Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    118s
  • max time network
    137s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    11/03/2024, 09:29

General

  • Target

    c03ebcc47ae0b75385cfa2ab72c84ec1.html

  • Size

    4KB

  • MD5

    c03ebcc47ae0b75385cfa2ab72c84ec1

  • SHA1

    3c22d1360da6550be28774c28d4b2b1f156cd963

  • SHA256

    6fed809b655d3df1aeeb7bb8a49636c842bbba8792c360deffdf06cc7b36608c

  • SHA512

    9e4e7618be1091e9409479431c1cba9580191309bfb557ccea3ab2d768ab2c1b33ff1889b560d8ca8c12a46e5bf14a16bda0fa64269c71ff66e2cbb664c29231

  • SSDEEP

    96:iLcNQ3KA2f1fcf/XQtfifof0XNCyflYp0XzoGkfl1f9tfXAoDPQimPf5fMYAmpvs:STNC4hk/DPQDmC7zSPMUPZYE

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\c03ebcc47ae0b75385cfa2ab72c84ec1.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1036
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1036 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1952

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    67KB

    MD5

    753df6889fd7410a2e9fe333da83a429

    SHA1

    3c425f16e8267186061dd48ac1c77c122962456e

    SHA256

    b42dc237e44cbc9a43400e7d3f9cbd406dbdefd62bfe87328f8663897d69df78

    SHA512

    9d56f79410ad0cf852c74c3ef9454e7ae86e80bdd6ff67773994b48ccac71142bcf5c90635da6a056e1406e81e64674db9584928e867c55b77b59e2851cf6444

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    345885117378e08e6b41237c1f0a4b7c

    SHA1

    0dc56fc8f10d00bbe054550555db31ff74806fab

    SHA256

    7de92a106ae405e7a637cdbf4345f08654267d039353e21c9e5f9b35722c72e4

    SHA512

    934e3e23fbc6d247f6f0a1476f733416fb58cd45d2541c487fa594457ff7277b10e1cbbeb1b0f1b1331e315a7be3db6482cac0c13621b40298c0f83bf40b6792

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cb61607b9f953fa9b33998858c71233f

    SHA1

    6a6a63a2de035c28a742317eebef81950e2ef954

    SHA256

    8ca883db806b51ba6a1f03e8f1174b09e7d6ea6a9e4193dcd4e785241d0cc403

    SHA512

    7de5e8f59f47640ebcc1763b27aba6902f58ff944bae93a4debae1ff7d9613d42b84b63c5f0d2db8d6e0c9481e753566ba5e1fbc32d9ff92d7880f3e37c4467b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f69ebdbde0ab994bd807a3f13a71193a

    SHA1

    40d0440d7316727a70f696062e79866e7ad7e653

    SHA256

    8ccb5d420e575bf8184bd1c32d2a51801a7fa3479a9e859a99024616cd9ffe97

    SHA512

    af13c3eadc2c127c113c3d3854b1b123e3a26a7f7f1da5765a608237294e46d5d3a8295a36324c3ef55f26cc9d5de93b962c6e37acd2a13f5919010cbf061695

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    093f5bbee545e5e11e9bb7a305d20eab

    SHA1

    d83a5d86658299f0e558b71ba7fd9826b64d8df1

    SHA256

    22382f5709bf2622c3ecabcb1dad0faf3174cf15580aa260c61df393111c75f1

    SHA512

    3b2a3f1beeebc28ad6d15db2b46600652ebda9769f29afca22a12bf64969fee27ba771ab0b2315277a3bc4b0cff09216f99fdbb72c6ec8fceb933ebda8545b45

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    59bdaec132e27faeab8dccbe02f53640

    SHA1

    d4c8c616781f0a9562ff1f3a021b9852cb507337

    SHA256

    ef8772657ce521be7219d12513edbc3b2a317dd56406a816102cb3ce333877d8

    SHA512

    6b8fbac09a18d47bcbc66b127749ea611bc7a36f3bc13c3d164e38736b157e2bafacf8276bb52a6c2b80fdbaf68dc293cd30614dbeb7c0a537de4e5b54526e4d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    062cb601e39821d80ea7a46816af53c1

    SHA1

    a556782c60271555cd18a8637a76a00d481e2397

    SHA256

    eeb986f75b93c78ec2e02ddf2cb9b603eadfdb48a65987b977d5fa92c0968fc6

    SHA512

    a021d0a201a173d308ecb04787f0d87f3ac8d3f76ffc07f5382a2377c3e6dc2393b3b4b615242c6a45e91ddddc10e269b1b73cafca36e2da0e4f1aceecc287b7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    aac41d429ddbf2ce4d0c3e805df0e325

    SHA1

    7d777eadd51db2aa7d367f7a5de991eeb0bc52ab

    SHA256

    d5d1256de75c81bf73d9d80fba194621a762848ea8fb06cfdd0f1802b7eddd7d

    SHA512

    0238ccfa2f38c6a8bc98764949adc04c4a8f6cf821f700ac3b700c15bd61fa7af68c19671508289af092b10fcc7286b125f9edcad4556ec3f05ed9d9b0807b13

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    478e3b24dd9b45ab975c6d85096eeac7

    SHA1

    6d8cb0e30b663711cdb6fcbfa2dbeef253604a81

    SHA256

    dd30112694e23ee1e40440bc302a63116e2d83470c1af05aad259fe501927b1f

    SHA512

    0d68fca4f4f701e0d6e14757d68208bec209bd62def8463279b89a9c81774b8d0704d3aba3b06205cb7fbcdd5b241345ad465606477cdd93c6df3aa56cb3dbac

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d26ebb9729f587c1c60f09c06acdc47a

    SHA1

    bab1e8b49e8b95967505b87de4802a134fd21aae

    SHA256

    54b15964e4562ea394f49ce5840f2809dfd18b467e88886f97fb99c7cc7dcfc1

    SHA512

    a0c2cc9084ea9cd0e8f0c4f0abbf6999d9ed905a063b429033d7fc4fece3e808c7f834f15e4e8c12e0fef3b457df3d9ede474307625097229275757d4b64bdd6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bd863c556981b1e933a7c992dba77246

    SHA1

    95f33b5cc4e9f404ba38174b39f683f6f68fff05

    SHA256

    23153658ddb8a626dae4184b4bc60635b3b754a5bbd14af3f8336db0679c1047

    SHA512

    40bb2408e01b371b9860f9a2254b51a202767772f0c267b5906fde394c00355058556f6792fa95ed7928f15b245c54ded388aba830efd0ea222fae35971811f8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    99f8064c00f1fe313caa3fdada2bfec4

    SHA1

    1c0ea92536df2bdbfd4419ac64a947ccfa3fa740

    SHA256

    6f4caafc5b9d9c861382fd767daafeb9978aaf108c5d6fcabe6765068b0478c1

    SHA512

    4c2d56641b3904c2cb1d01e72578906d09749e36ed932f11d0842a3f43473bbdac8497842c75d5373de4f2aeda10f57d2c22305709bdd7a8fd646f480791bfde

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    55c94369066acfd577ff679fa1e8a8c5

    SHA1

    4965ad1b512be97b47dfafd9c66cddfbf95fa804

    SHA256

    0991897d16745a3da19b3b218906f657eab3ba02cf355a48382203ae54bd9863

    SHA512

    4910d4353d4034fa28b0e24b3bdbafb115e034e84ed3384455b82ab57dba49fc7e21774d6be52c076c388a0c00736515ffb1ce5ce6edbad773bf7b9f7b2c3cf0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    beed57aaf6a6758e9aaac6359dfde593

    SHA1

    33ed817ed6855bbf481c5565f3964e99892792aa

    SHA256

    d8bffd3297c7d5ab993690ff47f042b4c2997fecd58072c671245dc7f50104c3

    SHA512

    9e2b7f468c633ac40127a412110c3662ad51e83c3faa4ecfbcde3fb31d86f45a81f71e9d2b43c1ff5fbdc24e25687f2e6d94e3878a4f2994b9a72a5f223e0681

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    98f80cd752fabaa0d597f25ad73c8a87

    SHA1

    8d3b56bd9bde473cc6429f5664406b6d556e2a58

    SHA256

    638d45e48276eb4d1327a80c54253d5ad4ed05049cfc79f46d36847e75613495

    SHA512

    4cb477387bc1d1a3fe1cdfbf39b29d12eab8a40c643cf51392985824397a4b2b63b4d34c37c099f01450b0e667e1df4c140ce5d85c5da08e24fd74d90579db0e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cb9ae857173fe3c5d4df331bd3fb9c7f

    SHA1

    2e25f02a9f120f612a5889d6dcab892827ee668f

    SHA256

    cd265e19dc39fa4dbab30010de2b59556ea414014af61201a574c9594795e07c

    SHA512

    2e4f5d84aee916484e3e9c58f6a9ad8fdf80b1d6417d64ddbb3d185bc82f9c94052fde9843b82a39aec7d52e339bc42a311ddcfa9ac5f3048fb22d3981ee2698

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f7cb9f02d47a25202625b89d52acdb6d

    SHA1

    9f2c8bf9b6de31d401234117960aa50cafe2cbe3

    SHA256

    5a1f64138cadeafb11031d045600883af6616aa41bdfdd1492e46055fecb9b01

    SHA512

    12e218edcb691f8c181795b560673f01d4fb05a4192bebe4efd896b74dffdc62a3535a7071c6213eec2db01cc0ad6d663cb1921b8011bcb40e01ddf16241a1c6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6962686259d3148ac24a7f690edc6289

    SHA1

    15c393ee0a84ac3aa75e2604c336167564c36336

    SHA256

    6cdbc2bc99fe5abb4253c2fff7cc1775dde92ae8928516e5274f6127a3fc5370

    SHA512

    c30dc6d83ebd4fce25553988639b587512480b2ba9435770ee40c41c41a8c7b212db0172f6a654ded1c2ad261dbc4831fe021caffeffda0c5d56d26ceae2c159

  • C:\Users\Admin\AppData\Local\Temp\Cab6480.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar65A0.tmp

    Filesize

    175KB

    MD5

    dd73cead4b93366cf3465c8cd32e2796

    SHA1

    74546226dfe9ceb8184651e920d1dbfb432b314e

    SHA256

    a6752b7851b591550e4625b832a393aabcc428de18d83e8593cd540f7d7cae22

    SHA512

    ce1bdd595065c94fa528badf4a6a8777893807d6789267612755df818ba6ffe55e4df429710aea29526ee4aa8ef20e25f2f05341da53992157d21ae032c0fb63