Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    144s
  • max time network
    146s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    06/03/2024, 13:47

General

  • Target

    b78ce614fa4dbe76d0c0addf04ffa5eb.html

  • Size

    38KB

  • MD5

    b78ce614fa4dbe76d0c0addf04ffa5eb

  • SHA1

    e4a14a86062cb44d1c4c58535d637b77078bd116

  • SHA256

    39cc3a0e2ef98bb3efecd5fd297a0153629de04b0cbcd99fd3e611c2f4a82998

  • SHA512

    2097155e856e952b8b342b601673d971fd882da7780b79de69f3ac68e3787208daff18fdcecda97bbd0958bea09041e7f8fc08c15646af1ea97f2ba5ce4a0ec5

  • SSDEEP

    768:/7BT0EipB5voGREPzZjib7O4J1NzmWtdHcC6ZGskLofH:/VTupB5voGREFjib7Os1Nzj6tZx

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 34 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\b78ce614fa4dbe76d0c0addf04ffa5eb.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2924
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2924 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2492

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    67KB

    MD5

    753df6889fd7410a2e9fe333da83a429

    SHA1

    3c425f16e8267186061dd48ac1c77c122962456e

    SHA256

    b42dc237e44cbc9a43400e7d3f9cbd406dbdefd62bfe87328f8663897d69df78

    SHA512

    9d56f79410ad0cf852c74c3ef9454e7ae86e80bdd6ff67773994b48ccac71142bcf5c90635da6a056e1406e81e64674db9584928e867c55b77b59e2851cf6444

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    02c1a9907c05595db7431533a73b9d22

    SHA1

    9a5e3290ae0255508c264fac805cde299b33d8b1

    SHA256

    80aade1e388001fc4dc01e1fb7576e04b330bdce20d88c36835470630e850842

    SHA512

    2c1673c45970818b8e8a16aa20eabef611fc432b1feb38b7d8d3855e13a2d32030942bf163bfa6db3f1e03137e7b026ca10a649444da58ce82ca85be315d10bd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ffa73a9042b99d93aa0b9f2d2d2c7122

    SHA1

    be9405ce37831fd7feec8a970f4aaad4dfc073d1

    SHA256

    8ae3baf5936d6414df3347b6adc19c4e828d61fc3960dff935821eee600479eb

    SHA512

    2c7fcf2e932c9468f18f995496abdb9667d8da77a942d320f57da5b4faa1b346de8a078fbcd36b16636b424210cddcc6890854a0f106fbc037f8d9befa1b7e39

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6b479b0731cf9cfe27f8864d4282f10a

    SHA1

    796a016617dcf301a9feb7326cf78a66b32eb802

    SHA256

    4abe229226a759fe6fa9b1570c01aaf80d52e3a4581886feafc2879a293753cd

    SHA512

    4410fdefff8d0d2b22978d54ce91ae204ef6c692af590fe3d3353cd7ce3a6786caafec020b4d81518fdb48ef4054ff36535a43f2eeacd02e0f2dfa80588824f3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    13c22adb7b31bfcffe0152b667546157

    SHA1

    01a3d134af6d721901805c9bffc6342013758c03

    SHA256

    57d13617e4edcb7209ccbee85db7c299d94e71e087c4ee3df54e15da8d8fa9a9

    SHA512

    8d11f1175c9433a3b33f9e09e80eca45711c05761a3ebf0f1f2fa498324136b3eafd4afa8a36486d387f07aeaba87106b686b3c7d47e80faece8794963623eb2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c33920bebbee7482a751ff2ec2f6022e

    SHA1

    161f630889ac18a8b1ec488875a2b5a136a59b4c

    SHA256

    69dfcaeb1e31b9e2eeb1d000a500474a0918a0492a7dcb86f1fd1db8c5f72ab9

    SHA512

    1e30a321dcd833785a5f7a5de225670f9f33e6a47ef03f5064eeaf79707ea96e545b75fd04051bfb1e3038670070c8c597d2c093449c5e9fef05874b9beb9add

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bd3c4cf663d9419068341c62200522de

    SHA1

    c45b43d4a6142aa4032e4c15833474366f6c903e

    SHA256

    854829885df7a153a0689af09aee9df79dd5e94bf1fcb3ae164e467ccc7764a7

    SHA512

    befe4aa28757ee313d784bba52f481f47985273161bcd878647103f391dc77ee22869dc968984b3e4d428e255d3b2bdafcc34f99c0f92612f1f5a0ae9ba06ab2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    46ecde972c21aad2c7ceb0c6367843b3

    SHA1

    e1ef3d5a4b4b1842ec2544494fe860bb3ac8e9cf

    SHA256

    fa0c59ea458288156bb2c98a7a02ca8e0893253cfdbc26a8b26895553c289793

    SHA512

    e65543306838575b134d64fa816a2f1392e4eba75c7403d05550776716318584cb853af5ef6878c73fda42def5da0f8a74143921685e426ee5a093f85a67e60a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    62c39f3005f99d35520bd29ab53c6154

    SHA1

    044f2c98eb0c793826b43244b8d9802e2f690c66

    SHA256

    5dbee747ed6759c957ca717087d48dd7a5204a85e2c5d2f997574becbaccb750

    SHA512

    e1721b5bc1bc1b319ba770eb8ead2ccae126db6c04d3f2d6e00b96043848a16d5ccb9742b4988e87deb0e7c50773e211c1347803225b26d5dc668bc123247e8c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9e5ee666306f8ba704247778ac1aa278

    SHA1

    377b4dad41e071476da632e404c8b7bcb3665f77

    SHA256

    7ad95c6da02bfef7cdd06ebef0aa1cbe004899ceec536bcb851eaf2bdc9abf0d

    SHA512

    457e820c71eebfa8671fcf34e5ba556a212e8840660fa653eb68d47d8d9c51a2b429c134ca457cd9a5eef1c2dd629683a0c9a8d164b3be84409579b5beb7595e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1eacb14844e8af0190741f11d8c4d84b

    SHA1

    481b6d46f205bfe2c379e335c761d105ccf01606

    SHA256

    dce96fd077ff9067dbfe8c2a8690104e3ab00ea4c60974a25c2efcb4a20f0f1f

    SHA512

    bde56b25c77a68e18b8aa9d8e135c78db4e289745b83a96755b66212807a1b275e4cbc09ab946aedcbbe9e73ee1412959aa6e9bbb0028b76042858bb77214057

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    78592fcd8bd09746944be18d88a312be

    SHA1

    a4a63f456b51ea0dd42712f84a74d34e5f6d3dc5

    SHA256

    68e09ebcd651a133c90123de22282281e58004199654831ef5a684eb4350e0ca

    SHA512

    f820e5d652ab94e9f430d53887663397134ac30086d95fe174526a48d4df65effa5bda910cb980b663a55a356cff53c05e1b9efb88c2561e53f45d28f8cb876c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0c51c830b91f150c5eae1b2656e7a39e

    SHA1

    590b9170191756daf4186b21e20380197f2ef60d

    SHA256

    22163fc94cb3f214b7fe3e07dc5058769ba65322a1b94cea3f3d709bc91f6e8e

    SHA512

    4c2d95c4f211dceaf62e85b35d2301665063e9ad72f5405c5ac6643bd6977f2cc5f47840263f58cf610d879ae89358a26009398b797d3f9d8663f858123e7bcc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5761f75be1ca8e4248d0ce5fcea52ee3

    SHA1

    5b900b87a1504f7d1be88368a3cc49b016b8d187

    SHA256

    53d10f54ca53999a1bac23fdfa6ee8853293186fe6d927953c81c8adf4d89bbb

    SHA512

    538976d88d93b1ee9f9b92dec74818de1b5eb066d218e4666eb08fcde2396346d542867ce8c3a9faef553cb2caf968029179a76858ffea619a66ef79bc6110dc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a4e257b10a456633a696c21d20b9e4be

    SHA1

    21531804620f970b1176dc644a359e9cc981c635

    SHA256

    eb8be8955ce9959f2a4b2ff1f4b3f99f403df1ed4b90c1150abcc379246905e0

    SHA512

    96e983d0aee15d29f0e381811e9b134b1d033dff47ebfbceb69f2c5fb219a42c5160cf7a11297d1b43359ab6135457935afae1bce3d457284c8009dc06b30cea

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ba957fba015f7d72eff4da0499de8d60

    SHA1

    59bf68fc98d3f7d7f3a08ec36cb896bee2a052d6

    SHA256

    3ae3cad577c15fd7d1e51d77e2763453eaa265b292cbc9c415f30eeb622e7e87

    SHA512

    51cb903cc6573a8eae6b6f3127d04ba06a596363e80e37518ec9c4e028b0794d003f8f810f99d8630b62e8eb1e6995272042873bd6116ee2caf53c15f0f3b20b

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\I819HQXH\plusone[1].js

    Filesize

    56KB

    MD5

    b9dd4bc0c774f6e47fc7f6f84318d3bd

    SHA1

    71e659af69facf4538bde88422c6ac7574c3bb5c

    SHA256

    e0f79422a5e14ac8ca345540ab58da18651216e375c4fe02143496bd9dc046dd

    SHA512

    419b21dd145dab3ab4b543c87fad7fed6281c2300ac7f1cfef1119703e5ee97930f1c07353b2a1274d4879b481bb673ce3566306c9b0b91b1e573ee43486b342

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RSAB58HZ\cb=gapi[1].js

    Filesize

    133KB

    MD5

    c8be3350843695958a33474aeb3ea8f1

    SHA1

    ad92694d9b189ee479c1be438636e39247b216af

    SHA256

    22494eb4f5fc2ef8c229b9df2e171990687e4837282655145cca0fa302af1278

    SHA512

    54ba5d4076fe9fe4c4ac22f45cd7d2ebb4e8027d8b8f82580436dccbcd60fa2adbb948ff1234d9912c663bf1fb33ac834007850f5a3f2abfb96a7a4feb110bc8

  • C:\Users\Admin\AppData\Local\Temp\Cab4B82.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar4C31.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06

  • C:\Users\Admin\AppData\Local\Temp\Tar4D30.tmp

    Filesize

    175KB

    MD5

    dd73cead4b93366cf3465c8cd32e2796

    SHA1

    74546226dfe9ceb8184651e920d1dbfb432b314e

    SHA256

    a6752b7851b591550e4625b832a393aabcc428de18d83e8593cd540f7d7cae22

    SHA512

    ce1bdd595065c94fa528badf4a6a8777893807d6789267612755df818ba6ffe55e4df429710aea29526ee4aa8ef20e25f2f05341da53992157d21ae032c0fb63