Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    118s
  • max time network
    141s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    05/03/2024, 08:56

General

  • Target

    b44e45ae33377403097195fe2ab783a8.html

  • Size

    432B

  • MD5

    b44e45ae33377403097195fe2ab783a8

  • SHA1

    7fcde3a25841b6567f59de80a355b3b75bcac8f8

  • SHA256

    f8ce3d040bf3f84138f72771ae98d34b375a8fede83095be6a5e6712e37d694c

  • SHA512

    f4453e2e0e1db2be02acee88fe452dd980193eee5f0897d3b4eb00afd38cd792c8395d6497b0016c77c4b1825d228b93044a9783745e33dda764e7f4167acb77

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 46 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\b44e45ae33377403097195fe2ab783a8.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2696
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2696 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1404

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    67KB

    MD5

    753df6889fd7410a2e9fe333da83a429

    SHA1

    3c425f16e8267186061dd48ac1c77c122962456e

    SHA256

    b42dc237e44cbc9a43400e7d3f9cbd406dbdefd62bfe87328f8663897d69df78

    SHA512

    9d56f79410ad0cf852c74c3ef9454e7ae86e80bdd6ff67773994b48ccac71142bcf5c90635da6a056e1406e81e64674db9584928e867c55b77b59e2851cf6444

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3e854af930e9ad65307f7621f084b63f

    SHA1

    dfdfd0506fc1091d7a4411a3b2ea8294d4c42c69

    SHA256

    6fa5cca706d9033e89f815e43dfd21e2651f7b1d8c28a298738e6e4817cedce9

    SHA512

    ec9bf76c3d4ca18397727b3f85c6d9c211471e79323a3ce547d82d1121e8cf32fd287f0774fc785fd3990ab095e475c42edd11986866eb74c225f7400c5b8c61

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    171dae92c5e3be4f6af7775667b95a89

    SHA1

    aeaf2a0468baa174e84117e72fdabb7c323776fc

    SHA256

    d96287e7f672cc34c5ad409dad9c33763ba973e8d2772e2c14f191032e04bc48

    SHA512

    d6e8a066d6154d45642752c3478dddd39155036eb13a58b3868ace04192e612950ea80c919665ffc801df34321b9b3a72f8747fd2c9f788b6df5e2de21b57efb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    02a4fdb6b6ea3216cb697083f1b82c48

    SHA1

    f38bd605234bddd460174dd0d6bf7c04c1f4e32b

    SHA256

    54f1d1e0d7e58b2c875a73f6db59b92baaaeb0384529c7f6da99a183c4e5333a

    SHA512

    d62ad95fc97b004c41ead283f0c841fafccba722f0ad4578f049c4044b7daa8b00d90c1d5370e99ccde84cb5678cd1bffc3138f0da2a26f95c36fa0320cfc059

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    88f3daeb63ce01bac8779f8802ede7e6

    SHA1

    7e2fb3056b740ef934296bbe8c6317caf1bf805e

    SHA256

    cd496f25a8d88d78d1cdbb398fc75f28afde9cec0a5e94e094c0f1e0aea35b37

    SHA512

    85a8475fbbd0c6ceb973d7d626cbcf74b828b2c309aecffd07857a95bbaf26121dbb41685a6ee0ef9140bf1ea73eb8a234b60979646a41a4970497c931fec1be

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    652a8a4423beabd0957c6796f64af912

    SHA1

    d4e24889412a6527c0156c85daf716389266518c

    SHA256

    d3be6b615c156530b46541a22d8af59f2e16a593b4a60a0a39dfd8be87c16824

    SHA512

    67249c6788d537fa590a1aca7e453f1cb17e62d2ca09e4debafb16d5f4065520a4af5ccdc76a53056b2c73fa0464713d69e9767944676c6cecf3d93685264ef8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7432f531ea33c84498f5a26edaac1c09

    SHA1

    7a6877e74f98baf4a29d89ce9b07814dcae98505

    SHA256

    105841263e990dccad45a353066992d73c4b2040896e76d5946b6fbf2ae78251

    SHA512

    d9b2a8e5966fe7605fb41bac96613a81971ef14fea70ff67798d9e799c4ef3c7af648cb3501d9b2863bf83027315c6001092b0763c31c74107c5b3b47b80b7da

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    97699f8e9ffe3426dbad56e68b2ef493

    SHA1

    a04c088edb66a8363560d099a4ed595d730528f2

    SHA256

    36f899d955231fd519b7d2bd53793ce2f5db59f098206503b8dc0e7aff7a40b3

    SHA512

    81d0567827d2b52cc815fcbf3a4c2831a6ce0532f5fa2362e9a308a1e00dc7be9d1d51f437f0711d54f13c9d764e1613df6217fd1d8a23af1faba9163c181355

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    58627100118264d0bee00eb6bf458f2a

    SHA1

    d8539db74d3e6150585d72134dd64fbe8298236d

    SHA256

    eacdc98f3035273fb23f31991e05eeea651ff51e1802bad3ffe84515f00440b2

    SHA512

    9d54cbbe7cbcbacc8920ce51f4dc207662ea9e576f68804e16ce4622522cd7b5c35cbbf19bfafa856b241722a0e67024a62cf3eb48e04a134be111398077618b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8f7e96b481009f95bfddd3c03fdad330

    SHA1

    abc82e8d44722be7d2097b9e203ebf956e18f507

    SHA256

    5dc160bd85c4c317c3460356fcdc81c5fd56f6bab6a00905a8adae9a2fcbe5af

    SHA512

    02b977a56feecf1e2e66272cfc9ea8a008e98f64aa3f2e0f8bb837cff811f15abe97808ff157794bb399debe3274e80763257097df6e71fda11719acfaefd99e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6f33d48ae1c074893c0da8d349da5751

    SHA1

    132156681e470d37735340790217943c0d9f96ad

    SHA256

    0605fd2969db07cad2212699eb5fd107375fcfe3e4fe87de648c3d029eb7af9d

    SHA512

    c389903bbcb0e2ea861f698f72b5da55930c01552e7b299f0c786e45f602c2c4a10f8d4c630e5a6e3fa4b99a36b58e4c661bf96c89a6c10b166cb51dbcdc723d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fc143959630e8fb235b50501b37a4c2c

    SHA1

    2c06d5b85f6063c270e0c6021bdff576103c908c

    SHA256

    a20c17221c6388fc762d82e61b8520471666e9824409fee01ccd524b0c737167

    SHA512

    7a9268513723233365ef44888e693157fc766c5706ceaa52c3f3456f2a8e66bb2fd5470d09d934bc58ceb4d0f95e9038940a80a835836fc2885195b3e3d2f219

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d4acea6c61c9354a1441598a55c012ac

    SHA1

    0ac16507be0f349c509f843f98cde9dc8ff2ef69

    SHA256

    7401fcc0c5456c20eac190088e859e98be53d6e33ce8382ab1eda49763079527

    SHA512

    72e1220c05c7ea4130da65fad652e2628e34a4f309fb0d7a29ed3a1934ac3ea1b61c55cbed3de4d1a9e0dab9039056b4486274a9f5df7f5395c0feee5ac49fe7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8ecfc6a43b9257acd6a23543b0e9cffb

    SHA1

    e9f39bf30519e786ea37da88e4ad802fce654054

    SHA256

    f4648846cf6e0212c4f89b2e0eadc91f1be4404b6b3379e5f1552708b12efeff

    SHA512

    62a1a477b054a726df2e2e2706295f1a118799d380ec5d6eb5c1e3ba154a16d549e3c32892a5e209de95796b283bafa82336a4bc02a904c985eb7487651e2ea8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    10b75efb68912b2ede1860ed0010eb73

    SHA1

    7035f083c3685cba56ebfdfb414d519403051023

    SHA256

    0afe235b22e02b1465aef9f21fd9f178662be9d7ea1412ce1804df2ab13b7830

    SHA512

    07d51432c0d2888ab41a5ecb1ddaf0de129067a8fd160b29b18ed83b9271940501efb6cd785556cedad856dba20d7a857e0cda23eb932f24d7782c375d87925e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7bb8aa7b1baeeed7e62b07f2494794e9

    SHA1

    d6ca43062e2247af9048c1d3812f72d399c753b0

    SHA256

    06bb13547d94b3f96851b4f941225e30dab955e964d4b35e161a85d1cfb1a9da

    SHA512

    ad9c366732784a0b797cd874731ab65150cbe313f1e9d6e54e2c0589887fc9c1bf43bd50aee4e9effdd4426808ee09e6f8a9e69531405f88b61e7950bf5d5a0b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    33f9d582c2713c9220d66d445f52b81c

    SHA1

    5826ca4b57f7547c306167b0b0c50bbef252ca4c

    SHA256

    8ced4c75a8df04c89d55b98daf0d64c897f1e05be968e1642916fa2027780598

    SHA512

    c06166e71476f8428244d8cc4a835d8103891f5b26c5466d44d973154b934fee232597c7f94253343efe8a79e676e9d0678df846be14ffa656eaac141e2f4bff

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8744c851712ced8ea487aa3e355c6162

    SHA1

    cb8ba3972c436a623f3caf968217c86147e2d203

    SHA256

    1792b80d9c5c73378d1519faec641268a81a74ed762084a6728a1b8e0b43452a

    SHA512

    b5d3541b6f3dc8b4e3013d209edff29ddedcc7d20e14eba43f8a44fba7fb82214313e1ef4ca7c422cf17cd7af680cd3f4e6b89f1ba7144274e8e59f251a494d7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fe3f87b98179c2177dd4f2797a4435de

    SHA1

    1c0e04fb82ee655b100a82cd5735efc062a2af81

    SHA256

    7f578c54b501dd5ac254a5ae053e86a5e0a561ea6d2ac1ed470843d5fb274176

    SHA512

    5b854a7b593066f2dbc982889ed80e0ea887087520aaf49faeb8d832a67d6d3063e7dabb9a0f3c5e5990a7d9e79f97c1c7bbe4dfcc8794e56a65b6f5fe095dcc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c65ecb841f0c4856ae22496f79786105

    SHA1

    f30b29131b6267e632d83a1d8cdc5dfb7182c9b8

    SHA256

    275f4b75b20978175c62de0e799bab19b9bdfdfc7bb238942f82aa475ad31601

    SHA512

    3730453089e75e2e29bffd9b21d1139adb603f004625911d0c1e2735ba98e79ac1ae0ce2966e31bfcec0b0042f4f3d4aaed6e8edf368396afa851bc8f5f93943

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8a21998318749bbe4e5ca0290acd8d43

    SHA1

    3309adee591a013f66932abb0c51b48dfdfdc266

    SHA256

    9000244653f42f026ef947f8f345bfd3e02653f5efcc41eeb5970fafaf5aea64

    SHA512

    8918abf9b3c63e01722d2c27c0273bb6f4ed669271ceaa0967a51c79a91c533033188922fdf29aafad0bbfae4bc21e8af9f12e64924756ddc89f39d8d56bb073

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0e9bf28428a0b1aeb1c24de834005767

    SHA1

    234179758be5de10f23fb3d5efb84d32136b3eb3

    SHA256

    e9f31283135e40f8f7ea59d74eef607c66e8bc1090923b7ade8d6465b1d55942

    SHA512

    54e07e346a905f3c297e2f14abeca4a36f268e8996d08c5d06b19c1ce4bb3645bcc948a1ec7b2df0a74a9065b2ba0c74f08c6d2314d9be1cd4d07c9055e8ab8f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3116b53fe7dde5f3730dced27777c345

    SHA1

    915d49989bd9c86e899d6e7bb709a1e9b004105d

    SHA256

    2d7b4c3b815d8ff01c1eaa26c8153770fe0f760a57dfef1b1ab1f641ebdd0725

    SHA512

    456b4cdec39147b74ebd0d70c9e7f6c3dc135fe184335316e4ec22c8b9b00eac72b19af814cd7101b0f5ad63fd5adfe6e3b152b79063106463cf8e9a0c762659

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\2JN9ZUPV\ovussaul[1].xml

    Filesize

    13B

    MD5

    c1ddea3ef6bbef3e7060a1a9ad89e4c5

    SHA1

    35e3224fcbd3e1af306f2b6a2c6bbea9b0867966

    SHA256

    b71e4d17274636b97179ba2d97c742735b6510eb54f22893d3a2daff2ceb28db

    SHA512

    6be8cec7c862afae5b37aa32dc5bb45912881a3276606da41bf808a4ef92c318b355e616bf45a257b995520d72b7c08752c0be445dceade5cf79f73480910fed

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\imagestore\q905y6j\imagestore.dat

    Filesize

    1KB

    MD5

    6c9f23e0fa0ed21fea42ed0c00166cf2

    SHA1

    4428cc18ddd2e3d40470a94b9db1e67d6d21861a

    SHA256

    c5a4c188491867a7302b43f40e5661e4709d6ee0b289a8ee8c0c1601d1028c5c

    SHA512

    cf51009a04c0d610b1eeeb664697cfd7fe41313f87829359ba17e4dd447bb788afe77389ab05d7bee73755c94d005c4310e65b44a368aac943b8e47b6cc550e2

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\imagestore\q905y6j\imagestore.dat

    Filesize

    2KB

    MD5

    150a09c01f6a0adfcef1375994f59c1a

    SHA1

    1ca32e98c0d4533b2b282db3d64596d800d9dc2b

    SHA256

    19597a490911867c1deb20f44de339191f294741e64b56f672e0b67309e849eb

    SHA512

    8f0d3ca0f14a8c4aba41adf3e57e058022f7ae36c68bad7184f744c43a40bb11f65a33fffc94718aacdfc990569923b013776beffb182ad21186365a6f18ebde

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\9M0HR0P6\favicon[2].ico

    Filesize

    1KB

    MD5

    668ba1a9fa1890ba16cb8adc28d3dad8

    SHA1

    5e35223b2541265114eaf61b9da2556c812fea17

    SHA256

    7746cf1b553433822522f2dc432f55fe64eee1f1cf823ef6adfde02e58e1d7e2

    SHA512

    212aa3e6ea6a2dd1abc10d4a96b7be179e0e490da187641ae3be7b7c0c30b7272d8d5b37b1c6ca5c75732dfb35a8ee30fa97cdb35704b97eeee11a2163e53664

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\L9PN2QMY\favicon[1].ico

    Filesize

    1KB

    MD5

    91abe01116ab422c598e9c8af72cf4da

    SHA1

    0f2815fe8e067d48537ad168225ab4674271fa27

    SHA256

    b1d7aef06456fe7431124129a28f0138bb5fccfa4f4161e3087de23c005e5edc

    SHA512

    a4d5b20c3014153b6b382c43404917bd2cb5bd2a59bb1e981f5a19eb7dbdec185ace288e9700428d24e5ac623e45d04905e706f0c45a1642b1aa6c091213c23c

  • C:\Users\Admin\AppData\Local\Temp\Cab93B9.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Cab9522.tmp

    Filesize

    32KB

    MD5

    b6b4388bbd8b45b365f7d6966d6492dc

    SHA1

    8ecd4783da541226a8baba4b24b99763dd20202b

    SHA256

    25b2724044ab184600e665243a3289e570a1b90b59e1b1b1eb8508a0bb5aa01d

    SHA512

    2235e0b72645a419ab7344d307b404d602a53ac305067bbe6510b166f573c7180064752a2c2fd670ef46a94826676a090c7668a7d41613c91a4b1db3aa61aca8

  • C:\Users\Admin\AppData\Local\Temp\Tar9652.tmp

    Filesize

    175KB

    MD5

    dd73cead4b93366cf3465c8cd32e2796

    SHA1

    74546226dfe9ceb8184651e920d1dbfb432b314e

    SHA256

    a6752b7851b591550e4625b832a393aabcc428de18d83e8593cd540f7d7cae22

    SHA512

    ce1bdd595065c94fa528badf4a6a8777893807d6789267612755df818ba6ffe55e4df429710aea29526ee4aa8ef20e25f2f05341da53992157d21ae032c0fb63