Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Resubmissions

13/03/2024, 16:53

240313-vd8bpsab6w 1

13/03/2024, 16:52

240313-vdwmxaab5z 1

13/03/2024, 16:52

240313-vdmd8sab41 1

13/03/2024, 16:51

240313-vc87lsab3z 1

13/03/2024, 16:51

240313-vctf6aca35 1

13/03/2024, 16:50

240313-vch1esaa9z 4

13/03/2024, 16:50

240313-vcblcaaa9t 1

Analysis

  • max time kernel
    840s
  • max time network
    841s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    13/03/2024, 16:52

General

  • Target

    mjjjj.html

  • Size

    15.8MB

  • MD5

    5d82050346045d3c2ff2677436e8182b

  • SHA1

    14034ec0db53f3c11cb11dc095398453d6fb95c7

  • SHA256

    23421d5681bfd3aa75d1a00bb418d9df40c9a915f7b4e70e3877d5d204e7d537

  • SHA512

    c9221f7aab9b1d37c89ed61340f606d219835fc4080a45d5d50b1f3679d981a61e2cb5547060ff4ca88bd9f80d4e9440f49c4b8119b540de8d1eac57777dbbbc

  • SSDEEP

    49152:fmDz4cz3oSrcBRlyqYGxGK4xsmgrFsomEArSBU2vIzhd1vGSlz7m+1iIAT9dCHc9:TurinDiUxUYhH

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\mjjjj.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2912
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2912 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2432

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fa805185a21a181295752ec114906afd

    SHA1

    a2cc493af6f55d6374a01c7d9fc4a937ace6ec59

    SHA256

    3824b12118b75a74c7059b1d1ee29edcfd7bd50de824da08ecd56e501a7a46c8

    SHA512

    06186ef92bd7962762d7f672fb4ebac9cae924b8acdca41775780e04433e08ffe48ff1411cbc3d1b3bd94ce40e52b242e5a88ec6c7112c6454dcef81c45b11f9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a515de2d1f5c4c9190f81b42fd12acf6

    SHA1

    24e84f685ca61dd79d825c043e867b45f332431f

    SHA256

    8448927bd6a6b176396ea2c5be791a10acb63da2242dcb1a7334c62d8070b443

    SHA512

    ba4aa61bc1e4965386c12539fd1da0368f6bab227f9aa35047e614d858785cdbaaffeada43f78e958abac61a98f995965840716acd6547c89a07b2e5e2626e4f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1504c3fd13673607df5eedba50d22eac

    SHA1

    2b825c07e83f41644de627f19870ad13781ba51d

    SHA256

    72560016d58451a7906ce8a488236a88f38732dd027077d9ec31c972aaf22f85

    SHA512

    cd40e696857846105f7e0bf3798e05a7ba3be75c03d42f9b516f765ca19e24cfeba75f7055fe6c722f1debbf0a4586fc042e192bf5c01701eaf8bf476690e71d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ffb49d0f844f0be97639ceba7704242a

    SHA1

    f1ff2d886ee100b6b55d1ea60e54d26359b9de56

    SHA256

    8c5c018198614c78fe4d61b460517db09be4126e7088da9e941d3b4341723748

    SHA512

    528af568063de421515bce0c2b4ce6c38db583348cb6e477c68173a4a78981825439f175345453cc157c7e479bb0ace50013604724b3e4e44be4b9af64405152

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4790f052b1c6e1018cd5f822576f0e14

    SHA1

    9390247454afbc7f9a06b0be353e9757345da1a0

    SHA256

    548851f51a20c4cacb74fffb15dd98eec69f1c4fb9d7967a0cf83775c73f001b

    SHA512

    a74c28770f7d106f258936000b6ce8eeefdafe87c0a64200c63074f7a5242e7e1c153f8a532641156821e34353a68e02b90f4cf579f9244425e0ec2a82360707

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ccb885038c52241ec757f8c73c31b2e3

    SHA1

    7481e844726bc23b663817333389dd4f182448ee

    SHA256

    f21bf391be3f6d89c0d94d53fea72490b3bc935d03c8df8442de2ca9b2e4c031

    SHA512

    19d51159ea6a038e30ab80cf63ec17ee24d372214ccb07ebe0c4449451f84bf407613b947cabbfcf1e556342f0d51e0ecd195e587d9fd15fb40ea3752f7389df

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7375fadcfa4ef851aeb4d864a61a58e3

    SHA1

    38bff547ca1b85f736647be0b28d8b746044d1a0

    SHA256

    a86648474fd03d06ebf2cac5cdb6bb443e495b7870b3370886fec6cd3606ee05

    SHA512

    a7a7d0f324b35d05c609bfe62f2154539e7ecc7baa83d822d9239c218f8c1e6a425aa9dd05e3ac6270d63865ad3a2877c852968240ad47d44d9a6989ee3a975e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4e62b6b78e804837c0b0deeca82e11a7

    SHA1

    ccd4ae1d63b54b80c320da9e8254696b8d37d40d

    SHA256

    cf09e0c4b92726dacf5e20688b4b69ca18fd4ffd9750e5e438baa896a928686e

    SHA512

    9a0cdc468afc8c3fd7588a9fa1135f176557a379f966d772ea6f86a0cbadc0baa47166e24e5120f94ac5a02c95d7c9252a4b13d6f064cbc6da55dd702d4d6773

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1b8db68d175edf88c2e91d2559b4b837

    SHA1

    05c497f7fec0671844bed8cfc0fffdb191db4372

    SHA256

    733ae4a82de213a6b3c37f07488ac677bdbf29b26274d979e29e41381456db57

    SHA512

    11a037bfe442c4e0d24a7df85a33cd62581a700d5b0555c5885df33003d01d5cbf71f4c81cfd6987f2d4d45bd9c842e915c59a2375eed8a636ec4f8672644565

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7320dd33092e1a54956ae99025fb61fb

    SHA1

    70f4ca9e549fd9ae85025485692fed7c1d6265ae

    SHA256

    4149ab7a01bc60a64abefed44c70df163e4a9e8f50ececcacd028d2a8f1f1890

    SHA512

    2d2ddcdfab002690b73b985f55fe8c132111f19081eb44951cf4ce19528fef962088ffdad91f64830a7c057a8aed32253422c827926d479149411ad69002385c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    626ff425ac3c45f6e083c83ccc5cf6f4

    SHA1

    3273f236d90cb3bd9143d4163131f65c4b12860c

    SHA256

    62550a022925e0f1b55ccdccd16cbd8b64e9761227e352c7d80249898390ec00

    SHA512

    f92f1eab942ed1599f2c8f1e06a2afbff5d4b79fd3f2ec13c8e1c32acb9833a216d558651dafaccc656ad3bac491944cf644648a0bf4fe83f5594178c18504ef

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    75f84676887afc181704ad0050fd4576

    SHA1

    8592b1cc9c013f331f06e9ee125f0e6a9c04efb5

    SHA256

    63ee90aaca19f8e4c099cb4c36069d52e26f7e3531ddab3fec8501109341a974

    SHA512

    c31fc8bd0eaceca521452394edad1f43814a98105f63dcb43bd3c81d17aeacfb7520be257e6b559a06ee469fb917d99c90f95f0fa1b4ca149b7b90a47f8cfefb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7a11735e89d4de1bcfb2fc5babeefe48

    SHA1

    ef64127168a73cb2c89298475ae1dec36f52a3db

    SHA256

    d08ac17200e7aeed2268bbb6952dd7177cbe289b14a9e532dc73f7d309281f53

    SHA512

    053d29e0cf36bfc404bcc29c778d1bf430df4898f0e1f029ce3d094a229f6f7016b1d848651c79c555b3fc14a974d35399f1f0d03582c5d441ad8198d7676781

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    782d3eda07135e23af1b834c0346288c

    SHA1

    fc021f1b8f4f1e7148a6bbd457b659f516c22b9f

    SHA256

    1709bf17216862b4a949d2536d19f1056689260826188e87ea3f5fe00a9bb52d

    SHA512

    65ee7d056c783c021d5572ed675928ed028be6be5adad5c0b7c768e6fa43e47c4d0631f4159561e97417b0b9c033ca189dc1b730e2ebdfd313ac51138f092eea

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a575ba4be31a1238486e869ab779d339

    SHA1

    518c6842b07f431ebe804f07d3c6b9ed0e2aa62f

    SHA256

    b78ab58a65a2d8e6e1645a55d1b6488ed1d8498892c41676ec20f4215daab609

    SHA512

    38cc8b91b6dca6ba70720d7da6fb53620184514239937ee84399e8f74830d5412c0b1baa73c3772e01a201025df6e54a51172af5c906d89985be0620c21aee0f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1cf645bb84936db8f9aa9e9a4fb436ae

    SHA1

    3d927e5b2d4877525c2d3a084dac00e6aacdf5e0

    SHA256

    003d9537b6d4125b131f57c9e06aba6525598b55836cc20f450b0a9cd49ba913

    SHA512

    db0396fc93cf6a89a6859d7704c6aa918972e4d97b13bdfba987f73ecd5189d22e65480ec78c4aab34cd1ef42c1297d87cda643129c124d9914ce3ac85acf324

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2e16be97b5f171268c53d9e5b07257d0

    SHA1

    5c740126146596afb98128880235c7dc4e3637f5

    SHA256

    69fdb50ba7065e500ddb8e70f7ca2394911d4e9b454c8ac9eb014156f43f0a36

    SHA512

    dd7900d27aa44e065971a5144f3922540dd42dcebea55e9d76744e8f5253a7c64c198bda203e2ee1e67df0393a6c5e77b1a05aaa5b939f0eba1f4147627dd17e

  • C:\Users\Admin\AppData\Local\Temp\Cab2B36.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Cab2C72.tmp

    Filesize

    67KB

    MD5

    753df6889fd7410a2e9fe333da83a429

    SHA1

    3c425f16e8267186061dd48ac1c77c122962456e

    SHA256

    b42dc237e44cbc9a43400e7d3f9cbd406dbdefd62bfe87328f8663897d69df78

    SHA512

    9d56f79410ad0cf852c74c3ef9454e7ae86e80bdd6ff67773994b48ccac71142bcf5c90635da6a056e1406e81e64674db9584928e867c55b77b59e2851cf6444

  • C:\Users\Admin\AppData\Local\Temp\Tar2C87.tmp

    Filesize

    175KB

    MD5

    dd73cead4b93366cf3465c8cd32e2796

    SHA1

    74546226dfe9ceb8184651e920d1dbfb432b314e

    SHA256

    a6752b7851b591550e4625b832a393aabcc428de18d83e8593cd540f7d7cae22

    SHA512

    ce1bdd595065c94fa528badf4a6a8777893807d6789267612755df818ba6ffe55e4df429710aea29526ee4aa8ef20e25f2f05341da53992157d21ae032c0fb63