Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    1564s
  • max time network
    1568s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    08/03/2024, 04:12

General

  • Target

    a.htm

  • Size

    1KB

  • MD5

    752a1a8e638938f8e466e838b330f7b1

  • SHA1

    5a66c6f7dc710496af18360253677a62a5bc260b

  • SHA256

    f9753221feec9d106c5ad16120eb8bf9a6fcee1625d870373de7496cdccf4a4d

  • SHA512

    e6f1333f3303b5c30e59e13baba529279fadb5a83b3984f0f83bffd69978146e062ab82a01e04fd7af2bed8a85aa6512acaebf24604c02a317ed8b633d736c43

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\a.htm
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2176
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2176 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:3012

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\35DDEDF268117918D1D277A171D8DF7B_C7290FE03B8E01B64AE13CB8B704959D

    Filesize

    471B

    MD5

    23c8acbad3bdd116fc37097c5fb6e4df

    SHA1

    92480882d8c90709f2cea1a5a6c59cb854f1c0bb

    SHA256

    83a277afb1cfa7efb7b300cb56eb09e42c3c806369d17b6e4c2cbaddbbdf622a

    SHA512

    d1fad8a1b2f5a8b2c9c2b76d3414b61b573dba168f2497a245951e6d74266ba46094f0c9a066bf69f15abdcb2ad36a55907349c2579926127b97be8237871bdd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\35DDEDF268117918D1D277A171D8DF7B_C7290FE03B8E01B64AE13CB8B704959D

    Filesize

    408B

    MD5

    53ff3051fcbc3df8d5172b9e90f1906b

    SHA1

    de280cb4c68a9fc0a4f2a103e9a93ad152a210bc

    SHA256

    beeb29942bf342db3020a25fda144abffa30dc433138fc98fdd61d5c82aaf768

    SHA512

    bfa76b53e940dbe41a62ba2764c7ba9e973c91f36aa87b207f36a33b3aea127caeee6b1b294c1c4ca5b573afb52ca0b8831f4a07a5a0f5aab4ddc4325c77a826

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\35DDEDF268117918D1D277A171D8DF7B_C7290FE03B8E01B64AE13CB8B704959D

    Filesize

    408B

    MD5

    abb86b9d102bb99cb3889077930f2ce8

    SHA1

    0e8bd4916132f22d1aeff4bb82bf2ce876e33866

    SHA256

    64cd7e6035a631653c325386eb4c711613d9460ac1694b97f26f6792883385a9

    SHA512

    de5ee17fe3024099af43fbc635e28dba7f8c04b0d786834d3edfb80c0f06bc383debe4834af3d0723ce9740a16d1acebe7feb68bd50da1ec44801664dfeed23e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f627f03e49ee5fc278baec8b032d133a

    SHA1

    0ff0032e581da3640e5af63cb67de484303c1fb6

    SHA256

    0046aeb40d2f7fd471ccc1e25fb33dfedf33c58e40b8c601208cacdfccf29ee7

    SHA512

    9001fdbebaa5bcc82ceab2723e3b84b220c04f98cf2147a3580162f38caf84e25be38adbc7e898581ba99aa18fc0045ce6104439168d1e143903a05f8c7d2a06

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f78842b1ac1fc1e2379efca21a20ad97

    SHA1

    ce642fca2214e669edbe284c1f32013e2ddad006

    SHA256

    21d17da97f2c6500b8b0c176115b88c5ba880d7d09ef6e1ee3ad00eecb071237

    SHA512

    0d3b4e651ba5a10b76defea23a53ebde6905f2845369da3fff15354b5f3fb3b10fb05235b0cbfc8ab813133476700a2948b7cb286b331dedb27a2cb9d2823311

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1151a69b1f2b6e787c57108c17b3aa41

    SHA1

    2a23754c4792e3a124656c08270e76491b903062

    SHA256

    fc4945e1bbd51453e178b0a76d5af98c5a7153ffa609b43a7b783cc5a6f42b26

    SHA512

    be16746d894cda3c1576fbee6e44860ecf587ead935d79f3d1b2d15ab2388acac418218eaa4a55bfea6551a0ac475faac714f0d58eb2a330be752b9079ffdd54

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b3ab2a482dbce2152d3fa6be93e9b612

    SHA1

    816645f910d31d6d1448e2c452b7d9cc7b5edfe8

    SHA256

    b26a5a04c2a8f3305b0482c844db97caad0db6ad67671fc368d53470eb2bad6f

    SHA512

    61135f44710d14b03ade97f05942a87361b5fc62b4322ca85cedd459e8373f4e0b873cd13e9759020bbd06c9472f17c29c5a9fac3e5c45cb7db0573baf469361

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    52cbf1192fc269ebe5953bbe4d3a7d11

    SHA1

    3287371bc834c9b2418d313a342e7b7057fdd789

    SHA256

    2942709646ec08ad166ba59d7e304d29df12bd83795a8082a2b3009e24981db1

    SHA512

    d70631b1747ce9b71f56705a5465e5c082b8e6460fb746997ac7a264942c40583974f99f92c4ab1dcb62af4ea73f0a733e92659788bd960d66a1523ea567b2a0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0a6c819a4401fd470fd73f0fa1dec185

    SHA1

    639bd195f3cf2e4904f6c16edb67f562b165e193

    SHA256

    6937cda341e89802f70f5de18592e474eb3f8e25bdd446d575cffd1b11bef3fc

    SHA512

    a82bc38c527746ac0c6c408991e2ae23f129549931bfbc1356920d8903abf0d5effd067765e3aa9f20aebbba91884f6e388cf4bb2fa9f9c3ec257eff93f713db

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0324842e2dfcabb6aa6d6026540e070b

    SHA1

    a1f644d0fe23e23188e7ac846572feedce8a01e2

    SHA256

    1f4bb09349040090f11f401c9e5984725bdbb6e2d48030f386887b97a924548f

    SHA512

    ab0f7b066e589d72c833de778d85ba3096b5e713aadbe1d27ecbaad212cd6ce7c3b095def48cc2adf98cfd7fbe4ad7651e66b6a0a9dfd238b5670baa11803c44

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    708cd52ae4d46859f5aab851e9c7fc51

    SHA1

    e674137704c49147f40adc8cf383cf642e21c163

    SHA256

    37c1d8275a3d142b451b28a27a857616f9a03ebca0848a50c22fe295a56caced

    SHA512

    c7bdb79bf9e08201825f3a6839b916b47ec5e88f4b50879cff02699e0576a883dd2b731cd4476e3eb74d6311cf9297eb2aec2789b851dc2b9701dc4afb645ff8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2a1d44fa41d91c9769cb56b77bffb0da

    SHA1

    07d32c802505f8f38f91bd1555479b93cdbd1b14

    SHA256

    36206a0944f454110bc05481980fbffae577dc7aa01404a58a9744fbb9ef6802

    SHA512

    853fa961dde4f7dfb56b532006488f6b4e979695f6bfc5c7e51c8eb3a6d5de1292049013503b7a4f699c2c91d8265b66e8821c383e4d7d4843faa050e24bb08b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ab7a8a91ea8cfdd7f929e548cb5cf9b2

    SHA1

    2d46f8e13f10d9b6abb27e5e267610c139dc162c

    SHA256

    23f2b638b0a44af5d7e50138f9853f442d92f97e3d7c9e62b66f2097b277026e

    SHA512

    c1682caeb134f56216011acdb57bb4388e42c8be5b6daf1ac951eed8f13fe94c5c5b92b6504c62acbdc113af8cf3acf4037adb05704fcb0fbb031c264e849317

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    520ecbf64e41aaabe0875b07a62ffd0d

    SHA1

    7ab4aa2b46ff2274048a88e6b9fdc6bd388760e1

    SHA256

    a3066d38ad4a71cfd4c9bd85df06ccdc9ab471e42d42843f26bd686671b07c24

    SHA512

    49f8c6e00c0c38247abdad5204965ce292530f329ed60001c25189bd0df7bd3246b6d597c90454133bce1b89881bd987d15ccd25c081345318cde30f21bfa55e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e36768773b8fe461d149861742f9ad15

    SHA1

    b9d42af8ca569ef83db2a172c21c6406974ccb51

    SHA256

    4059a60061df59112665cbd60ed30ee81d58b935b12d31efc1b97c12438d48f3

    SHA512

    063ee66ee9ec769fe7b1829cf3f19ddde310b341fa6da9240e3eed2ccf13745bba5272698a63b5ee279e187229624579cf95605c9e4d88c871dba42d5189deb5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1617a69fd02cf1b24a482bd5335c5566

    SHA1

    c6e082d4c5021c589863c659a20a8139229ed964

    SHA256

    c672a23f8fb4dbab56a931789a2625e2dab2209fe29981482ea203ada4953bb1

    SHA512

    33631596d2b1c8e597c56af41b34eb7c129ea82c0b2017725310e632f5ad7ce33c24a75e289487a094703a40991a3b07b79d00b4144a5f54b58668c4392e043f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    28e2d719128688d14bb4febd895efff8

    SHA1

    e374e021a1bce17eda626972df5d37f429cc9960

    SHA256

    b072943ec5799ecb79cdbbd40414c85be8552a20435674d5089331c1f863ffbc

    SHA512

    8b8426687b81b33d1479ffb88bfe33dfde59ca9bfd006b397d520373b7e54104af950e5a0c2584e4e3abea8350379c4de35c3aef15041d6328e7c7240826ae35

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d91c9288694794b70cb1ff20df0261fd

    SHA1

    03c36227a91d55d6e990a283cde51658be6c8cd9

    SHA256

    0639962aa5a2ca1c4592430046fad8870b68ccc554c4ae57227d3a4011cebf3f

    SHA512

    283cbdbee344c3e346181db21060b7cf9f2517841074b4011803d12796f3ed9edc716c1cb4a39eda08664eb7fccfeb573f74aa98696d7d1a57df50d4ef50c4de

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    587ef9b0cca935c23706fb818b6d9b98

    SHA1

    0ac674caf1dc18411ffa1517f2a9b986ca69c1e1

    SHA256

    116ea440726709a5c2cfd237aebfe29fa1b94d71386e01418bd2dcae4c49d826

    SHA512

    933ffb336cf29f102ca0fc8b7ee9b62ca9c4c0ead8f825961cdf4542c22bf922dab3d8e8469061cbe24fb75a1c78100b8e018e6faccf664253332e02b6823264

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d9a82b021a156b11b2c58598a91a9202

    SHA1

    ca98667adbaa228fcb30aa5bbe138fdcc1e19e8c

    SHA256

    e47ba56a5f0c31d908ea29a4aa11fbb78e9b8924fe7d6e6b27425ffb17433e17

    SHA512

    d9b01ec9b50712ea9019ea664671af515e7291438fdf43f9587d7f790f167a75096dc1c7c1bfb7a086360912823580fa3f9db8a23ee080a069e613e088c951f4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6e359d33a3e3dadc7fa985c5ac59079e

    SHA1

    c76890f0d14efa01d0411005e68720403dad90da

    SHA256

    336cf7dc48acaf6ea8369b07560983bba26043360a658eec6e171f87919ac341

    SHA512

    69d5eae65f89f3aafea006c8d48f2725d363c52c18430ee48616c13d32beb3e570d7da172b26f0226224c41d3422f703f90d80a88f6a364483eadb6951018b79

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\imagestore\l63kubb\imagestore.dat

    Filesize

    1KB

    MD5

    5ce3ac036ee319b32e45c38b6e3824d6

    SHA1

    32e8494304ffdaf137b551ca5f368bb7cdbd0ae9

    SHA256

    fcf241bdf129c96f9e600882a88c5a1cf356155add51a96c6eede25423c0bd92

    SHA512

    33b5a8907765b0e864fa59b33155b426d657c01b6150ff2725a443fb0772d409c49d077b3d9f00e97f67ab8b5a11a939a3a8f14515b4cd2a29d415082d400526

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\LF4IFORF\VsNE-OHk_8a[1].png

    Filesize

    1KB

    MD5

    5fddd61c351f6618b787afaea041831b

    SHA1

    388ddf3c6954dee2dd245aec7bccedf035918b69

    SHA256

    fdc2ac0085453fedb24be138132b4858add40ec998259ae94fafb9decd459e69

    SHA512

    16518b4f247f60d58bd6992257f86353f54c70a6256879f42d035f689bed013c2bba59d6ce176ae3565f9585301185bf3889fb46c9ed86050fe3e526252a3e76

  • C:\Users\Admin\AppData\Local\Temp\Cab4DD3.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Cab4FE8.tmp

    Filesize

    67KB

    MD5

    753df6889fd7410a2e9fe333da83a429

    SHA1

    3c425f16e8267186061dd48ac1c77c122962456e

    SHA256

    b42dc237e44cbc9a43400e7d3f9cbd406dbdefd62bfe87328f8663897d69df78

    SHA512

    9d56f79410ad0cf852c74c3ef9454e7ae86e80bdd6ff67773994b48ccac71142bcf5c90635da6a056e1406e81e64674db9584928e867c55b77b59e2851cf6444

  • C:\Users\Admin\AppData\Local\Temp\Tar503B.tmp

    Filesize

    175KB

    MD5

    dd73cead4b93366cf3465c8cd32e2796

    SHA1

    74546226dfe9ceb8184651e920d1dbfb432b314e

    SHA256

    a6752b7851b591550e4625b832a393aabcc428de18d83e8593cd540f7d7cae22

    SHA512

    ce1bdd595065c94fa528badf4a6a8777893807d6789267612755df818ba6ffe55e4df429710aea29526ee4aa8ef20e25f2f05341da53992157d21ae032c0fb63