Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    120s
  • max time network
    133s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    05/03/2024, 06:06

General

  • Target

    b3f9138296891dda5071e49b5eefd9ca.html

  • Size

    414KB

  • MD5

    b3f9138296891dda5071e49b5eefd9ca

  • SHA1

    e67f31e3530275e1c21c9b629861670f0047fbdc

  • SHA256

    829aa00364f452891c169d790451765e86bd94467229a170bfe336e26528b4f6

  • SHA512

    44a3ea35995bf8bc5eeefcac6a346311a20ab799ff0c9b4258bb63cff0ec9a8ff470453e4233e0fd85e6602c9a493dde2b88a8a1c47e301aed13dbcc737ffef5

  • SSDEEP

    6144:aEv8p3qoOkVmhulehW/s0nsvk7qpdEU4sgDvpJakBCBukhj2:Hk7OkVmhulegLnCNposaJXABL2

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\b3f9138296891dda5071e49b5eefd9ca.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2020
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2020 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2188

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d6700787b1cafaf80318fb961fbed499

    SHA1

    ca3e64c19f94e5b8dabfb2f277eba9c96070354a

    SHA256

    fd4ab5fc6560be87845a34123b7a6dc27e9b74ecd178dff4f6064788b1ad9813

    SHA512

    5003ea845973c40b73cf473398e60b18235026c552be2387086820b51639ebb26ce4ac007b1aae3f3e676e2d14bb84e7d2a0bada4050825f0ae3f3b4d1dc93f0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    78b272681d6c52ea47133f115a768b85

    SHA1

    c4a1c289c9c2164fde9aabc0c5939d3d685f8f15

    SHA256

    f21bb81c9bb64af614c671cfb8a9ff05d7d5d3b2090c212544f7e20d665b813a

    SHA512

    17e5648cc3fb271770d7b5250cee6ff64b442236398532a4d117a39ed8360c091a46a327166c7ac53b80b17d57d55a0206ab2ae544f14473389166f878b29c0b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fc2cba406d3e63fc19d6ba7afddd3b4d

    SHA1

    600c0bf63b05fd20207f0a79da741393a21d1754

    SHA256

    d37507afed9fbd3f8aa62d53db68b3f60af98c94e8b3c997f42af24196809e62

    SHA512

    b68680243b784c2cf66eb37770ac6cb326a1326f16cd51f489cf6e66a4347d59a27d04ffac47a21368a35c1fa69f27a80ac03775daa079efdd88b76b8412cb27

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    334a7039d07ad887efd1057ca733b476

    SHA1

    fdfa6bc8a203bda35bbb843d93e2e5a2287db1e7

    SHA256

    c893ba92c2dacb57b4f2c8e36bfc8be651ef1c02ed63889137f07022ce8c37a9

    SHA512

    301d46aead21b16d8504f05eecf64ccf30c05604aec32cc43adada78cea9dfd82308595c839a5bc3164967250f97bb6d0347822e1eafb4a988f09021c04914d5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8240a8043f55db14333fa70421fb6cc4

    SHA1

    551e1a7a8bc32e0d2870a30608179fb4fdc9b115

    SHA256

    455d05ee6fee9e3d2cfd3a6bfda1a66a5806f26b2b49a8bcf2ff40a25b670887

    SHA512

    8ab253df9d56dd18e43eaafe0791b396c9e116de3167b78f4d24d16720992ae428019fba98fb10786074c0a88e0942828ee269fb9e008f6a905adfaaa9463864

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8102669117f2463837dd1c3ed92ad8fe

    SHA1

    331410c1e441ec1dd9e1c4ec19334482d2e0d56f

    SHA256

    bd142b8e3bb597b015f896508626137f7c79ede6897412ef84d83100c303f8d9

    SHA512

    ec1d8c6bd1c0d59e83771441509260b89b2af1c80f620cd06af1e41b1bed2497157cfa6a2fdb69c1583a380a4e498d4291f46efcc2973f231b36005c1810f932

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    61c85235ad20233811510052455a8697

    SHA1

    22d149aaff43a27fc2ad54fb8d8ea52ffa2ee457

    SHA256

    20cda67cb3aeeff59dc6f352ef77e8a01e62402aef64881423eed4ad4fa3a3e0

    SHA512

    273e60c8d0983f506f7cee94521fc5d0704813f70e87f0e61bdf6703f75ba779ed8e7337f8559338b9735f04b0f187b11534e3ba299ef23f878924d738611e58

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b0b390cd820b31e5734c4e0a1e057ef7

    SHA1

    737c8a42008940eb4cffa02eb838500a8fdac90d

    SHA256

    e05f132d8f8089aa9530c5988a9d1f4fb56dd279ffe1891b2364aebd54297137

    SHA512

    190d07a7ba1826221c2256095ddcb5ca1db9542aaf5d99993d64c2484318a7f59a6e54ba4849dcf68539136e8acc9a7ce2c776bf6d849d010de149d8439c0392

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fe279baf21bf0fdc93f36e49d703b4d8

    SHA1

    4ddda127bebffa19cae83d9ba65e77a05096ddf8

    SHA256

    15d64d502b93ece3dc75f46946c568c9e8b63d4e8ef42a9e34efd55f6bca7aa4

    SHA512

    1736ace4d0829cd01dd1dc010ec82ce2fb2db00ea8f8ba2cf72b2616ae3418b0f576e026ef205f28e81c0cf362c7cdca238a40caad810e8ab447d84e2f1a4f6e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4374703816f3074be21861b3b648fe55

    SHA1

    72fddf6330927d81fb7068483a59755b9befed7b

    SHA256

    7089dfac96990bb48910ad1b47f7090277f60cf15ecf741c65fd99062efd838f

    SHA512

    322cc035c55f75faffc5d1d0087963d98358f5435688220cbc0b7b20d482180c1be95142ec5b4540786780d965d8d53fa9aac5dc6a3969d0379d8e2c30cd974c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d03317f7b1f18262fe6ab978b0cdcbbc

    SHA1

    e7fd1678c827c57a8f85466f0c8f6bde7d70945d

    SHA256

    f2b53e20dce07a4e728509733ffec32e6245ab0267bc48ac412dcc5bbf91e885

    SHA512

    734039b75e8dd9c345f5591cb691184d725c50211c4aee99f66b9a1aa3deacbe1c77a7a916dff50cbfd6fa8e4e8692bf1e873dfd4b1c37e34bd1bd9757996a8f

  • C:\Users\Admin\AppData\Local\Temp\Cab6AF4.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Cab6B73.tmp

    Filesize

    67KB

    MD5

    753df6889fd7410a2e9fe333da83a429

    SHA1

    3c425f16e8267186061dd48ac1c77c122962456e

    SHA256

    b42dc237e44cbc9a43400e7d3f9cbd406dbdefd62bfe87328f8663897d69df78

    SHA512

    9d56f79410ad0cf852c74c3ef9454e7ae86e80bdd6ff67773994b48ccac71142bcf5c90635da6a056e1406e81e64674db9584928e867c55b77b59e2851cf6444

  • C:\Users\Admin\AppData\Local\Temp\Tar6B87.tmp

    Filesize

    175KB

    MD5

    dd73cead4b93366cf3465c8cd32e2796

    SHA1

    74546226dfe9ceb8184651e920d1dbfb432b314e

    SHA256

    a6752b7851b591550e4625b832a393aabcc428de18d83e8593cd540f7d7cae22

    SHA512

    ce1bdd595065c94fa528badf4a6a8777893807d6789267612755df818ba6ffe55e4df429710aea29526ee4aa8ef20e25f2f05341da53992157d21ae032c0fb63