Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    122s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    28/02/2024, 06:48

General

  • Target

    ab43e6067a6ea199c8fdd33c04c50f54.html

  • Size

    14KB

  • MD5

    ab43e6067a6ea199c8fdd33c04c50f54

  • SHA1

    b630d4a5375215b9b1b3b098aa64fef2a26fb37a

  • SHA256

    e4f504a535ce8f6a27e666aad8389bad0e97fb6919c24a569d88fe52130b5218

  • SHA512

    c211d0e75ff634ec0943b37a7ae6191f4c808bade7ed1c719f4995fd950eb9b884ebc28c923d6e98be21127f335d0e1159697e96a50c037c463c97bb5499ab5f

  • SSDEEP

    192:MsI/qss23B91RlBz0/L9JiKBZatpbnTAsxYLR:MsIisd/nQz9XBI3xER

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\ab43e6067a6ea199c8fdd33c04c50f54.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2768
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2768 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2712

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    67KB

    MD5

    753df6889fd7410a2e9fe333da83a429

    SHA1

    3c425f16e8267186061dd48ac1c77c122962456e

    SHA256

    b42dc237e44cbc9a43400e7d3f9cbd406dbdefd62bfe87328f8663897d69df78

    SHA512

    9d56f79410ad0cf852c74c3ef9454e7ae86e80bdd6ff67773994b48ccac71142bcf5c90635da6a056e1406e81e64674db9584928e867c55b77b59e2851cf6444

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c5c6c86b87ae0d10c11d58d648a3462b

    SHA1

    96adbbb912d6fa596d936332ebbf4f91ad7bdf40

    SHA256

    c4c6366122c1bd291a7fbc85a490df134fb115e727116f315df96dda5f6122d4

    SHA512

    9f75c9af18df61cf1ca42075b2b137139244134dad58062b6e4c20ea82a796045ac29215c9239ac1f7460d75897dad70816ce8db28e819d1bfaa24ceb555eb32

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    33845db16d0f7036f960c505c78fa63c

    SHA1

    9be42a16d336efafe3796baf30e99339680fb1b8

    SHA256

    3ca215597699f2d0098a39809db8be466fa04b684feb597e7bcd2496bce9e144

    SHA512

    b3c31ea47b5e5efac5571ec46611473f8ca5e4723b5a1cceb07d6f743a4968dafa1078b87bd7bf97ccffdd78036cbaeec218577ff13f2581fc945982a0a416fb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    05e72fa33786779321c03c59c2ea1487

    SHA1

    1a885266697c1f4426a66c96bb7f88c817de6ff8

    SHA256

    d89a58d2572f20e90df857d76074f3ed7fa59d1b6f84dd9f0b57bd134cee43e2

    SHA512

    12c800d17a5d2b0fc5fa1ba254626855be218723ff0faf57de17cd6c229f977f492f4f96637487a11675e4a1c3fe2cf766807fb8c204d9502558f7848109faf6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a417c659ef0855355464ac885225b8f9

    SHA1

    3ef52926fc4d05ce7c696ef7de3a6a944ffed84a

    SHA256

    c5c98f0f11a10f7047ae7fb5d51e22a4d95fb4b680c26ff56c45bfd9b731ac80

    SHA512

    9e546a58193c7e9cc8f3875305383e41f2bc8ecc1729e3f79b22c19fcdef219adf07b759c60b1138fc06d2239d26d384204902287a88b15fc024fdcbe536add5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    597cbaa525079b2ba05efb224047b9a0

    SHA1

    13fdfb3aa0cbb80dd9132ea15c929cef0d978dd8

    SHA256

    5516c27656f469d291cdce4872b4336b1c6a924b155f5bf1b46df9e82fa19d2b

    SHA512

    976c443477a84c04f67e2c04f2496a48a9beef266ff4377f6ca4497fb589ed8b1e20e3fbab328b533a64a2941e3cedc10e86529537ed05c304d733455fba9504

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9639f4f65a22cce2653ea03c0d0ca2d7

    SHA1

    212c03cc71cb5741edaf4ffe4375c09eb0d3ef1b

    SHA256

    e994c7cb03a19978692458527ef508ee07dc697298787c2836e98d0aaedb8aef

    SHA512

    4de5dd7700887f60c8cabcf15512db4857a85290f3e54bbd764b8f0b71ceb35445666515b9d9f557713291774863fdc8aedad76a3d6650c8a1cbab02684de582

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6d39fd1b968fff39369bb11849aa6ff8

    SHA1

    8994f051bb2270c90034d8503b86fe8a23c68fce

    SHA256

    c8bfca4e593e7ae0884492911ebae7d70009073ca8fd567e8bb5f19ebc7b5636

    SHA512

    3c25f031437d7294d26190945da11bb57292726951e2bd63d95d6c15fa4bd69401051c1657279420342b16d57aa58f71856d8c8e2fba2f4ab6c75167f99ac9ee

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    75ed7d75e1fe8e051cc4cca3fcfe2ef6

    SHA1

    edf691994f6256e2b4422a478c34af6f85fbe63d

    SHA256

    9ef1aa56a0867657c24ac03c668510ffa1a8ab3b93c7c47af6f4ce2acd71a885

    SHA512

    712f817f402b6c38d5be30e819f75e683100fb9806186b79ddef2b420c87442cf5d35fd0b6821be863512dd91717ca484843eec0a099b72c688681e68a0fc54c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e646a606e7d7978ec958ec75086e4f98

    SHA1

    2566ccac5fc1082be705e6ba849525fe140c1e2b

    SHA256

    73582afc0b561c84c1e1c48715a0fd3e974c5347fef7bf982af2e63611e3ad68

    SHA512

    6b9d2a35b15e5124b53d20fc6e2756a022fb40e6ba1f328dc127700c5ebd29a93a49bb21fa023b4a070659a9549f60ab7a9c8849d2e51ff7c3601b7535ff76fa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    eb6044591bae5d18d130d33afa1392c0

    SHA1

    95b199983ae2480f65db3b6aca0c75ff64fdec20

    SHA256

    1c1431607ce28381cabf2a882f60a7edafda4a53885c539e7d9010ef47e9d9a5

    SHA512

    0b03c8b742588888c526f64b479956bed482cfd804ca41cb32d7e295d68aa046189ece9915546d4fae3892a05a6a0c1bb54375996fefc610e341af32774074d8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    175d2f31707efee3952f920d342df610

    SHA1

    029e809784a02c6345302e415faf34a32118b740

    SHA256

    6e8c2a7ee2508c938a75c40ebe49679429eb0d677ac391a1c33cb0b5d3a4c9e8

    SHA512

    ba2a4b35d8e25c896488f08c346364faa5f4a0635e9073f0e32c0ecf41c70c07efa7bc2939ce1e274af621ef88790ce42bfd4497ba2b2447ec3552496d014954

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a9d8d75e171a27c5ddf62ba7183e43d8

    SHA1

    b94b9f5bfd986d46f36fe4fd18a912057b3f8ae6

    SHA256

    1559acc1f1a02e9859bcf547ed0cd8b8ac0318c8d53879f74351d959c669047d

    SHA512

    536076e3f5c2be5e08c05f0343b3e9d12f77d2da9fb948765a4bcd240c37e846217b971b6b50a8759621a0fb6e6c0a05cdbd3897d3db48d20d1db26c3f1f8457

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f1f0a8b3278566dbce7093438997e3a3

    SHA1

    71a7ff63ee0ab26b10fbdd8db712aa7725b9ec57

    SHA256

    4a3c1a482138292b0361683dea4411873ba0f34d3f88b08b079b723c4b503d5b

    SHA512

    0f7d091d45bb02c06dfc81170e84e1309af0546e2e254c44e17a1a2b37f58ec06204b1e988e8b13acf7073051ae241cf8372b74cff796ca0ca7eb317863fb8ba

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6b270406c4f2f5c0d2a844e443547b4c

    SHA1

    60049ddb7174273d9641abedb1344827be9dcd79

    SHA256

    718bd042380fb4541b3b23b34a04ad98780c019623066fec97bfcf4c2424ad25

    SHA512

    0ba90d20694231fca4eb89837393ce11f7074cbf3b21322ed8658ebd246d7fcb8ca49cdf95ee3c2bb96c69bb2687b686c79263f0bd69aed9774b1bf6c21c4730

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    dd13ab709b89638805e3ed7c93cb44bd

    SHA1

    477c06d806f7f03808a37a965cad406656f712c7

    SHA256

    e7753807bc391221f6b81f5928cf15b23b9afa6ec2384bbce0cfcc0e9e45a01d

    SHA512

    e1c8a07d86b696e92f7768cad570cb9f0f5ec4a05037374679a0a435b3ba90eaeb952230396aaaacaeb9ce2c28afd17fc3d0030a9dfff0b6e46df48823ae2535

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b387406be83258f94af38b109020c9fe

    SHA1

    40215492e6d16a5f517c22303788f54242b82ae9

    SHA256

    369b4784edf8e155138e8cead9a0dff0eca07b4ca0a710a761036c325b32801d

    SHA512

    e0c4a08b13328d1552ab11d957a61ca96f246d56491dc905d7e394c7599084e5e522d3b426aa5ac2dfe2f977e0b3426c768e794a5f0c3e91b16a1b2e7719e80b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9a02103251bb656585cdc19b16bc3ad1

    SHA1

    a31132c145d71db6b6dcedb14d749d3ca39509cf

    SHA256

    c21b84abebb9d551e486849b1c3a067478675db6b6b47b4e4e8d1fef22ac0f03

    SHA512

    6946250859d73da29a7c0894af429f097698f6733218b3dbac4b749ace8a0c9db8f00b92287d0f27738c2ad9873853f186a49f8a61e7668a8a5f37dc0518b519

  • C:\Users\Admin\AppData\Local\Temp\Cab32E6.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar356C.tmp

    Filesize

    175KB

    MD5

    dd73cead4b93366cf3465c8cd32e2796

    SHA1

    74546226dfe9ceb8184651e920d1dbfb432b314e

    SHA256

    a6752b7851b591550e4625b832a393aabcc428de18d83e8593cd540f7d7cae22

    SHA512

    ce1bdd595065c94fa528badf4a6a8777893807d6789267612755df818ba6ffe55e4df429710aea29526ee4aa8ef20e25f2f05341da53992157d21ae032c0fb63