Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    133s
  • max time network
    132s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    12/02/2024, 03:06

General

  • Target

    jre/Welcome.html

  • Size

    983B

  • MD5

    3cb773cb396842a7a43ad4868a23abe5

  • SHA1

    ace737f039535c817d867281190ca12f8b4d4b75

  • SHA256

    f450aee7e8fe14512d5a4b445aa5973e202f9ed1e122a8843e4dc2d4421015f0

  • SHA512

    6058103b7446b61613071c639581f51718c12a9e7b6abd3cf3047a3093c2e54b2d9674faf9443570a3bb141f839e03067301ff35422eb9097bd08020e0dd08a4

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 38 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\jre\Welcome.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1760
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1760 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:3032

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    4c6895b7eb57f54c71f9087b1301d31e

    SHA1

    176ed1a1c2b4d2742e61449680b3a3bd2a66041b

    SHA256

    e1ddecf9d8c7bff453a5d1e522db933c42584277320af041765d2ec3f011128d

    SHA512

    0fad8fd7fd227786c01b9a32e19f6086df8ccdecbbae29dfb38c449cd30b33d0a123b1f4934d79265df5303f6de15754004bf2e447a54d237a291c9f956a99a1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    3478aef5374ae1518d9edae13da46ec5

    SHA1

    03d7beb072f5e820dd93536fc951d75f931ebd96

    SHA256

    95a8ffc455b10782a8dfd827279b6f1600e61295eb80babcb58a7d32001b4ba2

    SHA512

    6cabdf8904b26b6272516f624dbb9523c4404e562b3e87302465ed3ce3a953736081026a7c7b027c0b983b4153cbf5400a7544f2cac8bf1af787826a7821f4bb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    fcb3d8c65c947289dcd365cdddb34d90

    SHA1

    0ced6a8a4bcff65341de1954baf1bf02998b68e8

    SHA256

    050b6862d8f94f0c501530f3a478f6fad45065159917139cd0f195ced7f875e7

    SHA512

    58d6b12c7911dcb7947d198a52ba3952c5bc55a2b52e8935aee37478e6092a714f7a3efb80ad299be93e4ea1a0ea78f0b2014eea2e1b0c7940a1391be5e5fdee

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    673d5a1ac668006b0bd54022b8344e11

    SHA1

    bdba2a93b556c548693dfa32b8a6d72781a44f33

    SHA256

    7c6b57a8b49f901c3df2b4e2d7581e5974eebbaa84b0c5ac947ee0e6870e704f

    SHA512

    eaa578b16f7c6da688e70dc701db9da0d457aa1371f98b4b974097443ade587f44b88e34dd0142c4c212ffbba47722c321e9f9fdcb58b20ac68decaabd196db2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    8c87c326725e56826592c14dbe8fdf9d

    SHA1

    e4ca35583e42a8bab522a0f81eabec29739bb494

    SHA256

    b55c032c91047b0b0234001d19bb570a449e95e42ed2530bf948c8e3f7db1741

    SHA512

    d153e2609ab12cc0624bb54486d0cd00925f3009f40f11ed025d35ff7e32f3c32a6ad4a656baf877c9a3a51427c916473b637807a3ba1a7d25d8bd32cfac69a8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    0a97b28692b5defd988cd532b4fdf282

    SHA1

    fafe9e0e4f1f3f335b681dee10c62cfd33d0b3ef

    SHA256

    356ef7946abd58844ede8ee86cbfbcb008233eda7b221ccb7af60b209a72a0a5

    SHA512

    af026bc8f9c12adffbcee20c871e7998135bfc0035d4a6f1eae51081dd321b3a54bfe1649803165f90ebb35df0886f60ac2fc3ca0d8bc1c717624181f0bc6ade

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    0ab962808783191a6c0e818f5301799d

    SHA1

    f9f1b36300e785307d0c99c354bb5d2af4f42174

    SHA256

    8c90996ce74f4f769bf16cc2803f6727487f17f9c9d2c491964e81639444610a

    SHA512

    8be3fb6699fa17d7195c5a7404b8854b4fe7681fd9bfc438207a805ef246fe5c75a8cdc3a3ea2a989baf9d26be316449548b87f8e8a785e6a81ef70fc9d09ed5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    d5c30772a151bd09fc7e0d7879bb0931

    SHA1

    e4a97a3a368cde79de063db7678d1b7615a5f547

    SHA256

    7567588545b0191fd7069dff93998b61fe05382155f22afbaf4f09fb4c1a6c08

    SHA512

    556cde338d45dc856a0c3b73770c9c1bf87aae32a2453ada3d7fbeda251881715c87c8d20159ed8ef40010c0375d6ddd9b268f02fd2408408567ae8cbe5a0a47

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    75f6aa888b6b7ab82fed3773fc9328a4

    SHA1

    1067b5178d9d5a3257044370915da4198afebdf3

    SHA256

    c95bed30a1ba237c7e98cd12f56b199c610e06710d07f3a925a71fe2ed66d87e

    SHA512

    8bf011f02cf9c5bc0b1efa81a8d43e57c3d2855ef21d057c36aa2d185d77f1972e1024bf2eb1aa2d64d0626109de773a5e1b3046911aa3399165089a8a977cf2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    998abc90890a50a341e8076a66c4c09e

    SHA1

    9346f143e808ab85c9e189be3bc6d4e79754263e

    SHA256

    883427701885f375af9602b79c42cba6051d6bd2a1ff42b6833f1959967cb978

    SHA512

    c3b40f3853953e635d25a2fa25b30d9f4280beefcd8a47b10c0f1aff0af47cc501c0c212a8116940368ad880598341197378ee063815cb66f63b912385b43b3f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    fe7c21cf5d969f14c79f408524dde2a7

    SHA1

    b25fd57a662bceab0009b44ccd6410c8d974ad64

    SHA256

    bf1668b516c5a43eb68ae8afb81307e6bf33545008aae2327239eab649c91d2c

    SHA512

    d453181aa795b67434661abb9b585003c7f8e46a9252c8df0f0a1bd13d533334117455030b455a909c4b2bc8cce15ac6729134c3f88634844c945779c0e5a145

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    440f85f89a48c8ae46b2c1bfd45d4de4

    SHA1

    4a0a3028179deedfd9f2c34e1cd41cbfa880270d

    SHA256

    1c0a6f198e7bdc1a0b6e94061d301eb0fbb4556fda8818ea29030788ea560edb

    SHA512

    b47698078e59b2189df49b651fdce305318269436d8b89b7b8fbe6a1b7faeb84a76fc4a04382c38fe4d210283fb80ec833c56284c1b0e46ad3eb4e90cfdc7ee2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\Internet Explorer\Services\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico

    Filesize

    4KB

    MD5

    da597791be3b6e732f0bc8b20e38ee62

    SHA1

    1125c45d285c360542027d7554a5c442288974de

    SHA256

    5b2c34b3c4e8dd898b664dba6c3786e2ff9869eff55d673aa48361f11325ed07

    SHA512

    d8dc8358727590a1ed74dc70356aedc0499552c2dc0cd4f7a01853dd85ceb3aead5fbdc7c75d7da36db6af2448ce5abdff64cebdca3533ecad953c061a9b338e

  • C:\Users\Admin\AppData\Local\Temp\Tar4753.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06