Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    118s
  • max time network
    134s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    05/03/2024, 21:00

General

  • Target

    b5a4f3324f5998b32717f9237a0ff582.html

  • Size

    83KB

  • MD5

    b5a4f3324f5998b32717f9237a0ff582

  • SHA1

    a0010ff4d463e279c7d8f1fcc2a69382c1ab054b

  • SHA256

    8255b479a89d5e8e4553d3a1bdd5418906db669b1ad7394abb7b64fc40450063

  • SHA512

    01704a9fb603d29a51ce2b2f862ca1e61261d181ee4e38afcc4f41dd14d90ffcd821a0b64b97857553ec069e51bb073658cd8e8ee8ba59869cc5e3dd85b7343f

  • SSDEEP

    1536:q+th9gSwgQT0NcNtxNSNeNBNYNoNJNbNb9xQ:q+X9gSwd0NcNtxNSNeNBNYNoNJNbNbg

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\b5a4f3324f5998b32717f9237a0ff582.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1860
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1860 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2504

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    1KB

    MD5

    8b42bac1c66f1492c5530d5ad3164d0a

    SHA1

    81e71c01a0f41daf4b7806ba7ebaa68a0951c4d8

    SHA256

    949ed7aabb7803c473f114ce55e59f9f0c8b68611cbe8f18618576990e6eb256

    SHA512

    1275d28632e69a896e811f27e023c4f29d14c2958aaf55587a6df7603d1f142c3d423df812ea352f5ad4d6c77eeed274b886ee166bb8a3c411e56e9a1ecbb7fa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    67KB

    MD5

    753df6889fd7410a2e9fe333da83a429

    SHA1

    3c425f16e8267186061dd48ac1c77c122962456e

    SHA256

    b42dc237e44cbc9a43400e7d3f9cbd406dbdefd62bfe87328f8663897d69df78

    SHA512

    9d56f79410ad0cf852c74c3ef9454e7ae86e80bdd6ff67773994b48ccac71142bcf5c90635da6a056e1406e81e64674db9584928e867c55b77b59e2851cf6444

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\CAF4703619713E3F18D8A9D5D88D6288_A7725538C46DE2D0088EE44974E2CEBA

    Filesize

    724B

    MD5

    ac89a852c2aaa3d389b2d2dd312ad367

    SHA1

    8f421dd6493c61dbda6b839e2debb7b50a20c930

    SHA256

    0b720e19270c672f9b6e0ec40b468ac49376807de08a814573fe038779534f45

    SHA512

    c6a88f33688cc0c287f04005e07d5b5e4a8721d204aa429f93ade2a56aeb86e05d89a8f7a44c1e93359a185a4c5f418240c6cdbc5a21314226681c744cf37f36

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    410B

    MD5

    ac2a1afffd2c63876b35c7979aa11c57

    SHA1

    39250e4ce0fdc66803005ce7768f002d45af9d6f

    SHA256

    71f7664bffe63d28b7e981f71fe749f4c88bd13dfe1025b26d88262107324372

    SHA512

    63bb6cd6f1306258e011c020d6cbde42131eed7066a47e4791b7bda8eecd1c33bbf5cb81810c33d0315b5e45ef66a3e29442d7744d42ce4ef6a2894f4d645150

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b33e07ffe0b97728621bf5e392ec2039

    SHA1

    015c3c08d50531ac3c87993c7a496253d4fb93de

    SHA256

    31c0c1c5b4b505bec609636fa36225db97ad0f8fc886e81de5c555ffb8c1eff3

    SHA512

    972ee960278d617a4b06261acf79d370379e01a8eab12b417d2a4e0e32212047112b064c243e0b990ac64debd6931a4ea3d4f3168e8e4087f412b5a0f6bc8ec7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    10e1793d52cf3d6f2fb6f11128a4be84

    SHA1

    711e2ae5c15a1bc59a390a8ca943b3db6654d7a9

    SHA256

    2d71d09b27fed1b96d2846952054bb903cae92a6e833da39963d61a0cae13867

    SHA512

    609e2acd5b415e560ff0ca95d7e55f3850c33d8e0454947b94654f38a7bbfc4efc0c239b474419fcb716305aa84a2fd1f768fb792bd40dce4421257385dbbe79

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5f26a6c8296c0aee904d17a073c374a1

    SHA1

    036573441c5a60fad19c8f87d9125ac038125dcd

    SHA256

    6e1bc738714df363efccdd9990f37a4c250165d11c3bdba04c43ccd2d6061fba

    SHA512

    595475c1d23bd63b889c8fa092ab5ef4206c73294fd3119fe5efc522d150f2ccc2590c1c7d16be6585854c7369a2c6621dfe6c3a443ae4b0d43169b37a182296

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    75624ce2b27fdde2fa4f7c5a2d3b75b4

    SHA1

    12492e97ae1ce27c4a775ee102ce356eae5e754f

    SHA256

    f791aabd3edb55ee1162619691aed10e3e3f17d545c052d6a599d726b4c20806

    SHA512

    5b076e2efcbea698714544456ebfce65895544685598673608610952427bf35eb018c04e67d71b8e5889eb7c88ee74d833d043e433c220aae39823e3ee58faba

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    da633c8bc000eaac95d62f8ce95fd690

    SHA1

    8736c7ff5b5b5a5ae8e9d44edf5730a19466f641

    SHA256

    9deabcd011de99398f9d38a47c0df81cecfa621be1ee5e1fde614b28d4403c4f

    SHA512

    350a27f24bd6b345b8a6cbda35fc6d9de2297e13fca036ae5e15fdf808a5ad6a4c5612122f000a949356be39ddeaa7a75cd72d994a337f10c03d2fcc1aa723d3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    354667eb72fc2988ed4b2f8d673a2931

    SHA1

    002aa6b65d9685cfabbd017727f133a3a1072025

    SHA256

    28dbc1d2f374b589a3fedabf6d8c19bf8794456482645f07ee0690cce3059ae7

    SHA512

    474579f63eae6055fa561014f9f831f524f97bcb3bea6d25da42883296f10fad4f9186d221463ba870a0fc2fedbd647b6d23bbffe3a1d02473a69b1ca438e7d4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d3632846b9c33b543a329e7531a613e1

    SHA1

    14148fb79f97b3af8965f7c5016c90e980c9416a

    SHA256

    6c9bc1c971e69865cde8759514c4fec20854c3f59c6dc4921dbb43e4c829271d

    SHA512

    f27d1b788158dab063ee29ab070ae8c77446a258e8ec3167d66dba21fc4b175e60917d835726875723f31d1ea22ea210db7abee5da12c76342bb97298cf313df

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    51ae32307187d364e2213d28f4b15cfd

    SHA1

    a80d15906419ccfedc913f0ea98b579f623e2a21

    SHA256

    148f73adcdb6bb1b54c2b8c0c909da6c6f450c7f0e6ba088cf4968ed17983f38

    SHA512

    05d8ff02d56cb7c7482b43c1d577c38906010a8b314fd7f4fc0cb14d6881920c9a52874775b01c93f03945b75c6d95baf165cb8682800b678486fad294fe60e4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0dfceb1af5109e530a64c69be4b490f4

    SHA1

    e283921a0292d971b11a272b16f78ae62b715a48

    SHA256

    73cb40ce2882f961c09a6d353ca57ae6ec9ecabc706de29bcdc5a857699eca75

    SHA512

    804a188d443c4c5b7d5cca4fefac21f0832220555865014214b467e48eefb79e529d081231eb754f2577db77e15d9e3532e6bf880985977f348f9cecf810a342

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3b803d5da4d54ae8a94f94e5f508402c

    SHA1

    2bda1861b2591da45c3837e38832a21f6ce01054

    SHA256

    893348485e4ad567099e959fbf9d433ec1bc3efa9c918766734481034e8015f9

    SHA512

    339296224b47beb420a15fa5bd7173c4d5452400583232ce45ee62e927af4fc7077e13c88f448868885feba1153dc5f3f1d000cfe43f476523b8acc29769a5f0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    69b4acb30feaf84941f1357e76795090

    SHA1

    1ebfc3f950642a33e4b6da0ae9a2551ee647dec7

    SHA256

    7358698baa0cad9e6fa48e559a39e527fe0dc27dae229018e0ffbf52b0b16385

    SHA512

    e591eca45c9bb87bb2da2ee637b12a860a4c35ce676dce7ef9bd63ba0728ea4f26eab57bb8d27abc4e7cca12e40326302ac1655cdd8ba5b382b6883d4c0b19ee

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e2722ea20d13cdab2337c08fb0af67b7

    SHA1

    d1f05fdedaac52b5d2f7a2b5dfd8620f631e4155

    SHA256

    326a0a550efa89d7124c883d20a292f56c30f47de60dcfef63fcda2ca80a7f10

    SHA512

    0e682414f8edfd595006d9d7a2ffcad2024e167573746759b9b0c28b0f28e015f68f1b948f72c100a7b0a33924075363fe4a0fe5e22e20174f1bc724e66023b3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    61df6a1a28ea8103280e6d68dc30b55e

    SHA1

    ce3c344f9cab5fa07f26744b489269e04a53a68a

    SHA256

    6b7a71a0aaaa242eb23a3f1c3595de424efa27bcca0a92832b951e30b4b54c47

    SHA512

    0be971da326c92625e5042b6636fd754dc26033ff1e829be382fb5ce945291d0bfaa1cb546971eba6b58071a9427652bc5aa46f261b8dd114880a96cc3b20fb5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ffc13c0a7b60a02c3133d6408108dbea

    SHA1

    2109d8fcd9d8f7c5e925b1e15fc526c462b66c75

    SHA256

    7a6a80ef67cf80c89d4adca43cafbbab41f068afe2af7b2f12fa57d25bd4031f

    SHA512

    ba9070d521bdd01eff2d9fc6dd8ef9f356c1326edc6e8c11e57e096c10c831b266e476f900efdb64d3fef2f4e9093a740528eb6436bbb56ac941fe06d55229c4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    58bb7df6724be37d2e65bd91b9e8cd9f

    SHA1

    4521a5e66d9c7f42d56edf4d2cf4e0a4c048783a

    SHA256

    16df986548ee6e9b6f6f1b72beb7b7142407a14f3432f3fddabc3e4420589e58

    SHA512

    89baffa28e82f1d6373f8807c0c375a0c68ea030f7bcc2839f03e24016bee9fb938e1c517c68ebbcc3d8cdd39cac06fa1d4564017b0f3ee1fc9a34f15dbea7e5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    eb4cf65c636e0350a7cd4c6aa1e906df

    SHA1

    0ffc1453e00ce8f22d47cebcc8fbd7d7cab6a804

    SHA256

    c9c7636d28de21cc273ea0036bc2d01081ab0ea72043b31e69720ceb76f8d82f

    SHA512

    7caa3c0e37174f81329aa94f7b49c1585eca6fe8f0016a876442c6a30c4965342431a1045bdee6f8f5dfff45f0670c44528243293d99c95d2f25fea8af6dada4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    563d3e01babe5f12d81497bb14b2b5bc

    SHA1

    761a87ec1ee9552d37c27874e7f422721dd388b1

    SHA256

    7d54eab71c12ef6105ac5afeab7b80821c707bc26993269f03fdada2c08d4451

    SHA512

    d3dbf86778633eee50b45b20881c030f20ffb1d33dcd2df7bd8d01a145b304a43eee9ca2ea410ece9234d4ad8b711c0387939183ac35f020d38dfc3a5c1af1d4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d459fdc8b4c89c005e6478f76673525e

    SHA1

    4663530365190ad6adf963c055b38f6015bb9d5d

    SHA256

    e80a5dfac686ad7b6bd5b967a3ddc25dd1c600d36850126a1335f22d1312fb69

    SHA512

    c0abc8ed34318e2225e38bfd9cf14da65dcdcba76652f699a1dbbef9ee644433f5961299e9303c0722c977f6e6d1bc99e43c43e38295c0333650c8a0c08fecf5

  • C:\Users\Admin\AppData\Local\Temp\Cab8845.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar8856.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06

  • C:\Users\Admin\AppData\Local\Temp\Tar8985.tmp

    Filesize

    175KB

    MD5

    dd73cead4b93366cf3465c8cd32e2796

    SHA1

    74546226dfe9ceb8184651e920d1dbfb432b314e

    SHA256

    a6752b7851b591550e4625b832a393aabcc428de18d83e8593cd540f7d7cae22

    SHA512

    ce1bdd595065c94fa528badf4a6a8777893807d6789267612755df818ba6ffe55e4df429710aea29526ee4aa8ef20e25f2f05341da53992157d21ae032c0fb63