Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
117s -
max time network
134s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system -
submitted
26/01/2024, 18:53
Static task
static1
Behavioral task
behavioral1
Sample
781f54ed8a255321045faf43644e100c.html
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
781f54ed8a255321045faf43644e100c.html
Resource
win10v2004-20231215-en
General
-
Target
781f54ed8a255321045faf43644e100c.html
-
Size
7KB
-
MD5
781f54ed8a255321045faf43644e100c
-
SHA1
d906f22c375886c05d924c763a85ced4dc03fc56
-
SHA256
7a85763c2fb573518636a6abb71d4aef2956e78e0830833ed441a7282e52a6c5
-
SHA512
8d06e7ff2f7959740359ef9b421b9c981ed6d792ff8c4b67d2f25ed39e555fc7928ed06a41153a9a6811cc45e44668042b03d71dea0b341f304eb3351dee317c
-
SSDEEP
96:/tJdawndaw+eaivy6bAVt2vLLau1DQ0XIyYab8sd+yUJ+DgaFmpbARNkfF4xfufM:FJNlaiaxVtcXau1Diy0gq+HPHYGcM
Malware Config
Signatures
-
description ioc Process Key created \REGISTRY\USER\S-1-5-21-3308111660-3636268597-2291490419-1000\Software\Microsoft\Internet Explorer\Main IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3308111660-3636268597-2291490419-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "412457064" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3308111660-3636268597-2291490419-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3308111660-3636268597-2291490419-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3308111660-3636268597-2291490419-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3308111660-3636268597-2291490419-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3308111660-3636268597-2291490419-1000\Software\Microsoft\Internet Explorer\International\CpMRU IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3308111660-3636268597-2291490419-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "3" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-3308111660-3636268597-2291490419-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000a883829c536588438b4279b7bc6c193000000000020000000000106600000001000020000000e770456073c1f321e399437a79038fc6aa9a44589ff2c9b54ff379256f095268000000000e80000000020000200000009a558e8b15d0addfd8b6ad7e3791ec6a0c7f07456c19a91ba9b2cb3fe3af705720000000081f3c7a1682e748bc09a559e83dacc5334564bb9e3b559534e83a2810d36880400000009e0df10b7a906772830d86a12014380a55a1389808b56db59ffc70e09c3691402caad23981d14df3856a5cd25e1eaffc9929c51a1ba4c6303a2e42992798fdbf iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3308111660-3636268597-2291490419-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3308111660-3636268597-2291490419-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3308111660-3636268597-2291490419-1000\Software\Microsoft\Internet Explorer\GPU iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3308111660-3636268597-2291490419-1000\Software\Microsoft\Internet Explorer\InternetRegistry iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3308111660-3636268597-2291490419-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3308111660-3636268597-2291490419-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3308111660-3636268597-2291490419-1000\Software\Microsoft\Internet Explorer\Main iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3308111660-3636268597-2291490419-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3308111660-3636268597-2291490419-1000\Software\Microsoft\Internet Explorer\PageSetup iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-3308111660-3636268597-2291490419-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-3308111660-3636268597-2291490419-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3308111660-3636268597-2291490419-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3308111660-3636268597-2291490419-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Enable = "1" IEXPLORE.EXE Set value (str) \REGISTRY\USER\S-1-5-21-3308111660-3636268597-2291490419-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-3308111660-3636268597-2291490419-1000\Software\Microsoft\Internet Explorer\IntelliForms iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3308111660-3636268597-2291490419-1000\Software\Microsoft\Internet Explorer\LowRegistry iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3308111660-3636268597-2291490419-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3308111660-3636268597-2291490419-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3308111660-3636268597-2291490419-1000\Software\Microsoft\Internet Explorer\SearchScopes iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3308111660-3636268597-2291490419-1000\Software\Microsoft\Internet Explorer\IETld\LowMic iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3308111660-3636268597-2291490419-1000\Software\Microsoft\Internet Explorer\International\CpMRU\InitHits = "100" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3308111660-3636268597-2291490419-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Size = "10" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3308111660-3636268597-2291490419-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Factor = "20" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-3308111660-3636268597-2291490419-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch IEXPLORE.EXE Set value (data) \REGISTRY\USER\S-1-5-21-3308111660-3636268597-2291490419-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = d096e7008950da01 iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-3308111660-3636268597-2291490419-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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 iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3308111660-3636268597-2291490419-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0" iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-3308111660-3636268597-2291490419-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3308111660-3636268597-2291490419-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{296BA881-BC7C-11EE-8AC5-6E556AB52A45} = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3308111660-3636268597-2291490419-1000\Software\Microsoft\Internet Explorer\DomainSuggestion iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3308111660-3636268597-2291490419-1000\Software\Microsoft\Internet Explorer\Toolbar iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3308111660-3636268597-2291490419-1000\Software\Microsoft\Internet Explorer\Zoom iexplore.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2348 iexplore.exe -
Suspicious use of SetWindowsHookEx 6 IoCs
pid Process 2348 iexplore.exe 2348 iexplore.exe 1728 IEXPLORE.EXE 1728 IEXPLORE.EXE 1728 IEXPLORE.EXE 1728 IEXPLORE.EXE -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 2348 wrote to memory of 1728 2348 iexplore.exe 28 PID 2348 wrote to memory of 1728 2348 iexplore.exe 28 PID 2348 wrote to memory of 1728 2348 iexplore.exe 28 PID 2348 wrote to memory of 1728 2348 iexplore.exe 28
Processes
-
C:\Program Files\Internet Explorer\iexplore.exe"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\781f54ed8a255321045faf43644e100c.html1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2348 -
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2348 CREDAT:275457 /prefetch:22⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:1728
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD57d0acf620cb173aec4d0f8f206bb15e5
SHA1708aee01680124a1ed76c36cf1d0aebeb055c04f
SHA2561498bff14f51c3c363ee57b3b9287a4c777e21bd6f562173dcd8cfc69ad4f859
SHA5120caef20e2dcfd5c98fd05f8af0cb94faa39e22f1fa3f75463d08bf9400e498b012e28da170967e6a62581098385bbfec29ce11ec060393959ddd2a92d4d752e3
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5f2d6cf9e06393e65eb715c05e88ed8fe
SHA1aa067ce0dc13d8e46c6e78cc441a24d3d601e2b8
SHA2562a4d2250118b03827e512b10032358de89ed89c9520d283102ad8231de0e56a9
SHA51248636511af90e9caa73ab236569b32df5dc8b4d05f2c9998b72299cdc41a666edb76134263bae64715479fe9ef0d4b689f28680e2f5b5d94556d61e26830673f
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD53c849322372b1e627f65b821b85988c1
SHA10c307e8ab20405717a64bb8068118dc8dac8702f
SHA256b96a136c26168cad6625197d53869dc6aeec19ab5dbe65a9082f02ee1a1bbef6
SHA512a34c6e48c28657159b6ace5f5a128593c2707346be173b94f312f2dd29426f29fe671ae1db991e9c89fe3cd33e0f62f1e8ce9cbfe41960e14dd1d0556f1f10e9
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD51ca36fbe447d41a3d2a4d924ad817d16
SHA14edd56fd6c99822c9f7cc71cb6b57255eb9667bf
SHA256dcb284ca0e6aaa6b000cbbcfb7a8743ba81005a49d29da114474e1c3ba8a8739
SHA5122f94b3e2684b62215a0253915df7b0edcb1549e35e5cff2b4949cfc114c95e2dd6165981437b21f35989d335108e81e92c8fa1236f5b9ecbace41a4577d05bdd
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5c905f31ef7776a944a659a1436d0b81b
SHA12a2d18f2de4772df1ca367683c46a0b45f81808d
SHA256813098f7fdb3814b3b88cbd4bff22a3e3c2c31b9920d0bdb472f490a663ba80e
SHA512cc0afc27817668acaabf4995b19be4957968cdd812d31acba3867ae6d1a67b6028afc010a419744b336fb7fb7fe09365a27620bd76d089919ca2aeac4d52ca5f
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD511af1a82b4b97a1109cf7a36c71f08cc
SHA16b55f1efdf374192a07dfed92e2a1c180a1f7c64
SHA256e09e4d776f6c4c02febace6e08e53e4df8088059a2378fe02b7c6b038853a554
SHA5129aa1b46504db176eed9b92eb9e3c77521e68c07c561676ddb0e2375315a41e91682ac4f96f4c9ad2a7670965b7e712966918da9e7b5314f02b36f08a1fea29da
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD50cfc71235d03e89220c30689bfc0fa8f
SHA1e70d12d7ab093852670f6b39dc0c3bd110dd18bd
SHA25636744e3f03325a7bf6cbae74968d6d138ce5ed578fb88508d30605c6dace5809
SHA5124dcd9f3a5299c8686cdbeaf5ee0bd872968442d75a45cfa8ff76fc54e7c8f8e62f0993debad5d37323159580fbd9592578537ef759e8dabf0d29d1aac0fff283
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5df6d7300bcfb36799ee07205ef0628f0
SHA1e2bf057e464e97dff3a75d23dddde0c9056d8fec
SHA2562e1cc5bd038719a2e12911134551122b133f0152ab9613ee8fcac91c76ba7571
SHA5127354aabd740b0f26d3468f9141b3c3509e2c733b25bb7ac5d8630e50e1becc46022fd1892cbbfebd68c8628040fbfc7f19d26e72f2a984a000b65471a5b78346
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5000fb9e49daf893480dbd1e55a2945ab
SHA155e97c523920ab6bc5b22e9aef03526d911f3665
SHA25686f8e5caba4720dd0d471746c1bfb826159402ff461b9451b4519b2f8e0bf5f0
SHA512244c0137fb85d43fdda5c647e362f38a1c58ebe8a9b41a2717495949b7cf9ae9c166dd8e7fce5e4d63513e97eebfc7ca86f71197c406074dc8e6d23d0ddb141b
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD51cc601eab4340b5ca9bd51549134c4e3
SHA19e9b42e760a5d3f04973498a643b4cf19e87f118
SHA256b3d118c93674a3fd6b02195c4eebeb9386523c22084dc13c8d573448bfdef964
SHA5120ab0960c9508aff6d9251b52a440c811a75530090509b0162f845f7c57a2dc5313673744e41cdf6e0bcc0d4742e8ad5cdd79ac893b2cf0b9ccab19c7ec728ebc
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5ece5caec6e79407f7e0a8d69381ddfff
SHA1ad3567589ce0af8a3344841460bfd0255e2bc9b4
SHA256ee8384deb764540b50feebc4e848646d0419d809eec7860aeaed9a566f019ae4
SHA5129b203c045e660d2a63b591f0739d3661510f1b026b5f23ce4f97c4d489b77a45218fb9301d5db0095578a1b80f98cec58846da983ae64f6656acb4dbeea84dff
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD56220935daffa7f3d054b8b940a0ed8a9
SHA188088407c5bbd818ff67ecd951287ce23a4a26b3
SHA256009e41906d4a810ba61d5e06c3def6a5ad4a7da6a6a9aa9b7bc6235d053b6610
SHA5124071f8a59b47792773122ffcb45220737ca7a31b7f6b84defa7582a20783fdedbad04757fa2b7e3180abbaf1c501d6078282490b44ecaf94fed823c28a8e1456
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5ee7bcd9523615fa5df995c5f3eaf430e
SHA1bb01255b643a7d29acb8fc45b1f2765a85c86b5a
SHA25655c0de5c353c47782f372a30f57d71327cae46c6b7b0096ae08b148353e380fc
SHA5124983ecdbfaeb00d47d945392c4df4c3f2ef104ddb8b6bf0df62fd074927828d84193b932dd0f4dd4ec8c9d7935fac0784ac38af2a9b87a23f74eacd843850139
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD51d516215354475ad007280516103d11f
SHA1b4eaad21e3000badbfb32579f8c45105c72c1ffd
SHA256b66e3b3907887ded1fa73dd0568a3f229bdf47f84adc43252e92f0859792757d
SHA5120573cc42908371ec136ed3be7a6f61936fd3eca6ae60ca2937dfdc8b65ab03dc8a0b68cf7f6aee0df96b3f336ff3b1080f05226f552c56281b017f0af6991e2a
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5826848c179fe9319aab7ca3c4b9a2090
SHA126411fe0b32f69659b7544cb980c9df46dc91b70
SHA2561be42587f5603e763451ac2e97ab11f9ebae202a51ce0b0a096e29ae2f544b3f
SHA51284f27e1c5ee826ab7cd3472f06611b18afd4dce04a01105212a3fc9934b7f257f028486c1eaa6b936aa516d5f491d70924dde91272740348090be788e08647f9
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5092b31b77e05534a9b0713f656801b55
SHA1ce71c818da12367793ac731e1f4b0ad97e178b16
SHA2563bb4544a8592f04e1c51c5f774a67d6a363154d4862bd06578d20145b9ac18ae
SHA51228a66f625f9cc21bec6fdf95064e82fa7a59b5911fde3426206c6f00c1ad4e309356c120ce228fd825d476e9698b550df4b3ff5afe80698346b115f4a5da719f
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD546bb26352c622a5921f86a598a275bad
SHA1af6990bf96a03c7acf332638766d66a869e4b80c
SHA2566bd299f476080690c5defa61c9c55177af589c460518ac65616dbb1c3bab6984
SHA5120c2843b26337959c8715d00de58da2e666b2fcaef23e3218865e0d641cd546d31cf9e2590da3e4a69b15f3dc4c5f71d5e9ae382bb035b395eddd87e2174904b1
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5d6841b91055c4bf434c75607a39e80db
SHA12aee71167e3cbcfc0be37a490eae16162c84d0af
SHA256fbd567d0267705de03e3d89f4eefd4e20d0c7051b97f3aadbad9823b7e6c9ba5
SHA51266e6a551bdbf1ed9309e212499925f8217f0b9659f75d942291dee0b623387294d905e7bc32017355c607a2b5d6dbfac0967a370c1795e5eaaf328e006545752
-
Filesize
65KB
MD5ac05d27423a85adc1622c714f2cb6184
SHA1b0fe2b1abddb97837ea0195be70ab2ff14d43198
SHA256c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d
SHA5126d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d
-
Filesize
171KB
MD59c0c641c06238516f27941aa1166d427
SHA164cd549fb8cf014fcd9312aa7a5b023847b6c977
SHA2564276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f
SHA512936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06