Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    142s
  • max time network
    143s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    28/01/2024, 06:41

General

  • Target

    7c68a4bc6d5f552018981e059c849128.html

  • Size

    18KB

  • MD5

    7c68a4bc6d5f552018981e059c849128

  • SHA1

    c5cc0716c197af8ee70b698234bbd98e103b61f2

  • SHA256

    e4af8a533087b68b336b9450989d7f99cbb8c484e9bb11896307d58bceccf760

  • SHA512

    f6e285f651035919f4d288869a741e53fc9de7e631ebc3f2aa77695286d212e95f6801fbcfbb94e90d40259ac4cea2ac82999e5ebedd3b19a7c0e79f2f0d1310

  • SSDEEP

    192:SIfO/QZWVz55Xunm2J+GYUTlnbG+EsjES/VUw/Svso6ee9/6uopVjM1OZE+CuYke:SI0VNxunm2/G2e6hSPC

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 43 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\7c68a4bc6d5f552018981e059c849128.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1924
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1924 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1764

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    a459ff89a7443ad3b7889051f98ac65d

    SHA1

    e0cbc34b0691641c1c1261def611bf864097cdbf

    SHA256

    30ba46e245a71bd447b154e2191780825fe18b36d569342ec6e39af1166aea46

    SHA512

    4420a435a184d8dcc9d7f910adcc797b86ec67ccddde5de22074a069c30fae68c0be6e83dc8f8aaacf0b9c95de4e15684b934f3204ff3b9ead5efbd530afc003

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    aa765c7d686faf724c184b7992cea07b

    SHA1

    ee7fec43b23d0532690458396f1cca54e25dd2c0

    SHA256

    47f22e953715c049f120158ac235e8ce67ab6b3b52c2b18893b38cfe709b36d2

    SHA512

    e500f8d9d0ee063b4dfa52c5251475d64b4aeba29acb782068fe1e11118fb86c26080975441b6a8d6fd7ef496e585d972598aad2fef0195d8e89fafff1f5b019

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7a17a38b3d8c6ca4918a7472f5f1550a

    SHA1

    4c15a6a6fb5354c4ccf5bd900269905e3b777460

    SHA256

    2ca8f217e39c88f267b6c60099000d65fe3643a00e56566eb9a6c3d1424993a1

    SHA512

    1080c6568d57f92f8e74f6539b1e3c738b9d5f42127940f3176d25025f6e7f2f5b688b9457bdc5f0d34cd0ba5c22823c8419da8daef41da731aba314f06cd39b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    02e07e36a2aa07a0fcee0c58e6cb096b

    SHA1

    a3c4c6387f0ab6fc6a0c7d5d1c7acd26775d0565

    SHA256

    9f6a67c8f5b1b247702ef84a72f51ebcdbbcaada9209a3bbf1a63570fa19b4e1

    SHA512

    7de524146e8a6650f17703a5b85fb2baeee1850aaba96bdc50a4d2051c9481141e630257a627c52ced7b154a970d5918252c2caa8a4217e01d17a051d28418e5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bae0d7f0016a6df3ef09263f523ffc4a

    SHA1

    fb30a76c94b2f4bf607b2f6a6adfadd2f74c62d2

    SHA256

    c03dbb40238f67e536dcf7dcb322337c71fe9f199d36a423c818e062f50d5cd8

    SHA512

    85326027aa741a56ba16d81ca0749c0be3c254456174a097fd63be1ec996b8e80a8eddc42eab4afb737a6dcaee222ddbf7c9c821ddaecd4069cd9327934aec44

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    dcdb8d0bd85f549a7d4e1e2a620b33d2

    SHA1

    fc254756e670ab549fa59dfe4b70122624a3ca01

    SHA256

    7af2bfa10b485c91f71ee6e6ea295f6d5c45f409b4f95d4f071307a72839e4a7

    SHA512

    510f2f0183d27186c661e0b129ae2b5353dd1ff3f4ab9cb122c77e8f70e7cc8ba3e2b8dd00017f9f2677e58eb1efbed0c8529a0f884b6a71b3a285d7ffeb2920

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7f812e0b07ced89b76df9fd23b2c1baa

    SHA1

    b3de9ca6bfd23e2c10b3a8d43c59ad0ca52c306d

    SHA256

    3356b5f29ba00191be15e1caec94c411d15b0e068bdcc290909607678f2e841f

    SHA512

    32a809dd6afc64221eb61e741954b626a5c6a7e61954abf1189ef2a7f85450830407bfa97d2ac953fb68a5b492a9fd64d5b168b1737b00f7e3bd5869aedf1a01

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0c1dca7d51aba03d029ead0915c648b7

    SHA1

    a2a70c12c03f990901c3c5bf3c406e2fca4a10a7

    SHA256

    068f7ec0c481a36acc6d7ba40a111baca6f33d02b8d65ae7b5ba8983c4f922fc

    SHA512

    4e62d804a531b1ac3b75fead9ac9b299e32d75e3dee438dd9103be8f19cbb894c3fab0014e0b2c9e6b9639d9290ef2affc275f10c5c7d0b0c009222fd4b5074c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    10e2930b72f1366378dfaa989bb37ea2

    SHA1

    2ae0108c743014dfe225a18fc776f9b352a1a34c

    SHA256

    fe3d22d09db9e8f27b269fc35f7b22ff8b658c2e03761fa949f7225d89f5f624

    SHA512

    99ca5333dfca14eeb127fbd53d3d285c8b7fe24345cdf3469f861674df37bc11533a93e876b6ea98123ef00add53668a5642399e3c50937083ffbd26156cfef1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    71c19b810a4cdf353aa709cc178d7d45

    SHA1

    d38828ca55d8041e28150890ba99537ac59267e4

    SHA256

    eb5d8e753bffa246bcc46a9ffab673f9d039079c0b66560bc4e9cd8d73337e24

    SHA512

    f04af2c98d29c26fe1c3e36213fd64deb4680f4d5d5f7f9d2b0c7795b9e43070455fd84580b69f8f2e0eae5ad526698e3a732422bbd6d82d7038dd611d9f4eed

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    86491f2f40f949bdce55b852c36e6b81

    SHA1

    3ad176e20d91cb170203fdf0c56e994bfc6c4563

    SHA256

    a61d5c2f5c25024c56d11e810f3eb1e2b804dd4e7bd6cd32f88fd0c68e35c494

    SHA512

    ebea5018e9772fd7777d7d74466f27f2f9fda474538b6e9c20244d0606b08228313c83fffe944c4b91e0fefa43be74a74078d8a1075bbabd3e7758bc38990709

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e9c7887c109da0e45c914f55c507b7ff

    SHA1

    83f3391333e589ac022071abdabb4c8f936f1b7f

    SHA256

    5d69138034db4a0fd42c0c4632a3a0e53d5e535910c4c1d84b8c07637e59b660

    SHA512

    b297e03c9b192f8aadfbeb3405ec596c50ac9713aaecd6533849aa20b9222033460456c1f267e68c98e1b01f06c6f295292f069137b5ccf6cb8e0ab11bea90c1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a9eea8e6c40643317394eae7f0ba7fb5

    SHA1

    75d734560f859393ee1ee8821fc0dd89a7d64ea2

    SHA256

    616bdd0155950ed2a56d2dc5a8c902d5c627044686e9de5f8a88dff1a85ba846

    SHA512

    43cebc23fd17c0a76cf72ad492c0f45970382f8cebb3b997c2b1be9cdc129f59f815c5f2209266f4f26e225b6a5acd42f2ee82c354896e9b2df612be57162a44

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0ccaa05c2a3b1f7814e67972c12b7832

    SHA1

    4b8de03307dbac6f61be917eba5ea5fc545e74f2

    SHA256

    d0f5cc0b56b0d2035c56c130b88e8b1d35312a2e9d3e57fdad0501e81faa6ac2

    SHA512

    1a1d839bbf6dce4e9c5687654813a2827fd53f733a984cd7c4eaeedac1e512d818d6ffefb7efc4cae41fbd5b468da87cfca75b6bb3668ad374078bbfa1a1eb1f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    396945a6392f2165b0c378fb0051f64f

    SHA1

    4a2e27c1b1478646a7fd46d9af846706943dc5fe

    SHA256

    b8c4834cdb09d8a5843b50d84e633cdb8adb7ac1f073491c4bbf47d894cfb6a9

    SHA512

    20d7e3e8ba72807c6e7bda62352ca38eb493fd07439bb5efa83e9e14efa0171ff87d8c28c1e6954fb50d561bfc782be93a5b24c4f9989dd5219c82a67f4fbfda

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b4cf1fa721d2b969297b1a8649a43075

    SHA1

    796df51ecab9dc72cec679cd2bbe2d4cc283c274

    SHA256

    355786a26ea4ac55b4e3417737049a8a6c9070fe0059178fa0cc91be8e04b778

    SHA512

    14c74c10cec5f70e2b5532525b06f689aff1cc6321fb0cf48b2495997ebe51b57777b69e1385ee9c93b5719cb8ea06fd0248406430d1eafc34aa587a2d5b6652

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    38c1b6dec482d5c5c138151b20990863

    SHA1

    e1ac597f646834019c82cef356edab1b85e9454c

    SHA256

    d23555adbdafbfb463fe3510e6d1ad3e526d083d35b38bdd23be08149c52a117

    SHA512

    9ec49df470936f8e71371e6ff37b4141fb59a92bf25e485f190457e7f02516af1784b1c0d3502041d668aaa91067c045076330b8179cfd73494bf26a5f06c80e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    545edd64122be73625634d1c85e04b49

    SHA1

    818e79d2c6325a5f59f7196ae023c75c921993b1

    SHA256

    8893c3d21d894a514e1dab01a87bb6fe5128b6b92949ce50b07a1fdd9e637a15

    SHA512

    ca5a0728f1b55b8e3e49b1de5d60269b4349f24d29626dbec9891f8605ec6c8d4da481dfaae41535995f1e5d647262ca319900d0bda3de2e2205a05eddad2de7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0b8bbe98e3493e64cd284dcfb3b72ada

    SHA1

    00d49e01382093e2e395bf1c59454b4a3190e5cb

    SHA256

    bbbcabc05481c208d2cd2499de6ce7f6b2145991b21f6c641f8e7ba4c66718f0

    SHA512

    1143de1f7ef51c5ecd90360a9891abbc27c8e14b5a812fcc321640d18b7f425dcb4950fa0d1fbd8d5b561a1c380bfe533475ede1f28cce2e2f9d75c6caf5dd11

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    d67811096e8b998b612a8fe55a737bd0

    SHA1

    5e92e88e5194cf2883edece922c9ae51a5b8824a

    SHA256

    0c14813d49b93ce5c8e4180918e6ce827c0b4f311c14b6664bf3648fec7f17d6

    SHA512

    e20ed64ce7ab8814a33c668b16fbc9813761b1cfc30875fe6b0bf1bb810466c5d99bf48ccf253d561774acc3b0937b5490df6c976117d2f47e26b7b9cdc77f09

  • C:\Users\Admin\AppData\LocalLow\Microsoft\Internet Explorer\Services\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico

    Filesize

    4KB

    MD5

    da597791be3b6e732f0bc8b20e38ee62

    SHA1

    1125c45d285c360542027d7554a5c442288974de

    SHA256

    5b2c34b3c4e8dd898b664dba6c3786e2ff9869eff55d673aa48361f11325ed07

    SHA512

    d8dc8358727590a1ed74dc70356aedc0499552c2dc0cd4f7a01853dd85ceb3aead5fbdc7c75d7da36db6af2448ce5abdff64cebdca3533ecad953c061a9b338e

  • C:\Users\Admin\AppData\Local\Temp\CabC736.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\TarC854.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06