Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    135s
  • max time network
    131s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    27/01/2024, 06:09

General

  • Target

    79795fe09532e0c5a1fb152c7e8ac115.html

  • Size

    18KB

  • MD5

    79795fe09532e0c5a1fb152c7e8ac115

  • SHA1

    8270bb81b6d5056e70c319f2a1e288d36cb065cf

  • SHA256

    7e38ebb9dba56c08aaede0a6259441258a66c2e364300187da0c943aa710fea8

  • SHA512

    bcfc99a60a76a3d2867f30180704947f6201954b5020510791eca12a7ef5d52aecda5473966489e48c0f0b53ce5c36f6cdc0e9911aec4bb0f3a93e9fe7db6e31

  • SSDEEP

    384:lLaegGJahr1AgdGgs8jMaztTLPAuz68MMv07e:S4K1AgdGgs8jJO8ts7e

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\79795fe09532e0c5a1fb152c7e8ac115.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2144
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2144 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2248

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    684aaadf5f751dc8c435516e90e0ad21

    SHA1

    ebae6b5d45e7627f8cb4357c48c2e98ea5ab77dd

    SHA256

    5e3eb5df6daeadc5ba636adc95c58b79cef3275d84a9e49a3131f7bbd0270684

    SHA512

    a495c6b717c01b4caba1f1697ebff0c7f4fee43cf41040500d474424e829f5afd67b217aeabba4e96859435692938501672f3bd7c152c1ad3147f5be80f5dc66

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9df02f46fe6c4a3d1391a50230d3d020

    SHA1

    140d04821aea1f335c58454e24545d596af3f47e

    SHA256

    deba5d1ece2c5790d38d0085c931143beb8100fb6774841bf2c7908eafa9346d

    SHA512

    36d8901718bf1a76e370cfdfbd5d65214727caeafed2792f844d4ca8a3ea7a675d735d11a8f5a385319d6130c76021f29cfc9fbd8e239c74ab3507eed5248e33

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    00367c750bdcdfa0933ad4467e704769

    SHA1

    19f6d40aa0db946d2a95f4838c9fb0b949060688

    SHA256

    1aa2f17b22f5ae9ca512aacbd241c34267103a1ae3c47edf7e2cc97770aa21b1

    SHA512

    b5f8313c3a7634f525e415f3a7f199444307adb00c150a3c32d574c56d6590f3d597b587d224780bcfe137467106b901dea1c1d82b21764fb69283bbc2d2ec00

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2ad72ad679f64ca3712840092e747676

    SHA1

    0465d659c96173a064b03629658944ed428d8ed0

    SHA256

    b6480faa17edbd6dc26549cbddbe8117767fdee8ce821d870bd89a24bec13882

    SHA512

    7923618e9faf7be6b0283a90f4c9481b626c6e48d9910e19f424b231ca46f60d2d61c73ff4b48ab65ec4c7cf7f3283f74dd94596786f6039e82ce6987db59456

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f0b65376a3fa2813776e6f4220a42650

    SHA1

    54a764b918efc659e63c7940e54b50e08780e82d

    SHA256

    1b2087be4d76ecc99697f8a8e076f974c44255ad9cea9fe2b7c020d503b19b9f

    SHA512

    9fc7202b4cd958bb23783ae8f4ee1c99d414f74e3591aaca1efb76d2a839b2dcadce0da148c2d3f924aba26b6a0167b700dfc1d6f50073f8d876d71a7f6656b8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1ed0fd59a3edd2c379a3ca6271bda32f

    SHA1

    db80726d252e9b86bfb84cd48795b905b700196e

    SHA256

    804ea2e70b11d0f612ac9d7ed36a4465506f0238cbf95f32b598968dcb07a580

    SHA512

    0bab5a550b587f084c5aaeb91f9b62e58b1f5a080e8f6bd6af29fd7e6143217f75af4a3ac9863f61aac5f8fac39128bb67802b8b1410e39aa761c444d9dfc502

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6b2fc37d28f6cc54639dff4e0d629d78

    SHA1

    c0bac5c090cd72538101c6693e1403dd1e4ba93a

    SHA256

    503e1f1d992395320f313188b2a73fdfbeedc46d3c97745ea6aa3a9004f3d17c

    SHA512

    e0fa3071014dd0a1a502d41dd69f8f4f390b105af2239f473e283c818afa98c72230d901de0c1bb6c591121d584f08aa7ac56c57f53a6666301791007c38bd07

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    93cb031c331d07a20c7e2cd9a98e5678

    SHA1

    069364caa5bcb950c469a7fdd44ed6087a0bc992

    SHA256

    0eeab5172b1acff0c84807ba45a02fdfafdbc1304d382567144d3a1d8beebb9b

    SHA512

    afd65bb7964b1361fc117e577bbf9a06fbcdab97438c6ea045be9c472545e6b65046ab2c347a176df1ae8d2fbd2a997ff5f3650564cd92f93ee30e63f478d6a4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    182bd84b271cd06c16ac38df9cedfa9d

    SHA1

    76cd8781f4475ff0038720d2582b551405733f58

    SHA256

    5f275fec5c6c50ebcda069638f5fa34f7bb6f6b876159f9ebcd0d3307850ebcb

    SHA512

    b2da220a536aafcf67c942ce69c250487e5199fa6c62151b53b8c51e99b05dfb8f9525a5cdc5fd74a48a38940657819fb7bb9970c27e8f412fed44e86f670940

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c24dcc8af561e81d83c1310b38b43c08

    SHA1

    101a36fbadfa3d462d2ec00e8f68bc7cd2df7a2a

    SHA256

    870c95951f6f397696d0b00f079e2b27bd3f9330b705bae67e6a3db7177d7ded

    SHA512

    4bda630fc61f963b70fef2f25d5eea0af4d1dd58c8afddda53909ab1508e17c749849cd3c90357cdccb7841dae8e074d44774116f6b021eeb3952c6c36b49c13

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e69d2c8df5d0cf4c9ad5bef780875d68

    SHA1

    e1217a4872a049d96e16164cb3fd582a86257592

    SHA256

    d7170b2f311e2f66bddd7a63512bf7a5bac76bfb822ef248e251730902c22391

    SHA512

    5d0c943210f7cad2c8fe690be8098957448627762d211e4842add91452f28c1b56197da690b7c763a5c8599a12a0eb06427d9a5231ab35273f061de88d0306e1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cf055ea109babda1369f6f68a34c9d6b

    SHA1

    c5f585d5935fed5e2ad32824487877084c3ba45a

    SHA256

    32968a49d94b7bbc07945ed8612f1ed99d7aa2852edd7377f7620ca3cb6ebe3c

    SHA512

    75aa857bd277bf86f7de529082d851a0ab2468d62f570a077943f6c4f3e12d02a0a922556f90864d837c27a2c0b313df0ae68495034c7ba8ce5263599d43fbd3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7262fe04a32de1e3ec7e3c1061a621bb

    SHA1

    fac5988334d6520b7558c30ac0e1cb133295bc6a

    SHA256

    b061d17f3172975a9fdaf6fae35569455566e258638609efe6d0b7f1f3c02f1a

    SHA512

    b45e5457d4a4ae9cf976f0eda03ae8ebdec9f171840cd300692f7999a0ae6b77a475c5a05bcb08ebd7d4c48d35f4702bacb80ffdf96d593417a627a2f72753af

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b34927ce8a2103bbe614ff6024e4595b

    SHA1

    a4ce2de3c0a47755a93f94386e819448d5331225

    SHA256

    27ca63060c546fb616c1f2efce08f889f00e8481c8fbcce06998ecf25cd00ad0

    SHA512

    d3d34baed640840150a18e2ff08e0cf3b066dbee6f90879c021dbd224f5b63df996dfdd6ea9f7e6039f377cd44608d193f9910ea1146628f56441085288b9a13

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9ece24a29c687f839fa24e34276ce4dc

    SHA1

    10d19e5c58d23507ba78ce6112e90852537e356c

    SHA256

    b378fcf2022822a548b8380e2e129a3cb72d2598b42ec7a3ba475d075fb29279

    SHA512

    d992d51b0c924c8b7beadbc99f40cab25e01c99afeb72abd8332c3f39d090504051170bd733cc1c4f142723582b46307a0752c84ec392ccc5bb3f7bfb86b3b5c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    099bd12b413dcc68d4b2d6b3ff6d439c

    SHA1

    4df28b9e29c51fe4d5fbfa7637e56764fae52f05

    SHA256

    17160b33bcb64c31e8bb5ea71e57e0ceacbc295f44d231976eaa8f71b7fbe79b

    SHA512

    d8cff98d83f47ca5e123a022faf5539e2c2ba236a1945669f52fb5930c06aa018a9e987f3f0ed30a861a689abda870f4eb746e776d85b03ca217d3f900884aa1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    af5058c8ccfa5be09add760e285364dc

    SHA1

    fbc8a709a934bc3a47c88769f06387ca828d23f8

    SHA256

    699d8572e06a334b247ea3d6ec5039fc27b356224fe4969836850717a09bd607

    SHA512

    6c26d1f71d2ef8d8507b2c5f9766a053ff05bc09a6789175e535f10428f46248fc701219df04576e92e2c8cf4f15c40d055a0c91eacdb1fbc040f22e44f9bb6d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0a9130ee2fee2f2f963fb799b3f179b7

    SHA1

    00ce1d99c5f3b8c0ae28d7aede7369c642a4771e

    SHA256

    8bdcc3b20932231e28c645e694b85cdd8c04ca6baf5abf9bcc9dcacc77f7f89b

    SHA512

    7c257dba5babd3c0bb03e30f437357081a44b2f6d44353488c422159e46ba7f5cb678c4298db24ea15c42ca5126a8f5a2819450e65bda1a8343add8a21a16038

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ada0f644a44c4372587259a780ad4d01

    SHA1

    1f0a7a72fd2ab118d50173b56f334071bc2e61ee

    SHA256

    ed5430e2a9c18b187f255a730837975e481388089cd5115c338bb564ef4458d2

    SHA512

    07decbfc5c901c541eb398e483ed2d55ba7159fccba43111ece779404329edb1cbcd749dfb3171ba1fdb3fcc40a2f1d96bc2322e4edbbf9df7aaae6b48698e8b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0625f52f36b639626fa11b7e0d2993b0

    SHA1

    501f61f729234fc84b08272e8d173a860a3b782d

    SHA256

    ca2f44e9188451e7867b9c610f7ab1ada6fd0f0571743da34a9164a3bca0c4f5

    SHA512

    a2a8080a3dce1eb313dfb8ad50f8d46a56f1e07f1b664e8ce0552d18cdde0b366e405b06d2d0e40e1c07519e5f790b5ad0889bf0bf5a0ff3103a4039692a43de

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c130ff2f0e4daa521876b0d12019df42

    SHA1

    acb6f7e4ed1b58c86af60efbf80aa38f4cda9f65

    SHA256

    9c5032c04a344029495398b3fee7fa833f11b6745b395975c1fd03ee330009ad

    SHA512

    4a311746889c3e9aa420428eb90d2a893ed478b9261080d6f2865935f4f245dcf6f6a3b691de65d2f390aa3f6eaf9b727a36a9aed803658db2ef91201eb0f14b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    390802408de98ae199cbccfd03929e7a

    SHA1

    7ca96c614e9c7ad752093f12dda3dd152dd46cbc

    SHA256

    48adb9d2d2847ef11222d7581dbfaded36ee6fae0434907b3a0b415b36e11e3a

    SHA512

    e5017904a260fb3a60b2c49c2986e0b670b39c0f7b332dce41b86e5f0f2474dc819842800dcc3c6bcb509a4be903c7a922901089a4ee164ca86d8053cd5d3ae6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    db421bcbf750d4f244fee89ed4b0fd1e

    SHA1

    6142666d9c5f601331de6be3d0659ff8264609a0

    SHA256

    8bc6e0c6f93b80b59c80c04c3603aa8b2f90589cb7e0183e28b1386ae99868e1

    SHA512

    28e12d9928b37e332908729528ec1bed14c0e0987bba1adc59bdf762e3201d1b6ae64f4013d4c1bec5f69d77254a9db175a608f3135d7c96619ea9bc1eac2473

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    20ea9428efe456d0bd1c6b876b449f34

    SHA1

    a7abf6363f3d60e20bc311f23b3915f8eea8b1eb

    SHA256

    833bfb5e2b37f7582adac363ebb3c0d1030ff0dd258ba96a16bb81b3c3be9713

    SHA512

    5bfd6c57ea2620a2287ba20dd4b16b9109289151f1b16b750caee2d9865d635287e88f65185e113988863b8b389e87eb97f46c13fe37aeb3f0dbcb48feff77ca

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cd122099429f29b69e73b632ff02f0ca

    SHA1

    d5df01594c67a3056c88d0837d8177393cd52531

    SHA256

    24a33d856b9087f42687a2dccc7810a6a0156f14073842d92a9707e142754ba2

    SHA512

    011c8ac1643c6ba553cd4b2a5ca7882c878ac6ac7821a71fc9c54a09806c9f3dc1ad9d132419548ceb5490b39a157d144a46a10ecc443bef5d5fc4f3a6720e41

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    20f47085a206f248bd902236549fd544

    SHA1

    8fe584ad5f128012f97916021c4b282ae3d7279e

    SHA256

    e840bd3e2ad33da1344977959830c80b35c79ed8f08d3e8619dd46ed7727c36d

    SHA512

    5ec0bfcb85f23e9cd934ad61612715ddae109c76ba5b854ffbfc13fd2ea05c90db81befafaed7263b29f174fbe65d2b30dc90147f2b24619b6a8777f3069356e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    64883d4587fad7e4a688f8fae53000a0

    SHA1

    1b9a2db840435241cc9edcfa32d7efc1c3cbb667

    SHA256

    5dd2097fea4068eb8299a50744a11f7690690d671905e1cdb97468d25bf80962

    SHA512

    71e62b5c62db61ffe829497c37b4c27a8cba7d9b1583fe570ec20ed366e2bbb8df927aeddd6e18f74265d2b195dabbf621f891a1b2524cf17736f9327376b993

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fe9c36ac49b99d49c67950fd71385c65

    SHA1

    7fe113caa59c39f221c12949b47fe3ef14024cae

    SHA256

    77fa1a2007a1e9420700061b0896242c0cfe72740bdf7b9c14dfeff2f66791f0

    SHA512

    ec9fe24bc35ab0cfe947c8f7b9a47a2c598bcb1ad6f63ff6628dac985b1443368cb5d072953d1d118083e62e518731d5abb904efbf2486277c50e34736342b8a

  • C:\Users\Admin\AppData\Local\Temp\Cab5090.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar516F.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06