Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    150s
  • max time network
    149s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    07/03/2024, 21:51

General

  • Target

    b9bef1ee8ffa69eff22f69bc2011dbf1.html

  • Size

    432B

  • MD5

    b9bef1ee8ffa69eff22f69bc2011dbf1

  • SHA1

    d4810f5d07e64bd536d50f1225f70dc30b009a16

  • SHA256

    2a32f76f5d74ecf9f05ba0cd06c7d6f20e258e8873cac9dbb3747713f021797b

  • SHA512

    fd40756df14f6c9dbbc0683e4c6730b6db48c42718b5f365c4be83b7648b9e78609f7b127cf5c81f9ad83773bd01523b2427a532e94c92ba2f772008e8a7fecf

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 38 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\b9bef1ee8ffa69eff22f69bc2011dbf1.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2264
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2264 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2180

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    67KB

    MD5

    753df6889fd7410a2e9fe333da83a429

    SHA1

    3c425f16e8267186061dd48ac1c77c122962456e

    SHA256

    b42dc237e44cbc9a43400e7d3f9cbd406dbdefd62bfe87328f8663897d69df78

    SHA512

    9d56f79410ad0cf852c74c3ef9454e7ae86e80bdd6ff67773994b48ccac71142bcf5c90635da6a056e1406e81e64674db9584928e867c55b77b59e2851cf6444

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    89d425e117c7c77769e0509211431ab9

    SHA1

    e3af09876d08e62485d5a14fd616a89f02f49d07

    SHA256

    6ab92062b7908542a7e92f2407f57217413514f5076cd9bb1fed2760f2b15826

    SHA512

    324cf58e5956dd6606a7bd9ff42a65800280aa6f8524098b8fd10368e6a044a71efb37c5665004f0b84dadf85a38fab8619fff5bb49fa99821ff32d64ac24698

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d428d4529f0ab0955d5e3cdd7917770e

    SHA1

    17b64395ac9c1852bf25fc70bdce5c5ba9d4d428

    SHA256

    0014256c8016d2a9e2e0aca84f63c7e8ce7fe1be3b28542a6f9a5944972ba22c

    SHA512

    30766133d0af7c0c0d446fb13d3cc3d546c7601696834e05fac0373588f767e443872e789c3fdc686f11359ad8ad2fb429dcef29de0bc46d14b232f91ebbba2e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5c5c36f23f56ec7d3c4fef2d7b63c2fd

    SHA1

    51ee33be41822530fcac0abfaaeea897562a25c8

    SHA256

    e5672968b0e40ad3fb25837a0f05021467221f2769240af92cd385a4b4731f7e

    SHA512

    3df0314450f7961315ae19291de483ed1a401737d0504dac050dab7379cb4721783e1c0f5c8132b32245b98aab81622867ed162ca71b995425a6dffdad88849d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d293178f0c3af5f145eb7503cafd2562

    SHA1

    a8d9f4fb12cf186a65a4ead90ec7f9cff1d88532

    SHA256

    9b9f428af599c26a3a0bae887fd0afd574fa3f237acf93076177771418c835b0

    SHA512

    c15720efa2234d1aa61100f98aa1ad5b5210e38392ea41b2a21eaecb42dc88277462a10641c42793f4aaba88bcfbdb2ee420f0235917e6f0281561b28f802c79

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0382d93ce5547a3b3a5b4ea67d14d6d2

    SHA1

    42f72f5631a51a252609720477f14c5317a2b401

    SHA256

    ad0e764402c73c924a7ece16ba76705aa9e6dcfd999706d43e5485b44d5da2d2

    SHA512

    95b04128d754fffca0604113197f267a1919102dd64b6de12b0eb30bdf9070dbd69dbd9bbdd18e92001ce71282106be2e7f6ffbc9a984bbec6c57ee6ce464604

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    118e95958b78e499ae433094f139fccf

    SHA1

    83364f46551326c730e8efff8424d3f404743d11

    SHA256

    3781b5832515ebc9da976e6dec350570335b43ff7434d079c5b34d12fa506c7d

    SHA512

    50906f8d65a88573aad3256c38de122542a2547ec1b287f4786c0862083c857dcc30b8dcd841c16401ae7e07ac8ccfc1693346f7c223bea14f3b23b386f3b101

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ee83882bb7a1412e27af15061b664a91

    SHA1

    81e920731e1a7c78d9d842f37df69a2166c320c5

    SHA256

    6743a36d50fc99cb52888ee9af8c3d4438b904a90f8896c10013e91d059d4579

    SHA512

    ec43bb3a34ab3c87800432c1664e102136f45266c4ee1413dacd976db2991d114022073606bf64d285f65e840204d13a7c8581069a9d370d8a686f7cdac2a1e6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    25422aa6182fb70decfc73a7ec149dc9

    SHA1

    7cdbf372a2a16bd24e2b6e3e65d4c271f09083c4

    SHA256

    a60e22da3ea46fd58f9335153b713c2d4a3c2781debf40c853378ecebcaa43bb

    SHA512

    5d8add785b87663b93ee39371c991bb213ca94a43e4db2c5c71126826f424e48e150c0538ebbe3748dc76afd3559baef3a9f73d120c0463aff37fe6918f0da38

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9bc5695d3ffe1fa13aa9e6057ddedec3

    SHA1

    4ff628182b43027c8c3644d8bb9f61a3a1acf564

    SHA256

    945fdeb55b3fa98d52b9bc83eef4b73130b590860c724649e3eef1ad54a7b74b

    SHA512

    5a303fc87ed03b58aaef60f32d4b9231a961e234507413e8be179101f1f80edb06478fdb1076cd4f3cb194d8690b07438bd59f15c7ac9c955ec35c63c104863b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f21d6a20a91d810eb7d5e197b858017d

    SHA1

    b5a13cfe1070d345e61761fed2cd7ff68f6d73b9

    SHA256

    d0af840e1d325a53890b2a64c08148fceb48dc55b40a84c062017bd193565b26

    SHA512

    8205ac0e5517a52c8a40f805562a0a0ae128db9582b703d5d246dcd0bca78d20da62d48ef43d1e822c99b37649da1b9205b9626b27a254991316076376e2a3eb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2dbac60aa62fd98c7979bc1786eef9ec

    SHA1

    6dab23828653d6b41d6c985f7e24cec58461261b

    SHA256

    3c5291fc76eae7f1ff40ca69e70360d200bb41141378519f407fd86afbf0fbe0

    SHA512

    cf3a9636b09e6b056ab1630880ad4e81e1cc892c26c159fbbab7fa6b79c2af48e594fcb802c868b22b42a0033c398777c22e4cb34ccf53582dce8018bf704bec

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fe5e061b9c190efef468a36173ed3bf3

    SHA1

    7daf636b35a015a0dc3b11275cb3d58999c764b3

    SHA256

    24e225a10a571c6ffbe9b9d59cb90de3587d25e1ef115bbd55a1c1b0e3ea8937

    SHA512

    4b24b41f627c815d74562d5c395f519a67084d91c0548d30000dd7d2622a226c5c26fe85c5614c733d155df39886ee6c5be8e1aaf26ffbe47e02a9cace1cf0bd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7f881349509435f6614898d6592efc48

    SHA1

    f6ae373b78f4b103c72125d29983455c111989d8

    SHA256

    2ae3aa73e19f9387c5259603046869faf2c8abf43ec7dc83a4da8bf1d037501e

    SHA512

    dfbfd09e0eb8e89d06338cdd5a54937c53cb53a52bb2a9ad925ca69e5bcc130d94aed1e79b66f47de78d0ca70d7062d9ff72f2d28e96175bb2afb272ce7504fe

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ee2a663b830f61b292162e193febd9e8

    SHA1

    b9e5411ec36b28353ebd72a21598ff5647eeb9cc

    SHA256

    25da21855074b7ddeb34113f02d1b138e1e5dda1fb79357b676a6d077a8d7f3b

    SHA512

    ecb7d95552d7c6c5a1b4f6a84e7c6b9dc80ff0bad01eabd765bec320ada05e383cb91cbeca02c5876f4c09661a4f7981801d394f20b754103eb82304728a6bb7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9f3c8d7a622268d941b0fc1c82414387

    SHA1

    a3c080710ec94584acd5ced9e42f57521d630ca2

    SHA256

    2e4ca69b544aa9e06ebc4530f074b960528fbc4fd12dde5057931f331cc6c825

    SHA512

    1b099354226c229b3dacad1239e881bb80e26f66ba296988b10229b3f8221007ecabe280eaf8c08afbd8bbf7e73bf4face8642541e904a171c77ff35268fd749

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3975c8c53dad3a25ff702c716acc3695

    SHA1

    941fd77beca814f3b90365c6c7f4d2e0baf8b392

    SHA256

    238842f2ce7ad96b6bf3fad6d88fca7f5d2632c77b892926aad32d1ca2dd2d17

    SHA512

    c0b9c95cfbc6d2f399f2920d6b2fe687232dd95e32f0aeb880bdeed5f419448dff4f653e02064614938e6d377ea61b8b136b7af533e7d2004c61e4fd6f633179

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5ac529dda7fe993bdd2d32be9d261f9a

    SHA1

    61fb5f27f9ced2a1d6a1b0c2997588ca64233c8c

    SHA256

    a60e83fe40780c3abffde09ab405dfdf6abeb5df62733f3d53784017810148b2

    SHA512

    6e2d01c61c80dc2f1bca610f957af1769230a02e272f0e66e300b09c82ee0c78533045a39ffc910a8f18ea8f926cf3992cf4a87555adf549c6ecbb03106cce91

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    33e8206c7d5cd9fbbde35b9c975fd3a7

    SHA1

    6410b1255148a0fc8623eae13be449a97ae4ad09

    SHA256

    24d9a6a1e2803b61188cb924c3a415fbc220e21dee819e5f6fc8fcef44b06d6f

    SHA512

    2ba9b6be106d0d94c502cbd63ac2fe14a8134ad5969ab193426418166ca248eeef1b4073f9b3e8b5a4cc65761a8515a12b7aa556a395194c24b03ca91c024566

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7a8a6923094db57ade15464adab11bfe

    SHA1

    34d95bf33a5d4d9b98d03e08c85eb4a880056cd3

    SHA256

    5ddb9915fd4154aa387adbcb9f9fcc14889813dc919f01f25453b717bf5c7095

    SHA512

    1d5184b6a18cd365da3257907d7f4e36f537971b2a2202af6466f30342597db53ece57f63034e4150d6a0eb6ddc91c46f797d6a3b24e263c3323440ea92845d0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2a3af42eb4a6d0af0a51732e04981ada

    SHA1

    ed544d45d19641dcbe1dd4a4f9f1061dfe02f5f9

    SHA256

    fd2736369d31d6a49339c98def33c9c6283e9c01b5c743e0c092a2ce3636d49b

    SHA512

    3506668dfc916feddf7cb3b498cf99cfdfeabe589e36bd7d90cc63c5afd0c86fef18fd5b2925175d2fc18d870ca221c1f7af601b675390f8b1bcc1abcbef6bc6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    193d474bf53e9de72d2762ba32177246

    SHA1

    517e2c9e2987dabc1eb4b41e8d636a3bec65010c

    SHA256

    3ace046f34c35bae4c2291211502f55bd3e720699976e42c3e36314a92ae62c2

    SHA512

    9e5eb5a8ba40c207882856f31ec182a88f2644a9d00e95ad919f8285c0d049ac284f7ede5d4571c6b940138b32a66a94f3def82bc7a16c99311cc4f8608ccb4f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    44fc375643807ce49de0745c528d9131

    SHA1

    296fa468a5e0870ac47c977e2cff638f1c3bc82b

    SHA256

    deff96c85fb98fb4ad6a234aa4d005d67cd369c75425478f17fe7854650edaab

    SHA512

    71b6db371b9604dba7bca50f4e451d8e8f46aace1eb5d26a357949f2b6d51fb8847ad4f19738f68929881a90865db3849e4b9ef498c48fc8e13d8474da741a34

  • C:\Users\Admin\AppData\LocalLow\Microsoft\Internet Explorer\Services\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico

    Filesize

    4KB

    MD5

    da597791be3b6e732f0bc8b20e38ee62

    SHA1

    1125c45d285c360542027d7554a5c442288974de

    SHA256

    5b2c34b3c4e8dd898b664dba6c3786e2ff9869eff55d673aa48361f11325ed07

    SHA512

    d8dc8358727590a1ed74dc70356aedc0499552c2dc0cd4f7a01853dd85ceb3aead5fbdc7c75d7da36db6af2448ce5abdff64cebdca3533ecad953c061a9b338e

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\imagestore\s8rbov0\imagestore.dat

    Filesize

    1KB

    MD5

    252326507c63339064c210b440a222a4

    SHA1

    913f2eda2e7fd2579b5e965cead57dd45976d46a

    SHA256

    5ce24092cbfbeb7871ab7ed7cc88a82e82f28b7fc1852475b70323e9f80ec3f3

    SHA512

    53d35d128969fba1fc5c8d0933e13b5b59c1dbf074e8def8909810d362477456ad5b3eb984784932ea50522d41feac31a3229c1346af3b2d45371cd55dd67c73

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\LCQGYSQI\favicon[1].ico

    Filesize

    1KB

    MD5

    91abe01116ab422c598e9c8af72cf4da

    SHA1

    0f2815fe8e067d48537ad168225ab4674271fa27

    SHA256

    b1d7aef06456fe7431124129a28f0138bb5fccfa4f4161e3087de23c005e5edc

    SHA512

    a4d5b20c3014153b6b382c43404917bd2cb5bd2a59bb1e981f5a19eb7dbdec185ace288e9700428d24e5ac623e45d04905e706f0c45a1642b1aa6c091213c23c

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\WA6ZXLC4\MUXMN131.htm

    Filesize

    1KB

    MD5

    d9710b4eefdfebd7a36d7c02c9588dc9

    SHA1

    54c4f230def420d6f9a562966591e079d465c00c

    SHA256

    86232f921a7b7f5ef77fe69b3df0f32cc19a47c2a88c5bfeb4f31d5aadf3b992

    SHA512

    a1b2514bf42cb0097e2d6eb66d3d0ba70406f03681c0b4418a8e6f0bc855e608d982ef0f5c93847d721d03ad88d244901d411a20a322b1c6957cf58e55f54adc

  • C:\Users\Admin\AppData\Local\Temp\Tar2419.tmp

    Filesize

    175KB

    MD5

    dd73cead4b93366cf3465c8cd32e2796

    SHA1

    74546226dfe9ceb8184651e920d1dbfb432b314e

    SHA256

    a6752b7851b591550e4625b832a393aabcc428de18d83e8593cd540f7d7cae22

    SHA512

    ce1bdd595065c94fa528badf4a6a8777893807d6789267612755df818ba6ffe55e4df429710aea29526ee4aa8ef20e25f2f05341da53992157d21ae032c0fb63