Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    138s
  • max time network
    132s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    10/03/2024, 00:37

General

  • Target

    bd362358d6103ac3b3abe3da53ccfa55.html

  • Size

    432B

  • MD5

    bd362358d6103ac3b3abe3da53ccfa55

  • SHA1

    30bdf6abcc190ef63402c072b4cd28b754c64ff2

  • SHA256

    ddf0f7ee46ffe835881afbf38c32e3f66f608d51c57a363ff65acfc5da5f37c7

  • SHA512

    6f19328a77442696274daef62f13ddabcd5c2c8d7b73b5401a4ade24a28932d665a194d0af26bc7bc5d5ec20d2c88885c55723bd6c690e5cb940f5addaf4f1b8

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 46 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\bd362358d6103ac3b3abe3da53ccfa55.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1972
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1972 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1200

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    67KB

    MD5

    753df6889fd7410a2e9fe333da83a429

    SHA1

    3c425f16e8267186061dd48ac1c77c122962456e

    SHA256

    b42dc237e44cbc9a43400e7d3f9cbd406dbdefd62bfe87328f8663897d69df78

    SHA512

    9d56f79410ad0cf852c74c3ef9454e7ae86e80bdd6ff67773994b48ccac71142bcf5c90635da6a056e1406e81e64674db9584928e867c55b77b59e2851cf6444

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    030eb705af53f85f53fd9e50fa17261b

    SHA1

    56d13d32d6e9bcafa4aeafac8ebeeb2f8fa9039d

    SHA256

    05ce184f4937c2c2d617c44330303cf5a43e8138d975c57e628718bbaf815bd7

    SHA512

    e7bb8f0083205425ffcbdd3bc6af90316044b419555268bf416dc413ee99d9bc81df073eeff6a9b925c2a896da6fd9e45bf10453351bb03ae76a764ab95b5113

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    396fda6189a45ae4626adeb717b23b47

    SHA1

    66c95d14f3f6d617bc4ce3e53108a73ad84ea9d3

    SHA256

    0c934ede61e3086f995ab7a9869faae0692390a21af672cc065461af3ade4d6f

    SHA512

    b2ce7669b35bea37e63e323288c0b5d7b49692e7c97e7754426cd368ae0dbc75eb14e2f1ddf1964322566e942078a56f61f8839f29086c61161cd0066cd5d612

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c8ee296154dc449eaffdd22932e70bd6

    SHA1

    7c06a142eca5424c9ee788a91db4e693b3dfca15

    SHA256

    d9a3dd439d9d0fe67ab7deb4df2fceca1a3a3a2202760476b97f38f85904afca

    SHA512

    9f4ef2602c518dcbc787d9ba4c8b286909647bf5b1ba48f05d5be2af2ccbce1d6c17288fb4ae3944b884cdb8cbc35822167158b993acbfe685a23bbe70ed6abf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6da119102974a3ea91f13919454ac0fc

    SHA1

    166c42ddbb59824d51d3ab0eb5be915aa3a43c75

    SHA256

    75e2196632e1fbd20b891a96d61759f68ae785ed7f3f0f330ea17598cc9033a3

    SHA512

    93b3c859bf6dc0b08d9f6e9a3cdf65535a7cbe4c235bf834e768e49407f903fda10445ddab93605959cf498756995a653e3200b7f2b43cbfa8a009f202924397

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3e0cc9fb142f598f15e15490c6a621bc

    SHA1

    12c799b66c6ba545ffd46adf7f938abe2865af8a

    SHA256

    8d9346afc55bfc3a7f55d92bf4f8f216c2b67aeb65051ab3e349bde7369f7d42

    SHA512

    687e546c23a2e1c4007d87216f13c79351a06ea48546b1ce94bb5538c40a7aa74bc735adac45521b45bde0c0cd569165af446e95bc8cb8ec56c3ccfe4a46f397

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2819c48c6048a64d2aa7b1c60cd4a78c

    SHA1

    c13d26e76d3f5115bc5f7682eba13cd64e34fdce

    SHA256

    bbdfa4c812dd9cebbef94600144097162988085b267e492bb93531657d46ac2d

    SHA512

    db678eaa5bbd4727718c8d39dfcb0e3dcfd087f1ba0a92d697621aff05eec4449aacf96c028cc2b3cdcf5ee02ee0101c9dcf0a9694c593b173003a1b2c83a9bf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    160a0db03077dfc13bbc38696ac695bc

    SHA1

    70ce557bf965553ce5a583d47c2793d0937cc97b

    SHA256

    2bcdcd14e1fe75d986808eb751cf5a74ba9e6192e383d11b5141faf664226d4b

    SHA512

    8cd1099cf54e4d2ece912dede8a4870b01a8e96ff81db7f3590a56b0d0683935f88727b90f111b801805a1cc65b091c45a26487fb1edd4bdd0b26ac626014a88

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3ce053ba5403e74c84d53cab5b031fa9

    SHA1

    bc7412183a9e0e8b420c886092a647e29affd1c2

    SHA256

    7518553d37444e056b96f0e5a1044d33e70784febfdfb8bda76f15e802b3e585

    SHA512

    2047689047b2924792cc7b3a98db1a4354f5a5b80ea8381ea3be2cb0ab090c7e990a544f5b1e702ec4b9dda46e3e8765018febc727d5732b711c67d813e5dd30

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    73ecf1abaab9062c0996ecc11b849a3f

    SHA1

    72f71431929189f30aed6a4942a1584b91491b95

    SHA256

    ded06667674dd2a23aea680c861bd1dfb273c67d1f0d924f8ace03d5492e2467

    SHA512

    b908677ded4b33f7d6a20c108024abe90d51a08798d1ea15e3b57ea0607787d937a276d4af49df2cc2259b40151f81541ba87538e5ae2ac776187099c172399d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bb1246f81091e25e4ea2631fbdfcfcab

    SHA1

    5265e27e0c777aa0afe969da79c23fdd3739fe07

    SHA256

    7e7dcc3cb9e6e1c818fc5a736eda8d56bf1e625ebd5f166d1d0f1ad3bb3651a2

    SHA512

    1a8efd67454ee7b3b8403e0b336f5dd144ae6daf060c8bef248eedd0fc63d5528f457b43f10ffa083a26daaf821396bd0fd33f27d1352b9d455f77671acf47c6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    08ded05d86144865fc63128bc8769e28

    SHA1

    5224138e00b723855750baec5250c993de59649f

    SHA256

    4ef403be1c75277a887210462485801c49e39de095f09c082d731b5a306e9339

    SHA512

    97605d2a68e3b63b44863356258aafcb270bde85f0cfdb0b0071e160b602f03d3b40d70bd0cb066df3675148a59cd7213af5491275766c78a1c7820d8208e741

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2826dce3fafe72f1b9b1b9301c1c6ac1

    SHA1

    c618bd0e4a35eb6b63b6ed17de90870c9a000926

    SHA256

    9257e55657559c5a241ef0e4df745c404aece7c2a1b806996479b76a45919eb3

    SHA512

    82111ed2348b41ea45269436535aa8997882e0649073b31939f68c5b23da6d2a74d71b70932b35d6eb4c774ec4f9d152501aab8a7d979551600c269e7cff4877

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b15189804b5e2fb1892fab344ef344f3

    SHA1

    a58b5434d487c52bb239dfe179815ed1d985f9ab

    SHA256

    82a6ce430ed84b016ada212eaf8496eb48d2cd13f61b24ccbbfb93a3da21cbc3

    SHA512

    f7780fb5b18d2ba89ab8391a59468da3955a2993680ea3d601f22d01b6f3015b8c7d1f4e155ea975e837e16c70d4748d8fb8fc7e5197f74b21edc1af7fe860ed

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    57edb9f0a5595f597218ada828bbf75c

    SHA1

    b48060c02540157894d2db26a395e19e32b9b6a6

    SHA256

    13eaf7a01d58db778d2b256b4912cd19e52f54933f655b77dc6b527a02111be5

    SHA512

    2e7ddc23010a560eb4d46e2709d2e1b8d2e8fb34ce93cd012e366cb41d2ee427e79ec92cba777f3062677250d4b09bd2e539eeb5ac3e2868ad04fffba6ae890b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a256e2b4746503c6c06758e2b1ce2a59

    SHA1

    ef1ec4a9abb89d7f1ef361baff5f643d35459176

    SHA256

    617273cbbfd1c60813d6b52d294fefce076299a90ac6ff6f2cd3f9b0ab59ed11

    SHA512

    958618ca96c6454f0e69f5a9e61ff129a5e4184dc22315b2818dfe14ab65ac5043bd09dd12388ece97ea5be1001fa9fde7c1a5f672218a5732f131d12069d3de

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    08127220e6225c25700ee15ebe237cf4

    SHA1

    8e38f0eb824551d9d81c8acd68a0e05742de5e39

    SHA256

    ca63f5be080ed0c7ad48ed8370a3026593eafb63290f567d761df70046787cd2

    SHA512

    1e9c331caf34e0cd4d812e77c2540ea655b60c79241450b8ccd01cb3c15c4fab63bd65a44f7416bc8021e7113964a9110d188cced4e981b824325f89e185f507

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fc763ebd98c268d96380b69a342dc1d3

    SHA1

    a7d016a1978502dbfe9c36bca1fde6d998ab69c6

    SHA256

    e600c790c4da64ea5206c50fd1a62ec5c4b825fbf9c3caceaf13bac045fa41a0

    SHA512

    00f344d7dd3fea5c3a1b9ab22d02d9096cc469119f392b689388f0a98fca87ef8e17416595a57698bbb5e8fbee1ee9cac3278b8195e1a3f2d779f41aa43029ee

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3078650c203dc3e6369611c0cbd8c5da

    SHA1

    a003bf5069602bb60bf816f82242d41c5ea31b53

    SHA256

    58469abc16a6a544885f7951fadbf2a3f57edd0cf1e22668ed83ba44045b1bc5

    SHA512

    e0dee601234195177bdfe37aec5be759bedf2eba0ea626d771394f46cb817d3728eb8d1deaa0c3e0982edeea64d0a268e7b9bff7d600e52ed8ea8d63c27a7312

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5b98378055a420aab36916bb8521ae81

    SHA1

    5a4e30b0237da8a2da86f28efad448e715966491

    SHA256

    b18be157c2e4742b35b1994ea76c15f46f9d3bea39eae8fbee6c44f9f6b6dc62

    SHA512

    d8a529f9d78855f40e2f7a36965e17230592d6f4bd78d9fc2b839fde2ff7cf3d14bb4290c83dfb279350bc26dda4f8936a755f0b5d5a123c25cc10048dc6ba6b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    27b28af12bc41483200623e86217bec4

    SHA1

    5fe5c5e71b29c019050c085f5d2fde4a9a5eaac3

    SHA256

    dc4cd5e8881be19ced17d44eafdd1a2341f94afdcdf9a3599263152364b420ef

    SHA512

    c85f7d4775943394c7b21a3277e44ad776e470135ddf4147c3dcb5f1da220494218a12a301ef24002efac645f565cbf318c0fdfbd15bbe80af479c842ce9a5dd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3cbd113c0bf1d0f2fb06ee4d4602634c

    SHA1

    6237ceaf8fba33f0b8668430c23c17e4687cf038

    SHA256

    663e6f63733cd927cd992e090e14806d2b852b9de260918976bbfffa0b92a153

    SHA512

    9d090e4123ba0cdda6ac5d42dc4f5af3064f112e00e4273da9ed8c8ad565255ce954d4ddc0fc60d604395ec1365e965cd7e94b8f61fb279de61888b23df027c0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cef65ec5a2dc957dfa6a1b3957925ef3

    SHA1

    c9617232fdb52496567339dbbfe58be7fbe3a432

    SHA256

    ded5c700366f840325ab7851bbd6a6afcc7183d6bae5ecd3ce993f733ed129c0

    SHA512

    d4b90dd67816defe192a6046e84e422756973343afbe7438df63bdf94b284123f1f7d24a3d7411a7aefac2ef5db9ec52f75878996979c90faa097bd11b7f30d9

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\PUK3V310\ovussaul[1].xml

    Filesize

    13B

    MD5

    c1ddea3ef6bbef3e7060a1a9ad89e4c5

    SHA1

    35e3224fcbd3e1af306f2b6a2c6bbea9b0867966

    SHA256

    b71e4d17274636b97179ba2d97c742735b6510eb54f22893d3a2daff2ceb28db

    SHA512

    6be8cec7c862afae5b37aa32dc5bb45912881a3276606da41bf808a4ef92c318b355e616bf45a257b995520d72b7c08752c0be445dceade5cf79f73480910fed

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\imagestore\3pl5scb\imagestore.dat

    Filesize

    1KB

    MD5

    9e658c5c1442a9de27387a0e79611654

    SHA1

    606fb901f01d7cf5d18f419963ceb1428807fe6d

    SHA256

    bb5c267722667a59f25515746819d23662ae8987316745c88ba2eccb46859ebb

    SHA512

    e5ead3c7d1ec3a636fa0bf52f026fed814f1e3f81127e7cfc75f17a3d4ff7e0888e502f2a609061b6cd868bead667fc1e0f211ed8bf7c731df27c7401913f5db

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\imagestore\3pl5scb\imagestore.dat

    Filesize

    2KB

    MD5

    6bab6c55452d617462e072cade11efb0

    SHA1

    fe51b0f5cf02f087b6e17fe8fb3361b42b08125f

    SHA256

    a66d2648ca8926c63c43f446ccb80ec2380ff21fb9982ac16979dd740020d929

    SHA512

    bbf74618d270e57d51119ed797ea96de00e0cdb9a0375e7f7b95b2f2aea47fe2fdf081e242c2fb0167f94ccda03d84e52b727e69b931dc450ae91eac9cac7a2f

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\4JZQ5QLK\favicon[2].ico

    Filesize

    1KB

    MD5

    668ba1a9fa1890ba16cb8adc28d3dad8

    SHA1

    5e35223b2541265114eaf61b9da2556c812fea17

    SHA256

    7746cf1b553433822522f2dc432f55fe64eee1f1cf823ef6adfde02e58e1d7e2

    SHA512

    212aa3e6ea6a2dd1abc10d4a96b7be179e0e490da187641ae3be7b7c0c30b7272d8d5b37b1c6ca5c75732dfb35a8ee30fa97cdb35704b97eeee11a2163e53664

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\9ZQLLOZN\favicon[1].ico

    Filesize

    1KB

    MD5

    91abe01116ab422c598e9c8af72cf4da

    SHA1

    0f2815fe8e067d48537ad168225ab4674271fa27

    SHA256

    b1d7aef06456fe7431124129a28f0138bb5fccfa4f4161e3087de23c005e5edc

    SHA512

    a4d5b20c3014153b6b382c43404917bd2cb5bd2a59bb1e981f5a19eb7dbdec185ace288e9700428d24e5ac623e45d04905e706f0c45a1642b1aa6c091213c23c

  • C:\Users\Admin\AppData\Local\Temp\Cab37A6.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar38C5.tmp

    Filesize

    175KB

    MD5

    dd73cead4b93366cf3465c8cd32e2796

    SHA1

    74546226dfe9ceb8184651e920d1dbfb432b314e

    SHA256

    a6752b7851b591550e4625b832a393aabcc428de18d83e8593cd540f7d7cae22

    SHA512

    ce1bdd595065c94fa528badf4a6a8777893807d6789267612755df818ba6ffe55e4df429710aea29526ee4aa8ef20e25f2f05341da53992157d21ae032c0fb63