Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    145s
  • max time network
    149s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    28/02/2024, 09:51

General

  • Target

    ab9a57544b30b32ca500e58a08751ee3.html

  • Size

    103KB

  • MD5

    ab9a57544b30b32ca500e58a08751ee3

  • SHA1

    92cffa0b8a6114eacc2c6b60f9153eb5c9a16502

  • SHA256

    7b08bda341a608908d2ac4437d742b20c73dc70b73bd448133718954b9230dee

  • SHA512

    4f44adfb7c2e0806eba960c5550eee63688381420257f068a7fa07454b817f974e3a8cbd0089143ea8147dc9f82c7a3bf25d7c9bf434ed00b00eb9ef738e1bd0

  • SSDEEP

    3072:VPEijZeqLVEijZeqLczXHqegH6B1R4XGHULpcSuxw0sVAxxezS:VPEijZeqLVEijZeqLcl9

Score
6/10

Malware Config

Signatures

  • Legitimate hosting services abused for malware hosting/C2 1 TTPs 3 IoCs
  • Modifies Internet Explorer settings 1 TTPs 26 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\ab9a57544b30b32ca500e58a08751ee3.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1796
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1796 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2808

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\070E0202839D9D67350CD2613E78E416

    Filesize

    1KB

    MD5

    55540a230bdab55187a841cfe1aa1545

    SHA1

    363e4734f757bdeb89868efe94907774a327695e

    SHA256

    d73494e3446b02167573b3cde3ae1c8584ac26e15e45ac3ec0326708425d90fb

    SHA512

    c899cb1d31d3214fd9dc8626a55e40580d3b2224bf34310c2abd85d0f63e2dedaeae57832f048c2f500cb2cbf83683fcb14139af3f0b5251606076cdb4689c54

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    1KB

    MD5

    caa11e25e05806d8291bb6aa9922d368

    SHA1

    309f26af9a3b1caee92ff7c691d9556ffce4bfa5

    SHA256

    871c385776c3ef94d3b09c9a6c982480a33fff198fa3c106047c3db492af087c

    SHA512

    3220cfaea2eef3d078c1848243c4d7e0f1e3b198406b05f42eff4ce30746123ffb22310efe9ad50a5ca06bcf6a8142c0eeeae3b36b89749a5ed7417bb7ab0398

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\CAF4703619713E3F18D8A9D5D88D6288_A7725538C46DE2D0088EE44974E2CEBA

    Filesize

    724B

    MD5

    ac89a852c2aaa3d389b2d2dd312ad367

    SHA1

    8f421dd6493c61dbda6b839e2debb7b50a20c930

    SHA256

    0b720e19270c672f9b6e0ec40b468ac49376807de08a814573fe038779534f45

    SHA512

    c6a88f33688cc0c287f04005e07d5b5e4a8721d204aa429f93ade2a56aeb86e05d89a8f7a44c1e93359a185a4c5f418240c6cdbc5a21314226681c744cf37f36

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\E87CE99F124623F95572A696C80EFCAF_FA49E055122F4CD07E54AE9E838D66D1

    Filesize

    471B

    MD5

    60b0a90fb800d1164c3eca756fb266b9

    SHA1

    466bf26f3cce8e1942fe8f313f91cda672d01516

    SHA256

    43475a1df4e562aa7fb1a0d259a56940acf94e23a16855887e73ca438dbd2b61

    SHA512

    cc8253b04193697fc5c4e51dc3bf0483130b8ad8b73b8e9e7048e5ae794c5365f9a7996e610b24b5c4118f8f254b3b55c3026cf2b9ea14b1b8a300dcc4c0f543

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\070E0202839D9D67350CD2613E78E416

    Filesize

    230B

    MD5

    5c5705d778b8bc27242a6d60773e182d

    SHA1

    24639620b3f0903fbf7d8884867111e7391a3116

    SHA256

    c6c7ff6e318a5fe66ebbd557bf55839b2a6107a89b09b7f0a02ecf2db82975a6

    SHA512

    a9fefddbee9e38b45dc8a608b01393cdf3498305b37b120998c989249379fca8e5b0d12f25b4e277bae444de18444d937b0799594b4bbade122009de8844e7a1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    410B

    MD5

    8d801abfec2c291592a39785a66d6084

    SHA1

    614659b71737bdb2a4b18f724b4bd0113d79de0d

    SHA256

    e6668988cc16faf87aad7902b9ee96e07c9ebdc3f6c915c7217044fcfac5ed48

    SHA512

    8732519deeb708c59fe95bd6192d085e4eaf50ac41b11137e983d8237a4f62547ed40d440fc067fdc758a8b84ea98829002287b0421546e88089601b1a031397

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    410B

    MD5

    82034065ee0002cb15c3359f7c897069

    SHA1

    fa1af5cb69ce51d2f5c9ccb9429f42cdfef0d2a8

    SHA256

    e4bba2c8bd593cb3848390a3a2f1a080362c91a568789f089aee3bcfb74cfbc6

    SHA512

    c09c6d68344b98280d0a5fa7d849190df41a46bf063b8a3a4abc9af7e478840d07af8947709f390ed0b95fc3e816d86c985d687cb80e9bd676e4afda4dd2e5f8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ab2c7e1b10138b9131180a6730b4fc9f

    SHA1

    32cde4e2974b540153442a41ee284b05e927222a

    SHA256

    eee903a03bc3d8119cdaa10b6467f1269c75e11afbe50ab65d595acba7b3a9d7

    SHA512

    8eda2b6267d8f16667c61731dddbe4cbfccdf92ab88e7f29c5d18d127f683c47c3e9f8d6b7538ac8d65644641efb67d6508fc4aea0c51a22d9310b36f57b711e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    036319f40b5058b22c5a9f8659a67ccb

    SHA1

    6f7f922216a2171d65d524866601f6be8b77638a

    SHA256

    c8e22ffd4cbdd204e4c5d864e3b1aa173db9340ad0a8283e3b5e507a3de17251

    SHA512

    66a9aba810c49dd1a2c0a2e288d51c01783b047f8bbc2c339ae5a8d0580ef262614566c252b50c5fb87146ec0b104c118c2d142b52d9f5a4bd29bdd3884b7935

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d8ead42490722bf5723a9d50b0377d8c

    SHA1

    8d7659078dd7d4405c7316b5470648d2e719a19d

    SHA256

    39f5b6418e69844f670aeaac1d168779fd650c29d1d628ee089edbfa6fff7ba5

    SHA512

    0816dfa85a982fc875ce293162e5ba8f8ed4f4765c12afcea8fefa5342e498a8109362453466f9645ce0d810fb35cb0df104141ff9daf8790f0611251031afdb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5caa55e3da61f01863fea50c3a4faf1e

    SHA1

    528622c07004cae780718f671a4dd34a9a0a1e6c

    SHA256

    80660c509d4a1c911284e3cb972998ea12794fca3975a9bb7b64a265bd0e60a4

    SHA512

    a480172d8d0f7ba4fdbc723e7f33d52a8faa7ec04d7093e11940319b73169ee6107c8760c32a9b94119c1b699682d4ea1596a846139e146c38ff1a933a8e844e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    34141de3dda86286377be7570ada2b35

    SHA1

    75f52d5290cba8e06a2fcae03b96c9836c50ad41

    SHA256

    7a4850cf525603649dd23a4587f74d4db0a71f9add77367aac1b963157f50a7f

    SHA512

    9ad3b3278744201ea115c83a35a1da58240c2491fe41c82b84707f2289bc88384cdea1a9fcb77d509b2cead4723efd6057f6a918be4fec7c831b157aa764a6c2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4a7d0db2b25ef9348f50647bedb71279

    SHA1

    01599a3d984f7c97793a2b544475bc43aacd83d5

    SHA256

    6d674b5345ffaed64de76ed5e96f51a495b0c7443795c2040a2a4ccf48735649

    SHA512

    780f7c7ecf2baa88ae3f0fefd577b030622972873d7cd3723a1ad356beaafcb27d96b42e3f19586b9153b0bff701b076113b6179c5b0ff7d8a0f34b542e2a16d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3357a730856b43fe658ea367d85e4818

    SHA1

    a232cad5c5f012580b20ac94e0a2d826a155e90d

    SHA256

    8448fb313893081736cf00e50e83b214817cdecd6da5b7ead82cc6d57b380b1e

    SHA512

    4bf958c7c9c530888955874c1b09642876d15bf6a88c235c96f5b0baeb20908796be80168598d675f7b604c5ea273311d8e4b7599ca6eb369fc2866dece211b1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6b1cddc3c01ee18063ccbe17c340706c

    SHA1

    4635645c92dafd0aff6bfa786edb08c8cdb885ee

    SHA256

    3e9f9c9ea99481ed272dddde56973fdf28ae9448f91ff1b97c608e74edfe7413

    SHA512

    3b0970bec58219892035835387afb2fa0ec163eb95692cfc3386d25f8c5f3074d248d449965b8b221f186f8a943d6c4e0f0fb182d986ad3a9bab58663dd291e9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    70d560edc798e68f6a0e7a9264ca7c64

    SHA1

    7cdad6bc8021936755d9d3889fc88fa69ad848a2

    SHA256

    068f65f11f19713ede049e10612fc9fce63f949a3f42b8f91c35f9f880a8161f

    SHA512

    f4762e78221eb13dc92bc208a85efd44a882de35bd9a657a2c3237c7f4a76cbd3008015eec3973221803311f00846fa0fbb10ff040f8edbb718ef297d3ed768a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    774295221d9f7518c73ab152f712cb26

    SHA1

    402c69fe73534eb92bacd5ad4d73b18b6502fb6a

    SHA256

    8076f508d90584c173c0ef07950b20648505d32dcbb297e2391d38a31df563cc

    SHA512

    8630fd306f089bb92decf0721b2a43f61d1f93ff3e6e1b5bfc20b8e2cab96ad25de4812289413d078519fab1d0787a769b9f751b0533b0287f7bfbd43992e1e8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c4449489e8ff669912c5bd6adabf6556

    SHA1

    07f850e1759f9fde8961162390eb57dd0618e239

    SHA256

    de3f5896dab84a07f6e7b5682fa69578262af3b69aa7fc9414d509cfeb1ceb68

    SHA512

    cf79a34ba5c63b9f80cc5685184fea967e6a90a3d3a57f48874fc3394440a4b9cb5fd4689cc8a9c688ce77204b4cd3cd769ad6429a49e3cb69e7ee4a5826f5f8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    49eebacb4d24a723cadd94b4a9264996

    SHA1

    77781d7408b274247601d50322b7c1337e484402

    SHA256

    aa183c3e95bd9ae328b9dcfbeacc6986fe545ab3e95df99a88544f49f3522f60

    SHA512

    0b1de459a3671aeafdb693717bb4d58896ea20ab5c1a6f08a06f491ca97ff6beddcbd1c5497f0015ae6064af625914573c674f4ff4ba30a177de876af3e291d6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    623792958dc0c99a0f983b1240ed7163

    SHA1

    aad755f5b3e313231749e6daa9b08ec2928b8f59

    SHA256

    fca979e897b946bf5a9b2b34bedc742fc3bc8a7b8489a3728adb0c2608e17c22

    SHA512

    aac61b20dd2bfd55ce3f9eb83a1b5c7c2594a7870a9ad7abcbca794bc6ea18f7367c5ad7b865eace4c9bc16e50ff24e055549d6684bb1c9cf563262ea0372ffd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a40ee0de733c226e28316d4a8034c68b

    SHA1

    15d0439fd19b64399d12ab7b09c6d7e28a4dfa2d

    SHA256

    5c6a11a7f1484b729b8bc00f2afd662740efc143e4ed75c45dff16c24555fe8c

    SHA512

    aff958561d3696eb22fbb2efa1e7ff183ec83561b76a42c1342c3fb7b6a7677bf62ec485db8e0852345e5c1f76e58b9c9fa07741f10fd2e34893e9c90f0e8355

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\CAF4703619713E3F18D8A9D5D88D6288_A7725538C46DE2D0088EE44974E2CEBA

    Filesize

    392B

    MD5

    8fc7fd32733562b2047f8f042b9bf9db

    SHA1

    ceafac2bf466197c78cabaf5cab52046ed4de32c

    SHA256

    10f73e9fb70da08b93922b419d0fc04f657701b92cdf75399ec0feabdccc9887

    SHA512

    a9ce08cecb344a1c8108afd9c862b882f8969b598dca2ec569fc7258b516a779fd8404dec29af4d927a99a4185c6b3e0137efdb3ebc998df1922a652c7897378

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\E87CE99F124623F95572A696C80EFCAF_FA49E055122F4CD07E54AE9E838D66D1

    Filesize

    410B

    MD5

    14d6e956cc1d8f6f155f34012acb6034

    SHA1

    96faa7b90d1c46d0e767942edb30d68fd2b49624

    SHA256

    9dc34f2c08d71d69f8c7669cbdcfbb9abe616019b1af885885d7bed0132518dd

    SHA512

    df02ff14c72b9dd117d1e8a1ff45a200b27f3f0a536204d0458b460fe2ed176f4afd3eca06615e1cde7dea8ff4b1658f9ceb38b41c37a722d5ab3921247f3acc

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\BD3NDTTD\cb=gapi[1].js

    Filesize

    133KB

    MD5

    c8be3350843695958a33474aeb3ea8f1

    SHA1

    ad92694d9b189ee479c1be438636e39247b216af

    SHA256

    22494eb4f5fc2ef8c229b9df2e171990687e4837282655145cca0fa302af1278

    SHA512

    54ba5d4076fe9fe4c4ac22f45cd7d2ebb4e8027d8b8f82580436dccbcd60fa2adbb948ff1234d9912c663bf1fb33ac834007850f5a3f2abfb96a7a4feb110bc8

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\U4VLHPRO\platform_gapi.iframes.style.common[1].js

    Filesize

    56KB

    MD5

    bf78e91c4b8c660626008446d6d30703

    SHA1

    db09dae5dda987e24027a540e47650cb970e31bf

    SHA256

    f554260f317f497231227b9def0144f0bf370ae71cdd7a54ac60d0ae1a56e096

    SHA512

    15cf262865ed7a9aee617939501430586460eea04599e7c09f5b223ecbebf454450e9e6ba93b81e6e1a35b1039d0e80039bd4d4c768dc72ae5e3bb3ca1f70fdf

  • C:\Users\Admin\AppData\Local\Temp\Cab61B2.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Cab62EE.tmp

    Filesize

    67KB

    MD5

    753df6889fd7410a2e9fe333da83a429

    SHA1

    3c425f16e8267186061dd48ac1c77c122962456e

    SHA256

    b42dc237e44cbc9a43400e7d3f9cbd406dbdefd62bfe87328f8663897d69df78

    SHA512

    9d56f79410ad0cf852c74c3ef9454e7ae86e80bdd6ff67773994b48ccac71142bcf5c90635da6a056e1406e81e64674db9584928e867c55b77b59e2851cf6444

  • C:\Users\Admin\AppData\Local\Temp\Tar629F.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06

  • C:\Users\Admin\AppData\Local\Temp\Tar6321.tmp

    Filesize

    175KB

    MD5

    dd73cead4b93366cf3465c8cd32e2796

    SHA1

    74546226dfe9ceb8184651e920d1dbfb432b314e

    SHA256

    a6752b7851b591550e4625b832a393aabcc428de18d83e8593cd540f7d7cae22

    SHA512

    ce1bdd595065c94fa528badf4a6a8777893807d6789267612755df818ba6ffe55e4df429710aea29526ee4aa8ef20e25f2f05341da53992157d21ae032c0fb63