Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    835s
  • max time network
    838s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    11/03/2024, 01:20

General

  • Target

    a (2).htm

  • Size

    1KB

  • MD5

    fa29916f652602f11362858fc58ee874

  • SHA1

    3e79b7c48adf7dbe39c935633d442d4826730344

  • SHA256

    923ae78ef3ace374cf0d3674376943b0cdf1747b46de74dc5c14fda16df936fa

  • SHA512

    902f2b5c73920a4610f898804cc53592de6bc62979ee092b0c15121cfd632c1c1b1d85ddaa3e2275d7e652fbb0a6f7d977f77456f1fcbbd3007861ed49781d6b

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" "C:\Users\Admin\AppData\Local\Temp\a (2).htm"
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2976
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2976 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2968

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    67KB

    MD5

    753df6889fd7410a2e9fe333da83a429

    SHA1

    3c425f16e8267186061dd48ac1c77c122962456e

    SHA256

    b42dc237e44cbc9a43400e7d3f9cbd406dbdefd62bfe87328f8663897d69df78

    SHA512

    9d56f79410ad0cf852c74c3ef9454e7ae86e80bdd6ff67773994b48ccac71142bcf5c90635da6a056e1406e81e64674db9584928e867c55b77b59e2851cf6444

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3eb1e5037fa021185fe336e415578529

    SHA1

    645c2a319d137549ea7bae376f992c164bfccab6

    SHA256

    beb08ea4113aa4ae1de08f7fb391eb07c6049dde3bddfad9c7712c9bf2576d59

    SHA512

    d8cb13c56d5c12575ab6346b61dc41eac9bf18d68569ca603b14cfbd4031e80085979661e8533c167a70dbf806fd2bb786f1f246bef25c593292382b63c951bb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cede59de3dd2d2f582154e3b3e61affb

    SHA1

    8793c7e0e7095450c6efd48e081d0cdc1cf9ba7d

    SHA256

    9cf442652bb1bb33b55ad80eeb35b7822aa8ef3742c482dc7491223ba9b1dcf7

    SHA512

    4bee8af70ac651b798f8144982d748d3fa9d533851f0c96fb9c09ba78d221bab84976be5672b7a861a073ae6ebcd9d1fbd3908cb6dc0014e07794e00dc52d7e3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e51ca8e863a13c74f6c7446f778b390f

    SHA1

    926eccc52bc724128340d3142ccdffc3063a7ada

    SHA256

    0b456fc08a9c83c41de3522313acd86771ce53510e95321dbd95edc680bda6b7

    SHA512

    bd3590aba14d343503062b004c30372acdba971cfb63e8aa0f09be64c9fb1f0991595362ef6018c3007d0edb241c6de2e847e665146861659b6e0dd1751b396a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    50c83683b913637a397ceec605c05111

    SHA1

    6e423f3dbbbe89420353d5fc21f57f7b150c9a64

    SHA256

    13dd2076e3e39d271ac63aeec0ac52c4c620bb7024c2251e93883d21b357fe0c

    SHA512

    30f9ca6791dbabff4455d041a1b1b43b5c6d51dc32ffdfd3d8dfa40eca36bf6a1b569a40f3fb364661a0dc8cbcf2fa1643e91489af3bf994696a9993158062d8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    206c51d788c362ad1717b8c351d9e62a

    SHA1

    41a85581ccb728041b8188c73c678915fa25b408

    SHA256

    499c505c79594d65fc1ef6e72fa34d07224895111ca412edbcfea207298693d2

    SHA512

    359aff1cbe84707dcbc5e442aa06eb5338c7a87acde531ff50f1a01e44c69dfffc0e18dc86541f22bd73354f20f37c12ab750a222f034ba71197f0c5598a22ee

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a2661e99ccfce1c24f715a12a6d55312

    SHA1

    debe0e505bdfc873cf375ac29e649e5017e8c870

    SHA256

    d1ff32ef3a79429c37a319c0a70d05f657d5d70db66d9ca5891798f5ef4439f0

    SHA512

    b9e7eed9b790a505f06be47877c14d96a7167d92c3d7b9dbe361400e7db2f6efdd1dfcf43c1002d95646b3caf244bd5fae1b380c62dd254b4ffd768ef7055fdb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c3b2c27fd7e9bf0a124e2c8b1e7c0d63

    SHA1

    f1861c1172bb47172a766a760fa18efb28bcef24

    SHA256

    6fb5dc473429b5f12e4ddbf0aee50ab965a4e5afcba69ff69637722987e28e4e

    SHA512

    2c20b9a2003616ede702246d92ef33d21f715b9746434aa07f8921206888bdfb150d33436f97323f0fb4182568bad53e4fac629df997e53a5efcf1739796f484

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4fcc8cb9de34a95478a5e7affc1ccbff

    SHA1

    1d476ae6d3d28cead79d12b53953a231a94849b8

    SHA256

    f219b7f378f0b9b8377340f9dbf973f0023bd4c39ca99f1d25a3d0b6e9b93731

    SHA512

    bb274e9f873e399566ff8298c6dc7c22146ea858b2278fd21db392b4dcfaf2bbb59b3bcf7dbeaa5f97ad4ae4d48e0138dbe87143d7fdec2a9e8afba8c57d3397

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7a82804553c4e7058a37ffba52172cfd

    SHA1

    975a1fabdd17bd1917ea13eeb39623192382542b

    SHA256

    d1391973b56e1808bfac4c6cb015be1976690a8dfff98b2aed0fd655ab9a647b

    SHA512

    6f399fad83bab73a648ea42180ff67540e9921d5c7a1f5507862df37afcb1e146d1421930099b494cd24332c6bf3bc43201f754901af38014fc26b5ea7dc7617

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b1b73bf7f86daf454dd88b15394d96b2

    SHA1

    09cdde7ef470d71dceb63ae925b2599c326b85fe

    SHA256

    4305ab01ac746f43893298f9b9ba67854d58ac8c8bb907c34f2a1a3589584915

    SHA512

    555d99c88546ca083e970c75909e77825dbf289e283f208746d56f65b0cc92d6b806c0b05e30d194b241b5d4b7a3105ae329a27fd5188d1ad8c707856e655ba0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3d33e6b115b11ed66a83e68c2854ddd2

    SHA1

    1b30474fec7d622a7558affbc9a83472a1a1c014

    SHA256

    2bbc951432bf5ab5538661cdf78d46a07006907ad1675642d55f48fc18b08a9a

    SHA512

    26c74b5a8596b2cb07aeefe3e4c038c20a99f202cb8721193df400f66ebde4bbbd460105f3a3fdbd865240e91b930bfa745846f0c08e9bea47a5c36263159303

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    426db10ae8e77b76374ec6c55931c25c

    SHA1

    6e52e53d99e23e7e4dabcc66bf3d97629470eefe

    SHA256

    05eaaf59a2dbd2f562700ac29edfae017b4a7de5e6c47d5143e34ecedec4b030

    SHA512

    c081e3e48f052b1bc896474cc52a4255ed3d7a4826609f01c29394993ae5bb3c74887b4c8a241a313243dc1707e5e462c14418145816f087b8395144934e3b4e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1b3df829a0cfabd6a23fe94af45be711

    SHA1

    b7c54eec0cd04aa8f0260489ee8255f4187102e7

    SHA256

    4636ea61639c63f2458571c28c33b609ce33f4ea60056732b69c2c8c5891c196

    SHA512

    009fe3c21c106ee4d4f80c55391521cbf11d0616c82394dfebcd85df66eb954928c5cec7c5a80bcddadd19712025e573e13ee1955d8a8558c4565e050198a245

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    779add2463d47474663652c8504262bb

    SHA1

    5ca739810979f9447bc6115f11a2ce66d475f3cc

    SHA256

    2f79208a36ecea9b053a9f3eadc502c383bcb607db40b541beb368c3f53404dc

    SHA512

    198923cc722fdeb0e4f87006b063c00d29822b8e9e9e03d85d8aa207c4d2a8ac1dd6c18674f727698e73bb1b915e910a429ac60163a85467b8cbe7cacd951d14

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3ec8cc93a6fb77e95d60c7aea8fc2946

    SHA1

    be91c21c77261ab3cf54839e1a91487e7a88e6f7

    SHA256

    8e0c216216f5bdd15bcc126415f45113d8890d6ea4ef3563e6756e91c410abe1

    SHA512

    ad661b7cfbe37315b65b7cd4c588d018bdae702e9bc9b1fe84a6f3a059bfba90133f1f7da0f894e3daeb6027e620b0635708ed29475ea300bd219b856ac9d67d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b63e245f20934a08101e9b965f002703

    SHA1

    81deefef25456d581ef0d9b14614fb41bd8f4a79

    SHA256

    21bc15408e0acb5be32b19e5b9806061bb0bb687d5df1708a5fd906c6200d1c6

    SHA512

    c2c47333042a99d467938198d0243641d25e75e7ad3f2ca1329c3900c50906c99efec3d494f5c72314ac0bd509371d306e8c07359e568cf0e456aaca921e24b9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b72398a93b03c0a201e9ce8c25cf612b

    SHA1

    53add522d0147943642907b04ee5d7f34d110e99

    SHA256

    6a78be003c0e8b8cf4710c187e5703fb6e392dfc9808f71cd8ac5f7db0a0fbcb

    SHA512

    73a450ad484378517a9b83d76d3951e8eec4ac3ccdbc424a9c23b44343eed764e041780dcb64363486aec291bb646b00a7eb0d166a82218a00400ee413d684eb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    20f71ed23fc113daae8963b1067102ba

    SHA1

    056193325d8f4085af499fdd6a86b263538db349

    SHA256

    32aa3504598885e92913e72351dad6214be64d31b872e6f97d1c34d765b139ca

    SHA512

    51c7ade11f2f7f1f2c5a5c0ce940bcd1b27dd68144dbe0bb4e4b5c63f6aa8dcbe2cc560398adfbc93759e9afbc68b56c139e9f0911867162ec13c95eab59fce7

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\imagestore\l63kubb\imagestore.dat

    Filesize

    1KB

    MD5

    0e7dc08a44f3c2aa0b148a60bda52cf4

    SHA1

    1d6770a9ef98a5ba098dcabf9d3561ab0eb2f47b

    SHA256

    78702a8e03864d856a894a9d412baae4931b785934340b0bbdf09eeaaad012f9

    SHA512

    0d65b80632466739e281658338d0023d0164c1a8e14ba56412da85bfd49f938469085a9e7f803fb0848a6349afc03cc791d468f4df5912d2ad7eaf61d83d0408

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\K224YIDM\VsNE-OHk_8a[1].png

    Filesize

    1KB

    MD5

    5fddd61c351f6618b787afaea041831b

    SHA1

    388ddf3c6954dee2dd245aec7bccedf035918b69

    SHA256

    fdc2ac0085453fedb24be138132b4858add40ec998259ae94fafb9decd459e69

    SHA512

    16518b4f247f60d58bd6992257f86353f54c70a6256879f42d035f689bed013c2bba59d6ce176ae3565f9585301185bf3889fb46c9ed86050fe3e526252a3e76

  • C:\Users\Admin\AppData\Local\Temp\Cab4B45.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar4E67.tmp

    Filesize

    175KB

    MD5

    dd73cead4b93366cf3465c8cd32e2796

    SHA1

    74546226dfe9ceb8184651e920d1dbfb432b314e

    SHA256

    a6752b7851b591550e4625b832a393aabcc428de18d83e8593cd540f7d7cae22

    SHA512

    ce1bdd595065c94fa528badf4a6a8777893807d6789267612755df818ba6ffe55e4df429710aea29526ee4aa8ef20e25f2f05341da53992157d21ae032c0fb63