Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    141s
  • max time network
    145s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    27/01/2024, 14:11

General

  • Target

    7a74781ca51bdc65164c2d146cf82940.html

  • Size

    193KB

  • MD5

    7a74781ca51bdc65164c2d146cf82940

  • SHA1

    bc85c45af35bf5aeacee03ec1be42757179753ef

  • SHA256

    5f2ece4b85d07fad053c0804fc680088266fa7e8041cd3123d0201bca3b007f3

  • SHA512

    ef25feff4e1181e04584f2afc600f402544afd0020f6153ed6477bff6ba8b955c0c828b89cd606b59380a1f3cd6ca96501b6900b49deda78fd778323deca8b63

  • SSDEEP

    6144:gyLioKLJJqA50tL+0UHSeg+l/KJwTvd+b+ZS3KlwNO3IBiNyw/aJ8bmVCPzdej0A:/uY

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 38 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\7a74781ca51bdc65164c2d146cf82940.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2956
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2956 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2220

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    4e87950e99785b254a41213dd54e10f9

    SHA1

    5ae60e5a07aee52131952b70aff1885c707fc66b

    SHA256

    a7b67d14c7f0a5294567d1c3d1eb1a3b882b4857e19470a6424706e619970f3d

    SHA512

    b316bacac6e0b427fdbb80d444eb391713055aa29d316d79fe1a5fd418d36e59136d647403c3af8876452d5fcb13315517ebed2f4b8446f3b7d54126b2e3b6b2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3369595dfd02b7d3085d57c51be11240

    SHA1

    7b42abee1551d6c9d936a72d3f6574103f538a86

    SHA256

    603490a5ea4294ebc9722e8300518a4056054b4f97c241df6c6f15c71a37ae5c

    SHA512

    613d0ca5ff2fb463350004f47fa2071a3fed06d9a20926a778e15fa8a8ce9cb1ccb97c53a6c6b55c32001ae69aa557477b36510e34c186463116f20fc07d46f6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1cd31e49ff619aace53664c99deca6f4

    SHA1

    0fa606bcd276e52b61a6124248376e62f24725a5

    SHA256

    3d4b76bef2adbe3d33418bcde2df668eadf6462d34c0ab09fcd8597edd3c1198

    SHA512

    8697d70225438f612733ac0e302ce7655a6426b944f770d0d4a3afbb4df3c0ba0131941838b520a3c80fe2323ecf530245cc38c5692b7af631a3c18559329050

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b54b9f88de07aa2c8aead47993050328

    SHA1

    688239eb3a2c75f0d4fc29508efd366813b70a74

    SHA256

    0b52b85f6ea4343c1f03a518719a2d2e3debc4a8ecd122a0f126dcc93ea7ef9c

    SHA512

    4489f35fe80311d7a218b4b0e82cb75d3a93cbf5365446e37c629ce88d8d2abcc40fca75f1a4776ceed9419030973b0e4cfc54053d2b6561d8be67e8137bb1b9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0bead976ace86cd2b4d3b0e78e9f353f

    SHA1

    af5a73fd0d469a5953a10c609f6e8ec80628eb29

    SHA256

    e1668705750edf7fb69bf59a2bc25713349352678324fdbc2a730b32bee3f442

    SHA512

    43f0b74fbaa6cfb2a771d2e5847d8a24238138ceab91f2c71d31ea7060fbba385436fb5aa5595c50930757068790edd2cda5bdf04829dc137540b940a671c82c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d942ccfc7d3a33f580555e82e38ecfde

    SHA1

    824badbb5de5b14938fd2f421265041723048bef

    SHA256

    8937af59abd9ac805ef9416d18b9346d1afc25f1073dd5d3978c5d9d9bc77a1e

    SHA512

    9808deb4415c3b2691a054e3b6fe4659928fa93bc993750e7a64b2737e35891618ea3d623f618b24d45ec9ef9e7ac5f8ebad68122f945be791dfa1a105e9c8a0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b92329bf45307358356f53b993632f11

    SHA1

    5e66fa4eb2b41b8070b41389c2c79b67baded462

    SHA256

    d3610758ad642d82d8ec30fe915db537e785700b003daf284f81cf98b51d7682

    SHA512

    a47451302ad1776b7358c7bfb93d2860130e778ddb0385bae900a69b35c89ba9e2e0fe354d88c46d149cd3c64e3637cb6c10d0ee57dea1aa90d83616ccba1a7b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6631d1a8df6ff85521394d39a85e8309

    SHA1

    58047e287c321ab89e525f7ef88c7a0f3ec18044

    SHA256

    d5f25adee6d27537798e3a0c4a8ac9db1b52fdbe82ba16e11aecce16b2667911

    SHA512

    73b8cf8c72568bf0a27e0b14375de96dc82fd465892b06af9fa75f093a94042878af645e3179a9d841af06ce64cd80dca18e4054907d686c6c6ba8504b8dac66

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    dd485c7f066ee12840773b4c23225260

    SHA1

    a0c7e8fb3712fc650e0aaee53e9419e5ee1b4ceb

    SHA256

    cd37211b44ca1cef809532b44b615fd33db5dd1d2443044d4305336766ac8bdb

    SHA512

    e3516906a0489c234737b31883b6dd18df373df315311259a353fe7401e3da9fa70670a0060861c9b4f0f9e7fbdd610791c4e85e12f9bd35f0c6e81c3716c9d8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a9ffe4ef752ab068d3842a5f773ff1e0

    SHA1

    687d30db61ae897f636dddb0a81095dbed1a316e

    SHA256

    ba3695f2a6ed98a7f602fe6c3f19f6a5431d5a732d7a4b850d829548395aa5af

    SHA512

    979333f1ff1d42c0876f746d4c4015b67a7a057a224e2f9d3931235efb519faa09ed948d8f7ec84c55e845d5c8e55951e9df0aa26d4644a878cef2f67392262c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8bb04cf0aba0e488b894e61fd61ed631

    SHA1

    e0592b57191d9b9d1fee70d6acce89808033ba78

    SHA256

    9488430c9cf80b039b4573bdec5a40ffe59302f8d1b49652c78f56052c0b9608

    SHA512

    4970556c25b67b5a56102890a33921701d77ff62a33092362d414fa402e49096d45e8471277d7e7afad4ae38536557d4ba074bf9d128ae2c40f508e4224408f0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    043a63276db044890260e1cb69fcd836

    SHA1

    9716f2561bde0134dcba1374c61502f2f4abfa4c

    SHA256

    c42771d0bf9780f783fad5b43447fe21453ecc28c570bc07bde5c7c49fe0af9a

    SHA512

    4a30c055d40f204c4b6425a739afe640eef16b777723b0a99eb20c40580dbdca0cacc01a68bcb7eb8cad53bb69923191e33b27b8c9a6aa8919f229c427e7db4f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c81ad9f3bb234b066302e2eefb787551

    SHA1

    5624e671ff8707e5af17fc160363329d76785c6f

    SHA256

    618130cb4e26f9156a0b2a06aac14871b0294797e5897433b0064f27d3eafcc6

    SHA512

    4099de5920aee1c3cfe9a552d1566ce47c18f1be733d18a8a63a8190ad49f2e67aab679cd1c7f363e2d85db73056636864d26e5974abb08935c7f3a997e8252c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d8c4b38409bc693b1a67b9894a2167d0

    SHA1

    8c352d76e844d8d611111c017f59a868820824db

    SHA256

    83993f930a66d94d3aedf756460cd16b2af2c2e7406c53bfe5b693f9a886be9e

    SHA512

    579ac00c37822266af2fbdf2a1f18bfce6e04f58884c837c92a59b9e836e2f724273f664312f14d64881a4e054b65d8298ac1b0fcaa326928e1a309a2b65ab94

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ac09ee8def4c3f61960b9fe7494023ff

    SHA1

    1a093acfebb7a425c21cc13e97baedb706eb3b10

    SHA256

    20b09330d01a61883ddc76781359021a02e44cfa0f794e8d8e31d858f95c052d

    SHA512

    d190f8e4ad7a4427eff29404ca4f442f39bbd4bfef6c2748a29bd325b604db15ea42360c6b70a49f1b0280bdeeb8dcda8fafb347cdd61c9542dc544772ca706a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a4347d9158b8c02a02d1c561888b1d4f

    SHA1

    ef0711a534c2d8ead32e86d055030f76e490bfba

    SHA256

    e72ba3070f3f6201fcd05ff5ffa46e0ffe0d39406d9aa88c4f5b13c8e45724a6

    SHA512

    c306d4483f01af612377c77e76bf9de55494e256fcdb1ce78c59d50775bbb434696971bec8577760b0df14c92415cc76e4a6d6b2498c26d8b84fab236d26d201

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3f71dca778146d04153fc1a60bbbba42

    SHA1

    54fa7752c111b169fc4de5f55c039aa7a0c930ca

    SHA256

    b5dcc8c1c399d023bf2ca3e3ee3b202e89e0600ece1aed3f7905ca573c35d217

    SHA512

    1fad3b167e782da0af23e08f81a668d9b9b56b104fb2ac4a360c8a291c614183a47f35704c105ba2d6e166324411934e71c414d8ad54420f2538453c36c58fcc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cf86f4c2dd4d6554ba62aa97d7e2102f

    SHA1

    8499427f580f0de53ad28396f031d7762acef246

    SHA256

    0e5f44965b5912c6947f8b7cc5017e1d387fe8db3a49436cb278af7c8f5b975e

    SHA512

    e9f8f2e6e6324645a68ab384898335e590bcf209f9e8fb95558e240819757a904eac1e61a607e595263614ae64f3c54d7c602723ee8c67b47316c9d3a08c36a2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f381143203f9785a8fa01d2ff39753f2

    SHA1

    0bc8dbdff1a7f6425b9c2cefec770f812e0db1df

    SHA256

    226bb33e666a6a3cee92c7214182f33eeb3ea512a432af1b68ac0c3d55a31d65

    SHA512

    9e97ca64f0276e2cbeede5b3c83ccfe5c88995e7a9409fce9fe367b28cc9e870babeb770d3276f0a7887a91c644eab907aca275f229df2afccd64d2ea2ced03c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2d4f1e1a295d1eb61f65755233edb76d

    SHA1

    bd172d8a19372a654fc044728c0cea6f005c7e05

    SHA256

    668d50a6dba86822878414b4d1db1bd6cf9e2a66972d8bc6d641c960bb318b1b

    SHA512

    d0ff0a7be652742ace7016d917085909b2ca702312f482eed9b0306dd16935f042a353c566e63ba7f60af513e4610d3b8c2a3724043b14714cc9e5437040b830

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    17c5ad86cf3962f177421e9ac0060551

    SHA1

    1ebcbfa640d5e0128fa5ed091cbe07b91a2aecea

    SHA256

    8fb9308db00080a72b4803df60de6ce0f472af60bc15927c6181af88f62bf245

    SHA512

    9173baf5d0bb776d6ac122d3ae014f709d8c1c163facfd72050fe50a4d5ec83a82c59a3600789cd08784ed6f4feca8df8d1e3450068ecc71b17967b6dc54c036

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2fe37e58dfc8e5f4857c4dab6a2a39f4

    SHA1

    8c74c614390c469e528de77cf5c638dc64170876

    SHA256

    a80d0dda04609a768e8636e847e1c01d0562ec27456bfcf4f7e4556526339a0f

    SHA512

    fd793f1c88191f6e48509e51db77cbff8db211142c4a8b31a721ba27be8f06f26724fa00f7c820f1bb0cbfda984bcb519ffee10b1daf796c0f0a3c0a0ca50aec

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    db41dd6b36d94426d41b9261a80460fd

    SHA1

    7c31008eaf5409ab87a5bbbf3e5b43a2b79c042d

    SHA256

    d430956ad9aed6d6ca2dd1bbaeea63c6b4be2141e24474bcf1446512b074fd98

    SHA512

    ba1ba451258318f2360bb49b472c413918630157fb60197dc0935a3156fe0b3f4a355a7f30985e2844f897cac234d6427bf1f70254afc64ca59cd38d274d01d9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\Internet Explorer\Services\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico

    Filesize

    4KB

    MD5

    da597791be3b6e732f0bc8b20e38ee62

    SHA1

    1125c45d285c360542027d7554a5c442288974de

    SHA256

    5b2c34b3c4e8dd898b664dba6c3786e2ff9869eff55d673aa48361f11325ed07

    SHA512

    d8dc8358727590a1ed74dc70356aedc0499552c2dc0cd4f7a01853dd85ceb3aead5fbdc7c75d7da36db6af2448ce5abdff64cebdca3533ecad953c061a9b338e

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\SKTXS196\0hKFfqbQuO3[1].css

    Filesize

    5B

    MD5

    fda44910deb1a460be4ac5d56d61d837

    SHA1

    f6d0c643351580307b2eaa6a7560e76965496bc7

    SHA256

    933b971c6388d594a23fa1559825db5bec8ade2db1240aa8fc9d0c684949e8c9

    SHA512

    57dda9aa7c29f960cd7948a4e4567844d3289fa729e9e388e7f4edcbdf16bf6a94536598b4f9ff8942849f1f96bd3c00bc24a75e748a36fbf2a145f63bf904c1

  • C:\Users\Admin\AppData\Local\Temp\Tar1367.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06