Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    141s
  • max time network
    150s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    27/01/2024, 04:54

General

  • Target

    79534ac069df149265c77c7d77d728a4.html

  • Size

    26KB

  • MD5

    79534ac069df149265c77c7d77d728a4

  • SHA1

    e8754d1b67066260261e1fb5314d571308b48762

  • SHA256

    e47d6bde7ab3ae0dfdef9e7fc714d07d21dcba4931e3bfe1faf7adbea369fb74

  • SHA512

    1ca0bdbcd1a2bed4fb17807f2d4c994e874a8eadebe74bfface443009989e30a4ceed15d642077f40e041dfe9ccbdb9b6bb1d6afbad01711dbc5e8ac1e1a0d95

  • SSDEEP

    384:4+QfPFd9QZBC7mOdM8YBKfpC5IgSnbmFe7Acr66GokJvAgo0ioArPd:Zcd9QZBC7mOdM89pC5I9nC4oIP0ioMPd

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\79534ac069df149265c77c7d77d728a4.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1932
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1932 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2712

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    265c3d8f9723fa683fd5d633a93f7228

    SHA1

    e72605d2fa08ec42fa42a56f989bf235de169ab6

    SHA256

    f710206616849791a9e0d834f88a71f4cdb0d6fe0f53f3261f8b2db98de8c212

    SHA512

    99e75b2bc661f2f1be8975797c3dc8c8b2133f913ac2bf2d2a280fee5b6740c7740df344afba912018457d621d3d1d9f3297fd0e8d1e8214e91463e27f71f689

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b74ca3e679714ef506f11b5d3d66ecd9

    SHA1

    95c20029bbe078d621b2096479a9b7adf7d2fb48

    SHA256

    859c246e319e904f187a4805e314e6a7cd84e432c4558c3f2132584639dafcbb

    SHA512

    37476858971a76c5520dcbeea0ae21b61bac0fd7803da51b9c816e30cb5a96a8923966c4f763480c1b83d586161dad41f66e8a2d9972e83b05940e7347a937f2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    56a0d7f9b79780cfcafce6885d65e29c

    SHA1

    173870e450d54f7fd25fee4c00c959a508cfc36e

    SHA256

    a7884c556e1894096031d49fe86e5764368c60967fbeee6f18097a6c532a5e6c

    SHA512

    170397c34fedf7f4b5b48b147260444a0aa6485da87d48a7e1c8ceac402c424a8edb31b5b59ea903f6e1a523e1a486eaeca41213af7ac71ef84c28814c11d0d6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1a04fb52fa241b7ef0a01e572c17fa40

    SHA1

    2991da0fba29a9416dba882a35a0c2c52728b3de

    SHA256

    8fa1259038a3e6170d292bb7c4b5959c255af2cf1ac8355dcf8d86ab3e132621

    SHA512

    79a55fe4d1262915faf7d4f43e76d23348db56e9bd426f265ba82ccf641b33632599aa8f84fa31c1620674f88aa7269449fb9b3a230edd7201fd2482bc662f67

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    28adf2894337b71ad43320c8573cbf2b

    SHA1

    3607cd788aa7152641e6606f2e2e6ed288049219

    SHA256

    1c23d49102b9bdc8c9b8d261d79f54e8f869126c5ba04dbd6399e3a18812a15d

    SHA512

    8fd18ef93f5e5023e871c7ea9d3f383be797c84e7fe133d565d8b9267790afa8683840097e79135ae20ab3b376f076ad1b4137e2d30d962d8e9697a5b18931f7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2c481fd68e82b39ada547972fd7d1f77

    SHA1

    c6323261721bfcb2e1f1a8f082fb74fd6941e924

    SHA256

    d9185dcfa50be5c2fec60f48f92154a44053e34fcafc498caeec7147d88e7b91

    SHA512

    472b02b44211b7a68c5157eef167eaed290aa1733984189fdc8910c965b74ec6f85f517d6e3ecaeadaf95d3b5a30bbd6db5df14810c5a3187595ba8e40e6d62f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    79c2ceea830a4f026b7218b91e87bef5

    SHA1

    a9820b7212bcb235b036661bf0a18794d18e91a5

    SHA256

    fcb0d03e4833ceba44d330927419b59879ed337851ea73fcd527b6b95e9995d8

    SHA512

    9a9f18ffbadcbd6deb104d949220d0e8f5f9f6affbab4286a7a6f0a86bfd837e708b6628ca56b653c739fe94c7fda7f430e4a6915c18782d21354778c900b4df

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    131df73549877a93c96a3cf1de8b8420

    SHA1

    95d4ebc8fe15050e45749361c6a262f8d5372217

    SHA256

    da232e65005a7128b664e6102ce0876db7e3b920b086dbc1e39b7036b7d3ff79

    SHA512

    5637fadadb63fe1b78f83074c8e6de750c457c5b7d7c61fb22057bff2898f4b8db6010c3b3f6f9ae10246d43abd0fc0dc6e453d1ae254af12b5435f27ccffce3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a31b6f98a2a11715e9390a42f7e58634

    SHA1

    3992ec003e48376b9fbdda6ed33f58ffbd94db7f

    SHA256

    0a2955b567ef56a982c1c7c09a6494e06551aa821b7a2005d85a202b7ae10cde

    SHA512

    69cafddc9933cf51a25cd4f87839776683482d438e8d1224131055b50f7cd0fde0f3d4292d60bb0a659802f7ca3e7ec0c23b238df07188164b2fad736e28d2c6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d1b3d019b0d05c8d87a26b76b79a42da

    SHA1

    b3dd0746b10b060c78efbbcfde4a36f293b9c03f

    SHA256

    a6cf34760608a08fcdafc4c846413f60dd1488dfcd6bf4ee77890340c6991b0d

    SHA512

    b35be61023ef1c5bc8ddac02f40c6c9a94ca04c41fbe946ae130ee71706f29ff4df04a3b0a7e6809aee2cf8a55f42e1adc8bb14fbeb09a02926d88a3d3400c4f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3798d41b73ea8786ace9cd6a822ce0f6

    SHA1

    b8d39c22ec0e11f62968a16ffa0c390afbf106c4

    SHA256

    832ca5ceaf1e451a0316b12112329fa18361e4152fa962697976a782e6316f98

    SHA512

    71a8c94a9736fb7cb4676da6c1c5bd9b8bf90b1ab30fc65d849ad10c3dd51c653300a4e24fe0e5460980d6a2db7a205da93f1619eb4fd2812cba412fadb13fa5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    29feca36624b9c0b923375e4f4a3874c

    SHA1

    53f0bd38c41ad7a312d6601a6eb6a0b2a637cd66

    SHA256

    2983dadb364959195270204925a990a082473254410a50d217b312cc1b8523b7

    SHA512

    6cbce26c8d4e81cfb4750ef48f9029a4994b8289a878edd48cc57958ce48bf093a32befce25ff66b8e58ebddabb698451f1c285a745b7735fe7758884089d42d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e148c4cab66b668d116ab9191f0553b0

    SHA1

    fbc93feea33ce2c17310c8e5aafc497aeabea3c0

    SHA256

    338936ff59e29cd5c0499c2175e5cf67f45cc16c621c0c62077071f8bece81a6

    SHA512

    7c7290cc59e6b5115e10ce9d59e9e86f9e42590a7eaeebe8d10e98862bae9a46e90edb3332e65a5374d86089e6e7b7a629d30d951cffa7e21ddc9b10d601ff8f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    248f09e192bcb18c6a5c5fef8e582b0a

    SHA1

    26bc627600ec76c57194dbcf18c4d9e016c86e3e

    SHA256

    f9b5f9561bae2367d715602f97e2021f80a0ea1045702e2eba185c1e2de3cab7

    SHA512

    b7c6be216b7ab171cd6346c2612ce2ef0d6a000ef2557e669e37cb1768cc3367bb71ef96dec2b66f5f1fa17475dd732a311f06163c94ff17df887c3043cc1cd6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3873f220d008ec00f034274059f6ccbe

    SHA1

    6ef2eec6f765a4f071e7003720ab64aa9a15c8a9

    SHA256

    11aa3347f20f73d613e3f82984af7f2bee0c130f5c589c9aa0fa3f34cf975d66

    SHA512

    64662e233175a354fcc555b2f5374db8abc1e1f9e2df5a598bd4ad98a7314ceadc464642a1820f5e54226d60299766b8433b17e2d9d0283c7a4c80186b7cb44d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e410ccb9f2f380769c43b4025ba5e6bf

    SHA1

    aff6d208685bfc732c828b8516587156462277d4

    SHA256

    c3647a7940ee60d8c6fd236701d9119c741f51b0bbdce7cced185bd50894a8b7

    SHA512

    f03c482d767c0164ae4001284c59438e3a484a9d55e9992e89214185b11d56b9277c551b76ece4a76bc543d2a3cb4c4ba7655991ceb715999f3c844e2d071b52

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    97fa13f0fff0723472c671422705f6df

    SHA1

    1d9f2052dbfc05e75922a62457d032835a06f658

    SHA256

    40eee906277c670c982818615ad3febd12b4b34c5fc550c33087ac4d60da8b28

    SHA512

    c5185f999a5fa5dc2753ebb778ea6e948b7fb8f8007950e79c3969d2b8ba65415f9227e9f50b7bbdb5a178541113902640e0aa75d917420a149a806e168d5fdc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    03f7f3d3f136e15a88c339816fe8c45b

    SHA1

    7dd789c880bd1abf2a198417b8c379f2b3c2064d

    SHA256

    3786c5ced9f1a661c53e51aa45c9953b33acdcb0c54badb236de4b619263d195

    SHA512

    554f7c5bd25cd540ebdefaa8a2eb41d8b4e87fc57fdcfa5c06cdf010062342e00e41fc0f3af5d3eab31b67bb83520d7b30c6d0c7dac3fc3d16938cc31cddf449

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bb15380111cd52a6013030d7d921e620

    SHA1

    96159b00e7b0c7e0d6723d5092a400cdb3ab68d4

    SHA256

    199fc8663a6b727ff9fbf18e2678dc55c8cfe5ff19c250587dfd5d3f7660cb5a

    SHA512

    71a176e53cecc0e806c90581880a9d21fa9762f51c6f89cdd74744a24dfd856e74a7610207bb0499376c96957f850e82106a034a3a8a917b243c1423fbad8411

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    28ac1facc39f7c838b68a33acb3dfee8

    SHA1

    b368f447bde2a204ebb75641b311371c35e35d35

    SHA256

    3d2d3b959c7617e761c9b448d64129c9c23827a1ef73c0e719d5e9b72c85ac57

    SHA512

    8ebea59fa4f857974694c7118649d5301aae89e5de95cb2f3360f98b51d2502bd34e680e0f66c647a527e2413b0bf8a5975af5cd74297a01552789bb810ccc5a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f0424bef1a47e9185802bf6de9cb0757

    SHA1

    e6d3876efc7da10aa07670f3aa9e0c25ac694ba1

    SHA256

    f6c983cec8213e82930dc2c3cf2dcc48d89ef63da1f2c466fdaa52f445da2dba

    SHA512

    8ee8e3a32da3e98734b0db02db4da2728825cdd9a09d6adaf42f18714f7c7a7f4986409509be6860af8be5e52d003474650a963aa4d4db9d677c2e966013455c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    26362cb6eafc78edf0fb8d532a430863

    SHA1

    d9c533edfdc5e8ab2739024ab30f2e2672c98a1b

    SHA256

    fefb29670476fd0c85a7f3df07694aeab29b38dbc1836ded4afca54e9f1320fc

    SHA512

    1af18d97d4f9ecbc18f6b3fe98304e740f65ed0295efe7492d35884a3a1c6954b48c66a117d33c187650e4e61bd523103432ceec3a0d9a97ec4df4f35fec7516

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cb33fbe8c5f6986be0fba61ef3ce4c57

    SHA1

    90660889e7821d9cf72d52b1ebd5dff192d5254e

    SHA256

    0d822e99d770757169439f634fc700c40b31d66b27150b5e4ad23332c78d1d40

    SHA512

    3b4506c63f022b9acd5c6cc74a84da440e289287f1ad94115dc9ce8a6084db1200c8eb33d3298ed431b5c3aa97078df7ddf88853bb93958e1a256b700c82c04c

  • C:\Users\Admin\AppData\Local\Temp\Cab8098.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar8137.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06