Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    117s
  • max time network
    133s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    28/02/2024, 09:27

General

  • Target

    ab8f9a7cbeb289f5fe23b16c5b8504c2.html

  • Size

    26KB

  • MD5

    ab8f9a7cbeb289f5fe23b16c5b8504c2

  • SHA1

    bf348184f49c7844032fd7e2d97e05359cac73fe

  • SHA256

    e0daa3387c0da60268a556c418c4715c22bc97e8cc344a540fbfab6ada416786

  • SHA512

    ae7695e3423611c6a6e1b8f7d21afd1a1a3d3f6640c1116236f6f6d8b9128c3305ac03516d02f199b80f387005d86790f4da27fb63aa80e8ef69dc4801430a9c

  • SSDEEP

    768:jjscdeYYEqhKRLHGmBZxgdfc6V6OWJBDp:jId+BgCUpWrF

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\ab8f9a7cbeb289f5fe23b16c5b8504c2.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:3048
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:3048 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2568

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    67KB

    MD5

    753df6889fd7410a2e9fe333da83a429

    SHA1

    3c425f16e8267186061dd48ac1c77c122962456e

    SHA256

    b42dc237e44cbc9a43400e7d3f9cbd406dbdefd62bfe87328f8663897d69df78

    SHA512

    9d56f79410ad0cf852c74c3ef9454e7ae86e80bdd6ff67773994b48ccac71142bcf5c90635da6a056e1406e81e64674db9584928e867c55b77b59e2851cf6444

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b8f7640bf50cd135f6e816609ad9d39a

    SHA1

    e381d4889b0c4fcde9d67b00f6e308c612836a51

    SHA256

    5f9a81ce9e0dd01efa97e944ad5bfe6f7abaec11552617aa512de5be69e56b32

    SHA512

    30df0b6c2a0057e115d4c105c6adcb355a7a5a0425daa1715782edb0796836ea455c579c650efe75523610ffd3da9ef71cd751da392c5696999dbebf1544b563

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    67155c51a846a71dc31a4af02ef91ba6

    SHA1

    6c081d578bc8c44dfdd72746c92bc2b37f8523fb

    SHA256

    23cdebcc845bf70bc1d7d5e0e79179500ef3babe4128eaa1b0d516f6d75ea67e

    SHA512

    08cb7af871e4dfbfbac7540d86f2658003ec13ed0238afb30011305fb0701f686e7eb38cef7ddae43b4ffe2849b88dc33c1785476f316e029e41ace5a7a41c56

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6bed11f4588557d22873e73da6b45eaf

    SHA1

    2e875b5fe2e9b3bdb2a9724bdd633a2fcd68c6d0

    SHA256

    1dc6b9dca5a17d0236cf3f32677d3c5b7d8365d62dd39a9856fe116cb005b1b0

    SHA512

    5aff7d29082397eb2f3debb918fb78c130438b8c27702b3c85422ed060e3e31300b3a92afc2158208291f46de3707d4d1a941b694ed3bf6f2e16681685a763aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4746b5495f3e3181731816ab66de38db

    SHA1

    ca832f1ab3d22e144bdfcf898de23ae4052199d7

    SHA256

    adfc63743e5c8e04c5959ae8ac857f2816683b750ab0273e041767306637c336

    SHA512

    b42acc1579102107b3b694189fa85967b96713093a0c6d13d00deadb611481f2d6e5cd8f7342b1ddadf016f5986625291fcf49b1f0ab330b1732dc2990561820

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b380d1e72f666d9efa98491bf89b7429

    SHA1

    8f642aac52468a24d3e2fa3891c6e7d363394895

    SHA256

    c1182e98ab4b5095722b4e88568b0c056ecb2d6e9388c08087cc31f30dc1c444

    SHA512

    2fabe5082506a3c65c92a0e4a316e32b2c7b052c81ffd6d1e7fc268255d9247e562cd303cd502718074a1af63cc8e7ae40d404a927111269e7f76e1102e5928f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f7461fc84fea49e8a7c95fd043d707f7

    SHA1

    150b49e53d915cc066eb8e05064b8ac0bcb61424

    SHA256

    27b41785c106f9deea1feeb858d70c11e542e9b02d0e06101fd8e04b6b17552b

    SHA512

    b3b47cbc8ee6cf8d08213ee1a376ac883a39a1ba33823804ed5b1ba3321393c0cee10e381fa235448184e654463e515b40403e5a9ac51f8be8385cb67239b051

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    89ace8bcf931a6316c7a494e1a9dc9fc

    SHA1

    134d9527cdd45dabf32bfecb6a75ead49a995a93

    SHA256

    18654607e60fba2b4c69dfff7c672c5211d7e8ba7360aa40ca552dc313dea723

    SHA512

    d60d54878a0491173a0a576c4c59c2a4b3d96f3536c8dea81d930fd008da391166d9f93c87b946d7e5154b9ab8cd78e69b8920ee79ff11474a763fc3b416227b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d8e7dc8d25c4f5165bce666e7b25a68a

    SHA1

    09ef9d0d8d88d0c66cf02584636ed384d0ce3623

    SHA256

    f84263018bfbd7c98273f6e685eeacd5239a9bb0b700429044247639a0b5ee66

    SHA512

    215ab7caddd3c22a636889a3473d61d975d419af95fad18fc6471aca592c461f91a2175c1c4b0a7fdb3ab92d77070e21eca34aafbeda40e232ab90d9c62f481b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0853a94c3a86a6987b8b6b4d65fdc0c5

    SHA1

    d496bc0c3af9a5fa83748b2eac5ac6164a8d67b0

    SHA256

    38e1dd1338798d815e73850a5f0dab1aa67c54423193e5b193c5313070787cf6

    SHA512

    f9d6f47561622036a476ce7aa713c18be65e4c2c30692a2c9db004d6e7a5f8452cbcfdbdca736bad90c7b8af40a829cf48fa72bee095eb8b384fe4e8e4bfb9e2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4c92c1eb440668986c82c7125125c591

    SHA1

    39568408bfe6d9cfdccf150aaa20d8409b18838c

    SHA256

    5eb525b1502f58acebfe0d522b088a319358f44053e83841180be3077cdbb676

    SHA512

    f1fa7b179a2e6cf6921dfdbba2773546e7fffba31e6fcf21ddca6d028385f7b0f25074d7bddd3217fbe653617622472bb2eb9fdfbee2103311364e0915902972

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    063184ae798fce0ffc36769c88785590

    SHA1

    5cc0dd84466347e13ba4fb06f215be963370fe21

    SHA256

    2b417d18adf5c654d5e29abaec8f3298c2ef5b845d338d36779730f6ac02d172

    SHA512

    a752487ed2e31ab030a62dd8348eb1756e17bc3d783056748dd99be4f951ce5dc910c8fe8eb3d416641f5ccbfcebc7532c654fdab8ef9bbd5fdfad81686bbb95

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    53794bb31260f0ecaa231a32d504778d

    SHA1

    6f91e36f8be0cdb6d3b2c0711245feb9ebe15e91

    SHA256

    213fd79423f9d7cb65c9b81164b3c06d6198aefbeca92e075b2c3ef9eda51fd9

    SHA512

    eb09b3b37e6f7905a2433ec9fe5cdb90e45e998952d42f7cda01b12ee2082cba22b98a407c2cf4f9a35e66d27a4c85fa547356dc35797680f87157629abd38cf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a76ce666e7a4157508746220823b1786

    SHA1

    c53120c5a586f09631878382768a339a9ece36d8

    SHA256

    6a9f363f97efea398a1b278c705cf5f2aea2c6ae66aea1d4144f716eaf5621b3

    SHA512

    bd891c3a79839c5fabdf50e04a1e24f2ec8b5e12a5055b5b17089260caff33acf0f718ac152897d36c0255d52b57931ae6308508f1468a6e38f5e017f39ccf56

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b650755a1066b7d714214793c35fd1e3

    SHA1

    01de03a4276f898fd34939a353b56eb23c30c477

    SHA256

    9895d2983bd15689f847423549a0dce59ecff4804903b9e7e431adaa4dd69d46

    SHA512

    d98d5a4a79a0645eaf22e072275be227a1fc89924a677d8184f9505fcd4a20af7e030a4dc2141f83445485e049eb8fe9ab579017b1d20ea94c390fe5dad5f414

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    79797295e15a7c9c88518e219348e574

    SHA1

    ede195cc174c495beb348517f7d04cfb57aaa042

    SHA256

    47628fbb4aa081bf87078cd158f11df94a436c00a1675021c1ef630f4892d3f9

    SHA512

    7dad622cc8c87e98332d8063754aac8a4c41ef7056e95b44cce7267e35f03117d2d8868e1f5649165126e2aee2a5f0220d9ac0b29de853bb34245b15c44b2cf6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c48514b6846683fc6b9a7d79626cc4db

    SHA1

    a35661af3f2e8cb9cdda3febd4666f8f86504512

    SHA256

    ba72972571ef25cd6ce9ce7b0e1f4ee24ba7ece5bbb8d34cc2ac753ed2bae5a3

    SHA512

    c2e571b3273946f40bccec62783e5f8df7850740419c7de6d7bd88fb50d4c5b7d101837fda0f4e72835a9e6a5c43bd23eb3f2db32b01368a74bf37ad6cf7d912

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4be068f40cfabbff9d294ceddfbde350

    SHA1

    33d128784b2ab15aa0c28aec86cff521d863bdf3

    SHA256

    7229e49c72e4636d9ac97a50639e39d78521a2d3ca75067767d936501c97c632

    SHA512

    a3f78e8b399a72f3e9b5d435f2f461c5bc2b501140c9404a83025a588fcb1bc226fb5628dcb7a4effe11751de07c4db37c70ecef9433880ce9b48bbaa2dfe24a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0706009bf02e2322e0d470e03a80901e

    SHA1

    f28cecb80aff44801f351f29330d2fe9e4c2ad85

    SHA256

    0c5d5e1a390fbc6affb5ede62a493957b8e547100b5d8cb99761f68c24c18ccc

    SHA512

    cf71ea704da4d1550a76ce21fe524ecc8ebe3b346809371a61f69d438aaaca091b72142d1de2fc461a118c12daa82116833526cc84ff4ff8ce0a9981df6938af

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    eccbaf55e9d43c4fbbe8f9d68825a069

    SHA1

    dfac903108af79996c1a0a41eb2bdd6953173bfc

    SHA256

    6173f58e6e3bc91e19f7cfa50210d9d43b7e0c1c47a96b0614c45e2ea5f6a3f1

    SHA512

    3e5540268b73ef8c8b2b8fbcbc8f1d3071c5a8c0bc42dea9365c7a0793c1e17548414cd241405b3a6a23738098dcd819e516ca585fdd4485634d3aaf9f059005

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1bd5e25b15a2158d628cf1175dfb9c5f

    SHA1

    167d8659d41f59e6ad64f939532e7631d9c1409f

    SHA256

    0fb1faa2b4856e5de8bcb48e7c31e1bce54687932b6442fb4a42bee2b5efbb15

    SHA512

    6ff3e94cf5717b711a1d0e4b0e6af08530d25821a8b4477d107d83e3a7a8fcf53318b5761f93dfa6071965b617faa554d8df288dda6956d153fcca3eda9b38ef

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    63eae0617379270c7c5eb1dab6492947

    SHA1

    483d124695ac39e20f77adc572882435e662623f

    SHA256

    bb45c69e59cabaccf07df98982a849b6153fcc7216fc6cf15e4470b57e2b596f

    SHA512

    8e382ac28be0f50ed0ab9e8273df44966c274faed99f32c591a581c6e0be684bf5c7e8f608ec64f845f41e7a8bac336ef7f326dd7f114d318041ee3f442ab594

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    aeb1febc17a39bdd0c2917f145ab1197

    SHA1

    0a935a14d4f8f95d443111ceb4eb1dc0e4f2e83e

    SHA256

    5766cd65f11bf66b371209b5d52c4665db86703e2066140df668b9390dd82f52

    SHA512

    343bc742c1e841be82dab278b7c65fe1585a36718f790d8a4b55346dbc649f0c3b114970d34421900de4abb852dc648338866d99a8c6865e52a760919115fc92

  • C:\Users\Admin\AppData\Local\Temp\Cab9688.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar97F6.tmp

    Filesize

    175KB

    MD5

    dd73cead4b93366cf3465c8cd32e2796

    SHA1

    74546226dfe9ceb8184651e920d1dbfb432b314e

    SHA256

    a6752b7851b591550e4625b832a393aabcc428de18d83e8593cd540f7d7cae22

    SHA512

    ce1bdd595065c94fa528badf4a6a8777893807d6789267612755df818ba6ffe55e4df429710aea29526ee4aa8ef20e25f2f05341da53992157d21ae032c0fb63