Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    121s
  • max time network
    133s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    24/02/2024, 12:24

General

  • Target

    a1dc7c32faab42833c1a6733ad7f994c.html

  • Size

    11KB

  • MD5

    a1dc7c32faab42833c1a6733ad7f994c

  • SHA1

    3084bcaa4abf59f1b3889558d2fabaec8d91a838

  • SHA256

    335acff4b335a4b0a02c6cd8bbf6322f4373c03199fe11b218feefd569d50328

  • SHA512

    3a88c41d8a3a2e6ca684c27598af55ddd38ff4664909af3d9175186da20e9de55184b44f432aa2e66f1bc25ea3a3f13f56af7bb3cc3c59013943c6f803e23559

  • SSDEEP

    192:nscrRZxx60V1/VGuQf501V1DDtj/lJ9D04or0GrKXN4EujZ:sc1Zxx60V1EuQIpj/lJ99oeXN4Eud

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\a1dc7c32faab42833c1a6733ad7f994c.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2512
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2512 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:3068

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a68f39a7839b3888249526638508ad00

    SHA1

    c140e36bc2bec5455b63b451074442e3ef3a8605

    SHA256

    49827edd7f0ce1695427cd44308a0ecefecaee8e7f297820f54e0329f2a52dfd

    SHA512

    47ad61375964b9b2348d0870425f099a8b4ccabb91b1d91ab1de8b73e332cd8102be228ab28936d453198e7b8e789fc23124799b97219c7db4c44f8789515110

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    04ab493a24d89706623ff60fa9041629

    SHA1

    b88758e1f1c58ac4175c25546f0e404362101d5e

    SHA256

    3e4138656bc0738d7d470a42f7572138655077659e7db428befebb098666652a

    SHA512

    f9163ec534aead2bf1eafa62e66b84124f582bcf6261bcf0f37164989d5d79946570eb733b0867a28feb99a97ec34312a5fddbba19a42ca6174defaed8be1c54

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3b8e88c070fbcc427edbd801c33c0e2b

    SHA1

    8cdf817022ea417698687c51908b5bdcebff5cde

    SHA256

    e4604965aaa7ca45699e240e2e42d9ac260bb1976b2463486d273382edc8f105

    SHA512

    7b2bab1e06f47e2d70de3eb56f3bb2f59503bdb9af7184a8b8f1b1f19673a2efcc54ce6633cc4913229398820ae493949249a65fa2e2863c7a5c4326a125de59

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    72e6d49c18c72b90e91e4cb92a60ee0e

    SHA1

    7e9cc168a61e7807f207453fa88b6338a2d8c50a

    SHA256

    7c189dc9d56591ae3c57235bfb3de530cbb05167cc4846cd77ced3c0c1914800

    SHA512

    b7472f2ab4daf420e7a6dde872814947322892195328ce161c36b4f6064ff0f1dbfd2623cf93a002144fb116f5f8ff5e808c3bdca2267a1f1eab03990f036040

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    65adb7bb1209563bd122c1e89f824bce

    SHA1

    84fd2d03cdc1b7ff9b95f8e586a34d4c4fbb05f6

    SHA256

    4aa613d27526247e0b60c2a9cf60765941edcf3f5ec8f7c61befb11d6cbdad7d

    SHA512

    87e11439519cf8e13700c47e7a167c0d3737e72f33fed8d00d9faeb286c383605acabb2da677789b06da059f2aa656cd86558c46396db220e37132294c9d2bd3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e4127701c233d481ce09c08e91dbf9ce

    SHA1

    e1abc6853cb7417dd3441842ee5753e46efe5376

    SHA256

    6ec69fee5356334a787e633d97e60efce87c962eef8a0cfd75e47cf51ea26f0f

    SHA512

    d0772710f7dd6b498b575d664b75432c9d94ef58bc09c393f81f1697a4615a1d2b9478eed9b7b37e319d6b8df3b71639d6df0dcba3d15a1e3364dc7808929bce

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    181791c344d22a049a6a70e9c325ffd9

    SHA1

    d091a512f6082b20555fb26174823ddeefb1d74d

    SHA256

    3e4439d30b3e3bd711e74da9b721eb0f0e2344cee85b2e4339c645d06fb69cfe

    SHA512

    c2536ffc8d8cc62100ab8253ba0e7decc608b72f72482534551e99a6643021e41ee7eacefbcd39568f30f7981e167f98074142b8745eddaf68be3097a39bb8d1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d27024dc90ded05f2743a507a0816745

    SHA1

    56b1699005a898b557a3887e89a575aa2868fc73

    SHA256

    d2f144830e2b64fbdd95d68ae6432b476acc8f96ee1ff8da3c6c8e3e062be0be

    SHA512

    2578f288b1f476ec0a469cf95a6da61e35d552a68570690d34cdb3cd80a43bd7536ae2121d6c42642daa328f5b39ad25ab9c36205108f090940572763d84fda7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7964124807ba018018f0d9290b3a0ec3

    SHA1

    45239be3dd0ae001fb8c2afd2c6b26275e2a4d60

    SHA256

    11a7d89526accc75dfd39d58e4ec7739d3a89bb3948c9081e040547f401bcb4d

    SHA512

    7a5bbc7e4d1833b030efaa30beb6c43cc167e8ee424b8c50fafc14881aa25caf451809dcab8a9f7cafe79a07c0c9b45a0438f5355ce03f2b9ec15a2a0dad4c4c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bc102d81007b7daa83cb00d1226c914e

    SHA1

    39f274947216b0f82a98ceee5f8f8df35c4ee6ef

    SHA256

    b9977ffe2d54380e64299a190ec4203de14d0d7e4031c79cf0b66f3cb15c95e8

    SHA512

    6fbeb8b2854c199a0a7f118eb9ad62b8513f0331e407a180d4f325d2da9d006b566f88ebddec809d184ae8e553a98e33b78102b89209ccf044570dc1d6c23d10

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e63acd714c2be2cdbc297bc744bd8c4e

    SHA1

    e9ddd347c0120bbb0e7b995d0fea009bf6a543d4

    SHA256

    7c4e313a2c641d27dca4f172707c781c8944f16c9a469f888119dfc3538beb63

    SHA512

    67490dbcc54c0c6b624dc1d4d91b340458b3a411a42562499b249ea1ffb56a3efc92d375b2b8481aaf13aa33941c8f1d8342431bff18faeecfbb539ba13a6176

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d855b729731f73b453db84491f2c66ca

    SHA1

    0dc713c7684f15c73ffdc79df87c9f9b36a1cf34

    SHA256

    3f2ed9a55f59de43c9377fae7b02285fef116d3ae03f7ecac8a8093d9340dabe

    SHA512

    bf74a00e09b5939b2d022097b1c4d49c5a9c558a225e39566d5c14fd582a88ffe2a0dcd7dcdedc2a76b25b75ed15df9f52c541a163229eb4e164fa59989d93f2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7bb102118dc40374f9a953873307d3ed

    SHA1

    c0ba44a33fdbb736d7478451133968df7268ae02

    SHA256

    7ccae058f7daffd2cb8a460f1a3ebd5750bbd7c86d67320b7f88670b089f64ef

    SHA512

    f69384ccd7123f48dee15a3e0904fe2e5360398ab8257940681c27a79d7c4de3b47a67187d6e90158652bfb005614f63be3ec5e7d906975f71fed7a65af1f0ad

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    eeb687b04d8c1df86af7af8ed02cb8f6

    SHA1

    1dba6c553751c7b0d15d9d004f12b77045449dd3

    SHA256

    9872eac2c62e33b22a4fdf576a15d9d171ad056ba29f6a7706fdeb9e5a9fc6f0

    SHA512

    09905a7573e15f43b3743b2bd7fbf5caa1639fb65c9e4c8bc3efb6b4d2723c60eb654da0d8bf5961ea7f53d2c59b14b95ee360f63ba9c1c9c4dcbbd78f7cb6c2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    777b281eb655fdc028f35109601e7c4b

    SHA1

    29be4cb3d2ba7d84044d491f58b733cbda9c71dc

    SHA256

    22055d530a686ddb759154ba2bdb1d8b46e8a48a47ba3cdc8cca63f23d459ef2

    SHA512

    e37a64036af950aed8c3c4b4672c916009e30c797661b1ffe38d4b2bbbc4817a08218f8919d143eded5f687ed08d73e4f4bfc81637af9542d47c30f88a2546ca

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d190255398b66104a0fc8f75ec699b34

    SHA1

    2eda6a44b2ab94922ba7fa530af91e700bb0074b

    SHA256

    6a76bf4635f4663c245e62a4595e59a90fbdfd1d466b1a347b57c6a611a8140a

    SHA512

    0dd529df72d1a0695f7cd24070c715dc786cc0a4352c26f36650f1e2b23a54e862af3b887729fbee8052aeec1cc65a318f16d63ccdd5c962e3aaeb27663f0449

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fb39f1f2ebf546395138c42e4ad312ca

    SHA1

    479078f297ccac3b0c29afdf76471d78098010ed

    SHA256

    c3f19fcc6ea3a1be99951fe538c70944b3559437f2e45aac1f38ff343321c1a0

    SHA512

    5cdb8ac450ddfede7c81969dffb7308929bfe19ebd07154b6cac6a514a5e0d20955fc4a09877ed9fd32fa5953297c30cc31238bfaa0de6829f78a9b096e99f98

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c177f09af067a80331f88a08e9c5a70c

    SHA1

    72a53a4819ef8c84985c140c4c9a33ae415b9551

    SHA256

    6389428370243844c7145a869aa9604678e1ee8323a6adeb79bd3fb5261765d1

    SHA512

    2c71d241527388e49e55eb535f0c637bf5ed3f4596879268f873e92fb17baea3c35cd67f421cd5179e9ffe267332047fea1e1622cda39ef01b3ac1b95fb294b7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6c5b30807482551183dce1644fa84791

    SHA1

    0db7a4c7b7b338eef6a25cc35a4d3ff927f511f0

    SHA256

    754f69ba69beb21b6c53bdc8fbceb9493b31da68b4c6dd2b5b5ce80f7a2df451

    SHA512

    ec9febcda4641f0de1a3969810b3fae0157c89337b50ffcc1efa466c1ef1da7c18ac619ea823d3c67a6f64b7c13af0ce1381ba35ed0a3570e024d2462f4b976d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    72b9e1fdc44cb4364abb8c15bce6e12a

    SHA1

    10fd8578e119cc284fd72899864d7dbe9336b215

    SHA256

    c8070d1801ed345f58ab6175479dc54b5bdba09154b045ab64c18b451b720f28

    SHA512

    bf9fd66085c73738ae53b3a85b5056437cdf4d549f6cd08615ec5f3ae22432eea32dfc60e9367cb8170b4d92ef46381cc5bd67338c53d72d3f7b0cce0afa08ad

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    43c438b043e6102ecb9bfa1ebb93fc50

    SHA1

    3f5d4e55ddbd990ebb52aa337f36eddf88716ae4

    SHA256

    fdcffcf93c1446ff2a9c2a4b97941671e7f196e202382107d7f8625b63ae6e66

    SHA512

    12172202bb95dbd0074589d1eefe665ec02733005d8e43904b60755eb078420b1e5700ce9644eb413ee921c3813a7ddf50cb58fce90ebbfa3e7e43815a8cfea9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e04c46208381b163b23208bf844cc86d

    SHA1

    ebc86a833d4a0433e6b0b3c22239152eddcb74cc

    SHA256

    6842ee10285f10ca3079981e498e3eb3d361daf5ea3184d987c8bb3b04f47f62

    SHA512

    1cf15aecce64e9b0fad5a55e0832f19986cd708f03dffc3a5b75804a9d64077dce74c403a8043ab41ad0aadae62dbb7ce71939d561d56a5a3a4eee71488bed61

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HQQVSTWU\geovck08[1].js

    Filesize

    6KB

    MD5

    ff056f5e62d322e0ffb8006810432ffa

    SHA1

    6808ed4019feeb2bff2dc335ee8bb15b2433465b

    SHA256

    3250a0f23574ff6897cbc4f49c9bc4ed6dbe0192de6e12daa2fb01d64c04ee99

    SHA512

    94f02459d6b0527cc553001f0379df19eb10db181c475b43d60115a3ce434af96cc9bae5b372b960360570ff247616f09b7279792b6286ae2ebbb5407763e084

  • C:\Users\Admin\AppData\Local\Temp\Cab4646.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar4704.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06