Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    141s
  • max time network
    150s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    13/02/2024, 05:42

General

  • Target

    989e36670ebe682c6da3f5119a1fc700.html

  • Size

    57KB

  • MD5

    989e36670ebe682c6da3f5119a1fc700

  • SHA1

    84e88d95c2a8e4a2c1721d4a908879fd399ff65b

  • SHA256

    e307abaadd756806ec56301483ed632dabccbf26b353caa10f0050e47fbd11e5

  • SHA512

    59381e823862728c798a0781b794be9bcd47d148935d3049d46fab873f7ef04f7e5b484e4b24c533d7c734f3f17952014baa7fccc8855935ddeba72812f6d939

  • SSDEEP

    1536:gQZBCCOdW0IxCsBUufQfmfmfcfgfbfIfAfkf4fdfhfgfsfjfkfSfGf6fDfkfufxW:gk2g0Ixdo+OEITQocg1p40LMauiL8WpW

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\989e36670ebe682c6da3f5119a1fc700.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1520
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1520 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2488

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9b828bbac08315f7d951a7fad56bf716

    SHA1

    58a68e1a52c67d2c8cf052e1d8b70b3e6bba32e8

    SHA256

    33a24345dc65dacb3ee427642bd347083d2a10ab76d6ab6871157de069976273

    SHA512

    a27686a8e0c50776ecbc72547e7e1b231eafcdfbab75c2042383a70683bb6b6a8a475655157dc0557fbec05d3e8c6f37351ab13234743c65c4b09e7f993d413a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d56db1ce13f1db0ba860f04d12d403be

    SHA1

    cd7e697d8361761d31a3bfc61597fc3af9fe4820

    SHA256

    6618ff11d0b8d4ee47e8919c6238855273abc617ee016e600ed5cccaa9876bbe

    SHA512

    39d689307913704d9afe78f9ebaba493edfb66abe0b5be9f4435ea30f697b79c04be1aeb8b4799efbc1a0eb99d7d1501fe09c04c6d06220d09bf00f18bb50e35

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    53488ac7850408b5230b809157f6ad0c

    SHA1

    ac7d7a86884b889f3be897d4c58facca9acf2aa4

    SHA256

    8303844e9e9bb1939efba4b82cab1ee8c3c09d8b36a518a9ff8850710d8d3e28

    SHA512

    3718e46f1e521bdd5ca6e2363f1fb699860ee71c58aea06062ba21bf98b23344b7fb3e1a76a65c9e60c4c701d9e27259dba086b0e3d495582b28822c353123dd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6ebdd0133461f432cab4bad8fe326a30

    SHA1

    f3a8a55cbbfecbd216233c0d45d78e01b83ee704

    SHA256

    9cfbf0b00a54e32aa0cd0af4c0520d2c5a3847de7027dbc2cc303c257a736dd9

    SHA512

    48ffea59ca42dd6f11636c34797a2ea0ada9465ad7ab84df2d006143381071e411cdc850ab46fdec5d8869cb1b3f5d75581592aa1aee33a5972ec8cb400dbba4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    23ebfe569d2c18eec53c98ba9e468a19

    SHA1

    796f2199bd4e83ca3743f56ab635ddcb2794da8a

    SHA256

    b9d6474b9966fb6ca443c9f5f6dc3ec08a5933b76dd91a3ac282ddfeb112d7de

    SHA512

    3706292277f5d6b4ab7d1f26833f0155dc840a5cc0f74c35ed266420ba5a7598efa4e722c4d0d4d8634fa0397d3f22927ef78404540cd5a9b3fa2c55ad10f472

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    28238e6743d54a06e31282a5ae72b6e6

    SHA1

    983e3f1630e9b68d2378c81e3cdc02426b7f1ba6

    SHA256

    3ebeed36bf2382acdacb5ab6ad1c35f2631cb7e4989dd4c0fab2a42ae3a7820f

    SHA512

    dda852073979f25d8cf4ba62b37431dc8cd712f436834cad0c78b4fcf32694c3da21ec1296ba682b3cd1dd4aa367c9a6d2ce65a44d891778fad9450fb1982d89

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    392259406ebedfa8d67ec92f0ffce62b

    SHA1

    c50cbb404d0a2746a81fdea2b71118555318f630

    SHA256

    095bee1d3bf19f8c2437b2c776e5542de089dcc75cb45b61bc51c577be69e712

    SHA512

    4f21550ec3e62b9e862d16904e3f534385ea38e088ea363935f41950c9364cd0f48a3c45f5c4499bb0eda9431804d3ea3ad600c96d7de19702e7f7c5733321fa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ce2c6f79a9efea419fe04ba028ecf0b2

    SHA1

    1760802103a942d4349b6561aa3d16d6f2062fcf

    SHA256

    9df963483a214e3bf02d281ec64556ecdb7f95db6c396f84e8b46b499704c14c

    SHA512

    17be055690d16bc6af79b641544efef498d7399620e6d460937aef7155f362791d198cb5e1668a5c1c55f338b50e58493adbcc77beb94dae8fa4a26bffb217b7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    18643f681fdf069d18fc89ad4c87b52e

    SHA1

    670dc84d8983ae77fded7dab19295e3398bd46d0

    SHA256

    9164630512d65f7ea4901ab66984bdc42b9693d21ef44c4efb12c3c8b6d7b4be

    SHA512

    a7e3e12751d93d782171ec3b3fe5ccb88d66ff0a956ff91fc30de01891f166a23d9ab41b1c2a2258e1a432ea6029c234340b7c7debe834021a049fc2cf8a02e1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a2ee59d139ac81b6a48b861c14a1e6cf

    SHA1

    f9ae59640eeaac737e672b139a88a3b23ea0ad17

    SHA256

    9375115a2a714fe790fead827a2181f85e96c66756d0c4e601db22df82a4e643

    SHA512

    24a898d717efb4e816fde750e0cb28ef0a9394f341dfab91b9bd3701f47f44adfa644de2970339f9ebb8cf9fd663d43ec327af76ba3f25a551bb5fccdb84adc2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    31f0e359b10f052a90a433cd38f131f1

    SHA1

    75745fbb8ff53ec616c3b0d815121816a6adf91a

    SHA256

    3cbca08b7d8bd12f5ba0e759734d5faaebc148efcc950bf49bd1d38619e9c578

    SHA512

    3d4741e13edae049b637be5c5d74836cfd8af104ebb3b4b7e528b3bde4733fe768ea07658477be46fe726524c8c216647eeda78ff868711f12f5e6042c80b2a4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c8fa4080b012c5c428ff35082ce97791

    SHA1

    990d3d14b042b4a41a961ba426a88beeab6ed303

    SHA256

    84ae6292524042a95edba14149a3cbcaf77db7e6b62eacde41a123ce05298133

    SHA512

    a1a09afa8ba61b88953283a6813396c0cb4190ef5f7f43427a2f87633abace13e951cf22bd80ade0c794bf7a7451728a19a9a9b84ab5e020eff9c8292235a2ed

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    50d624adf4373d9023d1cdc52be4a1cf

    SHA1

    c88d7257610b80b35e88be1bd44f2729ed2a7829

    SHA256

    84c34d0f144101f726a6e129297df5cf18a159a3230158caff57bd9024d017a8

    SHA512

    fc0f458cefc7252a7d3cd9e00e5995e3388deb03e6ab5b3678179ff3a9ed86aab5387184e3634a8760cc4935e278184c4fb3bd50ca184c3711c06e4c4a7f76ab

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ce877367a28256eb565cabae11d24569

    SHA1

    88c9adcb6b7e3f151074a7dd192c64c9460e31c6

    SHA256

    30c403b8dbe200061a0a76b421622e448f1724332a15d9c9adcffeac27bdb810

    SHA512

    940b2ddf3d7e36d9ad451ee6cf8e2e82ee8b1f7b58babf3799b600a9264e113c0cf26f84bc01e28ca27af4941025948ce249bb069283969b36329a6108fb086a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9c4bf32252b8e02ffaf31d4d75d61815

    SHA1

    22e12228dfa2354d1097165c1ea5f47c635175ad

    SHA256

    f341c36be6dd9de66637b5fdfc2b0a283a3a9d555f327bc0d5b156d21a7b9ea5

    SHA512

    13b4b504da53c6921b93321f5c5df7d92f585b4a55b56af631c612ab975cf742b5e5d551f5d2125324dde6e8202cbb73b0ddc8f800158a4c9157126707b96436

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    163cbe52f1165868c0a5eba418818d37

    SHA1

    eeb53c85defe1bb226cec7951e84dd308cb1352d

    SHA256

    aa36e7f27c003fc84f7d5aff9f5fa2b9b031cf31f9508df1cfe704082f75ce5a

    SHA512

    2aa18187222c95be7b6d4f80c211a8e7a3c0552d02328aece523342bb16e6d13a08df706930e0fed2885a62682b4a03a34660e8da672bd9755ff63a5507a2ad5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    53ec0c583839928bf16fa1600fda4f15

    SHA1

    40ef260e27913653f1058c9aee4e590dc373a11c

    SHA256

    fc5b10e2c4f1728a60b5d320727451fb7877303fd77228a477ad9f70093957ac

    SHA512

    d2c9bd60e4208cab95ac30b0ef63089fad737d4474d2d848ec5c98e3825e6124ce3017fffb0ef455b63e2ee54196eec36e2a5ef8554fb6726d73fe6ccd3b7a34

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0e95bdef57051c64da0bfb363f57fdd1

    SHA1

    a4f90b4c012e2e849c9cefb2c883979b149c1fc1

    SHA256

    2aee7137d16dd662bc6c22b2cad94fb558c3463e3816288132fa06bba8953b38

    SHA512

    1ada9c6d4434ed22bdd56891c308bb9c125f81b0767584c8870def070ca32e44fcff8374621e109163b07b4d589035593392890f0b9008517b5c91b4767703d3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    494950b6f31b46c24a63b82d2bfb20ff

    SHA1

    cb876622cf6fecb59c2d97d7a3288df19310fd53

    SHA256

    28ea789910c1159d36733e95cdb001d161f26fa82fc231b3526998029512dd16

    SHA512

    b9869121230940bb01e0174a0733f1f54ca9a391f649b24afe465d63bb0559f0d396d5cb0f3a64624c8c322ff6afd05229d6479b15087eef7a6f3e2c845d0f2e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e8d57ef63fe8d284838f01bb69fa625e

    SHA1

    ef8ab35d258b843fa56abb3f3ea6665084e47f5b

    SHA256

    b508c958fc51f76a9ee404e9596d013646e7fc4e08afb172b7e045da237594dd

    SHA512

    11fe8ec4da858a7828178b8184a81b6aabc432393d1a22c13e3f712fe11f5365bb6506a07cd027bc1b8cc62edb7767362e5c0e99140778a7189cdf02c86b3800

  • C:\Users\Admin\AppData\Local\Temp\CabED2.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\TarEF4.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06