Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    134s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    24/02/2024, 17:32

General

  • Target

    a2585d4f7d5710adab1752c07b55747d.html

  • Size

    11KB

  • MD5

    a2585d4f7d5710adab1752c07b55747d

  • SHA1

    89d421401e1dc1077b787d09c1656dd0a9c18ab7

  • SHA256

    e094bf12ada67c8da01f9a80a6d68abb8fe2a03d7302bff0dc95868c321d9277

  • SHA512

    42f831b129295b437042db6904e9076b94698ad2b236c303a7bce0cdeb49e9f70b702eb6329dc97fb4a88863495ce3c92b592534859ec2de4f3dfc5d55209ede

  • SSDEEP

    96:uzVs+ux7vcLLY1k9o84d12ef7CSTUqGT/k2zplXXp8As7J8xR/lVHcEZ7ru7f:csz7vcAYS/bSlXXpm7J8/PHb76f

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\a2585d4f7d5710adab1752c07b55747d.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2972
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2972 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2524

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e8723efdd6877b0feebbbc23c30e8a80

    SHA1

    c06cde2d451da26b9b36b0400d0bedc50f76c7ea

    SHA256

    c08d92ccea2acb31bc23cc1fa864d216232ebe4d57c03e101d429498669444d7

    SHA512

    b093a8da51e2a59f8d5e82ae9a845e951919ac7f1dc2559019634f5ddd8733cae3115971c091b8a939844e41527c4763655509a8893f3e10480a6d7dc185b710

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8d255c6efb1d19e4af28229dc08496c0

    SHA1

    99649f71391fb4a559a03b58c90a8b7da29e1bcf

    SHA256

    0d473c3cc586600fa43ca63de825c92f7ccee2cdd0b8d5cd960fd47b8582649d

    SHA512

    0f40c5bdfade4c869492ad8a815b7fe3b97f2d0cbf52ea739c8e7687f66fc6130dab3667a53f26db2d05704243b3bbd39ec55ac62e1d0789ec138db5f21726d0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c6e07c0d3a49fa56caac446518c3c986

    SHA1

    32f84d495e45cf05c0aeea2473264aea43588dde

    SHA256

    2d1ff6122d3422c6df51e10bb773ae1f383104fc7b6cc73c2e6755578b89a80f

    SHA512

    56177b67bd6d7f18a0feb19f5b1345b6e2892baf8e05b0a451b1182e56bad40b8eb13875dd1bbbac9d4b74aae890d1456d8e37faabf5907981b1d8e8abd98b7a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c0e87050015263e5344ae83e2c9c4ed4

    SHA1

    fa2eb6eb5aca1cd82ebcdc0236371a8b063d66e5

    SHA256

    475821b6ab860828e7306678c55c1ac9c215c1ba2d39293e9f31636a31f32b38

    SHA512

    490711a068672319c1ceeb729e360266a702119145f8297496f08feb14f3ad59599d77a5acb59bda7b11d1be487251a1b8abfef286d2b928306262df5a61e9d7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ce027fd7bd6d890d59c03640da240915

    SHA1

    1b4d0596cb6633085b252289327ce1d9fa9490ce

    SHA256

    b5e8f162be6714712cd66d2bd1e68f2a6055bbf427678f9ee93acef33fb8b29e

    SHA512

    3377afe578d14b9886a5a075e613589cc04f22c2587fa667384c6be2edc46f5038a7d6b3a1910c788eba13e860e2daeb919117643efd813dfef7e23d06a72e00

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d77a465030083ff61033957380c08fa9

    SHA1

    a4a132a847982ea73bb4a99f743b2c3f24c29ecb

    SHA256

    1c0c97d1aaabc93a9cfb52635c72b25ed89b583e2b5dd2bd89ae5b650c2f5bd3

    SHA512

    f3628e9711927e53d6f22a84bb55b2ef42108e6052295aaafc5e893a6e0dadfe1467d98fd0a58823aa156a601f93f8381490ae4917f721e998b403ec616c1418

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f44725d7e110ff297766849543a4d856

    SHA1

    f456ab7f9c357375ef50b66dfbf7e0e213dfbf2f

    SHA256

    4cc88c2a8b7cbbf06aa9c85b387124376316f01742779c2f0487474eb43596a2

    SHA512

    61fdef1149d38a66464e132ad75b8e33b94d5b610e5a630eb5d6e87a942802a9d44c12a7c08d6b0858a201aea9b140e47161d05463165bf1d627c27f95ebb6f7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ea3fcdb0b053eafe517ee8609e8bc8f4

    SHA1

    8b86cdd0dc33921d14c081599c153d93745759f4

    SHA256

    a57cfa9449d1643f2d6e58d68cee77372321022617c693284b285dd0f75a5f3c

    SHA512

    c2d266b7770eab6bad576d2bc0a0ad787a8d48c99ef2432059abc7aeedda3199e0e2af66dc6757a74d08c5ffbf9e21c4b145e095bc7dd49893a9d65b8abc990c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1b119e6df82d0a678e5c0576ce4d09fb

    SHA1

    7f727fb5a27be12c441c19fe0d8a3093bf13f51a

    SHA256

    46fbd609705190732afca3f4a887def682e007068e46ab2c74b2f41a44b782ca

    SHA512

    0d766a7265c3f332fae9ea0f89750cfb05ed0111f017cf118097d3cd275efe6a12d79ddcf49f92a2a8d6e71f461092793b50701764bcacdff1647149a78a53a2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    63397684fac19a480e0c39851f8698b3

    SHA1

    dfdb3173b9dac19678052b66c7a301f500d5b10a

    SHA256

    9061a22c94270aea8264f6da82a73d4f529d7ff8aa3df01374b9251681af9958

    SHA512

    9c57bb8e9079e49ed8262dff56c03499256b6c8a2ff8b4a9ff5ab7021f7d3d95c39a2bdd9be32874fd6a0cb6833e6c6e7100f268e285bd36daf0751b80244499

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    22040e08c0a325cf08d1235458781ec2

    SHA1

    9343eef2acfacc809fb92335de3ffdf748304fa5

    SHA256

    378b8995f9ad3a7dc048cadfc6696f25958f2cf31abe58d2db29026761ff393e

    SHA512

    568b690b925eeab5ca57b9d7ab4abe5a586eb4b0a9cb8ec89c3937a98740c57713143452128eec60139c7a49336ef42e3e60ccea2cbda20c19bf1520cc4bfeba

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    13c1a66ee02fa34f3707a7e9f7386b05

    SHA1

    6224dca196d12f244da0a5d23a9b1a6042518c50

    SHA256

    79b7e4264fd8ff11e9bdd524c681cccc446732286440fcd933adcd766665f28b

    SHA512

    b918e0b1bbfd69551109ff8aca7bb836bb8be052a4a10ee4a9250dc1066131ae64a1eff6fc5b8061ce4a572f66d66115be2469b7c13b790a4d22661c77f3b805

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5e7d09f15436a763cc88a1eb769c81b2

    SHA1

    0d9d9573683a87ba53f5cda1ab4a487a50168b61

    SHA256

    2a5377ff232c4e972d8139f9946ee6a3810b2c05c377009eb4f5504b9064c688

    SHA512

    655179ab49bf7b4dacf0c181e644e3508e80867d67f1e5309f06c88b873432e6e7cb4ebf166163b1e298facfd9134d2cf8ebf023dac4bb05cfedc967156c48bd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0922e45062a5daa6a63445c5de3ec894

    SHA1

    7676eda269bb037e19ab8b09d7645ca8ee5d8465

    SHA256

    0325277694285564391a4f83519bfd3a404c2448ef07f9851d8aa5892d4db3fc

    SHA512

    470abcf9c355253f598cb6ba0f660bf731677a9a3182d1e2e726f598ee7a09f6f6327adfd6e42e882a2a6b3a6a2aef410b456cd7879d592baf067079bea775e1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c78a442e67cef24720a1353713aa43f7

    SHA1

    c09a4095a4a9dfa5321a2d25adf0a1f4e8eb4962

    SHA256

    f8d49e0457d67aa6bac5a263348961063c2b28b36b3a9676100f7eef127ebee4

    SHA512

    94d079c0c20ce04babcf257b476bedde8adc954f644730b2036ccad2904608d36f26903f1004f87f200698c034dae536e97822b40f3c14237b375a186d9fe284

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e97205f65a4462c12fd2b37a12fc741c

    SHA1

    1466c1dfd76f8676ebe3b223e0f67b216bbadfdb

    SHA256

    c27b97203ec5c6760c842ecfaf98ed15d43c89ff5502dc433cfdd8df11d629e7

    SHA512

    3f5e3d9a63285fd1b7f62fe1f0c62690142190676caf47f4bba6010f962f4834ffaa158342bde2899f3d7e8b0a4bba41f2e0e1c1ee2a45aa21a181cfc8a0a9ca

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b2ae6f1d7551345dc5955a25bc72bf46

    SHA1

    a830a0e303d62c877f454e76db194939f9be4a65

    SHA256

    f6ada2d240b270adc4784a8a7ca76e49a708a8acfb00c8ee2a2941c63aa79ab1

    SHA512

    4e0a65e104861325bb5017dd4b52e0acaa8b03de96dc52858640b22f6a09e30bca3e9ae9e49379249d0ee16874f659ffe17966879ae5e41f66dd25ef25444b64

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e989e8df109987453d0b892fa9a7aad0

    SHA1

    da16ca95c8b821b5ea56d3937b571abea7890ba0

    SHA256

    6ed8dc3becf776a89021cb68f970d24c957799421d3afbc13f37ca8fcea254d5

    SHA512

    e1e6623104beec5423de1dd1d83da1cf0c5b21538f8e403b61289ab5fb9ee18642d6c50c94122c5d443c9cd6417b94a7ac825487e8aabbaad9fdfcbba1b1dd7a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    51b283076b0beb615787ec2ffe327002

    SHA1

    f33725b586f0ffe302f1aa7783621ad731ba427e

    SHA256

    7eaba5a95493847fe5a1adac7fb0f032c27f7c4aff90caa6165fb99bb7ae153b

    SHA512

    7f17151eb92f09cfdd2e2d6b74e9cab739afc19d3e887c0773019b932c9db8a9b8b2895836e4a96e1f62a497bae987eb893880cd3779bf94a5b848b3370fda9f

  • C:\Users\Admin\AppData\Local\Temp\Cab3843.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar3910.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06