Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    134s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    24/02/2024, 06:36

General

  • Target

    a12fe1d15b467d4425a64c77c4bf18b8.html

  • Size

    28KB

  • MD5

    a12fe1d15b467d4425a64c77c4bf18b8

  • SHA1

    cbda0c37681174143d5f0885e151bff5075720f2

  • SHA256

    9c4463208a4acf083edf2ae1e6cab77293cf3cd7ee4818c9043632531f58bbb3

  • SHA512

    ffa17b0b4d416db9c1ab8ccf03071fa27cdb432f54cc8f1188d2748594944462a4f70efa7ba9a4abeffd77398e91c7751641f966c09aec58175fcbaaf6f2f970

  • SSDEEP

    192:uwXgb5nAL2enQjxn5Q/GnQieNNnnnQOkEntOMnQTbnBnQ9ex5m6AzNmKxQl7MBtj:cQ/nUzeNmjSpL

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\a12fe1d15b467d4425a64c77c4bf18b8.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2148
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2148 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious behavior: GetForegroundWindowSpam
      • Suspicious use of SetWindowsHookEx
      PID:1724

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bd5f872508a210db4a13c2d470908ffc

    SHA1

    adb69c200bdfcccf67306d23dd894155b8459399

    SHA256

    b11e1889053d55094b03662792ecb422e70b734b38ded628be1e457cc8bfde53

    SHA512

    005eef3956eb6bf31fecc75ec2e8f7b57395e8883511177a02271fc3ac9e4a052689fe04808db711655c9974ca3f8c1a9c6bfb5800f3e25070ddac57927e3e65

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8f8f854ae2af79c7384687ecf0f69c3e

    SHA1

    d8d5c91e1f75cd7dc83834bf6120ad4028335161

    SHA256

    f230b391a70ef409c044c11b90b432723be5efe9f181cfbaf1a75de54b3c62bd

    SHA512

    9ac639b7f5cedb98fc64405c7fb6785811dc32f0d36dd0aff845f7a43de6e8a093b6626aa9b53d60b3d23de4946659a935bbb96d5237a6e3115db618d1711a92

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ab24dc093f6a0405c3cef36c6c2c590f

    SHA1

    50f0922a1aea6df5fd6ff20f1aa5e9ac6b758a0a

    SHA256

    2183768e32f297423813b6ed6ccd4c7d1302aacc0d928716742bf55c8461b765

    SHA512

    f777b1c89dc28617273a097bd7ac55e9d55e2f1a6a768314d4884282666d9f7da26f787e847bde55a72d32a197e49e1ca7decfb9a4cc7b2b721f04abb8823018

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e75326930008844fdff2f4eb7bdf2c63

    SHA1

    6f59e6c8fd61d315d7c84e87f61aaac75207d0f5

    SHA256

    acea0c63ebad12dcba67304caab2748f6cbc38d830d6951bfc2e91d3cec4cabe

    SHA512

    4b6e242c976fdaa451f3a0f06b3428d50626875f03ad7dbf2f166046052be1e7b366fd5a00261935e1dbfb3e3bd8bfc8a65358e5022242599b2ce43af8bbb59c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    446b1b81ccf00626a31bfffdfe80d2bd

    SHA1

    85a8781d3ee086ddd48c90eec8be2ad425196432

    SHA256

    97a48bede31b18ee3b2f8cd290fa5a5c77eae3345dea86f3ab451fad809a8f0c

    SHA512

    23dd53693aa86e48c6f9d52fa5cb343d5f7601c3e322274fe1d842488e037a27afd6c7fe27504afbfc55d8d89c97b2d70ff7c9d68097db10912851addbe85418

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f00e8d71e515de36ed2a7ac3a555bdd4

    SHA1

    78e893c8a5516a7ca955439960a9ada4f6872e93

    SHA256

    82e0160e6c4497dd12b9150452d7e921f1faca0b95ebc2b259aacac2c33178c7

    SHA512

    2a2f84f25bcc0f92a8693cca0c0c2d9a3cfe83e655b34207b4b4b38c299857a5f9d25542ad93ff4e74cb8262c44425506900b3980785521dbd0da0e3cd5ca7c7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d8f958f94fef7ac2a8d5c22a5c44942a

    SHA1

    ad9a24973954610c6ac83af5c17c200e8cebc63a

    SHA256

    ce7b5a9f347dfc0ad4fa487b4a8d9647dfd9ddfb5d044ecea385c585af094798

    SHA512

    44abad3640e84637d4a6bffadd27ed3ff3449825bbda1f323af2ce39f40234c7a1c0b179ccc91c1efd7d6b6971cc8262acc352efa1f5dd2428b115e1b7523b29

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b8d10d248ccf49e236e71ed19b9d48ba

    SHA1

    70430a09f91f42132989cb2e841d76b044a5a5d3

    SHA256

    a34c542884c67b88e413adfdcc813e0dae91c6df5a0656cf0a8656cdad7b518b

    SHA512

    d335a26d6f83bae9cfb738a1644bbeda4ce85550e757f7d71cdee0f9bff4287272630b9b6ecf32975017bd2ba32dd679d7a4b588b81c2e1b81dc0ad405a66006

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    30e99aae668446e41fd3b58f2f42d265

    SHA1

    b6a32a79123bac12e88024a93f0852dea91cb0fc

    SHA256

    714221737bb4cd8f7bffde9596c6ff5393591e5e2cf99196160f7688ed0afefe

    SHA512

    96085ceba10d97a9389105c8a73e029885b95fa7cd571c84ccf418acb460c4ab93c612c463cc07b9c0694805826f2ac11d8a2d85da2ff5d46e998b52b3e6c667

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    044ddf91eef6d9f4a78c7c6ee2bfaad0

    SHA1

    8fc28d2ceefce50ebc30766b5999bf44adfd463b

    SHA256

    a44230c24e974aeec173537a73744a28b2cba1e2c1f8bcc244696ea3f4d4e690

    SHA512

    878c107e75c57521737f2296e44d53a393e5147f919d16ff6b4ae8d30cb9632743c2af2157267c2a93e30dd6904c40381ff449830e5acbe184a9300496da36a5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a399a580fd197f81dd9ba3ac7b3c0229

    SHA1

    b7a2d73e609b5bc90d9803f195fafeb63d5637d6

    SHA256

    c4f14a9162854b8833bf0994671449378b97e07cb2f428c50ee08bf3a2ada678

    SHA512

    ef5377a103a2aec7a608062a6a9f7c7b87494386663fb9eeefdde249019126a507ad36aeb057b91b6e254f2447981f0d3ab23bb5f0e4b101e0bfcfad788d3dd7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9a1d14428594c8e847377a89f35c2112

    SHA1

    ddc24a0897700f5d304560b66c7c6b01d0a29e63

    SHA256

    9c05e9b7ea7ba8ec171fc36468488ecc77972318cd1fd11d830044a9cbf36d15

    SHA512

    10b8bbcd2549939b79d768184dd691e86885d2c39aacbed46dc8dc7cc2697117abbcd4c9b06163442fe8657d8bbe44f169548b572b4606cf48ff4151d2f054e7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    97312f0a981b76674e8b62e17053dcde

    SHA1

    36da5a9999fc3dafb5404009f3e611c0531db972

    SHA256

    234a1d012c1e8c1242d6c1750d542a00f090b4b855a36ccedfc128c40e78e78c

    SHA512

    2408a88afa330041531ed3dcebf95d9e56a81fd5e2f593fbe8fbedf3b92b4f7cfcf9057053f377b5bd47eccea26179902543834d70346e8b859dcb0e09bfbd4f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4735d97bd93a1a72c16200a812540a98

    SHA1

    110298f30446cd4abe89a9e05d6790209e91d086

    SHA256

    bc2db4f9a4be2941da4b3101419837ecc288b67365182895c6da60aedc9c3dc6

    SHA512

    d56aaaea4b1f67e3a4446ad7bc98547d72f6dc09e7f106d9be44f4f3c680d15d88c64a62babf97038c1bb026e8928fad750750f159b072a1b37bd69996a89d1e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5da494b3ca31cd16f106a9b48389ea60

    SHA1

    58c1397b2be47e119d85908253add239093a7091

    SHA256

    517eafa78afe7c4b81fd9d47fea70fd64a4b953147682e2733f9ab1ca3ae70c6

    SHA512

    3402b51fdcdddfa6c28915817d5d9c558ebb1b85cc026e63d2e6e76c6a84f9cfc83d95674569cdda7eb0fe460cf23da60ffbaee5dd639c557862c83429ec03a4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7ec2b48e77eb5d9f8a76ad0ec5c79430

    SHA1

    b4ccc5fe7d691bf98977857fe420391e95701cc5

    SHA256

    7165f49b017bd5acfa2fbdf01fe91ba0d1f096be96b95e581745952d52a6f9f6

    SHA512

    33f994d3bb035739edaa19072286441d73ee8c1af27598f977819d08bf06dd9d7c09bb064e00208b6e4130e366ef245e4bf17b21d22d052b251a546e36eb114b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    dca9af6470a7e067c72314ccf3a36723

    SHA1

    16d16df3dd15a8b97962fda60950a32d6762dc64

    SHA256

    9a06d7e1cfac58a3a07c92c875ab8dbae5e7efe60ed0d6b364400d84714787b3

    SHA512

    3fb5a46b8731219b9ace4671ebc848883cab0b504c21e4351b2c99e5445fed77ba6e8a4d73c3b71772555a0436c657ebc20ac5f44b4b4537667f54b32636b0fe

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a269a98658e86b4c68e661f1dd99e370

    SHA1

    eef5dc0e23779ea52336586cca993c35a3af0cf9

    SHA256

    d7a1cc8a9eab1370f06f4ea5598bdb07d223bb948824173036fdbf4abbdb0498

    SHA512

    7559782298b25a2a6cc36c969ff8186ff3816aade46611560b6d765e1d93c33ce598f929ce415e2667155c903341741cd8b38d5c27367c7579926a941368eccb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b895667464e7a2fe5069230ca96730bb

    SHA1

    bc5f78431bcf2bca5e76cfc4f4414029776f31a8

    SHA256

    79d02c7f4fdefa6535bda9cc6814c565a8804bdfb16e9c3cf4e4eb7691d9160d

    SHA512

    88d43383f1c2990c1823237249a868bee5285f0c29087b394f0753e2fc1345326b13b7769f44e19819e90d3c1efd4bf075d5375deeeaeb129be9bb2b9c88b422

  • C:\Users\Admin\AppData\Local\Temp\Cab370B.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar37D8.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06