Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    136s
  • max time network
    130s
  • platform
    windows7_x64
  • resource
    win7-20240215-en
  • resource tags

    arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
  • submitted
    12/03/2024, 06:32

General

  • Target

    c2b05f9522131e64f63cc94bce4fb91b.html

  • Size

    43KB

  • MD5

    c2b05f9522131e64f63cc94bce4fb91b

  • SHA1

    4f04cfd3f95a55f2e578572091a09fb6eb746a89

  • SHA256

    036bfa25ea040bf22bb7b2164a7d0331b7c332d4b2075c7c605e5ab99f1d67db

  • SHA512

    986cbca8774a626df4a9af372a8bbf031e08868e8df5ceb3d09d17df1890591e9c9a8ff25f3f0fc3232a31492fa8e454e08d4ff46c5a7be190df037556505def

  • SSDEEP

    768:vJBNgWuHNOACfK+XNXXbQgTGV5DjVfZSS1XjQsPtt8urQH6kxV6UXKG1y+7BGu5W:vZCfurEe8cvWUqTAJy

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\c2b05f9522131e64f63cc94bce4fb91b.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1728
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1728 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2712

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    416687b18d37ecc769c88366b0f9635f

    SHA1

    6b4892880e5d3a41965c4d1ef97a258c338c925b

    SHA256

    453abef1713fe381fb44257f049831aa5f3242117e727fb96e589018f72912df

    SHA512

    484680569f62048bd63ca53d67c1eb0235368c18a58a29cbd642aa19b88c13b2673479b35721f08b163c8d43e772a562f21ed6c591d8f8de35f6c180ae717e7c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d982227d217a660fd6e5521003adba39

    SHA1

    318a1d78fa022f6ac5a452d1f51126aa5e0370b2

    SHA256

    862fd19fc4ff9b38354b4e25038e5370bb8351d727486c848f13002b6be5d797

    SHA512

    f4982e8080ea7fb08f0fa9aa7f15c3d816e47a4f256848efbbd78382893ac2d7edb2603e4895315b8848321f36083c54f29bd99b9dd74feb457220fdf5fb9178

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5ce9a966729e9f70c5497304bb3a3e88

    SHA1

    aafcb389c7781279bc0e4eade65ad29ce76c4b10

    SHA256

    d0a68b242eb9349a578fd302ee92ea05281c5366bbdc14be3f789b6a1c63b3bb

    SHA512

    aef955891de12b27516091aa4e47622618d96503e93882cceac6957080686d2efe707cb957fa82cc617be024494c87568843ca2f599f96c7db66442939a0a1a9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0b6992d28491baa3f8c94469bc1c013f

    SHA1

    34b4da331f3ffd876a6bc1b8707319e00f2d7267

    SHA256

    8d262695022cd7120b6bc1fd982a1f2897ed9e771d36afd46c8edbfb0aa30d11

    SHA512

    8a34fd9ea01931ba2795ba310b4397f4eda7c1d480226bb3df9ce5144aad9cefe33e2b3ee3ab2947f48c25205bf8daf8357ec1ab7b5700153712d37c40303090

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4cc5276f2e7230141870da04cbca9682

    SHA1

    7dc572aec90f582465f0837bd84dfa6327c99158

    SHA256

    e9cfbfde12ae65313ee802d91e321b37c8cbea92e80f954c207c3307d624e012

    SHA512

    01a9f747924704cb50093fc562fcd0fd52fb3f67643eb0654844ace8c2346d6762a783f8039923138f61361f1cac4737f0dea10149c9dbcc4f3dee8b3ed6e937

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a47a6894d8cfe17544b728f270baaf7a

    SHA1

    63f3fd76d2274596d4a3155e22ae9b8b7e690a51

    SHA256

    2686b50fc04555ca485fef4ef30dadcc7e401311cc723ff307615144f19178ba

    SHA512

    4c88f2ecf8970cfe05feb90118fd3bbd193e48054f5fb5b16a58b5e6557f6d5ef1d7cd6f58ac495c023d9f480a26ab875dc76666e65b7c5d71abb0f33f7f74a2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    44c1ace29a275604c8ba8ac54f2e4f6c

    SHA1

    66e34cf9e922616ed79183684196a7d445b4ff95

    SHA256

    e74a563059593d6ac4fc79ac4fc5cfb67e9a20c349d525935f765d06999533b2

    SHA512

    f6252fb8872b902a5abcdb1330c93883e380a29e93e2c138ffd8def97d8b2a51acfd1ae84b9a313fe1ac5db82f7d854cf059558e2b5c146d42070e9179f024b3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    53def32abae50c537ebd93a077a2bec6

    SHA1

    28bf711764f63732d9cc3176470a13b6882e2d5e

    SHA256

    836b73b6cef57208c4cbccc59bdd85a2a8dee9e25b86194a7394b55765ba720d

    SHA512

    82fad0fd29bd46d887a4721088558d89fe9ea1acaa0dc4958bd45c88dede7dd7da59db0b35514037acaa8b392c690fec1de226529c3d834a6a1e3f5afee748bc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e9a928e430490d5064369e512adec41a

    SHA1

    58756f0d4d37872a92bab7000d9c6384c64a6a0d

    SHA256

    ff820e91c304d0d2d00bd71c5abbad405e4027fafb9607a9fdce83d2644286bb

    SHA512

    75248ad07f99eb67f4e2829533435d51b1c122776edd0bab2551d72984845029b0bae192163f3d4f18b91c8c3af3f448042f88443d7162f1204dada34bfcfdf3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0968ceaf7553514eb4ad628f8c025b56

    SHA1

    57303fce03e007790f5e2926bf1f45e84463771e

    SHA256

    e3f5ae7619830647c5dfea66fd6027471401ab83a98df9275d230db7996bfa7a

    SHA512

    4b86cb0367547d2d60fbb271580e029634f579226618413fd0bf28c218ff2c25f0e9a8855786fcb5941345f4c0d34d9be99ffc5796a748e38705f83a3370fcb5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    befe77a26852dac8e42b034e3b3e7873

    SHA1

    2a2559a876e731f899499c1e581575390f550445

    SHA256

    a60af46bade6cd31db942eef7c568a124db75e45e8a92e5ae487b7dab9c156d5

    SHA512

    8ab5d6031830a32b3ef5e15c6954c6b9048aa9f11b17b7dae4d35d16ce5dd137791f70a6163c45ff4b0e6eda5b20aaaf5b2bd67a568214a3003cc559f4564714

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4b85e41222fc8c389191acd4d0d8408d

    SHA1

    862056c79c69fc7c2d781172230ad4b027fb56fb

    SHA256

    1f5890f800e866bd766cbc289fc679099301828ca5c942cc568756aa5b6d3c94

    SHA512

    4bb47c4c375450a5c9129f54a26debc8c5d4cb4f6291664946b82e8b56501761e1f173caba60c80830de2209bf90ac047f352a3df0eb49c729a8068f83f824d5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d92b05511722b9378411ae2195edcdfb

    SHA1

    06a14f415defaec539e19521d6d8d430ed2956d2

    SHA256

    5ca2f08ddc97c14f4170284109e72ec68e055b8756deef4d22023477e2fbe66b

    SHA512

    23d2caa1fbaa2d9bff1e6ab159760a3c199b012f6453513179343b722c04b9b7c6598db8b52ff6a9e51eaea2974a97f4b874f8b58594c2e21fe89a1e52b93e7e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ec4b6186dc44e179911769adfec36d58

    SHA1

    579d6e67bce446f7fe8f3330aecca37f70e3343f

    SHA256

    8347255c6c1e6ce890dce182e14ea0a1666957b3e332e192bfbbbc40715beee3

    SHA512

    3835b762c9c39ac84c8b29a9caaff89d5d2f9b904878dbb10da2d16bc551ee4446e0c603e9e45c00eacc0dc1fc0457730118f689703178433ace651b6f81fc28

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7fa65c0f6d683b4c18dd15ba7f8bedf4

    SHA1

    aade3c0672e30b0412209d7e39f0d500360c0776

    SHA256

    3407dbc8778c369aa6641a179e4640e3db3b572b4c3cc3619b7f0feabdfcb939

    SHA512

    f9a3db733f7ad1b998e1bfcdb5f938dcc40e03ee6cf6be7c125537dc69bef87c4be587daa46fc8083f04fb1d90a8a824791366376dce59162cd934c35a833481

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e712ba20b459af8f9b68672bdebcfd80

    SHA1

    6c3ecb7942a54bc50649d3409ed556da14f199ce

    SHA256

    d7d5e90dd91042e6b5c2882679d371f3dfa465f3145a96f7ede745eb1acf204d

    SHA512

    229b3012036714457f5ee5dca56910c627f6792a6671c1fa9591f2790042b54cbc2ec52f6761d6188a544ecc675f79c6879127d1a6d1ffe38ddb410e98686197

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cebbd9759228e17ffe2442c3b307cca3

    SHA1

    65a6c7ae0d2fc28bc92ac96baf9d4cd32ac55d58

    SHA256

    1885ef0b1a6b4bf59660623be23d1cdc9c4165211969df28c711e49a03e263a9

    SHA512

    4f04e4a9f50bd2f6f9dc9d672cb86222d3dd66485dc1782589a1f497c97dbd7d8f00fe0d4ed364226f0eeee7c952e73065ed60d2ef33af578acbcb4ec996e525

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    dea5ac77fb9e4bfc4620ca93d2ecee3f

    SHA1

    e286ff317e2cbb8025f5aad0d116d2d30bd6e54c

    SHA256

    01006192b4137f6a37075ef9c536765e7e92d9fa3915bee2c938d85d2cb5cca3

    SHA512

    0dd4476e684cc4604d3c580a393dbcfe99dc93a863119be97bd0326d0e343569acbe1cdf8f8dc0e986b7cd878e475bd9dc2ca9657e793e3ed8e99949bd9fce20

  • C:\Users\Admin\AppData\Local\Temp\Cab36FA.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Cab3816.tmp

    Filesize

    67KB

    MD5

    753df6889fd7410a2e9fe333da83a429

    SHA1

    3c425f16e8267186061dd48ac1c77c122962456e

    SHA256

    b42dc237e44cbc9a43400e7d3f9cbd406dbdefd62bfe87328f8663897d69df78

    SHA512

    9d56f79410ad0cf852c74c3ef9454e7ae86e80bdd6ff67773994b48ccac71142bcf5c90635da6a056e1406e81e64674db9584928e867c55b77b59e2851cf6444

  • C:\Users\Admin\AppData\Local\Temp\Tar382A.tmp

    Filesize

    175KB

    MD5

    dd73cead4b93366cf3465c8cd32e2796

    SHA1

    74546226dfe9ceb8184651e920d1dbfb432b314e

    SHA256

    a6752b7851b591550e4625b832a393aabcc428de18d83e8593cd540f7d7cae22

    SHA512

    ce1bdd595065c94fa528badf4a6a8777893807d6789267612755df818ba6ffe55e4df429710aea29526ee4aa8ef20e25f2f05341da53992157d21ae032c0fb63