Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    142s
  • max time network
    150s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    08/03/2024, 12:14

General

  • Target

    bb3b526d85af2007437d20412884bf41.html

  • Size

    55KB

  • MD5

    bb3b526d85af2007437d20412884bf41

  • SHA1

    414b0ad55d453387534630f57e0bbc5034bbbc46

  • SHA256

    69c76765a99498d69c28558718f3f1b7907470fe8a50b2370d499300fcaf29d4

  • SHA512

    d3921da418aecc4f1d4e27f9ec8ed5297d8e60d4fc3ef6cf77105d271560d711bfdc954305fa6c4914ad41b5a2f3de709bf064863fe73cf078606d8832754589

  • SSDEEP

    768:2r1D7jDpHvvCIooNlI05EVyP1KtuXT7vXrAK0RRVdlBVIl:2bHv7oilIGXT/VuRVdlg

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\bb3b526d85af2007437d20412884bf41.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2512
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2512 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1680

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    1KB

    MD5

    b05bc8b50ba895b9a4e252213ce4d29f

    SHA1

    5f5cc543cdebadadf7a4cf81d9a26e35fdc25d1a

    SHA256

    9b397a2d279b08835b5a8b723d8b722bf25f509c780ffd9c1764cac702b7ea2f

    SHA512

    b9834bbfd5925db023324fdadd72bb347251e68010dcd9f0cb5cdd5c9235c366dda5f494614fee605f66fd24969449ea6e57b1a01e6b92ec7b22f49f7d45eaba

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    67KB

    MD5

    753df6889fd7410a2e9fe333da83a429

    SHA1

    3c425f16e8267186061dd48ac1c77c122962456e

    SHA256

    b42dc237e44cbc9a43400e7d3f9cbd406dbdefd62bfe87328f8663897d69df78

    SHA512

    9d56f79410ad0cf852c74c3ef9454e7ae86e80bdd6ff67773994b48ccac71142bcf5c90635da6a056e1406e81e64674db9584928e867c55b77b59e2851cf6444

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    410B

    MD5

    cfbbc3613e940c096af2d5312d6addd1

    SHA1

    32055d6c3985822e6c6eb0b49717df6c8f95d799

    SHA256

    e24e74f7a67bc2cbb75b3c85bf559cfd9352614f20fb7ba3a791e28040ce938b

    SHA512

    febb1db4f9173ed4bdd5a8290655fb52238342dd76d94015fe00f7f4406546c11bd12829772552ceeb7a0c7d0a6a21667bb38c178e6c6353a2bb926f6ea9908a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    d142b11fdc82bceddabe161b065c9881

    SHA1

    ddf0e856fcfde17edc1a5bd3ed9c9bf19a0ca15c

    SHA256

    176d4d48cd2b915a12c91d000ba49c96929642ba76fbf4c9431a84b2853e9c2b

    SHA512

    3b659231d5915b7d57f46262977c175ec3efb3eb4aff48b0cf13da64a5cff1fe495ac46dd5ec29534b9f2801113bccc596add2d0995aace80b84a252d7fdbc81

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    c44b8ce36b31fdef2ac361ec783a9def

    SHA1

    1d6185f8e1e53637c4139df4fc23b0ab2d4a437e

    SHA256

    75d45ba09dc5e5b2729d4c4b948d582d21b20146c6be869305f078c9087c8610

    SHA512

    87e1e4f72485dd64d00fa15c2b9d05c353455f284c5d4d34e2e33470a40e78773105d034a46463ed8271f7297db4877d104dba569dbe634dc24bb523115fa5ea

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    9e67cb1ee10d8381bc149431cb90ace4

    SHA1

    0076e44647dc881c4d87dc12a8d4ba13dbb38c98

    SHA256

    e4e7ce54bf621d62a151f876b1a82837990f4efe3b121da6cd9bc1947ff2c81e

    SHA512

    5eb61fc8a5477b2da288bbac426eb257c02841f869eb353291febe5372bf5e093be3be01e4bd7c607679907fa5887c96532b3626aa969ec9235e04a731438799

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    5684cc41aadefdb46c7f480a435621e2

    SHA1

    3452323319f3b3f56a0ef17f28c5658af238f615

    SHA256

    e80db9e03005ed3929c8ecabab0bafc52440473718daf86dd5d8b454ee34dd92

    SHA512

    f564c842d020e98f1cdef6ee0a5f80f9614a3df0c4eeae123870ff543e71ae6375abdad76c59bfb901f32f6da212598d74aeb98b282fcbb2351dd303129ff075

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    fec2878a367eb6806e61dfa2b1c5291d

    SHA1

    38a0987e3175963a28affebd977784e6d04e03e1

    SHA256

    96a85c94e92d312a67831a4c7990cacb4f699d789add0ce0fdaa9b88f222fb5e

    SHA512

    2dd13456df5af2afb634499175b49d8e38d6f165f6287b0a5f2b56e2fb7b9649e00cfe3cb88255b83904e9ff994b3b4f3e7dcda7e63cd5a8563fc7045c572fef

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    185896827723e8b843c575e6cf4b9234

    SHA1

    8eef41f5a70ec4fa897ecf2eb8fecdcdfc9a2e44

    SHA256

    75a94bf85885ef4416bd237ca720eb211a37f7249e221cf20abc0074463986f4

    SHA512

    bb4611ca0b3e0a881865999d237596dded7d5ab49345d673503053226be91ff40a5dbe8e0e2f3f4a4b46e7e83c037507f5ab016e2f2c6fee96401f9957ab85ac

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    cd78c99e68c67239890eb308cb0e2a31

    SHA1

    e4d1866b95820f5643a5dff324a20f834fad1f3a

    SHA256

    e2596e6fa5314106c95a3354805f40f0ddffc8e58bda96f64d27d4f232de613d

    SHA512

    e154d2943bbc27299126e4ae3d95b81905cedbc9f440f2ca9db2c3c39cc25113cd79224de42a66ded0ff34440152bc44aa6a51fc9562b641e3b6ac6359eef90e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    cb6108f4d1cd51d2b22a1807e1916a67

    SHA1

    e322f1ecf590639cd41fa0f26ad74df47f1c87a9

    SHA256

    a3ae3c2576377a7b3a771f07ccb4c7a4821c4822970f6b8953b18e06e865680c

    SHA512

    3208f31c4c8b7df0c17714a0b11839735daa9910387a73b5118d7a470b6062086050a0f8589c8e7a61aaeddd7978e678bea31d046551a3bde4f11026add10131

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    577309aa2f7113c400da805ea043e3c1

    SHA1

    a15b196c9c921b0bbb6849845b1a9059c8b243e2

    SHA256

    e25298a03a7433963bf2096ce908ce95de925200647ea003166d103e4a9ce2aa

    SHA512

    fa2942c7b89d6c686f10cdb9a89a920f8365eb8fd95b4554e83f0b6879f8a8252e1cc2a8b32221ae9703300ba444564dc1ca2224fec7cf9d3a4a3be877043feb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    71ad1ca7ddb23c3e273042abc5aa1bb4

    SHA1

    10c36c970fff337dd71fffd996db75de619e1aea

    SHA256

    6eb58eb07e868f5bec40c1b0b611a67f1b101d3cf9acd8f9a4b24361f7a2f5bc

    SHA512

    7fcc86740185ed08b33a5080a3497c41921868e01c27d0da77ef977eb952b2bd0b65bb99de4ad48a6a3e82bbe774723fb919dd99f1eabff31360fcf3f63316c0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    5098476b9118f8798a731a179afb2126

    SHA1

    62638ee40c68e0957f6fa4af80097a4ac4d24c55

    SHA256

    da4a662d4176bf44db9442181f6a9e272136c948fc4b2544f43a1b24a69947ab

    SHA512

    396316315cd544d08e0a7c5d75fe9177123487abecfd88b92580e0a4aa9a4c003b7627e6a3658b8bcda621ea34c77b77f3e89ec33b4ec8a4a6420e1778cebc40

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    9dcaa4d6daf7efe7524a39df82ef4879

    SHA1

    0434682f958ffe450b3c884d1d3b26f46c27157f

    SHA256

    4c87971512cc64f54830b790afa1edee57cac02b9d6b1ee619fb3dc292beb042

    SHA512

    8f8b666a409c0ce203fe15891d6be160e2e0b37a48770afb8c0431a2cd60992cb9e40ec8730a0398e75c2aafb70c93383f34d3e53ce133e34ef684e87f7dbe3d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    080cfd1191ad64a4b02406d1d22ee51b

    SHA1

    ba8069ec50c162c746a91713bb6080aa26d3b96d

    SHA256

    a18cfc79744e724c34985013986952a0bc69385ffe2fc9777b965ea189f0f656

    SHA512

    ffea7ff3815113f51bb112002bb516b3da1ff81070ee4d859ab0c44e20364ca6adbd73ec92634c881745b5e15a4586e2838e625ed4bb8f157ddb293a99b57400

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    745f131a8f71160de954c686ae90e071

    SHA1

    b241c1c026b3b4b0422c5752cd0e9475406d802d

    SHA256

    4f45cb982461344e8edef598a62f9b894af1806ba8c8ab3961fb34768c8db952

    SHA512

    591e11347270c041b41721682fce9746712c10657d31219a760013a6d3a06dcc1b802e7321e3dd5c627a3c741d98a05a825b746631759f4835850f3caad3dd2d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    9beca209fffedc3c1b1e37f6a7305276

    SHA1

    2acc17d73e589ccb1f59c41ba95252d3e0a446b4

    SHA256

    5725de5495a9474242473da766dbaf02b85de56fa15e2f2cb7233e551d3145fe

    SHA512

    c48d37845e82c9ecdd005693d1915cb54a79357cc2b19f6af701f71839adf283de78a95c8825ab887dd9a9ec208176fe3bc2052fed353c955ba2d2177e8fbf08

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    9119bdb11f7144d99fd260bf34b37304

    SHA1

    3c6194892b409e32011e75f1be9b82b3084f7716

    SHA256

    e1fd6a9d6adc4be73b675093b79f9f3476df69e64b662b6e69c5ad2f7a3e31f4

    SHA512

    61d6666ef204dda4acd35ba5cf09e3073ed41e1291819cedd8cd6d8968e4eb816be650b4c39057d2780aed6b18e57299424fe5d69feddbd2ebc3008fe143fe3e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    57a1bd498cfc235448b5d4e571f0dd63

    SHA1

    d25c4eb0968754a5ec38488e64a7d5143d9019a2

    SHA256

    ce5df0c4ea33aa4c2bbf379b24d78e12d15dfdb7683bcb23089fff1a442899af

    SHA512

    0f811772c12cdf7b34435a567cca3c6d925c2bf30dd25ac6a9a9fa460540456bc4ee2a7c5edee0e337fed815a0cf68b38db7692c7b16962f07427e039cd92533

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    c315001fe91e5a7ce2ab33eb061fa441

    SHA1

    1239a34d5e8384280931cfb536bf56d15e032cec

    SHA256

    2527678a9531a0634a8d738472c9d2de0d7b70a9ff3d0d3a15f76460ca7508af

    SHA512

    6be6e8a76081dd2301b4f7ca26b2e77436640cd2828f0e819904688aa3fa479361cd6d4aa7d5c3d8b971e0d2074a0f79e1ca89ff5df2f6d11d69c7344d519d75

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    cfaa82ecb62503417a5242a54b9aae11

    SHA1

    1abb1d2081d4ee3e91a4a19fd3cfb0c5054b5ca8

    SHA256

    9f31910f1365063dcdd30c2e63a5126df81fc8fda2d0d29d0f9125306c62f244

    SHA512

    51834882695a2e50fe34d8d57599e86db27f18049eb1872bf5eec2cb6a36e95cde8291fc0a00973f8474d10801624d0deb4c3f5cc9030f06fed43a2625573610

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    81aa45da09e757f110cd73ef40adc87e

    SHA1

    e34d9104cf170495b301aa493bcbdb8b6a276c62

    SHA256

    f2246fe3ad73c92b35d932becd26e805b7779737a91e0eabf6e4685d2fb6a4cc

    SHA512

    96fb7c519fc69eea12e6f4cb68473711f0d9e57853bac711ffe9e2a706112a625413509ae04c83b791766d217f0358c3fa8507824e6b780eb9160cc38d10dd77

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\CAF4703619713E3F18D8A9D5D88D6288_A7725538C46DE2D0088EE44974E2CEBA

    Filesize

    392B

    MD5

    bf2f2923a860f3702cbbf088b9b901ca

    SHA1

    f4faafbe75bb3f43f7b0a44fe06baa8928c9d2dc

    SHA256

    6b349fa6d3fdb07ac60e628766af625e8f22fcfc5820348b0fe4adb08ff04cd7

    SHA512

    f74240a9b08e75ba405f53e17b8cd38ffe76a602424952496da70d1fe784c1fe8069a04479fe7357f227a12b24d594d2637b037aae4e01e23745a40a27a9c3bf

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\4JZQ5QLK\cb=gapi[2].js

    Filesize

    133KB

    MD5

    c8be3350843695958a33474aeb3ea8f1

    SHA1

    ad92694d9b189ee479c1be438636e39247b216af

    SHA256

    22494eb4f5fc2ef8c229b9df2e171990687e4837282655145cca0fa302af1278

    SHA512

    54ba5d4076fe9fe4c4ac22f45cd7d2ebb4e8027d8b8f82580436dccbcd60fa2adbb948ff1234d9912c663bf1fb33ac834007850f5a3f2abfb96a7a4feb110bc8

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\8ADCJI8Z\platform_gapi.iframes.style.common[1].js

    Filesize

    56KB

    MD5

    bf78e91c4b8c660626008446d6d30703

    SHA1

    db09dae5dda987e24027a540e47650cb970e31bf

    SHA256

    f554260f317f497231227b9def0144f0bf370ae71cdd7a54ac60d0ae1a56e096

    SHA512

    15cf262865ed7a9aee617939501430586460eea04599e7c09f5b223ecbebf454450e9e6ba93b81e6e1a35b1039d0e80039bd4d4c768dc72ae5e3bb3ca1f70fdf

  • C:\Users\Admin\AppData\Local\Temp\Cab23C8.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar264F.tmp

    Filesize

    175KB

    MD5

    dd73cead4b93366cf3465c8cd32e2796

    SHA1

    74546226dfe9ceb8184651e920d1dbfb432b314e

    SHA256

    a6752b7851b591550e4625b832a393aabcc428de18d83e8593cd540f7d7cae22

    SHA512

    ce1bdd595065c94fa528badf4a6a8777893807d6789267612755df818ba6ffe55e4df429710aea29526ee4aa8ef20e25f2f05341da53992157d21ae032c0fb63