Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    135s
  • max time network
    156s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    12/02/2024, 05:04

General

  • Target

    bf216ee0341a812d37c1d3dd0bdebd0d066c7a63ed03266dbe749ca58dfd59f8.html

  • Size

    473KB

  • MD5

    72757ace7bebed28a4e5ea015a7c2674

  • SHA1

    0ad6f390ad028fb19ddad13d36028f1042ed43c7

  • SHA256

    bf216ee0341a812d37c1d3dd0bdebd0d066c7a63ed03266dbe749ca58dfd59f8

  • SHA512

    07fa858db38922f3b4b016a16ba90888ca30f83d8a6869c0e248a16037837fcf3019f50ebeba5966aa878e4193e0a67c85f9810e46ee2cb2fafde8f96720f050

  • SSDEEP

    12288:l17gcXdawXnkZi7Gyha6qr5hlxoOHQG6a:l1sp

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\bf216ee0341a812d37c1d3dd0bdebd0d066c7a63ed03266dbe749ca58dfd59f8.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2484
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2484 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2388

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\7485144A5B4D372ADAA5516E91DBB900

    Filesize

    1KB

    MD5

    fb569c18c7ac1580f179a121e80de0d0

    SHA1

    f3b009a3bab3c7da20f204c3426730bce677d5f7

    SHA256

    9d80a9514e2c4aa061c76f4219ff2d80327a6d83cc4b32781e8c9ac304bc8e5e

    SHA512

    34b25b7494afc434d9cc5f353ca74f7edb61fbdb145a4937b443ff268d5e1752f60928a933eb2490b034816d3f4a0b45a9891d1fb91c611c2ddacfdc5e4d916e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    fb27715521dbcc79a708cb65a1fdcec1

    SHA1

    b53d1bf8ea6d002f860f6f873fb61384ea6311f5

    SHA256

    d8141cf28e9f345132b1ce52fd4a1eaf13399046577f7f47edc8f9f83e363d84

    SHA512

    f8904323e4a4b1e69825b3cd1478e4d58becd5957d3ad83883ed0f17f8d485f05c32878515f39dee182d3beee3a1902f72558cf169e923a1c11536fbe931ac5c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d9a2ee24f5601a4f7c6b42517faef539

    SHA1

    2d4d8d901ed07e9af082fb33a8fa89d16482e59e

    SHA256

    53c56eb2fbd1da5d2f9f6f8dfa9ff9dbbf5ffe73579203c3d72f2c5a85a7eb2a

    SHA512

    7738b3363a1e1a5919c202a718c1a569272f341c70d52a3e9a85bef06d7b70089a8f1109b30b0ad5f6cc9cc89a7244895f4745436892495e918db3957702cdb5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    341d252e2b93adaf17e342c977acc754

    SHA1

    44b58e5e9af67bfe3f1c5c84ec08964e9ddf509b

    SHA256

    ab074103377ec80ba055f46f1ffc0afa67322d696bc4249459f512d847dbc7ca

    SHA512

    370ab76e763c9a25955d1b8c13300eb7fb471e0015067446d1ffc6ade6ab3a47a14bc4e80adbcaaca38d3021fd0b5491ea2bfcfc946d0bb3d8015ff3c5def01f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3f58ff419bdf192e7a609ce394ba8e12

    SHA1

    a9e313e0ea67ffbef3db942ca6c37de6c38d5d15

    SHA256

    7e732ad445b0b98d6f289bf3e25c75c8a47563027ab431d8c447e9dde91cfaa9

    SHA512

    7066c88d3817207f6368e70a030174560430e8fad60832fca9900d9bc5b9377efdeb206adc00c2860fc1de62480973995194227a8a4c34ce7e6db5f6fa9e27ce

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2d09971dd0aaa0324332004598a43b4d

    SHA1

    beed74147abe22d63a690aae8f915d0491638d9d

    SHA256

    f5f116cb332185a7de439c4181e78eea93326f2ffe1a6d6c051a14b6653baa4f

    SHA512

    054d8e9faa6f31bb79a9d643ea5a78c34e2645909ef4cdd803db92fa949b5d157f7ecaac632debf1d2b27a237ae76c6b6a501690dea306a6fbe9b189308a9858

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    754690080e295876476fa8a9f693829f

    SHA1

    1cd1dac292fc60b012761c38be8229a3d9a4f3d2

    SHA256

    795fc3bea8eeb65d7b486addda6e77784d36a9ef9a293b69e787057a47408eb7

    SHA512

    df272a4f6e493fceabb00470255faa6b6fcdaf1c5339fe077eec467f3ebe867ebb85ad8c0d46be35286d7eef0f99fd5ac5261d39a0c1b4f2944214e0522a5572

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ab5a6f117c5436618b8cd30b36721bf0

    SHA1

    d3a654dcb7a7d66126b705e23d368278a0879472

    SHA256

    d61f0d53619d37e3d3d7e4710a459ee630202d9617549a74134efa33ef36cf76

    SHA512

    923a7c522ed85e885d7221338399b2e8f997dd14cfe14a93cf4eca645fe05c20664ae1bf33792d80470725b482e392a72746d02261d5a6a51bbd0d5ec975a605

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ea3e32576cf8d1bc19e1897296540c6d

    SHA1

    3680c35fd5befc4bf4b01721590fa80992bc8493

    SHA256

    37f61125bffc23c1b596e5072f22b29b9822f7fb28dc311d3c61f5acdaee59f5

    SHA512

    f2947a67e05962ce7f44c2457e0fe0f19270fcf7ac9b8bb516be945e742ff8f31dfa3bba6e5e7ee4f665c014f743ea48ce5e372097764d104b4b3e6322b8f863

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ed218cb4ae8fa0ad27e2953707ae2a80

    SHA1

    40303db816e3d7976b04668e981c6eaa65bfe42e

    SHA256

    271414b400344f8888510c010e3242c963842de5ba31a376a2e4535ab8d3cc94

    SHA512

    f1c3ed76a6a31a6023e1667badd5978cdb112404d7aa09f5c5d5eafe436608e47547d9fce676e37ad094a2d7b3073e36155ccc7269a220e11d5620d433187424

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0aa368ee6ea54de2cd664eeea75c12f1

    SHA1

    1841c85a5b0a28ed96ef058556282b295343bea2

    SHA256

    bc969f8d8f07514bd4f49c8ced829a3b5fd1fa5b087331b032f456163c18f21c

    SHA512

    4e66e554e4e879881a8245c623719d013876b3cd2bf35696ba70d4b284ccbee97a8688d26bde89e9750dd9b7463c63d12d900101d7c61afc7d6c3118dccf7b1b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c3a107e8bf030116dde45489f2586660

    SHA1

    87e1c103c4d44da302added29120e8c71e642408

    SHA256

    3f1a5d02b527cce12084ffa803d687edd384c20e6a604dd7a6045d4dae40ed79

    SHA512

    1142a4557f75a2c209b200662546e6ffbe0271bccd8d1d0e36729e98b1bba3fdad3bb64d75518a71eb7e6a4f65f61ca2687147921e55fc364bea2494de0c2ca4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f06cd70e14ced5dccf9852ad8574c474

    SHA1

    8fc94d8649602db3f464cc451df53b69ef6c9f0b

    SHA256

    45b7482bd2620deaf229df991604016a215bdd7369ed8cd3aef37e9adb0c27ca

    SHA512

    b562f928638c9631181828078ae6b39a35d235b90d51cb22fd2adbaee3e6052ce9512c4b17ae8d2b2ac1032901e67a210c41209f437afe2a11c56f3c7023f803

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a0677b90788526e716354dbafefcfb03

    SHA1

    522197d7062e87072bb425ef5118571415373f30

    SHA256

    afc5c89c334a0e06e3de0afa120db7be046e2c75ab33d2c250399a757960f7df

    SHA512

    16fa24f7e6fbfbe84d6fac5bc51491818465dc906b60f53d9d0952305dae3330d57e08922d6aab613e2de5a02e5e0dc4f6574bb42d38c1c32b107d72bf8c3308

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a96506afd54f875229ffd5e2b98465f5

    SHA1

    a8596e3541e217d4e2c07eb6733b793ad1b85989

    SHA256

    77816202f4ee3e8f712aabbc5fe46e40b551ff2c08e04b2d375b0754b87a7ddc

    SHA512

    8d26721eb5e901f326780e6bcb5c0be29c2810051b454c95aee4c3e3970b55ca64059617aedd9174598f19025694288138816ecd3b0a06f9d997c66b6deedaea

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b21c3db3c3e8264194fcc177cbf2f166

    SHA1

    a0cb9a9b321d9ae0cd83c9cba60dd0b948eaca01

    SHA256

    0641230044e01a0a1a32c2c6447965b362ef1ae12b68622238c98888d84bba2d

    SHA512

    1c42119e94403f87c33773081860b26e27742c2861cce6f1fb4b362e05837d3ba9426d0fd02a5e6c6621367bb8831f37a5708603cc6fb8c6f4b6923599eb88b8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9f41e9252d95ed57ee128b208cd8f8b2

    SHA1

    b4ff796d61b0b204af007a38b291c50a76dcb365

    SHA256

    69431cbeba946f7939ae462de2086014ce03d51773f53be0150fcbcc35826bf3

    SHA512

    83c42e67aed6cd61b968dd340355c40bf4b4267eccbfbab32dd62355fa596ae3f9c6480a7111ccf8ca58af6b20bceebb9b41fef8989f33ebda609ae6cc033e22

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6427620ab226465e834b263b3919734f

    SHA1

    52bf9bd287c4bac2c1118a378a2523a4304a87f5

    SHA256

    582c9743c6c7d613d8636f166ac0bb319d59c18771077e75b227ca28e2969b11

    SHA512

    1f94be81560b1988defa4850a0d6d3e6cef4acf0409b02ce678b8b6abaa95c790a7871cc3667517fa8909f70e5caa3184171d620579a1cea86d68f4233ab959f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f46b2072e35dfff3ae597fd872b34cfb

    SHA1

    9e0a1deeee9e4dfa5528e17ab7f61fc915e6d05f

    SHA256

    4dc0a14a1ca4cc91ed93d6e5c7af3b630f2bddb82cce6c3db65d325a503dac93

    SHA512

    e47c7f81f127fe9d6152d1aab6a95e36129f734149fc7df7d0711240985e7d06ce25fcdd2411f342e59855d776282e99c33ed608c7f0c98ab31b837f32245b6b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    38c53e8f0584bfa8b8cec67a05b8742b

    SHA1

    aafea3b8ccb56ea816570ee80a92813cae5af0c2

    SHA256

    45ee531462260a310d7eed1f31a921d1c78993e4f01caccc94392d3dc4b73596

    SHA512

    235cccb24ecc432d06362df59269bfca49f75226b311cc58f630463fc357861b8ce43d8935fe0671c69a4ea3e48d23569abfe2472c2efde127bee4b34cf1d68d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    eeb5f008a03a3b07f85c2f12261963b5

    SHA1

    4832b42de765437b057e9b051ed3245e373be85e

    SHA256

    d85d8692f06e2939060409654b18c812c0c6831744ee068f4d099c26ae9de2db

    SHA512

    6410a6623061bd7be3086fddfb4f8dc7911d09236a8f65795ab2390d35da937135cc715a057f47c097556b65450ab2edf55d8deb31719d27d1afedcf9551379e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0922e1fd6ee2d9aaa0324c9ed88f18ad

    SHA1

    d2e6b4fddd781d3f7d181c6aa01112b52f54cafa

    SHA256

    19c47c6064689ef23a5aa02589eb95195891c0771e030a3bf73e28d29a0d1f0b

    SHA512

    542fdfb6928ba04268f2867653308989996989f691761c25dd513541a878c0f3a8494759940f3a164eaa703a4eed5e14996dead3e671c065ff8e7f6e79541dce

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    b85c26f0926869e173cfc54792947de8

    SHA1

    5bd493d54d5a6bd6b0d0e05d0dba476c62145bff

    SHA256

    343253709ec638fbb925e1cc9896245a5b9e12c36652710dbe48fbecbc8a28f8

    SHA512

    7546f55d89fc16303a736c0417c41e2060df8a6e0216aa21e2b516999a8cb670031054fd24eeb801e14f6cdaf6c8c8cb77c1ebe50f6a5790650b4ecc1501aa80

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\U1J1BPYJ\likes.43d06ff5[1].css

    Filesize

    422B

    MD5

    cfecb8ef6e9c75e4a39397dd3bec8438

    SHA1

    d6be820385c161cad93de0b73d37528dd1c960dc

    SHA256

    b81eb89bd6746d7dd93586ea983ac075bd6d7e2dde632a7c722d5f9eb5301233

    SHA512

    a726490a3765408166e183c62c0eff587478a94ea00ff72bc959ff9ed37a1cbdb5d0f7fae53b7c894e3e402cbc889cdd1f4b07aa5b4c9c8320922d7ec07d6f23

  • C:\Users\Admin\AppData\Local\Temp\Cab71BA.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar71BB.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06