Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    137s
  • max time network
    130s
  • platform
    windows7_x64
  • resource
    win7-20240215-en
  • resource tags

    arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
  • submitted
    06/03/2024, 07:00

General

  • Target

    b6cc0fbcd5cee43e27071cc49d252271.html

  • Size

    166KB

  • MD5

    b6cc0fbcd5cee43e27071cc49d252271

  • SHA1

    154e9f31c6489f6b9dbb1f643629fffc633d101e

  • SHA256

    abe0d1a74cc4b6eb80c49afc844f5a04a7c56b13365d3f905b73cc867002c3ac

  • SHA512

    1061f76637d4699cc709637ffcb317fda0eba957a58816de856cdee0e4e1a59abcae6d7ed0a5a90dc314e912887a2d4f1bc2cf6bfbdb4ee9c928b7b312fdcd70

  • SSDEEP

    1536:Lax71REfBchUY3mfgTbwUEds6WUK5T0kRRCad5W8uHZZdeaDiZtKsrwOIUb/yyWf:GxZRunxRChr85b6s5J

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\b6cc0fbcd5cee43e27071cc49d252271.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2316
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2316 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious behavior: GetForegroundWindowSpam
      • Suspicious use of SetWindowsHookEx
      PID:2312

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9415fe0545b315989a6f295907e7ad84

    SHA1

    60a15c01794bb5b400199f578df2825a38a02976

    SHA256

    bf8a3d54dd4c659d8ba4007931b2c9300783c8549beedbddc7de5aca1a905396

    SHA512

    71d02db4dd6e016fd37a1a89c94008bb92a336a4f9b4832f433e34bc6c4ce6d5f62fa6302d26e93256eb6af917784b99c3b3d53b69dfd4b1fe9d4f7fe131df80

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    49519ce045bc51dc1abc03e3c1ddd28b

    SHA1

    56583d5b702f8418dde38bba0ede02b4147c8cac

    SHA256

    e8f9f5189e84de72cc33ed2bdb883f40512999ed094104cb78ddbce50d7ec071

    SHA512

    53a320e0e8dc5e1f7ab653d5a73b3b3109088d1fadf5d36cc40a15e5265617527271660add9bfaf5d7dec49bb0b632d22d7d7054dba1760140107ad6f90b3f64

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    00164b85ea70f599d1aa4663f5cdba05

    SHA1

    ea0bb71143a8c865c3b1c4965586e7cecbfdaef5

    SHA256

    d5de152e2d52c5c5a0fdc2d72910ae8d8eb02ccc367ef4edb861369cd1f699ca

    SHA512

    03ce1a09b0e0a489d204511a828a5cd57d89241f8840cfdb83d0c167ed6b63d6b9afbad31de93d4dc64f24cc148f7c0626cf6244e2ea4cb1d72011b9a487cacc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    01291140b08cc205abd26f893c5f9fac

    SHA1

    cbd88f41f0bf7d6934839925e699209acc1ed650

    SHA256

    a8e81e0524c9ba267ced9a580d4f95672a36334cc3e114bd698ac662a5550e24

    SHA512

    4678ceb104c8a8fa7ce9f10a811e841399d425c03f333113964f3cd1581dae0e0e5b3c4823b273e03fec5d791983a52ee5b0645460134f5aea6d617d6e87dc42

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    91fc36dfbc6ae63ec26a39f0d48a8d9b

    SHA1

    c6480fefb14655c48c510bc40748dfbb292d97fe

    SHA256

    868a79977e58e029e2e69184317dfa32a559614049e35847866cd405d56b79e1

    SHA512

    85c85f58be4a0fae9e46f6edd3e631cfa1ebde93d2e643c2d4e3f4c9beda23ab5fcbd1ca5eb6799abbced5a447818f62a82428a74699fe702f20cade697c5dd2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4c560ab275bec3a4ae023bb5dd327241

    SHA1

    c9cdb684d17439efd2124a1c35a51cd4ff72b528

    SHA256

    7dddb11d52815d3a0fe25a10a945acafe8f3d44ff5c74867d2098180268a0d94

    SHA512

    140482e5b8695b4a9c6d2efbd6e4e3ac78533321bd4cd9ef3b38003670c7c15fa08bf2de58ca18d92343013cbd71a4143696a05ab569a235dcb1591cbfd5ffd0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4de198836c7641f827b11c2214b37799

    SHA1

    f125b110d0af91aa52fb6a438295d0585a94c884

    SHA256

    b1297555ba3f8494996a0cd3afce67c908106cfd55edc6bfe1c8b780fdd2a7ea

    SHA512

    a2de46bbf3c2335c8ac0b9342061f2a61d5befc7ee11986d19cd073f2a9044cf12a0107ec17ffebdd7d58206742674f8572791d8ea7ab70f812c54a1718020c0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2e400c120cd51ccbf50736b591b63819

    SHA1

    428a3d6a17b33f5eb46e4936a348607eee7458c3

    SHA256

    8f7a7f4eec9d368e2edecd35f4d19aedda8acd564f4f6a2201a71150dc2e2175

    SHA512

    e9109ea58ec5fa1fce74719d16bc723660822ff6e3cd6a1b54428764a3a2f85c9d4e9426bd7c0c1510a153d9a1e2cb6a38a6e7aaa7fe129ae118067153244791

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bfacb84821d96c0a0412368b41dd4b54

    SHA1

    9f76005884c748a5dc267da39e3c295d6c92c353

    SHA256

    759fb21d46c2739b167fcb1841ae7d70bd8011600dfb07e1992413e64b52401b

    SHA512

    5f59b7dd399e2242dedb9602a651f3142a6762318db6e015b4b4368eb04e6a05dc047bd079c240a0c7e89807c022e5219b564709695c8cb2decea22c5f38a645

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    455eb600b10f07db4039cf30c9d7b7d4

    SHA1

    956bdc9b38aaffd1883a27ec15c61f5cdd0bee47

    SHA256

    26c1dface402646e30116493c135480d0b1f9d78075fa59c76f9067fa89aadab

    SHA512

    accac83806e80ad7da16c17d6fc218e7d71587b0cda94bfcf6838773d138c106c31f5da6ee0a3c6fe9602ff6ebb3dfa93403f1fb88ec016b4752960f9eadb2e9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0470f9c24e81c5c4743c0bf1594b4cc9

    SHA1

    7475291c68160d7207a6de11ab0224862cfe685f

    SHA256

    9f6e1f47aa90d12f4b21469c57f5dc114fbf217c1f14b3caa26dfcc4c6c83891

    SHA512

    569d1fc75b5ad63ea41be7a037c5737591c93a7cbfa193825ac98f283462c2ee4701188b5f418c9ef8b5a9772c6daa5ccd1066c9cd88e3a51dfa2db5fb78a46e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    feb3170c7171b8ea79d680c956df9d3b

    SHA1

    bef36b7036e9c7f82e1618315f35fddc8ffaa3b4

    SHA256

    e5ae61c9a84e96e1423fc2cc8003cd03abada20fe9077902812dda61c439ee25

    SHA512

    1c980342a95217ea7f5ef3fa38120a49ffc71ddc966681922ba6cd812508445b59b7da6b4a5cfe73382bbb80d94f6c2c38aeecec53e0bf89be636115802556f2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f7b61bdb7da17dc19c8674d1c72f0b7b

    SHA1

    4e2c3cbdd4d6424c710238cfb779074167e3d654

    SHA256

    c173bba05f38a28295c6cf6e5b522f06c627c2a120c4d0900534d7f014f830f4

    SHA512

    5b3778852cb1c80b28e257f0dd10facb43883eabbdb1641bbf69ba05ab08716a5d92314b71a8feb22855a6286515ec1670ea5eeb0953c97ee0b6a6c5ac0c526e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b47834cbbfe70bca54581ab28a3d2a68

    SHA1

    d9b5f860ede7e78a71013de20b516e4e00cf1345

    SHA256

    8f296671b73fe75b42b99c3a91058c20dd1022ba52b6b4b9ac853bace315ebb7

    SHA512

    6cbd697067a84e78bc28686b6d4503226701fdba068ec1d6a45abb98520442856c4988ef507ca0925811c040c95cba9761704605518a5aeeee7ee83b79a07572

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9661e5267e3875fad4e2ed38a43bc169

    SHA1

    b9db9eb214496bcde8345511694641787358c05d

    SHA256

    ce5c4bf4a49942c698678f4301ae1a0b898e092fcdd3bc8ca5389ba3dd7389cb

    SHA512

    f7d7253adc0582549dd0ce63fd3530070f2d800b2d9fbd3248485c4ce019d4ebceceafd7e9fefe7765d72c7959f15d7430712f5e51f0d8a0152b74ac996253b1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b7d70478fa7428a2239d2cefa1d8f501

    SHA1

    594485db480ad237c0a438b4558ad6035d5c6806

    SHA256

    988670ce15b0c5b67539ae3cdb1593513b2df1fadae475588c09ce4840475ddc

    SHA512

    50558bf9b5d845a84508a4f2afbec7393c43f6599141ecf4f90826db7529657a1d744f20e8d282e5d726fd325f205ed6c3e2a7184a44851441e3a00b4c0e2ea1

  • C:\Users\Admin\AppData\Local\Temp\Cab3B3E.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Cab483C.tmp

    Filesize

    67KB

    MD5

    753df6889fd7410a2e9fe333da83a429

    SHA1

    3c425f16e8267186061dd48ac1c77c122962456e

    SHA256

    b42dc237e44cbc9a43400e7d3f9cbd406dbdefd62bfe87328f8663897d69df78

    SHA512

    9d56f79410ad0cf852c74c3ef9454e7ae86e80bdd6ff67773994b48ccac71142bcf5c90635da6a056e1406e81e64674db9584928e867c55b77b59e2851cf6444

  • C:\Users\Admin\AppData\Local\Temp\Tar3B3F.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06

  • C:\Users\Admin\AppData\Local\Temp\Tar4850.tmp

    Filesize

    175KB

    MD5

    dd73cead4b93366cf3465c8cd32e2796

    SHA1

    74546226dfe9ceb8184651e920d1dbfb432b314e

    SHA256

    a6752b7851b591550e4625b832a393aabcc428de18d83e8593cd540f7d7cae22

    SHA512

    ce1bdd595065c94fa528badf4a6a8777893807d6789267612755df818ba6ffe55e4df429710aea29526ee4aa8ef20e25f2f05341da53992157d21ae032c0fb63