Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    138s
  • max time network
    140s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    06/03/2024, 12:50

General

  • Target

    b770f6129d8bf284f097ec2d00ea80e4.html

  • Size

    3.5MB

  • MD5

    b770f6129d8bf284f097ec2d00ea80e4

  • SHA1

    cfbc2c6262623db371d0e72b5f9fa12ad7aa65e4

  • SHA256

    6d14af28f10a21bee246f7be7a016a7c87b49edc8d75a815a1a7ceddd6cf008a

  • SHA512

    27837cc4c98a36964c3d35bcf5beb03061462c1505c5930c0c238fa529b1ef00e9ac63aa40b20358ce1ad786ad741fc7795bfb2f6d55da146fe551a8c0b8c077

  • SSDEEP

    12288:jLZhBVKHfVfitmg11tmg1P16bf7axluxOT6Nue:jvpjte4tT6se

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\b770f6129d8bf284f097ec2d00ea80e4.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1292
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1292 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2500

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    67KB

    MD5

    753df6889fd7410a2e9fe333da83a429

    SHA1

    3c425f16e8267186061dd48ac1c77c122962456e

    SHA256

    b42dc237e44cbc9a43400e7d3f9cbd406dbdefd62bfe87328f8663897d69df78

    SHA512

    9d56f79410ad0cf852c74c3ef9454e7ae86e80bdd6ff67773994b48ccac71142bcf5c90635da6a056e1406e81e64674db9584928e867c55b77b59e2851cf6444

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5d632a7420e682d45eb798e70e9071e8

    SHA1

    c7af808f408e1da43288f1724d8239396fe1d3ae

    SHA256

    90683cbae623c23c2457894f57310f7507d171743f92876a4e9a6be73a680e59

    SHA512

    2521f30b0a89110a8931e4afd977e713ea5c1e1a56eb90df9481823b61d2351c40757a3e8027107030792e3552a5f82a5f3183354a5bb3c612480b9ed262ea2c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    25982b11f26b91a137e2d6b78126c814

    SHA1

    901221eea419a6642d19d6fd991418435697e9a1

    SHA256

    25c9302dfaf017ae154ebec9055b6e0955d3e2464cf40cac02b65b5abc1a1334

    SHA512

    9ef9bce9f1dfd4edc1cdc3999fd5a5ee2563bf62603db9c326fd4dfd28776057b01003609a0e1cea92aa691dfe0d1f33d840269eb70c30ad3746864883003e04

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    34343cfbabcc9a076b831cbd87179bc8

    SHA1

    bd7e4d49fc87e4ecd9a2249060cc6d8831c29ef8

    SHA256

    a62b274d3d1ed04af73218af765c7c78e42275c2790acfe1c6874f657f79a24c

    SHA512

    7b896e543502ef82f676b79673f43b019378d80fbdaa72b3dcfcba5a69336b3ce7fb8790446039cb33a623e59eba732cb478dcf59dc4ee9f2db09fe7bda384bf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    057032a9f510f7812f56b0958ad39a10

    SHA1

    7c18e668be4cd13191940d818536d10c0e9a848e

    SHA256

    75e5d279581e091c9447fe360cc1281b11bcd15ce55591d54678808ccaf73749

    SHA512

    52ab71489ede4295629f9eec998e3965c149d8e674eadf2ea9267ba082aa2fdf3f9dcc471dcbf1b91b9388605233e5a442ae35bda5a619ca9ec5a8f80b53108f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0e4ccc058cf1c628f72d2d83e74b7134

    SHA1

    099f73da42ccfe11a392cd491d800e019567d7d4

    SHA256

    f31bc20018839a696ad1e8500842a2496ad4ebe22fbd25a2a606303f1fe2f194

    SHA512

    8e9e26bff72883c6084692878d1a3f6a90c7acef830ada28d2fa7c009637ae2cd93ccdb5c33515ab71b2687e35998651d500d2a394b0d7302468e78c8b22fa31

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    dc6d24a9cc82932b4f2738743448c3ba

    SHA1

    46f5acd3d9d7b1d18b821b6232b605ad18337605

    SHA256

    fb16d7d35220f41554e7a99a61ea41a092cf8bcf99017862eb834a7fd3635477

    SHA512

    77042f5df9691067f5bdc9fcd4440488e4a9be1ce5e0b6f8264bf0c931dc1026f7e17d3cc708b136a57dc603663b381eb67fd9bab1aee5b4e595b01e4b2dc0ad

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d3dfb80dc045a28d644269de7ba3182a

    SHA1

    378fb716c4199a2a73c073c73110279f6ee2cadc

    SHA256

    be8358e9d3cca803fd5a622e71be3e8c78f6c819128ee1aec95086d6460b063b

    SHA512

    bc1cbb73c391a414cb7dbd77add5fcc11745b08859623525e21e38a90c5d8ca937c321e79e96fa2508c6fc15c412131eaed41aba398b9f2b6c9fff6094e01a36

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    49a75f0bd7d730b76c2343dad6165d96

    SHA1

    f2c70d643f0d9f6fe6aab61089648a7572e5f7d4

    SHA256

    6c2c185c614df1d2962cb1b7a7262436a6abaa6d6981421ff9c602cb8e85ac48

    SHA512

    043dab3637d0643d41cc8be54f9f1d30e1914a640285a2d4859361a7fe31754e636f8a7665f81822856eb48a6bcb7143434ebcd024efd55dcc5f8fae650d52a2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ea2c7b9341d138d2ba8155233d2cd842

    SHA1

    37081a29604e4c48474b48c5c4c991b254c80f2f

    SHA256

    eadc2ab5f54bf1bc87f5d4a9b58abf7b05755ad21809417e938bc0b22ff2f3ce

    SHA512

    3145da52926810943678a3289a39139fa946d4bda2ce677e9094aecda9fd83d182b25aafcf136797f6690873cf4338a2e8a2c559f586229d2e6c4502c2b74bc9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5e93a0c41356743f1648c9076f1d0aaf

    SHA1

    e7037c4619bc99b1e254b73db7245cd84865baea

    SHA256

    a508d5c41b7ac1634669512c390c8e04d7ad78c49c09322062e5197ca867105a

    SHA512

    3186e80e8d549938c6c12f601cce8b607ca0a3be2e734bf1667c3238da90aa32a94abd3af5b524afbc5dea1c105b738bfdd1e40ce4a69b21ba626b399b2dc399

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    64805ee85a264a3e95397a26d403f64e

    SHA1

    169a42f30ccfe7e4d34f3adf8b0ee28e65d58e16

    SHA256

    570a627db9c4332a4254acb6c50a3fb925c01b03e83f14d3b0e7acecd61d0f8a

    SHA512

    979b0b3280348b23d7bbd9b21f6aaf24d958924fa14ce9e7d997792f0d7044493a4061bad11c4cb38af9f22435d12e01df60bb42f33185537d0d9d2de8d339d7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9e12582dd68308de1be8ca05e49969ed

    SHA1

    e13ba8705166b9d17f953c54cd519742e6840bc5

    SHA256

    66f3580dce230b37fbc240d11957b612492ad5bed354aa3e4e7928c9e682bd10

    SHA512

    f37fee2df9e011aac5e144789ec6f723cf66517cb6baaa5eace663f32135ff13cff2d13133c8172a93e98e3172bb9ca93ff278678b56a23f09ab8208b7f0bbee

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bbd8067d2c33437f60731562c400a5fa

    SHA1

    2d2085abd7011631b88062e0b319587229c8780a

    SHA256

    319034d5d8ab3875e8008720f237f6d91606ca5dfc398fe8194b6cb12feea6d6

    SHA512

    7da036f90cecf4823fb40bfaa962be153f596adcafa650c586d29d11a32bb4c1d7c09f09859f40f409754033118cc646a5b3bdba5e6871b284dce356ee923436

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8cd3444a00a4907c8579ff69e39df892

    SHA1

    805a17b8ea97aa474afddcfd1f760a419af1d392

    SHA256

    b8f855af38bf8bce306e828f516903fee35ce7bd0a021075771682ff186e8120

    SHA512

    c7207215608b522743efcf418a030cba69d0c839841f1b2dcd070e01e581c4f36b64569f5031d05b7e3a06d61c81053f4b9a7629d74285689fa7505cc9d91613

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c6ed5a31de1a120293f017b023fef792

    SHA1

    9ccfdbf847170572ae5dae85316a6f28e7092065

    SHA256

    c3e49590d998a6fd26a3829f646fc05941a4f8e932ccc00a4b4a387b3cd26257

    SHA512

    aa78299fd4fa74acfb82fdfebe095b15fec62fa0e47a734b1942238f177bb45ca20ff50ffe31687c59ac2ba9b714dfff534d3dc5ad384d76286f81c7550ac679

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    23f21ea99c642805d799d773787d9389

    SHA1

    b56b5f47dc8604b505d822153d545f63abe98df8

    SHA256

    d92deff8df75525669c2c8167df1c3975d54a6afa1bbb7395e2cb7f30d884aa3

    SHA512

    635a7c5970bb531aacb0c5b2076396c60dd76462289d6e576a9ba69566a48fb297837fcab3bf55b37063a5f303d9a3625f44ec01c8f0310679999cc1b01014e8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    dd58045d4665236d230e5331c5db77a5

    SHA1

    3fda4516259bd5d3056f7028240d00b811031d88

    SHA256

    687a2aefa40e6c28ba7b849cc9c1f38c89d7f474cda4e8b342b464ce4c457631

    SHA512

    cff991f5585cde21eaf79ea0b54b818abad51e3c8633088f25162aae645b8f42c106743b755a8c494fa141c76ad8ac606b59c29059dfdd0456dffe7f7955afbb

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\OFFQJ7AH\beacon.min[1].js

    Filesize

    19KB

    MD5

    dd1d068fdb5fe90b6c05a5b3940e088c

    SHA1

    0d96f9df8772633a9df4c81cf323a4ef8998ba59

    SHA256

    6153d13804862b0fc1c016cf1129f34cb7c6185f2cf4bf1a3a862eecdab50101

    SHA512

    7aea051a8c2195a2ea5ec3d6438f2a4a4052085b370cf4728b056edc58d1f7a70c3f1f85afe82959184869f707c2ac02a964b8d9166122e74ebc423e0a47fa30

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\S96XYZ9E\jquery-3.1.1.min[1].js

    Filesize

    84KB

    MD5

    e071abda8fe61194711cfc2ab99fe104

    SHA1

    f647a6d37dc4ca055ced3cf64bbc1f490070acba

    SHA256

    85556761a8800d14ced8fcd41a6b8b26bf012d44a318866c0d81a62092efd9bf

    SHA512

    53a2b560b20551672fbb0e6e72632d4fd1c7e2dd2ecf7337ebaaab179cb8be7c87e9d803ce7765706bc7fcbcf993c34587cd1237de5a279aea19911d69067b65

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\SZ2A9SGY\jquery.min[1].js

    Filesize

    83KB

    MD5

    2f6b11a7e914718e0290410e85366fe9

    SHA1

    69bb69e25ca7d5ef0935317584e6153f3fd9a88c

    SHA256

    05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e

    SHA512

    0d40bccaa59fedecf7243d63b33c42592541d0330fefc78ec81a4c6b9689922d5b211011ca4be23ae22621cce4c658f52a1552c92d7ac3615241eb640f8514db

  • C:\Users\Admin\AppData\Local\Temp\Cab6B33.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar6B36.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06

  • C:\Users\Admin\AppData\Local\Temp\Tar6C84.tmp

    Filesize

    175KB

    MD5

    dd73cead4b93366cf3465c8cd32e2796

    SHA1

    74546226dfe9ceb8184651e920d1dbfb432b314e

    SHA256

    a6752b7851b591550e4625b832a393aabcc428de18d83e8593cd540f7d7cae22

    SHA512

    ce1bdd595065c94fa528badf4a6a8777893807d6789267612755df818ba6ffe55e4df429710aea29526ee4aa8ef20e25f2f05341da53992157d21ae032c0fb63