Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    120s
  • max time network
    144s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    25/02/2024, 08:51

General

  • Target

    a35da3ef23ebe4a9229ead73cbb05db0.html

  • Size

    48KB

  • MD5

    a35da3ef23ebe4a9229ead73cbb05db0

  • SHA1

    5f1923681e187f42e2499a072d72e2bd9b42618f

  • SHA256

    88a9a9d4bfa4e2ccdaa8b0f563d15205f98825bca36c6553431f267079e58e5a

  • SHA512

    7bc926d8166bfd70159431d7bc059a1a7b8ccab8f8c8cb03fc7b29386e36b757e6ffb1a197bf00a6b12fefd8126b5cd47fe3d22d38e8deb48749f611bb79ae59

  • SSDEEP

    768:U6Pw1a5dpHCcJTV1CqqXhaDh59v3v0g4fOfiqCimU:U6Pw1a5bJJTV1CqehaDhv3cgRibU

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\a35da3ef23ebe4a9229ead73cbb05db0.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2248
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2248 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2900

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b229ecac27f8a9d51a1f91caed67135f

    SHA1

    6cb93b074b42796dfdfa3c84be77d4e976d7f78a

    SHA256

    37a9a8c4bc98170ea7245a59f1c372ece9a0daaf682172cf84994bec4c18b685

    SHA512

    10f92db1541bb406dc56b079fc715c4a1d45f78c08fc7c2359988184c09d379c0056f6b8fe25f25bc3a55d49bb74dccb908cd3c518d02a71cf2570f708bd5c66

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    955f356dbca6048de4051f480936f7af

    SHA1

    02443f5b755a774ccd0116075816af319d407139

    SHA256

    7172fd6205f99a0057651871eab89e65c087f255450bfab077ed61d156a8ce49

    SHA512

    1a7ee3a6580b5f55facb4b034bd8ac2f1de1fed4518a0eeea82213e07fcbba9634bfd632983e2d8b9c41ed64badcb2840490080091f874f801084dad2bd56143

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f20628dca398dd91ee85395f40511f2b

    SHA1

    a9d5edc637068ffce1acea7ca9dc631019780ed0

    SHA256

    a63e4f2dad978c760a9b379b288a948bff8440f97207242fc06462b6349a87dd

    SHA512

    3d9513b80a6ccee6e3f3766f0ecf922a747b1c08e8b51d6614b6922eb91bbe6fa4394d9d1954e73b585940e4cbf23aa806c171e17ff59c36b65f58f61e6505af

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e02448cd33fdc0f0415ea89d6899bd4b

    SHA1

    446f0f7f73c4e8022e41d7e3695bcccf3efa59d5

    SHA256

    4c24c435b6ffd6fb2db7b66035b744a11ff32dcae09da80cd3389c2a6d02260b

    SHA512

    27030ed4c6fa8ab7b4d5d0bf52f6ba989dc4844ab7ace2e1ced9f67b5df7fdf7560c0148fcf022e0affe2810fc2db78391723f81b4d06316fe5706c9a6379390

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7b7ced0b14b449dfc4c5596490cc6ba3

    SHA1

    8f67f98ffd2ba057070706e3616fe5473bfdf010

    SHA256

    b0283981394e7c548e3f4e787cf71fc6fd386e44058fe0ee04ff6701b09cc514

    SHA512

    11c9e9c5183abbb34c2207d3f799b7c771826f156437c1e5c32a95b153a2d2f7251666867f8a8a607e8b9cda361f01f5aa6f5c9deeb3b916855ff4db932b9d30

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    db87f6eddc592efab9513f9f4e1a54b7

    SHA1

    6d2166fd350e3734f974f489c060968878cd0a58

    SHA256

    605ead656a686ec84186b5abad70dee9a2ab0a7f53c6c4ac007772e630bc3b97

    SHA512

    30babadf27ef8304cd46ec86aeb276b7f199aafee3325fee4d25dd721b739aa3f83c635a42d5072e47ab82321521a4aee6608a980ba8aa40d5ba6f246a7b6039

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5ffcc8e23e466cbe72b61013ea33de66

    SHA1

    ad786ddac1bc23e25586196cb05d9e82398ab6ff

    SHA256

    5d729fa62183dca90b788b4fe524cd09fab329dd160f9c681644df31a555c8ec

    SHA512

    37b69409f7c99ae25696d2cbfce955c3645f8a9f01abea8fac9e6ce05498efd17852714395df8dcb3707200e1bf24fb7aa50f63aa442f4f0417e6e067f2f6aa8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1e2cba6e92a2c3ec8af53c12bd20230f

    SHA1

    5f65e3fe84c5b7af883641a76ad3e34b9afdb667

    SHA256

    2a38c779438045444ed5a9629511b90a51b8c607d789f6aa9c4128787e3eba2b

    SHA512

    bf6a9a15249204d7723532f70696875d0f810e841afc4ee61d30b109b8d8e4213fea4a09134f84b59e680cb7014eb17026b517464974dc0effdf1fd01d757850

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0227f670cea4263109e9dcafa80adfe5

    SHA1

    3cf1ff9d290585a343f7a1d7b3763b629f809475

    SHA256

    19c0d4f96f20dedbf77e6c37796f7b2e4ea4fd4113501ee0736cabed1c235700

    SHA512

    a11905a5f29d24e1d46880512ac2b9ea05a45a9ea0a7e53b92d0207685abae759e2c235e526fb3ad080a76d8f2de75f8de59eba22e35945b2efbf619680513c3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    289752c353855ac2e36b91b6cced4a7f

    SHA1

    f39d946149bfddcad9230b70ada368ee83f508f6

    SHA256

    1c9debfb9300682c5f91ce6010cb10794df2f554844a9c1af342071a92fa7d5c

    SHA512

    58ee5a495cdcaab92ff0393f1761e40ccb08039fd0dcd3c3b41b6033095d733d6ac8b8b2124a9c4da49fff2d9cc32873bb9ad598852ff24c70c978f4d8d48f7f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d5eb7363a8d168ab24526394b9f3e00a

    SHA1

    bf7398c3b40f7ed01e24bc22336d300f7aa016b8

    SHA256

    15166df8bd0cf536e92bb75fb13a5e3f092225a72a893da168c078175640a2aa

    SHA512

    2cc067cfe881c0bae7ddf83fe04ab5817b9523b8e682aaeb3b3f10a4aefe93dc701eded6517e70c7361904ff40be5dcd256463718af7588a7db46796d5799a06

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6d284a686bcacefffa2be66a4d0b1bbe

    SHA1

    9231c646ec98e0964d67aa4454d441134861b9a5

    SHA256

    8216c583f20ae414090b45a533323f12547e7c0dc51e0a8ce902741643171035

    SHA512

    a908baee7ee806c69d76afafe27f7a1d082514c17442ba362131a78db04820bacd8f42e19dd8a5b45c319d488e4163094438049820fc6a2bcd4f872c6c8c9d27

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9e860657c97ed8f39681adb84a53084d

    SHA1

    f01bf25c8f62bff80aa3c1a3cf60c9978ddb34a7

    SHA256

    dcd520cb5ce5876357ad59095543aff4ba4b4ea512b8f506236fb99c9626192d

    SHA512

    139d252a9e557afbe9e54ebe333ac24e53814dff5dcb59993337c2f5e26fef1f76a6dac6a688d362c635637a310f0c35ed0c3dee0b5428ab9f94339f2e61f530

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    600d44fd52efe9705b76e61368f1d52d

    SHA1

    ab0c1adde7af638afdd290856b3a8d3535d0cce9

    SHA256

    bb1d382346d7c11de1c1e3b12f67d7a3b9261daf522ef92269663de1a01ec09a

    SHA512

    a4962ce8001606adccbeaa85eec951831f6114d586815e9e0288636b43a175cba33ce8995b550c7188e866e4b5759844f68591b0a3ad2aee0d1fa052ffd393ae

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f6777f32ec25e046c1659221be3924b7

    SHA1

    a23fa6f4be57fc39cfc17e31d16b81cf6b41d6f6

    SHA256

    15ee26bc47aba5268a63dae5e830375bcb0b0869aa5671f50926561e26745156

    SHA512

    553e23502ca37c89d5f7e4c114c201200e568260214973d3bb37bd010d46d4cda00ade45723d779ba7678421e0f8523f869f612e72b62b93283784f81b9cfaa8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ea18fab82fffa75b42fd6657f1c3cb90

    SHA1

    318078bbe8b8996099afd216ca564a45f4ec6486

    SHA256

    5e5d9548bf25691e63ea037b987ad074b50e92df1617b5c74afc8709f4b04f17

    SHA512

    5c03835fe2db612c46f125b0409d9ac6516a5cc68cac4ba0e4f15dfba87619b619234d06905f1796cf7851f3dd55d6fda11fbcb314b38692d3809799818d3f32

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    752d13049cfbefec4d7ca5452dcb6a61

    SHA1

    7f056275ae39915b607b0ce5affa97b8d8bf2698

    SHA256

    a553dbb178e31b35c3c1c8f273611b1dced00b8d9d1797b86a3df3923c04ced5

    SHA512

    2a3b75fc9d811312f2b65291e4dece0f06abba60851ed4edb2ba67b052441dd4834d6a93de70204b086644e2a282c84c58539f0cb31a704d4aedf3a98054d051

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\8HPZEQOB\errorPageStrings[1]

    Filesize

    2KB

    MD5

    e3e4a98353f119b80b323302f26b78fa

    SHA1

    20ee35a370cdd3a8a7d04b506410300fd0a6a864

    SHA256

    9466d620dc57835a2475f8f71e304f54aee7160e134ba160baae0f19e5e71e66

    SHA512

    d8e4d73c76804a5abebd5dbc3a86dcdb6e73107b873175a8de67332c113fb7c4899890bf7972e467866fa4cd100a7e2a10a770e5a9c41cbf23b54351b771dcee

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNQNAXHS\dnserrordiagoff[1]

    Filesize

    1KB

    MD5

    47f581b112d58eda23ea8b2e08cf0ff0

    SHA1

    6ec1df5eaec1439573aef0fb96dabfc953305e5b

    SHA256

    b1c947d00db5fce43314c56c663dbeae0ffa13407c9c16225c17ccefc3afa928

    SHA512

    187383eef3d646091e9f68eff680a11c7947b3d9b54a78cc6de4a04629d7037e9c97673ac054a6f1cf591235c110ca181a6b69ecba0e5032168f56f4486fff92

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNQNAXHS\httpErrorPagesScripts[1]

    Filesize

    8KB

    MD5

    3f57b781cb3ef114dd0b665151571b7b

    SHA1

    ce6a63f996df3a1cccb81720e21204b825e0238c

    SHA256

    46e019fa34465f4ed096a9665d1827b54553931ad82e98be01edb1ddbc94d3ad

    SHA512

    8cbf4ef582332ae7ea605f910ad6f8a4bc28513482409fa84f08943a72cac2cf0fa32b6af4c20c697e1fac2c5ba16b5a64a23af0c11eefbf69625b8f9f90c8fa

  • C:\Users\Admin\AppData\Local\Temp\Cab741A.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar741B.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06