Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    150s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    02/02/2024, 07:22

General

  • Target

    88e8f968393767ebf52938509ce74642.html

  • Size

    432B

  • MD5

    88e8f968393767ebf52938509ce74642

  • SHA1

    bec13b3f1383fcdce87d076877ed3bc456777152

  • SHA256

    a25f60b2c9dc94acba9bf8c08eceda16adf00503aab09eca0e3d888275914e74

  • SHA512

    36dd4490f4bf1f4327b31bd64200d5e77687bda8983a3882de69f7d73ff32e60b661160123ac551060bc25ef3e5a535b549a4b5411417479c46eebcc3dba5a7e

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 48 IoCs
  • Modifies registry class 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 42 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\88e8f968393767ebf52938509ce74642.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:392
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:392 CREDAT:17410 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Modifies registry class
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of SetWindowsHookEx
      PID:2056

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\7423F88C7F265F0DEFC08EA88C3BDE45_AA1E8580D4EBC816148CE81268683776

    Filesize

    471B

    MD5

    164c747ec05b351867ac47fb8ac89dcb

    SHA1

    d814dbedc7356af4d274b907692c28baea48dba0

    SHA256

    e675e63c991701c36625eb6ef0d2e009c743f7a6843192f74bd10ac641503181

    SHA512

    895663660c26f74561154925fd7ef4c2ee7e8fe0ad25985f7ed51ceadb476d576450c8c57aa8e8ea350be398b491f0bb5fe54744d7d1e625e4ab97a93b375643

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7423F88C7F265F0DEFC08EA88C3BDE45_AA1E8580D4EBC816148CE81268683776

    Filesize

    404B

    MD5

    07c15c2a61c3ca7040087885af2d284e

    SHA1

    90b40e3cf3df4ff50b68e78284b6ff44c4881079

    SHA256

    7e94b681eb5be96584c190440eaa6882ef55d880ff2eeed88e22b3dd73ef4725

    SHA512

    73a2d0da9a1b2bcfdfa93b604f39f66a5d1105b0cd0eec00c621c616312fe6a378a954bca5c639a6adbf6bcb5c4822c3c220d79fedbe65d9d26cd89a13cc4cd1

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\VersionManager\verF9B2.tmp

    Filesize

    15KB

    MD5

    1a545d0052b581fbb2ab4c52133846bc

    SHA1

    62f3266a9b9925cd6d98658b92adec673cbe3dd3

    SHA256

    557472aeaebf4c1c800b9df14c190f66d62cbabb011300dbedde2dcddd27a6c1

    SHA512

    bd326d111589d87cd6d019378ec725ac9ac7ad4c36f22453941f7d52f90b747ede4783a83dfff6cae1b3bb46690ad49cffa77f2afda019b22863ac485b406e8d

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\imagestore\mtw0pfb\imagestore.dat

    Filesize

    5KB

    MD5

    dca2402d0ab8259ccf43832829401269

    SHA1

    e589135164900792d839a67605fcf8354d0d7850

    SHA256

    988103183cf0cf7aad993a3e03a75500a553a09427e5489cc2f6675eaa7277d1

    SHA512

    60f8c6a6653d3cc5cd41c708d2551870626bbc5fd08f33dd95a3abd13d4923682df73fe5ec50c58e4907cd67b202bf22c834aa6348df2e6acc431b0ae6262b59

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\imagestore\mtw0pfb\imagestore.dat

    Filesize

    9KB

    MD5

    301e1b9d2fc182f11ea53438b8b9b44f

    SHA1

    f51275aa282e163fa04337afdcefe5bc65f6999e

    SHA256

    1286840f8e1b9f2f05175e4d1ff53116129d526ef3300dbdead65e0cdcd52caf

    SHA512

    4d61197efa1c6be2bcd268975f83016841904a1cec907afd9e1a07f51c899e185a85afa9a95ed680c3a720662083e18fb2b63d47f09ad2e6a1fc383f6d0e9f34

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\imagestore\mtw0pfb\imagestore.dat

    Filesize

    1KB

    MD5

    9ba857731b96cb61e30cd54935e34a25

    SHA1

    a85581348c5e315e0f29d6b14d6e2d9a955d8dee

    SHA256

    f0233ba30b9e7f6781358d8387ac8348a2bf104365303ddd5b34d03cf9a03d61

    SHA512

    20b6a8dca09ec6cb852bbace318e706ffb2e924ef0e214986bcbb94b8bd5189dab33145e7475c02804e4f7eb956faf71b595e5da0f38645b98313b4ad340707b

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\imagestore\mtw0pfb\imagestore.dat

    Filesize

    3KB

    MD5

    c2563af860572103110517a95f1f4ec5

    SHA1

    46be47bca88e571137eef51085f3a1e9f6cfdfc8

    SHA256

    c38d69596d76a13d6a7fcd34414416d4d02d0eb95a55149c1835d49f7088c808

    SHA512

    0acc94929d199e79692fddce1c4e0599be64efe636b7eb9b1a702d04cef7b2bb8c4cb6bd13bb43500bbda69bf553561792710c59640f558aea6fd017050cca3c

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\8PO8IKDM\favicon[2].ico

    Filesize

    1KB

    MD5

    38722a803b73dd1871a3d8a19db44d2f

    SHA1

    3379960a2c6611bfefcb39e662198d6df322e12d

    SHA256

    314dc8584b1a7c7d66a5882b6d153c53ceae37d7137df7b67ddd9735187f2c97

    SHA512

    d5b78a5c0b9c121f20d87e07e31e6ce4394b7f051151e2c24ba31c4c253cf046d2ddf6290026044531cedf66d0f035876fe9d1c1914a26b4d1ee8ab507f375f8

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\8PO8IKDM\suggestions[1].en-US

    Filesize

    17KB

    MD5

    5a34cb996293fde2cb7a4ac89587393a

    SHA1

    3c96c993500690d1a77873cd62bc639b3a10653f

    SHA256

    c6a5377cbc07eece33790cfc70572e12c7a48ad8296be25c0cc805a1f384dbad

    SHA512

    e1b7d0107733f81937415104e70f68b1be6fd0ca65dccf4ff72637943d44278d3a77f704aedff59d2dbc0d56a609b2590c8ec0dd6bc48ab30f1dad0c07a0a3ee

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\AAZL0E9Q\favicon[1].ico

    Filesize

    1KB

    MD5

    91abe01116ab422c598e9c8af72cf4da

    SHA1

    0f2815fe8e067d48537ad168225ab4674271fa27

    SHA256

    b1d7aef06456fe7431124129a28f0138bb5fccfa4f4161e3087de23c005e5edc

    SHA512

    a4d5b20c3014153b6b382c43404917bd2cb5bd2a59bb1e981f5a19eb7dbdec185ace288e9700428d24e5ac623e45d04905e706f0c45a1642b1aa6c091213c23c

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\AAZL0E9Q\gtm[2].js

    Filesize

    167KB

    MD5

    c2658d5a1188e1faad311df63a13a0ad

    SHA1

    83d6e2d28c259baee14fe7b7155ff50eca965e5f

    SHA256

    bfcc8a0d24a8b0199d6c2f270f4324470c64acc6e1fc7af4fd2dd8b11ab0851b

    SHA512

    84b772f6e6148977ac53a8505fa47ea790847e20d7e62a112203dbb2523651777bd7c403cf235bb28b0845e2ea129c551da17ea43ccf6fe4ce3ca6edb374faed

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\AAZL0E9Q\mp.min[1].js

    Filesize

    10KB

    MD5

    77534c644e02ab6356e7d6d7e068a52c

    SHA1

    00ee123e14e00b79ea7addfba83cadccc3a94610

    SHA256

    c0b418148076b3e8cfdae771ed19d95a5c31b73654e0b3b47d36557e8a649d84

    SHA512

    92d23514b47c3ce2b0a01e9d6e2dd5b74eb038aebf7abf643791cb64273a2720e5db02a734abcc9290ddb845ccfb7207671aa8f0b7f48b46c05f590d495fa4aa

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\PG47MANB\6[1].ico

    Filesize

    4KB

    MD5

    c62f95ec3ca566be8be396bca24c92a5

    SHA1

    51a6ff0e1a233a612ac33283bbb3d39c8f5e7644

    SHA256

    b91d02ba417bb7defd5b66e7b6d576edd428db676d389a417dffaf7f01fc0956

    SHA512

    d15a87f51b06241ae83b85b60901f768b716f4f38901fd997e9a8029618188c75b24aa685999e1a016b458e4f2bda838c49f85513f59aabb72628acc5508f4cd