Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    120s
  • max time network
    132s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    28/02/2024, 03:00 UTC

General

  • Target

    aad4f75ae51aff18809653c368c7e3ce.html

  • Size

    24KB

  • MD5

    aad4f75ae51aff18809653c368c7e3ce

  • SHA1

    555ec05fbc91bf33dfb961731875c7c9748ab9bc

  • SHA256

    a4d6c6106149309b2a09e1ba009f4ccd1dd37e6c848e538078df9eecb78fdf9f

  • SHA512

    07fc9d06b4de5c11f360526c78a36d704596498a466de37f6a6e0d58bf05d2d9ce024d14132c25028e8cb67719ce45a255dc5dff50222add06c9705ab12014b5

  • SSDEEP

    384:/X6qUVkczFiX4pmOdOiuoNo9oD0Vpt2D58tAYsNN20Zeo8BYU1ke2D:/lUpzFiX2XAt26thgZeofL7D

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\aad4f75ae51aff18809653c368c7e3ce.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2744
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2744 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2500

Network

    No results found
  • 204.79.197.200:443
    ieonline.microsoft.com
    tls
    iexplore.exe
    799 B
    7.7kB
    10
    13
  • 204.79.197.200:443
    ieonline.microsoft.com
    tls
    iexplore.exe
    753 B
    7.7kB
    9
    13
  • 204.79.197.200:443
    ieonline.microsoft.com
    tls
    iexplore.exe
    779 B
    7.6kB
    9
    12
No results found

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    67KB

    MD5

    753df6889fd7410a2e9fe333da83a429

    SHA1

    3c425f16e8267186061dd48ac1c77c122962456e

    SHA256

    b42dc237e44cbc9a43400e7d3f9cbd406dbdefd62bfe87328f8663897d69df78

    SHA512

    9d56f79410ad0cf852c74c3ef9454e7ae86e80bdd6ff67773994b48ccac71142bcf5c90635da6a056e1406e81e64674db9584928e867c55b77b59e2851cf6444

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c335ef3e509dd6741dbe9cd162beb93d

    SHA1

    88a73acb81ba7a27da92aecfdfc8029e478344a5

    SHA256

    069aab75581c56e2cbd33386a1cbc9088f9e2a518f5f26a2e6e4a521e23a2220

    SHA512

    626cd056365269faa27e659903842f5ceab7072eb183d5717d89d6370ce8d7f7fc118fcca1da50cdd339231b43f3fd5065f0c86d3a6beb070336ba94a858b1e1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    28399af71f98f6e0bfb2dde5232c57b3

    SHA1

    353c94b6de70e8bd02aa5c3fe4ba5528ba49d977

    SHA256

    738a246cb79541f6676ca9a4e27a3940b3ae8bacd72e1fbe5f1561f0002c0740

    SHA512

    20d9902ba56069f2b2818c85ea9e534746ab3ba457830b2b82e9650d92fd43d606bf412d5c3d45b13a0888343a777b79edcf80a6911f97e14b0e884a2ec58512

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d3af5f1a2890ba28c9299c06cb9adb2c

    SHA1

    c6dc3dc67570e3307af42046987c25d31b8e9461

    SHA256

    cb04e803f258689691b1897f813a87e0f5b6acfc05b2f6de4ac7bd097416453e

    SHA512

    44fc82085baa9ecfc6b638d7e1a9d35aca6637c45af7685d67a0c26f5279b4387ba4f6316a68b0cf9beb0f927d0a42f8ab8a9cabb56e15722959b638e177f7dd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    63ade67a0676e3d6f37fc88c19a31ed2

    SHA1

    8eabda4d9d0f77fa4306e81728fcd72c0e266140

    SHA256

    e6824d8dbfdd48b7bf79af316c9aa297b667e843ae48b996c7313e0e1747879b

    SHA512

    66e081a695eb2f7eca824817d78e0d3538a8ff5871080635c5083776dcd3800bd60ed9e636fd48cc69986e50a8206915769565bcfe4e36ffd589dfe5ed574791

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    19778b16df50f4a6dece127850b11a7f

    SHA1

    d19e6b616c7af191dc40d7bff7933028d46dbf3a

    SHA256

    bcf39c857aea9644d4d4797130ffeb221e677cc04840dd04c35352deea406478

    SHA512

    9ea8f67b64d889756c8d84673c4b76cf9c078a232594b3cb5ba8e81a6f93c0d85fd6c72ac1d59994b697efad2b17fc5ef1656ea9eb07344d786f57745fce27cb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    410f593dddf562553d15c857a7068c8e

    SHA1

    d4b82ef9239c41653f2ddfc9e5e4ee6e37b47a4a

    SHA256

    2ddf76e7ad248dc28d5ac446f0248b384978ec5ca348ee2bfe9b002d3cb73ba7

    SHA512

    0366cdda221dcd96c1efc61e6149f88c07e5079a8ecd72f75eea86d908af7c4204314e82d8abf36988d7fde3b7f1f564cbd694558eee5d47a7f2a332242e78d9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c21e79c344380e419a8ffdc053ac137f

    SHA1

    c76b3c027002eaf7987705d89f3b15fbd55a063f

    SHA256

    616cf258accc8a5e8953d9bdee220b2296c2d7e4df093a80bff91e86b4c87580

    SHA512

    9497e9f28dbb2c18eb573992ecc6f132a638e834c211eb2a2684ebf0598e330a2652d2773651f0ccad9623b2d4680f4048e0b491a6435d701b1dbb03f28c5c8a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5a4dd24c6b6de91ec9fcb75824b04dbe

    SHA1

    3f7cc59a8cc5a382696f2f696bf54a07df7d1ecd

    SHA256

    e4e070a458e0f1abc15e249310deb7668eaea4f3aead7f9ccf6d24d2f61797ff

    SHA512

    7d7a016e008dbb5f7ab59be0e649a664703525dba3d00ee6c636a1fc26ba20d09e63327bdeacde644c9540fc29db5442f171a6fc3857d1a3466689548f24c362

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7c2bd3a9c5da20ac93708bbb02503517

    SHA1

    c51b95a0f375f70df2102401411ac0ae57e046ee

    SHA256

    368ae22eb83d280f6bb94a444d408ea59cd07537d1c3e5ce6efd5cc193dedce5

    SHA512

    61bf9f9c380bd6b50091bb88693725848e7e638726b2e2d2934223782385c5b8bb12a4689c8970eb4edc73bd2bb4d32e477ffb8ea0df03900f185b175cb487c7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cef27fbfebd4a38256a73056b09947a1

    SHA1

    30504c7e6e81933c5f20341ed29e2ea567360a13

    SHA256

    6c56c81f996f31fd564ee0210ff509b263a40235f0cd0a941cfdfa5ce9ea5149

    SHA512

    e850e9e76a6550b1989a218ad39bebf412e6a928d70b50d4e6083bf20a0fc7f38730b56578cccd0ed8ba587a41623a5caa935a9e223772acc7a565c799ca35b6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bf86689cd7584875c3c22c3b0366a732

    SHA1

    d9327d3d9bed718380fe17aee497139c09e0ffe6

    SHA256

    6e82755645e3a6fb074b75cedd42792077afadbe15882b2cb76eeab3f05d5dd9

    SHA512

    7163a368792efe85d73cab3acb4a1cdce8b3aa3706732ef4b0235020aaf326f242df91b290b529cf76aa5866aa804b6d9fa56fd4f116169480bc52f18fd2c769

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6f06b055124ed8b57a0a478f6ba4ced4

    SHA1

    e5ef368fa442e1b00efb8a5f28267e8dfc54b72c

    SHA256

    fa05650fc1e6fc3e3c359b3f6cf584c67c79d4e910ad514de1c1c3b8977f92a9

    SHA512

    a919661557145180a803a2b9f72ab4cb10332ba00639800a24d80f5ed934989b5add093c2315e1619c4b4f3d0fd329f2bd255ca8a25e62139372340b88027f7e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    004a6d08886394b59a468d046dd6fa84

    SHA1

    4fdaf6a0d0aea04d1814a7492d9da818ad2ba6c4

    SHA256

    aaabd2f1b8dbd023ef98f703102d6cb80c9b64d0fc42196f8784245231387aac

    SHA512

    3cf5afeac3d9d455d0d7682da952237d8ec1b0b5ed7775deeecee27a9b9426fe0bb47763313239653fcd1fe2252cf1868e1a77e8c79569e571c590754de7770e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    69be6ee791b605516b9164c1410e3e32

    SHA1

    9435d6f8ef331c44cd8bd97fa1cb119b78910f7e

    SHA256

    67288d76ab9f23bb2214f35fd6614b7b6254bbca747f8814a76dd85998e5dc23

    SHA512

    ea93d2b9d6ae4276a626cc30ee7db664b83862f00e581936f550fbf454bc77e9390294f87f7036ca85fa1051691ce22a3ca305435f43cda0fc0b8607d22d42ef

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0f80b43a2f5dc5a634dbe5701cd18471

    SHA1

    cf4b981bc0f6a17f8ce434316c9d9d7959e9f181

    SHA256

    311c04b1bf23fba506b16bd41f6f43dbe4df7655f7573688eef5fd52ee771033

    SHA512

    bb40b9f1e5744a5b3744f9b246cd1258ca6ec9bbb4ce95183a65f650f6f3c82a228329d65b49cbbee1e1b1d3dfcfaaac570c8f6f1ee85d4deb16054883d1198c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f9b84dc4831af6f8959e2ea4391d7eda

    SHA1

    eaedd511322f7fd6f3ca041c860737f405ea6f68

    SHA256

    98768c74da79ca469cb06cce8dbca02746bd1dc79fddd01e6cdeb74b9374d0b5

    SHA512

    95c78efa502152746b02e2b8ce64fe60e3a48d3b9619ba53de56b2e91bd8d32166b35b222f87b927713cde38f7bfa920d933d245140feb6a13f10f7590b08846

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3ca07738723caa18e8a5c64a4fd4a8b6

    SHA1

    d61e121c35aee54f24f5a6e70402ad7a993d1c7d

    SHA256

    62e81250dfa1a958a97750130e7750b268dbdd893d9c898785843756a7cb6462

    SHA512

    8c9134e8ca66a3f15b38f57f5853c86c96cbb15ef2d76b6c8e4ce0c071bc39e195c614d9a84e1b4a1001a25e81bbe4c1998eff9ef1f8af7a542e4a14fe6c96df

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0f4bf16b76646087bafde6962a74b3ab

    SHA1

    f5322d3a8e3f04da62375e2652d4c2f6070df341

    SHA256

    6fc996826954b0f32fa7d9603c9d97d903c9989b7213b3a6d786bb8824aa3874

    SHA512

    fc69cc550032192e199804fe98cf0f55a1f069d55cfb5c2282010fd576c4b5b6338e4dc25e6ad566b949fd3c1ca912449a3cd1739d328dba55b10471acf92bc7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cdc83b19386145580004351856300960

    SHA1

    40c5d9a99d892b60e794a39611479903e75a5685

    SHA256

    97b7477624f1b7f36a4908a943deb9c8bba35733d0771e5c1a50808bf60e3ff0

    SHA512

    c705b027006e8326f3741c46018cf0579fec9c5d7961fa22de8ddf09b0702392993f744e45746e5649368bea47526d0fdb02f170ccfbd98355f9cf22ba52b624

  • C:\Users\Admin\AppData\Local\Temp\Cab8C8A.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar8DB9.tmp

    Filesize

    175KB

    MD5

    dd73cead4b93366cf3465c8cd32e2796

    SHA1

    74546226dfe9ceb8184651e920d1dbfb432b314e

    SHA256

    a6752b7851b591550e4625b832a393aabcc428de18d83e8593cd540f7d7cae22

    SHA512

    ce1bdd595065c94fa528badf4a6a8777893807d6789267612755df818ba6ffe55e4df429710aea29526ee4aa8ef20e25f2f05341da53992157d21ae032c0fb63

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.