO8CY24\d[1]

    Filesize

    23KB

    MD5

    ef76c804c0bc0cb9a96e9b3200b50da5

    SHA1

    efadb4f24bc5ba2d66c9bf4d76ef71b1b0fde954

    SHA256

    30024e76936a08c73e918f80e327fff82ee1bd1a25f31f9fce88b4b4d546055d

    SHA512

    735b6470e4639e2d13d6b8247e948dbd6082650902a9441b439ceacc4dfce12cd6c9840ee4c4dcb8a8f1e22adb80968f63ace0c0051811a8d6d1afb2b3c68d74

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\QSO8CY24\favicon[1].ico

    Filesize

    1KB

    MD5

    0106d4fd24f36c561cf3e33bea3973e4

    SHA1

    84572f2157c0ac8bacc38b563069b223f93cb23c

    SHA256

    5a6c5f7923c7b5ba984f3c4b79b5c3005f3c2f1347a84a6a7b3c16ffbf11777d

    SHA512

    57b77c5d345eca415257e708a52a96e71d3ddf4a781c1f60e8ba175ea0c60b1d74749cd3fa2e33f56642ce42b7221f16491cf666dc4e795ecc6d1fbfdb54ab98

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\QSO8CY24\intlTelInput[1].js

    Filesize

    41KB

    MD5

    0131b7c96ef8eda32ab47aba87d481bf

    SHA1

    0e5cd24a4797f3d3649254bb1e7ab1d22b7718c1

    SHA256

    1aafcc8aa40051234444fd47d973660991991d492048adafa92610c410418f83

    SHA512

    e5fa133d8c4b8da05b739057bdae7ee154b18fd5e317a21c50ca9aded6b3713fd534c919200b55930c1d37537a6c0a20be47bd62a947125b348e6bf97c4b0b9d

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\QSO8CY24\reboot.min[1].css

    Filesize

    3KB

    MD5

    51b8b71098eeed2c55a4534e48579a16

    SHA1

    2ec1922d2bfaf67bf3ffabe43a11e3bf481dc5d7

    SHA256

    bd78e3bcc569d029e7c709144e4038dede4d92a143e77bc46e4f15913769758b

    SHA512

    2597223e603e095bf405998aacd8585f85e66de8d992a9078951dd85f462217305e215b4828188bf7840368d8116ed8fb5d95f3bfab00240b4a8ddab71ac760d

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\QSO8CY24\responsive[1].css

    Filesize

    66KB

    MD5

    4998fe22f90eacce5aa2ec3b3b37bd81

    SHA1

    f871e53836d5049ef2dafa26c3e20acab38a9155

    SHA256

    93fcbfca018780a8af6e48a2c4cd6f7ad314730440236c787d581e2cef1ab8f8

    SHA512

    822158dac2694341f6cf5c8f14f017ac877c00143194d3cd0a67ffd4d97f9bf8f2305e33b99fa12f62eee53ba18029541c0601ea5496ff50279d1200cfa03232

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\QSO8CY24\style[1].css

    Filesize

    165KB

    MD5

    65760e3b3b198746b7e73e4de28efea1

    SHA1

    1d1a2cce09b28cffc89378b0a60cbb1aa8a08c4f

    SHA256

    10e40ea3a2ad69c08d13e194cf13eb4a28a093c939758a17a6a775ef603ac4fc

    SHA512

    fbcb91f26b7bd874d6a6a3b1d4d6f7277ded091cdae5706c285b4d5d17446a1bf58572c224af38393ce49b310a51d5c5d60711c7094e5d32abbaaf10d1107e1b

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\QSO8CY24\suggestions[1].en-US

    Filesize

    17KB

    MD5

    5a34cb996293fde2cb7a4ac89587393a

    SHA1

    3c96c993500690d1a77873cd62bc639b3a10653f

    SHA256

    c6a5377cbc07eece33790cfc70572e12c7a48ad8296be25c0cc805a1f384dbad

    SHA512

    e1b7d0107733f81937415104e70f68b1be6fd0ca65dccf4ff72637943d44278d3a77f704aedff59d2dbc0d56a609b2590c8ec0dd6bc48ab30f1dad0c07a0a3ee

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\QSO8CY24\zyw6mds[1].css

    Filesize

    1KB

    MD5

    a5bb75d5bd1b19def25c1dd4f3d4e09c

    SHA1

    d0c1457e8f357c964b9d4b6c0788e89717fe651f

    SHA256

    ff0689879c72300a01eae0c05c3205e2ca57c4bc1a6bfa0718fa6fea4a51627e

    SHA512

    b9fc57f7ade8f34cb02ece2935acb30757ed846e4bcf81d3fcf5bfcb45611d386bd337a6337e9945c5654cf044dce4dd3fafd60a2b42ed5bdc857ef96d077a69

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\R977VUU4\enterprise[1].js

    Filesize

    974B

    MD5

    8d9d9e42a7e0e5930095e8be013c6db5

    SHA1

    24ee8d2f387cf0cda4164389eb269a3a8aade613

    SHA256

    5deea3cf19064feb2cdd00f4b269a54d5cf37149e9448e9921628d3d51654a76

    SHA512

    53ba368eba6b2390c5f83310e6240e0933af59fac8a4a8b6046eac5ce63041e95dbb6274f53010d19dddedb12e73f9632967d67aed5919ff6a2fba67ec22c42b

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\R977VUU4\hd-js[1].js

    Filesize

    23KB

    MD5

    6761faa022e0371e84e74a5916ebaa44

    SHA1

    5320c3d53d5447bad2a02c63208deca7fb94b655

    SHA256

    da17fb5b54c0fcd77c7358ff274823cb6a02ba0c4b6fcdf347c1ef611818bd9e

    SHA512

    a8cdba92942f299b648e87109d193a1f7eeb8f243eb2bbe4224423b512c400fccf930d81cd403a925fdf99220fdffcf89da69305cdc054963a64da470072d019

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\R977VUU4\hd-style[1].css

    Filesize

    40KB

    MD5

    ba5e3c24714a4387a4599df6af480707

    SHA1

    296a00039438cba9fdbad4449da6a2bb177e8a3d

    SHA256

    8f47473f38e4e314afbfbf59e9fbf5d4436f83586cf1452570fc0bd62e63f5a6

    SHA512

    973533abb115208529464b6801422fc5ea9426a0d639c3d46633a8e2a6fcdb25d8756c792243e3b1465363b7faa575ac59687cf3a9a1c1a14bb0ea3e16ba650f

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\R977VUU4\jquery.fancybox.min[1].css

    Filesize

    12KB

    MD5

    a2d42584292f64c5827e8b67b1b38726

    SHA1

    1be9b79be02a1cfc5d96c4a5e0feb8f472babd95

    SHA256

    5736e3eec0c34bfc288854b7b8d2a8f1e22e9e2e7dae3c8d1ad5dfb2d4734ad0

    SHA512

    1fd8eb6628a8a5476c2e983de00df7dc47ee9a0501a4ef4c75bc52b5d7884e8f8a10831a35f1cdbf0ca38c325bf8444f6914ba0e9c9194a6ef3d46ac348b51cb

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\R977VUU4\js[1].js

    Filesize

    243KB

    MD5

    ba36ab6959caf4e9d302480bccb0d2e6

    SHA1

    e960e74e4ddb894353108f12fcfb399cf161ed8f

    SHA256

    3cddfb9e5b369ac448c9a6ecbe425225aff9939256434730c46edeacfad55902

    SHA512

    c7825343201a46fd3d7e26e0c305c79e9d05496296c053ea5f47f7e3a61473151e666b958597c2f4be7c3df8e04205e6c16deffac240935a4993f934a99002ce

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\R977VUU4\p[1].css

    Filesize

    5B

    MD5

    83d24d4b43cc7eef2b61e66c95f3d158

    SHA1

    f0cafc285ee23bb6c28c5166f305493c4331c84d

    SHA256

    1c0ff118a4290c99f39c90abb38703a866e47251b23cca20266c69c812ccafeb

    SHA512

    e6e84563d3a55767f8e5f36c4e217a0768120d6e15ce4d01aa63d36af7ec8d20b600ce96dcc56de91ec7e55e83a8267baddd68b61447069b82abdb2e92c6acb6