Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    134s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    13/03/2024, 03:55

General

  • Target

    c4e8ca6182c332f434a26d160630b501.html

  • Size

    11KB

  • MD5

    c4e8ca6182c332f434a26d160630b501

  • SHA1

    5a501a9039f32aa33be340d1b46624823c23c3af

  • SHA256

    1494b3f51981c7d009d1da68ae5ac7c6f261a7d1c7b64e1d9c48c048fa4e0c5a

  • SHA512

    d34fdcb1a90d7edd6bbf24954b4b2bcdd4761a358664fc5eef44310503174cc7d4453504584aab89150eb9f9257b117c0886880113e5523387d69103f86bf595

  • SSDEEP

    192:SImnob4z69DefUlqEZC1JfafIJaU98UowV17f868dHfqRCgCmhC+RYYMnnPJdoR1:SImnoLxeMhC1/5vV187diNk+mPfoRea

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\c4e8ca6182c332f434a26d160630b501.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2928
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2928 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2640

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    67KB

    MD5

    753df6889fd7410a2e9fe333da83a429

    SHA1

    3c425f16e8267186061dd48ac1c77c122962456e

    SHA256

    b42dc237e44cbc9a43400e7d3f9cbd406dbdefd62bfe87328f8663897d69df78

    SHA512

    9d56f79410ad0cf852c74c3ef9454e7ae86e80bdd6ff67773994b48ccac71142bcf5c90635da6a056e1406e81e64674db9584928e867c55b77b59e2851cf6444

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e51e9b73cf5fffe8a3b0cbc30d7378fc

    SHA1

    a8c2a267441019add78acfa0e53092e397041740

    SHA256

    fe52f41986ccae4c938cf9dc08f012a513be51ceadb11ff494382a1abae5fb05

    SHA512

    41011ebf4438d78b1fd1bcc54dfbc2c66f7c9aaa71ebf845a8b2294d85126be2cecd1f84eb0263f495faed9674249c4cb3742dd5298b6c278b469ead8b6cc51f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9a81fa1d4b2ee566621a015067afe8c9

    SHA1

    dba88f48f208e5466bfc5130e99a8f562f2b74bc

    SHA256

    c1f51edd5007a765b1bd8b36e6310d4af7ea0eb3d4687f18243223054286258c

    SHA512

    57de18ab1ffef176f1ed1936008a53c901ab710598e05f7059c5c9cac6115e5a2e6b70ef48f7edeab67cdf09555789ef69b56018a2baeba138c96005c599f9f9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    19ecf845eed7376e25468beca3574cfb

    SHA1

    8d734436c27d68744ce148db3d9f9f2d7a7aca03

    SHA256

    0eeb096b3c92d89756ecba753ca4021aeb0c647f7316a3d2c3736aed4ab12de4

    SHA512

    8dcd5f35aa43dd54fbe0efb0cb479715e1f63314b773082cff2e1382c367854917e89d9e733b7fcb1e914d1b9bf5ea898decac5700ec53e028c6528537ccf689

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    98eacb113f1d8e6ca0c021f432bf1cf8

    SHA1

    875a82232d53abc9e2b7e13b38d7e71f1649c377

    SHA256

    f10be7ea7f9ba36987827158e002a0b5ab015289526410ec959e5cce67abd39e

    SHA512

    664b0ce06eb79c6eb9876011268ea2e85cdc89078ae5a9dec1a8bc2166eb96c4fdc96e1c0045531fa092b341d1ccaade0050967274a1c0330964e4c65a0ba22d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2e3533a993ffc6230c2c0fdadace369d

    SHA1

    5efee1fdf5d858a5360b9f23114d13e83c8e07c2

    SHA256

    584fb94cb307a3047e75ce4df90f80ff78a9417ce034c989917f853d282edf3b

    SHA512

    0bde470227ea881d9dc4bd196b6149621070698f8711162a310017519415dd511044f65470dffd09eb3022ca8d6504c2e8e5ed8008b13ddc3915b2f7ecaf0aa0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0d7ca8492f06576a97099c52b6e1a3b6

    SHA1

    0562302ff4ff681c7afa3e34bbce4c885f5aea63

    SHA256

    540d1807c72c19fffddd249c5229424d83a5ec8e1c28cfb6373d0daa5a9bb29a

    SHA512

    9a418fd094b31d8020f0f8581ed356e4e758a11e4b80f7719fb49c4eed1092c04cbdedb04c574cf9b565fb1a0204d508dcfe3d2a37530b4aaa4e10a6cd89f30e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b93d3d90f1ba97bb4f55b79c44a49af2

    SHA1

    c45b31e86dd1fe86a180e59cd476c6f2ee16e49f

    SHA256

    1687db672c140e6d18004b73bd26595581470274accc7b2bdf1ea702d14af8d6

    SHA512

    cacfcff39f4010d6d8ffcb62ee541bac7476897f0ef4d85dcf28f66066e4742a1f6eaf46f1fded3adcdd420e7f98b33615db700434eb91599087dffdf17f41ee

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    05dea7bc24840975c2cf0df6231fd3fa

    SHA1

    aa535021841fe54abe4538132a23916201171e6b

    SHA256

    e3568e6cf2a5c85bd1694650f03250e3b6c05cd774d2dea2c50b4fc9a15fc096

    SHA512

    374edf8ac82b567355d818b15f8e0f2eac53df0912625abc8aad623446043e5b3a5397b0ee3abcf0e6511f1c8800e65beecc5af9ac1b025845543c5841a95ebe

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f2bbe2a660aa2a1a3b7d75a776a349c0

    SHA1

    05b11095b37e30889858b92ced038da39927598b

    SHA256

    bf1069c40155d0219462177494ac4e3f0b2df1a92f4fa5d6d75887a896d83016

    SHA512

    9b6d2e7da27eaf96850b55ee72e8fb4817863fdc5c019858d982d0d67af72bbf1a790c01f48ee73c6cc6f0a4e8e3a7d84fddb3953269283a913b83c6ebba8b2f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bee393b9b8a0b06e23104c1a212733dc

    SHA1

    af3ac2d74e4ed3a5aa1aef9170f87aff0d3a2720

    SHA256

    74a9753f7a84ccce58399fc0e369d912548e9911db35321b90f0487abc71bde7

    SHA512

    5b1788365c28c17485ab036764590ec6c2bded39ade302b457cd15d8cf9e16f72e5111eba5bb83beec02075fbd9bcef0a6fc30abb4e1f4bb7b4763aab827d50e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    78892d9a5ffbb058be1a56ae459dcf76

    SHA1

    1dbe99dbede99e66dadf6882bdc5c7e120bbf6c2

    SHA256

    2ce9766e5cfb6a31d1effd71379efe37df6c36bf5b962e52cfb00b8aeb2dba7e

    SHA512

    dd6ffc55fee83528e0e3211ec6cd1137775c2efcf26c5b5a54de67a9a02e79e7743b1a27c90132e6d5864acfd5c163139b1950be6ecc5a342082bf51e0827082

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1076ffd4b85a2eb94fbfe15a742f3c4f

    SHA1

    08ac10225758acf61b65b77e9b612aa49e047844

    SHA256

    1b33e2d97d0a80a53aff3cad6823731eb0de77e048cbe139d234793e1600377d

    SHA512

    47888c8dce036133d89c6a682ddd84338ce2040277a5204113a2ebbd164d79962db48a92c4d0cc2ed28b299dbbdf0fc64df37f554ad761eb75df6fe914c476d8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5383b5baa42e5147ebcba689cb92bf6b

    SHA1

    8b532a413b082772bbc4ba3824a53ec1f29f7969

    SHA256

    873e1f41c8986ccaa9f2f7cfa2a5ae88e6a46ad226dcd00bc114f48faecf8994

    SHA512

    617a5e1799f6389117f305ff1ddf401b0ab4073c32d77c052e18caba3f33c430ceb6c70c4a1e32d44b533ec68787dc6b081472e328066d54036e1ff214e6cd3e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bcbd169c42fbe87a9e127ff16158465d

    SHA1

    259929c4bef257e68b834a9ef8cb58ae16be36b4

    SHA256

    c5883c90c41f76316b193f6bd1e21c334f859aebfe444d7bb6851581024717cf

    SHA512

    9d4da31fbd4f2f826b9d83f6f97d5f4f0ac043790a7f77df5ccd4adb291b4495bbfffa2187282349b77fac959ad40fcee9848aa2a6e5ed0a80d49a5d6665cb31

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    57fa1f5c816164c1e111f596e0a2024e

    SHA1

    e23ca0ba1d0a302dba04504a5b0d1d5f49a4b569

    SHA256

    07e9b9f7fc01b6c814a5da69e8eca619c37721aadeb6df081fe01897f5eb5294

    SHA512

    e84cb8e4a843ece88b811fa15098a95f71229bc4957c9a70f3a8acca99ed805c083819a2a5b1df4b92cc534d39dd2793de499ee5e0e9d4370ecf932449d906b1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    446be2011470d9bd019137f3616b833b

    SHA1

    8a9ee6bd272e094b39d635cf85c433d5f0809a83

    SHA256

    d942c255395aa6ab3fa1461bf2abfa3eec5927cb802ca0ab336792fd4689ef9c

    SHA512

    20c169aa6165d25982197bd6910ce7df92b35d3c512558486bf21c342b5fd21f83dbb9dc6d6c6e5edd23bfc3d14551f462f409218e4f2f5ba2b2fac0d3ff0cc4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    48efdb6d162d55eee82134d53a12e7da

    SHA1

    2c5e0b5962dea27e1d91e5531efa1bf9afb37d21

    SHA256

    2a3645179121564008ed311381e3a3bf4d183da1ad99973ef4e1777eac180b0f

    SHA512

    dc0edec2c4593462c2b1e7420f245ab688e08bd176e2f1f22aa99e6625464e010b1b2006fec14ab7fb3c8e4d8a91266603d6d9576cc3191645b7033c1b57e9ec

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b38b8ae44e46c2d91384a765f58373c7

    SHA1

    9e68019e6d3a625d9101d42c9b4d05b06dfd5571

    SHA256

    26123f4722ac299d16f16c0e6352e9c8fcb2f4e9e08b4cf79e7edd5bcf2171f0

    SHA512

    26f71e6a515e0a8df30377f813e15735d4606386253ae8b559fb89ad1d1168fa3a7c83ac6dacb5010cb1ee7384ba7f38fbd9b0fd8d2b67021de23d83dc6860be

  • C:\Users\Admin\AppData\Local\Temp\Cab2530.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar2650.tmp

    Filesize

    175KB

    MD5

    dd73cead4b93366cf3465c8cd32e2796

    SHA1

    74546226dfe9ceb8184651e920d1dbfb432b314e

    SHA256

    a6752b7851b591550e4625b832a393aabcc428de18d83e8593cd540f7d7cae22

    SHA512

    ce1bdd595065c94fa528badf4a6a8777893807d6789267612755df818ba6ffe55e4df429710aea29526ee4aa8ef20e25f2f05341da53992157d21ae032c0fb63