Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    122s
  • max time network
    132s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    27/02/2024, 23:58

General

  • Target

    aa7a8952e9f073cae150458f3c0b29d8.html

  • Size

    25KB

  • MD5

    aa7a8952e9f073cae150458f3c0b29d8

  • SHA1

    6dca0cee8aaf8a1c91779ac77ce7f158d74a7e67

  • SHA256

    b816a6f606ed18ee0c16e7dd3b96a1dc230a7eb0b4e5a4f181dd0965e3d37914

  • SHA512

    653d4049b78c9dfe1145dd23219b5cf2abdb596740a3d33c9c939ed85443750eaa4109efba27728a4718d0fdc6090b466c80a309f8c8568368b16e1e4112964e

  • SSDEEP

    384:hdg2H8oN4GwzPED9NOUtxKTeBfKTph3l01DiVcLgWQQ/U4yhoy7jfIWrYc51IlSs:Hg2HlN0IltITe0b1cDNG9p6

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\aa7a8952e9f073cae150458f3c0b29d8.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2892
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2892 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2736

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    67KB

    MD5

    753df6889fd7410a2e9fe333da83a429

    SHA1

    3c425f16e8267186061dd48ac1c77c122962456e

    SHA256

    b42dc237e44cbc9a43400e7d3f9cbd406dbdefd62bfe87328f8663897d69df78

    SHA512

    9d56f79410ad0cf852c74c3ef9454e7ae86e80bdd6ff67773994b48ccac71142bcf5c90635da6a056e1406e81e64674db9584928e867c55b77b59e2851cf6444

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1ac6101e99b279f64272595688768fa4

    SHA1

    7534b1f680f17816727200361f0a001559f587f6

    SHA256

    1f05f2edecfaddef8ce9c5e09c5edf9815243d5163ab5a9b196c8d6ac5f28c6d

    SHA512

    e7977491aefbf49d3a55e717707ff21ef30b11e684c6daf78a137c801418f68ca63c4de310cbac35c9a82b4e3795a5afe825c4091a7f65c09a463913dda933c2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6197ee3a807135e4e17d95456806e42d

    SHA1

    99a93cc008372f90c8179cf0c6276c68aae4f858

    SHA256

    1a9a3573021b6c1e0a11f90c30aa00f1514e839bc067c0c86a463aaf3310d309

    SHA512

    64af2ba35bf33906ddd28f9cef3fc68c2ab59f319a57052474bacd3d1f42c351d8257aae707918611a5d32b64cb3a5d954ab31f9f94bd9c56fde4b4360ccdf2a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    09b031aeb89e6b2dec45b5cc391a821e

    SHA1

    e80911cf666fe928124f2ff1360048db09a5d0c1

    SHA256

    b435e9e32e6f98beae39a3811912f7e9f54b868b6636067fb7a680dceef8f1b0

    SHA512

    0082f16ab7f0fc2abf3a29ddbf6676ff0d7b262480b9a6a3127afc96fb197053caaf81551c87724940f0d2d07f682dc58c20e9a52f14baafe91f220495adf20d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f98f46015c35b81ce38dcf6e462744e4

    SHA1

    1a061722b0923e99544734f30e22b57158b678c1

    SHA256

    98574aea7ce94f1e6f4c3d33d03e3f26412004e174c5227996df19b69de5874f

    SHA512

    8db519c6acc013a03c4151c63327f1e21d114a82511ec9bd94543e7ae8089797d9485b6874a14d4c0b59fd076742e89e393544b79be828b15158de2025689a4b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    aaf6a22f9c32075dd9386afc59d9c9ea

    SHA1

    6d11bfa63ed9f06cc898c31ced0c92299f7db909

    SHA256

    ad6c75dec29810a03f342333be65c7d6c63b792cc2a4129e04872b4fbe7b50f1

    SHA512

    27b4bc775f77e53b683c55b06b94876ffb6350d10da88dc2a2ca14346cc0cbd32b5a8f67aa409646c323f64a34cce052f7295b6ac4079295e35df3d265e53574

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3c1c43d3c63056fc020177509ed8a8dd

    SHA1

    782d116049b1879e60c79c0cc070bbb25381ca5b

    SHA256

    3d0d84ce320dc9c127a6ea1a662a4a31c5e9056dbeff87b114cba0c5c5145778

    SHA512

    73f4cf6596f83c6847f579216842870b9562ffba7b23af83ef654be56132dcf116277310f8911bf9fd5baeede79d17c742be717d6a76b5f933cac7d50f2bb27d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cfb253d697f3164708be0eac32b6fb42

    SHA1

    9c5f482d9f0661e5f91cdc5f5cfdaeabf3a7f721

    SHA256

    077c91c11e4ffec4d37aba3195eb5f79207aa4b52768eb96292ee385a451814b

    SHA512

    b103204c98425b33317ba6d09fefb5e1d457d59d76f30f96c779fa77780f89409c342ba7d05ac81ddf4d2d2f9b1fed0ca6b624a22bb0f2bc67772d99a4c5ab37

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    be77dec38c2970b59116ca8b2e966b4a

    SHA1

    2705113bda4f2a3614b3976f5007724b66393007

    SHA256

    9d9d4dcacda3be83baa233670469006e548a6e417c65be487f2176744dd5d564

    SHA512

    db63e6ca4dd9fe3433403dbd6d974c583839de7afa9bb31b3245d9821b83623b1f659000069997e413b2c0df673a86ed5b1a7f820d96bb8bbec8e56109346c9c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a470a3c5eaf35452ef6c5fad1e5a3bf3

    SHA1

    9273ea04f2eab4aa9b2854003f6d84b78d55dc48

    SHA256

    b36a5445af753b2d7370604f7dab13149df3b5c0e84038b4f459e734d639805c

    SHA512

    06011679cfb0c180dfa4faf6f2b0562a0e34076522f5e4f9d9926d2a2edde3767bd273746806120382e865b5d907aad59f229497b1c627594da75be5b6fe5a0d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    39f541aacc82e4dec10954b7a426530c

    SHA1

    2f323f99882cc2fb963318c4904b1787e619ae24

    SHA256

    1138c7bc7bf8382143df8e8cdbf7e90013309cbacdf1b80f00b0a60094092302

    SHA512

    87b3c9e2d6ea3fa06c23af5b7738450edb402ede9482030c7c367e09b12763ba8452676f0ba53af80112aa6c9308321623196a8eb5d82849f5f93d1cc2bd6233

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c4b2c788bb8766ec0631d8f7811edb60

    SHA1

    f8bb5d550aaff953fbb51534a5d3092f1d47a413

    SHA256

    f4ab0d0873166646052c1f8df27c8f886f55daf844de6bac918637e6de5eed82

    SHA512

    405dd74b5d11d21e6cf992e52fce15a35bb65b5968b6bc009f5675914e8f470584ac9dbd0202ef3f360744db955203f6dda677c661780fdcdb5c8f9dae575ac9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    708b37b866961e3750e656d8d2b4529a

    SHA1

    69243c52f76646f3ba667dd7136dd420ad6572c4

    SHA256

    655aadbc2006577197a3210e4c27b5869832dd82ea317e697329e2bfdafb70ad

    SHA512

    353a615f38b142dcdc12130612d3fd6f3a2c50e8490e45dded8925bc22b0cd81a658144284a7c83a57f4c42e5ff5c309936c42421cfdb23da89d68bb866e7323

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    85a1034f726895da19c894092cc3893f

    SHA1

    cd680d9bbd8d88d425a86178edc1bc805d226990

    SHA256

    44aab4494e09ae8d661852f6be70106c503f4c365668e5c250251802aadf9fe9

    SHA512

    49974412c0f025ee49e1ca24c854cfdad27b7fa71121e489bfe8343895496c0439dc78f09665f25aa51973e14f9779cabc1f0217595077d3deec3aa39c3066b1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    74f7688f996725ab7df64bbf123fb607

    SHA1

    485a3f702358e590223d26305951ec12716bc7d3

    SHA256

    5fcfbd8eb2bfd98c919559424485baee459291e15dcf4a13cfb3365635eb6184

    SHA512

    36e113754b3e840854de9f350cbced40de12736fd4929b9a967445ec20220805ad7e0bacac084a1e7635d7a57fe3cb1c7b480cb7549ae6ba072704632b2b3f7b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0df541b954566a8d9516de02fc3e6767

    SHA1

    2d172f3296635e56e2d3200af4df61643aa74041

    SHA256

    1b5f61a5341055a8a7595cf9f3d58cbe1854b815d4bdb662b6e973cc6e99bd82

    SHA512

    50890df34c16d7b5796bbc71d6e189daba91a3c35d0187d2234ceb9a8c6ea79b5b05f1b832af47043fd5b138e1b780c8cd44f45badb94bd66c5937d08ca2f3de

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    650b77673a3907f7f731a03f8719e8d0

    SHA1

    442f03c41c19b0bf6ef8cb32249ed114520c98a2

    SHA256

    dc45f50cab46f8f90a6067a3d1ac60c5822a468af1d538147ae4e80efb7e10c1

    SHA512

    19202a0cfeca6a0c5ea685ce15b353aa754407adf343161575eed5b6880a804a76ff97101b4424b0aadd609c8f3a7fabc918257222e80e303a190e4776ddb5a5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a04f887809d6390e9ed2e28c3c2a1818

    SHA1

    cc4cb9050cfe448cc177dae36e954039b968dcdd

    SHA256

    e30b2daefcbc48e6640d0acc043ecf840a0c6c0cee04e4bb4dba362b94cd6fc0

    SHA512

    393cf05e51a36527b4f720f7a6297afacbff705291974248ffc2936515ef33e1378fb12b95a2754fcbe6e1ea7c833a45d1b98573238b8dc5ea238362522c9ac8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c7fe034fbe2e01bf92748eb1eb6b9699

    SHA1

    399f11495a23e5a9ed054976d6aeb5397362a2f2

    SHA256

    6947bfe71d677c288c4131f3294f652f07adf978adbc3104c96f3c321c625aa0

    SHA512

    66470b760e8fd6d038801b95cf7639224daad3d958144583a2bf9a293d40f6905f9adc93aa338030c0b3b433042ff0733d3f58cbc381db926ed6533ebae88807

  • C:\Users\Admin\AppData\Local\Temp\Cab5F8F.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar60B2.tmp

    Filesize

    175KB

    MD5

    dd73cead4b93366cf3465c8cd32e2796

    SHA1

    74546226dfe9ceb8184651e920d1dbfb432b314e

    SHA256

    a6752b7851b591550e4625b832a393aabcc428de18d83e8593cd540f7d7cae22

    SHA512

    ce1bdd595065c94fa528badf4a6a8777893807d6789267612755df818ba6ffe55e4df429710aea29526ee4aa8ef20e25f2f05341da53992157d21ae032c0fb63