Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    143s
  • max time network
    150s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    04/02/2024, 20:40

General

  • Target

    901ae89e1b4e21af8cdab22d70a610c1.html

  • Size

    14KB

  • MD5

    901ae89e1b4e21af8cdab22d70a610c1

  • SHA1

    de3d9d604a0505b03a7ccb8c30a1dd49b987106c

  • SHA256

    e4eccc424bcead271b6d2cae529fbbef2c3c50b81f6669db2ef4d84f8183973f

  • SHA512

    548c7b2396f4cea7f1f7155adbfb62a23a4c54374105bb32c8f29af926aca3fbe46a56d4a18fd0b9ec8c54785f6b31daa47038ffc4fc250a7582cd23c89f20b0

  • SSDEEP

    384:LXcW5UBnDwCO35/6PlOiffUvOTLPa8iDvM2V:DcQU46NmOA

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 61 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\901ae89e1b4e21af8cdab22d70a610c1.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1008
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1008 CREDAT:17410 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1976

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\7423F88C7F265F0DEFC08EA88C3BDE45_AA1E8580D4EBC816148CE81268683776

    Filesize

    471B

    MD5

    7bde92ff965b73dc76190e608c2fbb93

    SHA1

    95547789d183bbf9ea20ef6ba4c6b2f0249fb30d

    SHA256

    821420f187b512f853c8b73d9439e940e6e04c499532561343a739717a9a76ee

    SHA512

    21406b04613e8be9f2036f5057d6d3de568ec1aa4eb6471cd457e70e6ddadfc3b988d5f4c2d316e548b21b2850944a78d75a44ec3bf929e71fe61fb6b0de4ec6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\CAF4703619713E3F18D8A9D5D88D6288_A7725538C46DE2D0088EE44974E2CEBA

    Filesize

    724B

    MD5

    ac89a852c2aaa3d389b2d2dd312ad367

    SHA1

    8f421dd6493c61dbda6b839e2debb7b50a20c930

    SHA256

    0b720e19270c672f9b6e0ec40b468ac49376807de08a814573fe038779534f45

    SHA512

    c6a88f33688cc0c287f04005e07d5b5e4a8721d204aa429f93ade2a56aeb86e05d89a8f7a44c1e93359a185a4c5f418240c6cdbc5a21314226681c744cf37f36

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7423F88C7F265F0DEFC08EA88C3BDE45_AA1E8580D4EBC816148CE81268683776

    Filesize

    404B

    MD5

    f31d1db7539bdae82c0cddb624e0d9cd

    SHA1

    6ca9fdc7cfc773ef805cef314d3b8802b5f2efb1

    SHA256

    cfab8bed96403ef40e5cd52b7d1ed7dd7fba1674a6995796197b366d6cf4d59d

    SHA512

    66ec105d7ccaa1fbfefa9825675c3968cdf604d03657401b3387add0973a0c42e3130cf5fe8cf36fe8667128eea26792949ae579d0e8575add1bd9f47eacee95

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\CAF4703619713E3F18D8A9D5D88D6288_A7725538C46DE2D0088EE44974E2CEBA

    Filesize

    392B

    MD5

    f6c6422e459c206245b2e121a371a2cc

    SHA1

    2cafacef68d6357882a9778da5c5bd692432def7

    SHA256

    f3a3f7f15abb483ed0031ef3dacbe8d5049d5706ba7b8abee39c592d2f6ee8be

    SHA512

    566995922c016784470ef6fdbb8676441f7ec9f04074f83e8b268dff389a731f2583639fa45652566877c9f8bee5fd2a83307de6df1d843c5ada8d00b97efb03

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\imagestore\5w2ovpd\imagestore.dat

    Filesize

    1KB

    MD5

    59af475a1e5d9818efbfcfda90740c85

    SHA1

    3eb006a928a3148d0408aa34c1f1240f065f47cc

    SHA256

    72b1dccf268b2375ea0e3a96dcb40fdc9e56bf00b5666a6e56988a22295a506e

    SHA512

    775b9f01d96d48b96b4d74252b01c44559f46ce9a285f056fd4a8ed8ce6abac7ff5033368457c8e7be261ced2ea6eeba1f6258d9374d5f7b0b781dfb21d841cc

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\58G7K3A9\jquery.min[1].js

    Filesize

    84KB

    MD5

    c9f5aeeca3ad37bf2aa006139b935f0a

    SHA1

    1055018c28ab41087ef9ccefe411606893dabea2

    SHA256

    87083882cc6015984eb0411a99d3981817f5dc5c90ba24f0940420c5548d82de

    SHA512

    dcff2b5c2b8625d3593a7531ff4ddcd633939cc9f7acfeb79c18a9e6038fdaa99487960075502f159d44f902d965b0b5aed32b41bfa66a1dc07d85b5d5152b58

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\58G7K3A9\js[1].js

    Filesize

    243KB

    MD5

    8256abf5059b7ef8fc008f054407b0aa

    SHA1

    aee36509648c1a6fb621335eeb1c74417f5a31bc

    SHA256

    0c2a3e11f48e472703bf9392851e38a5a6eeda3b3f37592f16e7b7afc194f155

    SHA512

    87b9b20fa2d0eca4a3f0637c81304c176288a043e3e3ae8246820025578301b2e53ba300f5c31d9dde501733ad6ac6287ea90d7b8ca00dbd9647bd6a5e0514d6

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\58G7K3A9\reboot.min[1].css

    Filesize

    3KB

    MD5

    51b8b71098eeed2c55a4534e48579a16

    SHA1

    2ec1922d2bfaf67bf3ffabe43a11e3bf481dc5d7

    SHA256

    bd78e3bcc569d029e7c709144e4038dede4d92a143e77bc46e4f15913769758b

    SHA512

    2597223e603e095bf405998aacd8585f85e66de8d992a9078951dd85f462217305e215b4828188bf7840368d8116ed8fb5d95f3bfab00240b4a8ddab71ac760d

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\58G7K3A9\recaptcha__en[1].js

    Filesize

    488KB

    MD5

    16cb1c02d3183e1026b4ca6b3eb3d509

    SHA1

    156c9649e7a6e78b8fd974cf29ecdfc8c0fe3929

    SHA256

    689c72d7718868395eaf4bbe26e9f52e92f16daaa1d5486b53ae3744a996f1e2

    SHA512

    aea879561c737bb7ce6784f0178b429a19c3b854415d30342db41184ee356cc6f7e138dfd1d7212ae7dbee3a2aae3a32ca2880cdc8132da06def9fb562cc5b37

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\58G7K3A9\suggestions[1].en-US

    Filesize

    17KB

    MD5

    5a34cb996293fde2cb7a4ac89587393a

    SHA1

    3c96c993500690d1a77873cd62bc639b3a10653f

    SHA256

    c6a5377cbc07eece33790cfc70572e12c7a48ad8296be25c0cc805a1f384dbad

    SHA512

    e1b7d0107733f81937415104e70f68b1be6fd0ca65dccf4ff72637943d44278d3a77f704aedff59d2dbc0d56a609b2590c8ec0dd6bc48ab30f1dad0c07a0a3ee

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\GUTCV3OF\o-0mIpQlx3QUlC5A4PNB6Ryti20_6n1iPHjcz6L1SoM-jCpoiyAaBO9a6VQ[1].woff

    Filesize

    16KB

    MD5

    dd6fe4c6f321f39c750ee024b38bc1c6

    SHA1

    192f09d9b27fd7518a7b2cc7ba503d6f83c68307

    SHA256

    d2de7fbc083f058b6c7eeb6985a1d24e46e5e9be3aebf0f2d3b26204fc7edd94

    SHA512

    e677bce8d3920d2e755c9fb80a6a96922c5504ecf06b5a650787a22f29d5f39b2c37ca336bdca41b25b71d36caec21dac78d855e0819435165d3771701ca45a4

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\GUTCV3OF\o-0mIpQlx3QUlC5A4PNB6Ryti20_6n1iPHjcz6L1SoM-jCpoiyD9A-9a6VQ[1].woff

    Filesize

    16KB

    MD5

    d22f975c52faaf5f561bcf90641485d4

    SHA1

    4092103795efeb56b3cf83a69d1f215771ac651d

    SHA256

    08cccd7191ddeadbb2ac3f16aaf5e3a0b65d2477fdb5a33e3b17d1bee9501d6c

    SHA512

    b85b99e957dc5ffc88b3ef14d14b7b7738e1210c01decc249fbb4a5274baa928b6d81e652244572e45ac162aa4616b0a0c607d59a01b01303e572ac3bce03382

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\GUTCV3OF\p[1].css

    Filesize

    5B

    MD5

    83d24d4b43cc7eef2b61e66c95f3d158

    SHA1

    f0cafc285ee23bb6c28c5166f305493c4331c84d

    SHA256

    1c0ff118a4290c99f39c90abb38703a866e47251b23cca20266c69c812ccafeb

    SHA512

    e6e84563d3a55767f8e5f36c4e217a0768120d6e15ce4d01aa63d36af7ec8d20b600ce96dcc56de91ec7e55e83a8267baddd68b61447069b82abdb2e92c6acb6

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\GUTCV3OF\zyw6mds[1].css

    Filesize

    1KB

    MD5

    a5bb75d5bd1b19def25c1dd4f3d4e09c

    SHA1

    d0c1457e8f357c964b9d4b6c0788e89717fe651f

    SHA256

    ff0689879c72300a01eae0c05c3205e2ca57c4bc1a6bfa0718fa6fea4a51627e

    SHA512

    b9fc57f7ade8f34cb02ece2935acb30757ed846e4bcf81d3fcf5bfcb45611d386bd337a6337e9945c5654cf044dce4dd3fafd60a2b42ed5bdc857ef96d077a69

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\MCZQJD7V\favicon[1].ico

    Filesize

    1KB

    MD5

    0106d4fd24f36c561cf3e33bea3973e4

    SHA1

    84572f2157c0ac8bacc38b563069b223f93cb23c

    SHA256

    5a6c5f7923c7b5ba984f3c4b79b5c3005f3c2f1347a84a6a7b3c16ffbf11777d

    SHA512

    57b77c5d345eca415257e708a52a96e71d3ddf4a781c1f60e8ba175ea0c60b1d74749cd3fa2e33f56642ce42b7221f16491cf666dc4e795ecc6d1fbfdb54ab98

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\MCZQJD7V\styles__ltr[1].css

    Filesize

    55KB

    MD5

    eb4bc511f79f7a1573b45f5775b3a99b

    SHA1

    d910fb51ad7316aa54f055079374574698e74b35

    SHA256

    7859a62e04b0acb06516eb12454de6673883ecfaeaed6c254659bca7cd59c050

    SHA512

    ec9bdf1c91b6262b183fd23f640eac22016d1f42db631380676ed34b962e01badda91f9cbdfa189b42fe3182a992f1b95a7353af41e41b2d6e1dab17e87637a0

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\OO2Q27PV\css[1].css

    Filesize

    530B

    MD5

    0a127ad39a8ebe4207492293b556adf6

    SHA1

    17d3dad64e4f9139cfb85bbcca6659a8aa532a48

    SHA256

    c1294965425b5028a83bbe5eeed0cd9b92733ec41efd07e34532522d4c97b6e1

    SHA512

    5aa845c5c6c20259d9c6bc0c9fdbd13ff178ba4008865f7113387767db0ad39cd53c1d276cfa4997186fd39f21d30bf00caf8d092e5c04119d992368b1563df3

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\OO2Q27PV\d[1]

    Filesize

    23KB

    MD5

    ef76c804c0bc0cb9a96e9b3200b50da5

    SHA1

    efadb4f24bc5ba2d66c9bf4d76ef71b1b0fde954

    SHA256

    30024e76936a08c73e918f80e327fff82ee1bd1a25f31f9fce88b4b4d546055d

    SHA512

    735b6470e4639e2d13d6b8247e948dbd6082650902a9441b439ceacc4dfce12cd6c9840ee4c4dcb8a8f1e22adb80968f63ace0c0051811a8d6d1afb2b3c68d74

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\OO2Q27PV\jquery.fancybox.min[1].css

    Filesize

    12KB

    MD5

    a2d42584292f64c5827e8b67b1b38726

    SHA1

    1be9b79be02a1cfc5d96c4a5e0feb8f472babd95

    SHA256

    5736e3eec0c34bfc288854b7b8d2a8f1e22e9e2e7dae3c8d1ad5dfb2d4734ad0

    SHA512

    1fd8eb6628a8a5476c2e983de00df7dc47ee9a0501a4ef4c75bc52b5d7884e8f8a10831a35f1cdbf0ca38c325bf8444f6914ba0e9c9194a6ef3d46ac348b51cb

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\OO2Q27PV\js[1].js

    Filesize

    189KB

    MD5

    2711faf5e274c0965079a0e274eef309

    SHA1

    1a2544343a4076b974132327199f8e8642ba0fc6

    SHA256

    5b2d0d93edac1d49fa9b86af5dc06077ae68c28d577ed9f95837d95d9f8346ba

    SHA512

    34c8c93d0b0176326c266c4b7bb78228779b368321cae8dddb72d8a66ded85d70fd410c58c4fd14de7b9720f4bfd0f307f14e36d9ca1844a61d6ee504fcbaa4a

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\OO2Q27PV\responsive[1].css

    Filesize

    66KB

    MD5

    4998fe22f90eacce5aa2ec3b3b37bd81

    SHA1

    f871e53836d5049ef2dafa26c3e20acab38a9155

    SHA256

    93fcbfca018780a8af6e48a2c4cd6f7ad314730440236c787d581e2cef1ab8f8

    SHA512

    822158dac2694341f6cf5c8f14f017ac877c00143194d3cd0a67ffd4d97f9bf8f2305e33b99fa12f62eee53ba18029541c0601ea5496ff50279d1200cfa03232

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\OO2Q27PV\script[2].js

    Filesize

    9KB

    MD5

    defee0a43f53c0bd24b5420db2325418

    SHA1

    55e3fdbced6fb04f1a2a664209f6117110b206f3

    SHA256

    c1f8e55b298dc653477b557d4d9ef04951b3b8ba8362a836c54e2db10cda4d09

    SHA512

    33d1a6753a32ec06dcfc07637e9654af9321fe9fa2590efc70893eb58c8603505f2be69084fb2bcbf929218c4e7df9f7a8bc3f17a5b41ed38c4d8645296ebab5

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\OO2Q27PV\style[1].css

    Filesize

    165KB

    MD5

    65760e3b3b198746b7e73e4de28efea1

    SHA1

    1d1a2cce09b28cffc89378b0a60cbb1aa8a08c4f

    SHA256

    10e40ea3a2ad69c08d13e194cf13eb4a28a093c939758a17a6a775ef603ac4fc

    SHA512

    fbcb91f26b7bd874d6a6a3b1d4d6f7277ded091cdae5706c285b4d5d17446a1bf58572c224af38393ce49b310a51d5c5d60711c7094e5d32abbaaf10d1107e1b