Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    134s
  • max time network
    130s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    28/01/2024, 06:16

General

  • Target

    7c5cfcceaea59d2ef8d393dc811c9805.html

  • Size

    12KB

  • MD5

    7c5cfcceaea59d2ef8d393dc811c9805

  • SHA1

    871dba0cf18ed667a2c55a3252ef9ff44b74f998

  • SHA256

    6bdd54b59d9568eb2d4d6070047a44ba14b0f4e82d2c9349e6ab09856bc0c5ac

  • SHA512

    aba3655df3689c345e2dd062e712bb03cd0838097ca18bc4dbfdfdaf9a532086fb40e4d3af537277b099e7d9549f3b41c0f7f1ba61fea4e747afd645232570bf

  • SSDEEP

    384:cl5yW4Ytld6rTyv6Rb+nQKrlibQmYMH/pMF1E:KO6gyvCAdhi8yfpe1E

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\7c5cfcceaea59d2ef8d393dc811c9805.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1536
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1536 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2472

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    221ea8fe305f7456da805ea33bd64644

    SHA1

    8fd746ab5391272e198f506b3de45f81981c332d

    SHA256

    b212f8276d6d7df27c5458ffe1689ad36d3be59b6e93af2291cea5652dda96a4

    SHA512

    9b781c393827484a591fcb83d506f6490436781eca6d420f36504f734eae41d1da85175c640d6a1ca8cf0efa148915001387a2aa83b3a3bc3732f5843b77d652

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e316e7642e92f7cd7b234209aaeaaf34

    SHA1

    fa885cb5ea0c01a4c0ff5bc1e65a92ae884ec92c

    SHA256

    66030a8159014a9f2f7ca8c14e61f9163fec0903dafb3160fb5562d200909f15

    SHA512

    d04778da9ded6a8c1358633e8f2f01c9fadeb3d7e7a5047c700b1c469d95a1eb281d6a48f6fd7fecc0d063d50a62ba91685d964b514ec656fa40ecf6dc7efbb8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c772ba0ae2c23f6e967e559d91dde787

    SHA1

    b100d5094cbb4b1f186773d9b472fcb1c4cff4ab

    SHA256

    677a148687c88064f4b1b5f995c5547f885c9b0220454809c3712355b0358fe2

    SHA512

    ba6a8ccfdd4a0a4080d04b5e905423d130ed579c9293220ac54ce3baf7116bc7d2ba68e40035bab4ec65460cf19f99b6e94b106e0f5cdc36e7521193af619ea3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    61a8683bbc895b8b09ae18e815490a8f

    SHA1

    13da1c82803ab1ac7d3fdab73b98f5388d571fa9

    SHA256

    807d530e325c1f8109d73b9962b4209ea8ce4dbe5907d1a78e84d6aa5b897489

    SHA512

    9e0626fa30599916249640d7011e228a7faa18f5ce9f3e6af254c6ec3f0fa2779337495d7c1cdae3799dca82c18efb90331f95290ab2fd2c544b59a61c1a73c7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    49c211bc3aa648389ce71bf90e478a51

    SHA1

    01b50f386fddd76d5d8f72564b9883bf2a1c72df

    SHA256

    cd46d5fc894de30fd421129e4765f6c0dcfc9937b6741d5bc35238cc5fbe4726

    SHA512

    307b6579d2ed273646632013d88d9f2407b7ef8a89c580a263547018d366ac5fd08d163b0d6387f6b9f007093f53bdd653c7a99e4ece5b16c38de44e5b8314e9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    91af5325b7e5e14830ca18b9feac3c72

    SHA1

    cd4a6f2341fb7c4cd8f4a7f9288c9dce6f6a0e01

    SHA256

    9664a3a453cb486f4dba00efce5028453a489429eec09be88dc84ff9a826dd25

    SHA512

    b2411d5bf2442c3d2c8c7ed0b602a28154cb0160578a1a621854b96ed8399d6fb58a3b25e2be4de666607cbf6ba6cc0445bd78cbeda3291e055300075dc76ed2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3d556e4634fad23dc7bcd31d5dc86606

    SHA1

    05cd698b4987ba25f57442c2bb3bbd06058485a2

    SHA256

    41c272d5fa11ed5263966c7e9cbcd2cc99c7b4bade9734c6aeb2ba9b2d0b918f

    SHA512

    4bf42631ae5d97f3865b550d2d0924d8299d1464ea5c85afc511f81539a6af56662f8f4b31ef336629455aff0c26d21376f0cfdca49d7f96e1f7e8db26ca0a1e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    43f3655627fa6aa3629af8d226fd74b4

    SHA1

    be3f0197d392ba5334a775716719ca360c03bd4e

    SHA256

    6cd5c3c44ab24503f942f54307f0e98d87aed407a9151e514d80ac39919e3c56

    SHA512

    9399e77cdd9a5dea82e1d234036caa54774f735ecba710225793f56db88b1a2c956848c99f564d22b8c59e8344579b7b4b1f6122d11fc4c41658a994bbf1b810

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3c5ed65c375315ca7633084804d0f298

    SHA1

    18231ed703ef59ecca320782c842f2d0af0c857a

    SHA256

    b5812752d0d19092f527b7aec5b2572294640058cefb6ed450740753179f5bef

    SHA512

    aef82835d22f879e5e390187b3a6e0f55d6d2e406ef0f8e16558612ad98c06e9eb4e003bf3ae9cde10e3b5bf6fe7114aadc8a52fe2458d007a7bd6aa0fe75b0a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2e7be492af47d0f4b80ca1ed0589b4eb

    SHA1

    d752ffa3c211ab499352d619be15a2b42192574d

    SHA256

    b79d298fdc026d528cb7cbf528fe911c56a62d8f02faa13b7afd95aeb08dee95

    SHA512

    2c44fb21108eefa5af05fad43f4cec1c7344e911c792fb57139623bfaf275079a518aafe182cb8cee0b37e316eaaa7821e16f1af06be85e209a73d22947c6036

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ed63b94b2b13c45004fd53291b8492da

    SHA1

    a273ff9e754888a20a859d43b383bfefe240cc0b

    SHA256

    0089a3d6e9e5f825b6a53d16f3030608a9c72f0f442ffc9875cc8d0d197a994c

    SHA512

    52af5a3721328bb3c7e336f305540ffd94a24815da051b3f767711be74c8219f3ab7c2c5b1a9d877cde2f96d5cb45a48c420098003d61aac4ae464daa0b6dc17

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4e5a072b271a07caa929ce9b2c8cf019

    SHA1

    66279aefb680eb9498ecefbf6e6b37e143952cd0

    SHA256

    8c33012e31ab01058517e4afe742a22c1723ba77740c354774d7bf0bc6dc1051

    SHA512

    5504f76a039f0ac1f2536f846631e380019ae81652d128a5d4117038cf03f669b6cf6c7d1e08d26ce8cccbe7d3b0702043d8ff4ceeea1a897f5ff8bb39f96301

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b23ebbbd79ad0f2d8a5c67cec55c8676

    SHA1

    cbdfd70abd133fb8f3325e56ca03900f67b58957

    SHA256

    65304a679654818090554627235aea776bd68d81f22f22546130cfb51c2e15bb

    SHA512

    f8926cb0d5733eca50fbcaa0f61a4f30cf3dc74e4a9afc104a1d0b9aeaa9811d3b5672526e2cf110000445a3f5dda2895ca7ef04c2d440b97b3e61152c0931e5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2a379aecbf1d4a6683d80abbbba12b95

    SHA1

    b721ec7659ca8d1a2120c62c22b41e131688cd5e

    SHA256

    836eac70c6e3ac55c5df0877e89e559cb509332f6df65c8be40a2d75a464eaf7

    SHA512

    43077ec542aac5fd5686acfd5db8900fdc7450cf08ce3d85c0e03e6b8c0ce84f855dde561fc5d099beca6a5a9f0f4f0de660919df6410bcc637ff7be85367617

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c6f54bdf2e27713adfc79e0404a97aa0

    SHA1

    1f2c8937df7df159586170caf6efd5c21266176c

    SHA256

    5bed3de6fe7aee43b3b3db7e40c3758f659ab43d017359c22e6ebaba902e3791

    SHA512

    21fe60366e153196fd2366ec9e3324f44aa70e670613e9fda9090e4dd9c6e98bec5dadddf61356909c2b43d46ee94c11a34b77fc3c5b9c6a91892e1545cf5b00

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9a9d269662ce6b2603b4a1fc3a34c3c8

    SHA1

    261b7a7234f568e0f591ac03fa180fa6faa99a6b

    SHA256

    0cf1b919084933c155deaa9d38ad08101e8f07b56ce6cf51e652919033edc284

    SHA512

    02f6ea593d47d9d83661c20b81098e9547465732900d4e1e979a73f390b066474288df3bb83b953f4d1faaafb9c5db1362292bc526c862901e0c25f2eb35cb1a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7354562b09673e62f45314607fe28860

    SHA1

    be4c1ed7bfcf72166717cd3603560ecdbb6ee8fa

    SHA256

    7b4c3b004ec0683a28664efe2942500639676889de3e0defe23ada835e814450

    SHA512

    2e7ebaa0fcd4ed116fcf386353caf3387a3b8fe9018390b38a9e4bfb61488d606e2f899ff20c59a62afb8b27ea0bdd549e2f658d666387b54d33e2c381a59755

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d36ae18b3b00e6a791fc5db6319175ce

    SHA1

    f00ed3560cb0813c7e84870c68ef8d8263d9d4b8

    SHA256

    6f04d878af298c5ab98cd9a79e5b056c37acec3dba80d4631910172e8565e009

    SHA512

    59116d8ddc92e76735501614298389797ee8c96578eb4e3ae2347e34d4101c2f2e6af5077f81b8e9bb78c9f50504abc563dbfea90935ea3129ac88bdf9752b7f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d1dcbf7e6d95b993a785e41978770b68

    SHA1

    84f36d8b29471b59b3ac4f847bf48f0a4869a01a

    SHA256

    401c179bf3f8d01d96e42fd823cbcfd0e02afdf50d3b9a4a80f44eb2f2b52212

    SHA512

    7c23bf558784456928fecd3353e50edc1343ec86448e6c7782a48b52dbb325f3d1140f150ae8bf837ad5214992a8fd34149dfb9c803e916742438d9211672281

  • C:\Users\Admin\AppData\Local\Temp\Cab52A5.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar5325.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06