Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    118s
  • max time network
    132s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    04/02/2024, 20:43

General

  • Target

    901c7defdd8d2b14f6bedb90d433730c.html

  • Size

    117KB

  • MD5

    901c7defdd8d2b14f6bedb90d433730c

  • SHA1

    4d6b38895a4d81edb9907866ac2e32f2d9879706

  • SHA256

    a4cc0802f12be63ec78bbd19734b9e4fa11fac27728e90e442fa7a8e5c844886

  • SHA512

    fc8d5c9bb8572b1d7f6600d28e9369f0bd026452748c07f4e9e1dd41191493758d16b798498cc6ec95bfc626733f16570a12fa2c6216d260fadb14653b8c1376

  • SSDEEP

    3072:DnaTA2QKNdBiWmVOXOXnu+tOj3m4GCswG+qZIE2Y5CWksMRr0NrK:TaTA2QKNdBiWmVOXOe+tOj3m4RswDbEa

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\901c7defdd8d2b14f6bedb90d433730c.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:3032
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:3032 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2976

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    7fd93b0111c47a444cfb32c8dd19de52

    SHA1

    ab0ae35aee3b007ee7f4dea6c5564f06831b8323

    SHA256

    e57cabb70bee7902639fe67d886389f0a09972ef36ac9d97f83d32e5a28befc0

    SHA512

    7437036ef42351b11dfececc9b735d1acd893360582a2e12f4166c3b32b431357656ac55825f6114542d915cce7bb55ef5e83c4067e4f1441facef2b7aaea978

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7196c130b979aad19843a1e627d4bf23

    SHA1

    552f238d286e53dfe9f7125b6abb2da4d1d1848d

    SHA256

    3b4c504a7a603a47b1616d4922362f169d9b95a8c6b0cbc7b3de3caee854eecf

    SHA512

    adfdb3b9bfef512d9ca0d4c7c3f54b7b5c59771a3d12d8d0d5c04be57127abb75bc3a53edbc057e99c0e2ef8bc3f3b14c7b232ccc7f38089afc534d9c017ff14

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ff1427c446e7329b2ae0f997a3279ae7

    SHA1

    a22bc7a2b4b250f5846722b83d5151e59bcd9e40

    SHA256

    5fcb609b8c13440985016d1626ff28e14bf58a1baf02655491de54f865cafbd5

    SHA512

    a5821049b892672cc3b49d54589227067cde63b10082de1e9a8fa514c6926cfbb72afd801e76d03b7911ba5c5eb13773a75af5901ffe80776f1c5d5816419a09

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    296e6b604af125662bb8781af983499a

    SHA1

    a2c64c8dfe1dacdbac4f2c827eb97de048154276

    SHA256

    68e8e017432b3afb5ade4bb70ed5fb2a4047a06abffa9fbe52d6054845e4d4a5

    SHA512

    dcd6534a3c551e00464f056f868af57c7f641cd0754a912729957fb51fc1ec84df24042d0cddd756e365e662130f009cb5ce4670202b5a1e26b1ffd58b10f8e3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    70d3f7782e2f1dbe3db7a4a2934f260f

    SHA1

    b0915a4cb29765736d691da488fbecf898992154

    SHA256

    b3984f11fb26ef00c6a6a9ea8d276bfc03546e5248aacb36cf541aa5244ede06

    SHA512

    93d4c171e94632a9d555256b3c1558e2e85640c9077850c7a11181ab4daf041c3eb99d19605730272b9e18316ee5f82880d9a8a21e9ffd82a6d253856f000514

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    69b3b139e117cf26a20519e849fd7639

    SHA1

    b27034b0f6f53e5051cae601e06a5b7aff920d50

    SHA256

    7b75722869b0f0d2c415c6f0aa356762b676d6379cb0db7a55838fb41fb6b5f6

    SHA512

    b0e7ba42fd2beb3adf48f833c11df5f47ecdb7beb33d6aa832b0967452fabe1ec23bb06b53522f0674fa43537978eb14183789168d5f1fd542f30b3a15b2faf8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7579c3611a03356fdc8f4d732c86ff8c

    SHA1

    81f2e229414b86ab3d9f5455838fa115f241088c

    SHA256

    e313dde90cd867b42b0df44d5f899f52773e76fb187664ed6f60e86567fe2d90

    SHA512

    50abb5c90a73ee0c37c166f87036de5ba759d878b4be94729346f6cf7ed87c4ec06ef2a36ec7b9de4921b7bb9dc75fca25075d8c1f03d64f6bda7d83fabf3d8b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f76f3fdf4cb56a5eced8b2c17cb91e8d

    SHA1

    cf107309d0a2bed6e21e10597f6c214ae14363f3

    SHA256

    00bc96e46addb281d51284c5f31fc04584f0920d3f75ae77700ffca83ff8a32c

    SHA512

    bbcfd31e7084271607af381caec8d64a0310d76c65df2a0e498ba86ed754c05f0000789084c50a9f290c090dd0b9c9e36bd0b23eeeef01b65817455cc8b906f4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    26150e04da4a41c2ac17904eacce0f34

    SHA1

    9dca0a39429c1194226746cebadc3803740e4db9

    SHA256

    7369a3f7ab595d7ff84433167f0a34dd812f47099422ee91713c737d84280cf3

    SHA512

    a4c17058e71da745fbcbd343e4f72368b4a352268a4ffd62aad2276b90769f80646c0a74311e49ee9eaed637b2d5ade4ab266b11437a007268ef429cec37e161

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    aa43b56589de56ce97ecf03229fff6c7

    SHA1

    7e2d8f29fe350ed00468b5c2e440a1ed498bf0bd

    SHA256

    294d4bad21d835e34076cb7cbef251b0a2662eeeeae7ab6d3bf17e378a932709

    SHA512

    eaf32ec62538cc0ec52c95fbc049142801ca78056d5ba483122ff18e11d650f1042a76a4f143b86d969e66accab3d6fc8c567408a3256c3ce62f7476d91ce717

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4ef2d92d59df08d46133cc86b51bcabe

    SHA1

    f1c8a8ad5e9f38ec3cccf00800466842c206b083

    SHA256

    1e427031f04fc14fd7ced2a797236d31ce1c9e85590ebd09dd614c0ba5785135

    SHA512

    0b222ee93f4c2050f8c0ca61289b115a49f2ebe7380206596d8dd1ec2cc7ce96c1388871738a936731dd879859aefb3ca4e15984819d0f4d5fdf1ca081e4918f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    854d76f4f03c6089327ea92ffcc9d3a6

    SHA1

    87186b81261e456ce3ea9dbd5d3ebd8d143959ae

    SHA256

    5a1a7eea4da6726d5e0d2ac549a7f0eadec0036048a50c499c306368a7b708fa

    SHA512

    0a1293270a32d09a2ce8131019d7fe740601c6beb5edf53fb23136846efb98abdc61aa1257e384b22915351c4a18d791ba6b48f52134de892c482244cba2879b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    aedd43c783ab40d83bc46033932de96f

    SHA1

    5cceec0ff45e69b2ec4a25029f3c6b13bc95132f

    SHA256

    f1dd2edbc91e5cfd85169254789b78ddc1051c07fc038f6ab9c3ba8b8efe1d2c

    SHA512

    1a6a4b66cc1c0af7b8e31f7d3359b91cfae95001763eeffc602aa7d7643ae8c75d1310bc24a3023823cffe74d2ac7dca5c5f4d2fb2527ba74d878656ef40e000

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    97ad293b9383edc3a2924ac257377580

    SHA1

    620487aad12f0daf63dc0d125d6bf4714e228129

    SHA256

    00439f7ad757672c462fecc1cd9ba59e89faa1be713d3690b54e55db11a507c1

    SHA512

    92056e7c58569d45491340a3aa8e806e41c605e1b37a1eb2d40c81fd77920da82bc3f363efbdaafe06ebf41772c87f61b84335e9936fad470c548bc8b9fc87c2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ff2aa71e32060a9b925133c76893b45e

    SHA1

    ec958a295ec99ad889ddf81922483acbc8737858

    SHA256

    b7103eef50fb7f06d3b4a4927c2fea645154eb3ba4ee52360d879cb4f932fbfe

    SHA512

    3a77ce01badbd5e705edb366573f9c6a21644d2e074a10c59fd9872645c1cedb5191ba0337b5f1bd9690fdaa89e35256b3429717f6a8a16dc19d4ce989b3b615

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f8701a55fc7d5d017450ad026f69a309

    SHA1

    1573647c43eb5dca299e3f45fbde32242d430ca1

    SHA256

    7f918ce04d194f60652e5cf49393224a30bfbd050c84972c71ffd1129e4b3a93

    SHA512

    2b6ef2482ffcaf7dbb55b202c396d98df8b6b49646c712b330692e99829dede5172be6091259aee20c6372f688de90e20ec216072b09548cc49e35364a0b75db

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d8c9ceb6bc80ac55f8c65a2712ed6f2e

    SHA1

    d8ee8434068a1f8873021d72362aa8b9bdfb7f01

    SHA256

    b75d95d3717a0b39b00d3cfca89b636c5a667d0e6c3383793dce5bc6feda132a

    SHA512

    b59cdb61c92d7133aed1d04a5a82a84bd9e02854b8140437fae25fec66e463298797b591a60cfe53d1fb30bb8f811fd2ae2c2394f31461ccc10520148c4cf12e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    559b33ea11ef6a35109968989e25f304

    SHA1

    d275110950759b75b54aa5e20109d0813f4b76af

    SHA256

    46817a43138f752f191edabda88d3f790bc69021dcc1c7bce503bf3372b08ff3

    SHA512

    bfa954d36f7d573f7ac0024b54e8b95b83b834da0ae3970caf0d8e263652b03c8563ddbacd169a920e7821898a3d6f045b70ba4b4e2d161bd484993e1ba0126d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d29881093c510e8e76aae373a5dc2bbf

    SHA1

    eb9133ba4296c288e11e0821afd97fe18c032a9d

    SHA256

    e9b0dba901bda75e2ddfc00dc73831434161728d9ee4d79ae8dad299028cc6a4

    SHA512

    e15a8badf4ab6a9827c1fe0b751d4701ea6d68d32aa9e731e41f42c79b80c4e6047d85feb65f206a62d94edd097d9c3e6e243ecadb5ad571f45542238fd0cf36

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    13567d2c33064d5615aac2912414b68d

    SHA1

    841890fc31121db6725d52a6ef54295f3de284c1

    SHA256

    fe895c5d08788aec2e2189f6ebeb893f7a15bbcad571560dfd2a8c5bc1034c96

    SHA512

    1274eab83c0177f006fd6d968c5f1f2d7bdc84f04b0f8ce3578838c6efca19bb7581fb266f7942ce158c6a38688fffe2b83f3fffb1a1b2f162b0c1a6d8ae1746

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6c2217504743f884bd85cf225ab0c694

    SHA1

    c0c58fa0b62358be4cd4f17f08025aa3a843ec3e

    SHA256

    6bdf85abfa8d26ccdb20f0f1ed0168fdae603c02882d686865005464563d28d6

    SHA512

    ab6a93774e8030b39dd2894fc73dbfec1ee046140ebf227539957bb189b5dbc02d431c40bc906c240864e8d105c5b05b1beae3f25d88279395827c14fa958cb1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    69b60b705b26933ff41ae041f30d1658

    SHA1

    8451274d520a0a4e40211eab061ab55a030e4e0f

    SHA256

    7b03ed75ad00ed258304583fdda6c133495c26e1c64c2d732dd80b072ae5b6ba

    SHA512

    64361efcbdf341683589981043d5bff6e36381c9837c9843c9686d4fe60f6496c003f2106be8c41c0cc51a15105814bfd868f3baa9d89c2913b7820c3c444da3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    685a24da6b9d4185de300310ebd8441a

    SHA1

    edabd7deae218ff8dcb0365004c654c44d5cfa77

    SHA256

    bf60c36b2e9d631c0c054008d245f7d673a08126f1cf4febc71763a5b42fb262

    SHA512

    f925c77d496b26d7c7e96ba24478fbf48f054c1087d139536b5e55c4b53180c4fe2b33e341c62a6247d5d47c390b28b5366e053882935db96a53b3af73407298

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4e3e671996543b3b5cfa565c768638a6

    SHA1

    78720ab10e2fae4971d98569c04138b8788ac69f

    SHA256

    cd2b3ecee10da6e8e10a1a0ed607ce017f36bec44be958e0d53f6d45cd231666

    SHA512

    aa4b220095ff3d3c92b355a944b3ecc8d3bddff39d8bbcd791715505a7fab95199d72ed1b9b806af02307e098ab166ce4f3301871de67477a8b8818a7f8fb88a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\CAF4703619713E3F18D8A9D5D88D6288_A7725538C46DE2D0088EE44974E2CEBA

    Filesize

    392B

    MD5

    a3d5bc5d986f89cec2d81b18ed848bf8

    SHA1

    76dc97e5f9c6e7cf183910ff0e92bfa4b779b921

    SHA256

    1eed9a182aa794a4aa3f9f6c76745bd68e753b08b0f17fe5694d7fffaf5c3a12

    SHA512

    668a46ae99a45e6ba4a7cada701f87cbbe92ea70e32041f2c919cf4d0b3f095d1b168389ba5f5fab4d9cd51e2dafd8ec501360d094e51d61506e1090df442412

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    6a1234d60ef80c782ae978141f74e041

    SHA1

    d5b0b08d0c175d8a86df126a7b3e83c9810cd995

    SHA256

    369b1b6ef0f3a7c51d5ff226320e98d24bb0c5e749237d628f1daec8c8b5396e

    SHA512

    70205b06d9d24e97384910938589b934502cd3837360274c22a0b4f5be40624b16ed1942b8cf1431532c7c779d075969a6257466b17748d90db84c06c088e578

  • C:\Users\Admin\AppData\Local\Temp\Cab9399.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar946A.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06