Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    134s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    24/02/2024, 08:02

General

  • Target

    a15bc3ec9450c1e11ed8c774b3fb4130.html

  • Size

    13KB

  • MD5

    a15bc3ec9450c1e11ed8c774b3fb4130

  • SHA1

    5f3143e11c70b338ef0f49b9bed92f30f5384b87

  • SHA256

    b4ad899058c701edacc759aa9f2ba17d85502b87aa4accc387c996d8f8047b67

  • SHA512

    c7b9b0fc15cb1a81e4e2bd4f8fa19e66f6a696aaf561aaaeb68484c6ef72b543033102d2c9c738e8c9ac980bf2fcd97f1c763fb7ddecd24b5e041d352dc23465

  • SSDEEP

    192:+ren8VwgJoP+IGA3Q/LwlLuuH8YCWCz7sHNR+hOHdSPEQAn0L6FBZM0E:nP+IGAg/guo8YCPstR+hOdEAn0eFB1E

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\a15bc3ec9450c1e11ed8c774b3fb4130.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2872
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2872 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious behavior: GetForegroundWindowSpam
      • Suspicious use of SetWindowsHookEx
      PID:2492

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0a90bc611f12b4babc4bdc44d94f109f

    SHA1

    ae11de63ce96a2af1dc9229da545f05723aacaf3

    SHA256

    c87d979e772bd9912e2dd5a7272de4d672a421935d3321f85668027b6f42dbea

    SHA512

    68e87a6b8e5bb182a86f27bf0f8097cdc10c5bd2761526db9d035f88a6e2b3391aefde48877a372c565eb9a723bd12acf0f41f419b33703279c13243e0049d29

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    28b82fb389cc3aa60f8c1221ae0e3e55

    SHA1

    17582f02abba216a8365c6599ea57a18426f1ed3

    SHA256

    4b5d89667e58579316c6b7dcfedd97a7ca1fa7537ec4a9aaccdfc14bd98eecd3

    SHA512

    9dc323b05f7ef96159f1b5fab886067bf395792b1fbe97643ab5dfb886464999187a10e23672309de1276335538d758ff8ca85e865431a0cfbfa7780fe427767

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0a9fe638257e0f6fa2e48306cec6aa4b

    SHA1

    4184081fa0ba3212f1d6e3cffe161dfaa738b755

    SHA256

    79ca12fc5684968cb3a6072be9a1be655b5deaefa8b6e54d8be8973c3cd76e48

    SHA512

    079154e2dad7c4a4a7fb10e448cd08bef4e64b2ade02edb8e659b1d5ace7e2aa6ea589c66980581f8d706332cf6189eac372887a11b7e3421928cc5c766633af

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b4383c87800140153a2e36e7de47a518

    SHA1

    4c0a6f84a29c539183b286af86a61535c81438ed

    SHA256

    f0bec4888916e68fa781a96d9f0a3d275eaaeb8833b934c6d181f42a7ea555df

    SHA512

    7b2c05c22a6f9e014b8b8477bd4326a7cbfa5214597106b25b813a84cfa95f87920689fe067da047a018e4a21e355607e6c58a15def113dce45c410595084b0a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    48dc80077077bd6d7482b44a67b9a5d7

    SHA1

    b50f80f25ac4e7437f8cfef5e56f3affe61f6356

    SHA256

    b7778849d3ae592ca6c06dd1401775693e63ffd816f9a9dd3e1215aa716afbf9

    SHA512

    373d273d930302313fd4942d98c4c781ba9f76b488a16227b9c4bf9ad6c5e81e7d5a0155200cda3f875a10b4e10486c0e7887c39079d6c0e47e3121a0cf9e618

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2a64f2c5d7c5faa7d063958ca46ce672

    SHA1

    0c9cbf20cf75c3e974970212964f31bdfa711da3

    SHA256

    2ac45fd81c30ccdc7846a83e7fc9d5f8fd197e73a3452d32cb407519ff180526

    SHA512

    eb402d5d95f66f3f8e3b23ccea528ca47153421c1d19fe2a20abcf3b05cd38337c6b501f4b8bf48f28890a8d38b4cedb92a5028eb3432b665bb8f97e47089c1f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8e013dabb1c9f6ce2ee48092a796c193

    SHA1

    0828273c1311685ae852466a9b05dedab4b1676a

    SHA256

    c42940734cde6db740d630cf39e6b675eea2585fe78247d6773ee58eda57a07a

    SHA512

    f393d86c6c8ad74421852b9f1000f9496a46d6b0fc96fc057c44cb4629ed5b63abb1f85ec19c9bea9b278bbdcc941ddf5a7704356df84d0cb0cb748507d276ed

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d63680297478f7f4e927df348518ddfb

    SHA1

    3cdd36ad37d3dda4782c1ec4d5856fb39f1459f1

    SHA256

    6cca8a11475d2684ebbbed278f78f755c82e36a0f61a956ecd201b80707342c1

    SHA512

    098f44ab4faad06b5f0ee7b84595e3109c18157d24cf6d3783793eb0efed86c902ecdcf1c5b62c33695d4e84952194d310758df524f151f19d3b173f26a961a4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c411efdbe19bead3175ad68b06854638

    SHA1

    7054cd0c56254926d7fab46a2f0d99c796f1750e

    SHA256

    09a0d5f5011e709f44f8f75f60db620b4c36dc7c2dcb9af27b50627ba0dd7751

    SHA512

    15688e351b9acb5b114d9344419f489dfe01fb2e9f8cafbe5a1cecb13c5fe1acaea4b93fd00f4d6e60e4ae903f577e2bc5ce84ebe4d3cbf2cb14e07552b41dca

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    98db7466367c83e49ee50b8bb227661d

    SHA1

    d5577ba48f096285c80c11a061a7bf96081f753d

    SHA256

    68b7daa3a14d14a653820dd4fbd1c722b972c50d5db789a9486043aa21e78e2a

    SHA512

    e67924b68e91cbfe9aec7be03fed34bcdd92b1e6e691a2c46cb00ca38f618d68c5d0f15a5aa4184f7406d7c67e42cbc1c2eba1ea003031f1c0dc99c3cbaed2fe

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b7c9fb5770a299baadcf75d992d55860

    SHA1

    ab8fdeefa9dabf0c34379381d0852bf2190efcd9

    SHA256

    48ad933d35f84fc8f45d1cad2c5898af33090c0cad7b7f17c537f4ed9b4c67e0

    SHA512

    abb1844ada9ab87ffdea742bc317d83e1bccd50a615b55436174c482f5c784b2ea0c6aefc769f88b59d4190d3d14ff7f294ebf7c1b435734f11b2e764589fb87

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    32bf8c94a671d99c023a2dd58001a10d

    SHA1

    6343eecc605ddc9b80ad14dc2130c180cd3fecf7

    SHA256

    243cb1e5584866dcb6a3eaed60ff6e44d36f62a37a63d6e86421a6e17ffe96c7

    SHA512

    05bbad9b330c32f46081d6f31392f32b9f92d22840885ac493554149ab0a8e26321242aab3fb048ccc92cef8cb20e8fcf75d1e5668c791b0c5122b9982e7bbe3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4ce50bda37eeb3ff8955e802c95a5e4f

    SHA1

    43a6290882b1921fa668c03f29c801d5746e90fb

    SHA256

    23d7fafe2a6fa365422d1eca6eae51bc5713354c12c8d5a8207029dd41b84ee7

    SHA512

    fd52d21807bcbda95ffee5d1a1c35b3842a2fe8ef010db148fedd6677c0bd6e91a89496474571edec362453d9576a0765a8cd72e92a27a795b6103c3f46201ec

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3161c25f6aa2ef5301b78fa4d35a1688

    SHA1

    31e6f5458f30392ff82f4e46132d0b8806445b7d

    SHA256

    e4ecdcdcfcdf017957e79f9ff428068e76a487677e1919e441c0f396f7c159bf

    SHA512

    f0f3c98c91d1d146dd63ebe7ab74141e5cbd69dd8080eb3771e1ed310fcbe90f6a56171451e5c246a1b9b7ea0cd405525dbbf7542336f3478b87fbfeaa9c9d24

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e634df65dfc89261cd4ff500e2527548

    SHA1

    0210639289c3731c0e6826cdf7fbf951e7dc19a3

    SHA256

    6676c81d5edac0ea60457c9ca7936d5212d170d1e14e5ed32a8799bedf2484fb

    SHA512

    062cf36dd97db89babd491cd1cca2522036f2cffcc9e78789576384354d12dd90b9e2744f3d881ec8dd8fef5a7dd6aa056a6aafa900831a9efeca948c5c5281d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8917ac0839176da1ce85f39abbcc8681

    SHA1

    e8be25ab6084bba9bdb8f80266362520785c2d7e

    SHA256

    2324f618322ab283d227f8a463eb7381b790c5a6f8fd26f22531c041239714be

    SHA512

    f2ae7c892751cce019c206d8efc14997e058dc73a6fbdf1a18ec11e740103e543055403ace5cc84d6bd89e0a27738a90d666424d1d4879ba678a6d778752cd66

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    26cf11d037510576eaf73a5a280e1497

    SHA1

    36587a1b1b5e1d243bc71726ac544901931344f7

    SHA256

    c45b63a22d3007a3fce24dbf586c521440bbc6bc1dcb653d4908be18f100f4d2

    SHA512

    52a3d17ef5c3b2b3ccbdf63cb0f68c520159dfd4c36ed2430073559bf6b297d8a74f29a65808f5a48801c7439b2cd4fe8b0a4421bad7bcb30cb4605f652f842a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3fc248d640d43cdf24f11d41aebf3ff7

    SHA1

    5749552025a11b0145df16c2d9a11aef1f062d0f

    SHA256

    03a08ce11ff525c61b85de09f0ed6832b8b0d1ba47caa46ef5751ffdc7960324

    SHA512

    48c920356729aa99cc41b49e87a8ab7bc702b3c6c30892156c2d3ba44081b4185293ede1970fdafe151dc1ba06e65fddbd169d5c0638a91f7ac5a31f3b4d8ada

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d9acdc438a12b80c421e3576d2d95aa1

    SHA1

    d6a7be1a6d947f94bb354f2b0311cc68a4e1e111

    SHA256

    b579df64aa49af8a450fad29db8a09f7d8235558c0887b1fe192531fe629a885

    SHA512

    d7a0833ec9f981db828b6f70f669327d6c93e0728697ccc389204e48ca105cc6aec4606de23f03ad85c8540e4c378c4003fe0b783bc74bc87e6827197f16cf36

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2275ce126d1413ea9eb36095250460f6

    SHA1

    c3a9711a28ebd105349234b6006d5d6f4b3e1ff5

    SHA256

    9e9b813145951228d80a618eda76ad458c5baede177a163a7abdc97e96d276f8

    SHA512

    0d91661b09bfea886182d9981c4ba8a9ac0299a69ddc6371fccc15f4e81de1c30fcd8f2ba2c5984b56ba328f853a230f7ee8e6dde949d0bd0c87d4d409472706

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ba77fb71435ca8b8220da324f6b23570

    SHA1

    00f61f6fd25d31c874398df78d0d9e4ac4744d0c

    SHA256

    85f8f8f997850bed2f68a3049d031b0939dcb8c597ec1c3e05c3d1f9315922da

    SHA512

    9dc2f0937b08bffd72dcfbaec8c2fb2bc5b0d55a2b76c55b37bc97c0450a5b9eb818b55b316c12b4b28173dd9b5a0d6cd0e36607b7102d28d80d86d8e62a003f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    433d335f99a5cee4a16cdf67a85a7958

    SHA1

    d5bc7f33be9268506b81a570c8445ddd9112c910

    SHA256

    9619758ad551c2eeb4b8d46d2a61aa59e87013b590f2abfff58c04a77b9f99de

    SHA512

    2ba61645f7bc78d8e929e6bf99bfa59e4b76c189f8052c511c74a31fcc0491c49fd46acfa7853b8afdf3adcd48ce77e39728bc84013adad267422d031e6bdb12

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0081c9634833963f46c0f9658f403bf5

    SHA1

    62fbe80d544c446311e3b8d6e4bbcc119158a1d3

    SHA256

    6f4ba6c1440ebef451cb1e37bdef9cdc1f4816caf1b4e5636635a78d3bb2c021

    SHA512

    7f7efb3f108b669d96280e30a13b65b93a6e7bab98fd5ab16d08c695c383dd42e55d6128b6d42d4ef15016309a6dd10212da2f54893012de2f7a46a0ebac2955

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RYNL6UIN\invoke[1].js

    Filesize

    12KB

    MD5

    c9c338b6c81ab7de7829cb37c7c87fbb

    SHA1

    982e9036ca6abd5ff82801d6f3305bfe66dd2ef2

    SHA256

    ae85874c54d480a9736764165151db438bd95bb551476118eecc6f66d73cec8c

    SHA512

    56d25d18fe7e1282041839463834345b545ff603d74e81bb221971819b0b148486bf799fa21e571e843110c1d9f2d9047f0b13b7fe1993803d1457bd6014967a

  • C:\Users\Admin\AppData\Local\Temp\Cab1622.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar1625.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06