Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    133s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    12/02/2024, 22:48

General

  • Target

    97cf1a655ed9af3c865d74d26604ffaf.html

  • Size

    21KB

  • MD5

    97cf1a655ed9af3c865d74d26604ffaf

  • SHA1

    c7305b4381cf4853e6291576f4e69e5b673abb57

  • SHA256

    c3b5a257d40fa3b4c6ee75cc405741a0b127251f845c5b8e59f596301168de14

  • SHA512

    fc1be9a35918280c5cd53889c3705644c63492cdf558ec2c8aebc8b8305e37df027faf4ddcea73103b81f15104b42d4cb2ae5f31ecbab541030510205e7f679a

  • SSDEEP

    384:QfRIjUDGO2G9kLL9j9F2OznTEDdJ11vFlFt9kitZbRJgR5MKxvZH8lpdCjRWyZWX:QfRIjUDGO2G9kLL9j9F2OzQh4e4RWKxy

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 38 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\97cf1a655ed9af3c865d74d26604ffaf.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2816
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2816 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1684

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    cbd6b4ecbac4424295518b959e1df654

    SHA1

    a3c3a4bb8e825b2d433fc150d9e09c124088053b

    SHA256

    f13f980c37fae7b011883258e7afdeb182177c92a890fd28423867ad7bcb42ca

    SHA512

    bf70f782a05418fda4f063fc7e2bb0579b1cf4ec66785db7b1282f5c69e035b42ffc4ecbdf7157825148579fb6662925f47b3bcdc87811a96c65b9345be04913

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    09507abce865bbd3e5b8aa8a8ebf2978

    SHA1

    d55643c06386096385666ec931eddc2edf33752e

    SHA256

    bc861c213f7e7b584052d18834d90424a1518d9e40c4348b3651e81eecf1031e

    SHA512

    fc69e593ec9e5dc946d478e7fb0ce271465183cc49a74aab817db6e701ac7f31076acd3f2c80bec3eb80e42716c65871b9184f9cf2c4893497df8da659500e2a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    73606f37eec8a6e434f5f3110953e4c5

    SHA1

    4a133239ef0b766d0d97fbeac7704b37f02f17c0

    SHA256

    d8ae098d5616deb854b34dbf3fba24deb13bee551da09a83df379776bee81228

    SHA512

    68cd6a2520877ac80d10c7b127564f6f09cd4c08328124563001fa53612aa11fd7b9f962f82efb2b8bd9e40b3eaa9bc8ea1123588ee3f87bb00ee4d5f27316ad

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    810dda3e75e0f8da3c32a6ae5ee82701

    SHA1

    65f5784d3d128c5318d0e80784c2f36b3aea8856

    SHA256

    37fa72ff2cf902bddb6a476d85b1bb68035949d5fe69a0854a0a97a4d9fb73c0

    SHA512

    32aa66c8cacaa285cb17606ac58be1d4dc43350dc5b4ec1495d15622d516cd1294f0b0bed7aac606f83864b435b3fce3360e183bed14a1c91d83b1424129fa96

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    576f10ed22bd314b9b13072c083a47da

    SHA1

    d5aa9bfad4cd3733a82b08e3e603f572390bd957

    SHA256

    6b57be0d7b6286aecb3ba4b4383b7f8b825cfb8f4995839c4c24de0c30e4ca78

    SHA512

    cb18741bc791b6e1198d01bb43dc6c30255364106b7ead0e21ebe02eb0e6cd0960d9b919d17b4be21c9ab14f843fe366ff00e452f18c137af0daa3f9301c5038

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9d1f0dcd232018f5fd2f6d677ba1995d

    SHA1

    54536c067b848d65c8b8ee33ca754016698f6468

    SHA256

    e55d48be9ea3c39b024f4005ea1c42f4e73d9ae2633925405af03cd45f051706

    SHA512

    7f1803980fb8f9c6cfda8d93e7fa031cf62471cce76db78896e9bebc47e28defa474599ce16bf7d0c783d82b39274d3725bbd9097235844012be3d7fd5fb86e1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3d2bde6e98241dd34d3c1dfd01b7ba39

    SHA1

    b46b46a333e8d6978f0087e67caabc0cd57786bb

    SHA256

    886735bd1355854cf2ed4f2194ed1f93c9ac8f31689245aeb5863e3232479551

    SHA512

    a1d895b3f378615fb19a7778b6184b4b91ca99eeaaa9bd8484e1c3f7d7e67e477bc840d9193522f7b39cdd55f4725f3d31a9ba39b2b312bce1329f5bf79e9571

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    15ad0a86a37b3c375508907a33fb9f2a

    SHA1

    9adfba59115b59d9d5fbc593bafb7614ef71b7ae

    SHA256

    1d918320c216fa14a09a92d7dc4990dedb4f9f177cf6d16d78d4ebda4aabf33a

    SHA512

    14bba37eb03b07002d55cb0c73ee395ddfcf36d5720871041dcbebeba7d5fe69ed8120243cdb343f41188c97b6c00d283e368d78fe1e8672c3b0afddf555ead5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2cef11a1e65cf6f2ed7b4e0c0525e884

    SHA1

    5a7e0e347600549418305080b145cb9e5af5f8ed

    SHA256

    2a00c3425813f5c508c920618978888292a6dccf264616cbf54cd15313e2fa4f

    SHA512

    1443f980a18e650e85b241f203a02aedd9c4eeb14b8ddb8339c31105e9b093738e3a159c24a0281b39a354c16cbf79a1a680d20d9e280211c3a9e5c2d2c41d7c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c5ccbcf6b16711de3ce873b7fac15e42

    SHA1

    7e39695de1ac0b84a6bf44058e6c8205825359f3

    SHA256

    10e870d4ba6dd84679622e5cd2c15bc19c3142c054ccda86426f0b1dcb158ec2

    SHA512

    3a0a77fc7f2505393e7dd213dfe0b8270b3e40a1b25176dd58845040276f0a91ae51962c4e9b0ece29b75eb74740ac44ae8d1d5b8da6f8bee34d566ddbecc7b2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    86051d45ebfd943688b0bbf40d6fc817

    SHA1

    e70132527fab5266a0f683f7edd841d1a2473aa5

    SHA256

    838e67401f725b160a9f0df5f7f69ece0edde2b2b4d03fe118bcbaac1d014840

    SHA512

    d11db862f345d29d28685091452d6919d66ea88603faae22b4b9085627bbfa28fbb85b25b57414fa7022af267c95bd9420c4d5a2ce9228b902bc1cebef5896e7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    11381b45b3f6ff001d79d823d314c85b

    SHA1

    a9febe09be8acf0272294dbfe20a48864e932f32

    SHA256

    ab244a4d98696bb8eec288a00e2c84350b2f82bec82fdf9e0a5b567513c630c3

    SHA512

    4fe9aa927c66212de0b05d91049c694ed2eb4187263e0079b5a31ed2494fa7719e6d50c885e9148fcbf077147d982be4cc30aae51d900cd1a9f8853849ef426f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b332f4e6518947d9ef831d113972ccf1

    SHA1

    5d8ae3b3eb4068f8ac145bed8667cc81fd236823

    SHA256

    042fc868553860fe2291deb1c90d296bf8de8793e7de7b302a83e7ae44261b6e

    SHA512

    2aa85f67a580835b9c6b8c1dea1753130aa8d15a30f29c7cf10adbea284613f6b749a8d48b1e210dd81ab5262508a57fab2fb491530aaef602c8f504d3b03758

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6a2f3da79134e5dee0bacfdd14a53167

    SHA1

    29d586fbff6ccf6f16e1ecdbf0bd9220ecd30061

    SHA256

    7478681e75058d3b4b9882df822e26967e36cc50bf8a66045487f339bbc5ad4c

    SHA512

    1e33452005b98b75af85d7e05b1f22e0b82d874c834213313e2edf5346e8ce585f13a0b5a59ec3cf062a91828423716afde07b448420870a22b88862fb408313

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cf9ef6d83a7c3cfc5b57d894465a6360

    SHA1

    45bbf427b269bba4d6fef60191b8d3e53dccb564

    SHA256

    3fe988a2f151a4b7d7a0bdc2cc5fa27a9d253962a952e88aa079b0cd783fa521

    SHA512

    15e9fb884b095dadb3b3428c8599f94f2e6d6b73a2f275b624a16b61b9fa7d6c3343e804f0c8f7767c1c3a31cb8dc7a5dadaf00f626292c670e086dde6e1d313

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f8203762cb82e668145d0d9e632ef584

    SHA1

    1dd117ba5f5f4539ac4b91e409cc095f8a9bceb4

    SHA256

    36be3dea90cf342ae7c92845e567db8756f78e669ae74f878dc2213053111649

    SHA512

    a7f0c29b71b6f587bdc450c2a36d6bc43e46664bd1148888bdfe19c2a1cb69087df42f774a2dc42977772fee1da1277d0e6ab574f50a564a10d7ee4f85c0ddc7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c3fed4a670dbdb733a79c5bc780727c7

    SHA1

    0077dcc9389de842f2fb27f799067a961ec83838

    SHA256

    deb443b2fac2246391ee45b562ed9955ed6fc3786c758bac5c84b3018e5a67d2

    SHA512

    b9302e08a097a5e2335f4524b5485cf68db4baf6c754ce24b1cf364e5df1ffb0503719c7323aae3962617c10b389032e5a2578cf4829bb13185db358df11f54d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2babee5f8b372247d9817d509829c1a0

    SHA1

    254a0cef90199335000fda2a237da5decceb279d

    SHA256

    23b21bf95512ed7b8afecdcde9dbd44da3f50811ca2cbd20f365d968637cbdee

    SHA512

    02a81c11fb653d500f238940d50212c93641a35e8af116fbf6cb5395c1d0289e09b46a009f5f2bdd44b183b7d36e537a6d73c6f565ae14f44f6e347039b7ec7d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    33bc5e381f4a1f8b345c70013d05286f

    SHA1

    766fa7a90e4b068e761b9d033dc72fb82874a28f

    SHA256

    71fc98d7d60a1d277a278f39e674bbfd59bec4937f11e6d7f812b5746d8484a2

    SHA512

    1b9f71a93b742def33a341b271e513cea0ed281d8a3b7e35ef0da16c757250565d0a1316c5fdc25879a2eb4d2e2617a89518903afeec45ab305fc7604d95de70

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a23f559789d6ba2596b3adcc97d1d757

    SHA1

    b15e6ed90457fa5f74e8e067ed170d7b890b9fa7

    SHA256

    138b10052d19d2b4c7ab8a1b47cc024aac26b695de45c84c55f3503bd6b17cdc

    SHA512

    c2018d8e3fe6d5afc716c991ed37c7aa04dce9ff2f1f1cf0820fc5715e8d0adb8637865708367db355643d827c5ab0c7aa64560f30e09c9d64707da50a3d6453

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3ce5e8cdfe96fed6b4a5a6ba475da2a3

    SHA1

    8f2a8a2528afedbbc529539be62625f309d79b19

    SHA256

    de23e93cd4e8775106dfb2e7a3d255a5c3f33066e2b42fa9c459029b19dcff16

    SHA512

    0f401fadc5167c7cccedc6f593939e13995b2024b4e5f0f7c23964641be2773c88ca9ba85c7eea2e5dec13aa2a3937c627f0b24730b8694ebff48f292019707e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\CAF4703619713E3F18D8A9D5D88D6288_A7725538C46DE2D0088EE44974E2CEBA

    Filesize

    392B

    MD5

    055e5760196c7c045cc2ab95e5b4bd66

    SHA1

    0a603c45947ce6e2148c24ece556ba8ebe1f2ea0

    SHA256

    c5670cee5c3eb134dc4a0c86289f5573732c44cebefd82ad4318202222f7e4dd

    SHA512

    ee227ec4c60139a7b44244214c2e06d23ce502f23100f8ef62a09e925c05f528e532a481205dc6d2ff84bdb747d894f59cef162d02fc55728344fa1f10a54aca

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    5cf4ca76faef6ef8893de0618e158326

    SHA1

    ddefe882c09221fc822d6e1501accf2bd0da7bad

    SHA256

    8a4373392fa1d2782887b6af65b4fe2e9c443358da4ac7636361e16bda018ee7

    SHA512

    fd015ed18c991cfe5a6a15e447e97c44aff6ff072783bc5f8c311a2c6b5dba85b9ffa6385836907ffeef4c6c8bc7bf42f7e351f95435a9a7c70d8e29ae13d563

  • C:\Users\Admin\AppData\LocalLow\Microsoft\Internet Explorer\Services\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico

    Filesize

    4KB

    MD5

    da597791be3b6e732f0bc8b20e38ee62

    SHA1

    1125c45d285c360542027d7554a5c442288974de

    SHA256

    5b2c34b3c4e8dd898b664dba6c3786e2ff9869eff55d673aa48361f11325ed07

    SHA512

    d8dc8358727590a1ed74dc70356aedc0499552c2dc0cd4f7a01853dd85ceb3aead5fbdc7c75d7da36db6af2448ce5abdff64cebdca3533ecad953c061a9b338e

  • C:\Users\Admin\AppData\Local\Temp\TarB0D.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06