Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    117s
  • max time network
    134s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    14/03/2024, 14:19

General

  • Target

    c8d3bf0cadf1c632914f7977a2a7b8c0.html

  • Size

    432B

  • MD5

    c8d3bf0cadf1c632914f7977a2a7b8c0

  • SHA1

    108cb5cf52c68a634db6933f04d35fec88705f26

  • SHA256

    f35e21b543cdad4b21408918207886d391609b8c55dded9476564b270faff68f

  • SHA512

    6ecc7fef274cd52edd2ec74facea907490fa214494694e364806f08275c3b92fabfedf96c2d5d9ea85ac2909b2988365b08cf2badac0ef3e8c6351b2b20e4b0a

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 46 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\c8d3bf0cadf1c632914f7977a2a7b8c0.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:3028
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:3028 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2356

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    67KB

    MD5

    753df6889fd7410a2e9fe333da83a429

    SHA1

    3c425f16e8267186061dd48ac1c77c122962456e

    SHA256

    b42dc237e44cbc9a43400e7d3f9cbd406dbdefd62bfe87328f8663897d69df78

    SHA512

    9d56f79410ad0cf852c74c3ef9454e7ae86e80bdd6ff67773994b48ccac71142bcf5c90635da6a056e1406e81e64674db9584928e867c55b77b59e2851cf6444

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    21a420c344294e0892e976048f5f96b6

    SHA1

    224d8ef4f2aa4c232af24fd0a180a0b1f9bbe767

    SHA256

    2b11353037ad625ca099cdca886cf033025e68f4a1074899616348b5246c360c

    SHA512

    96105fd7a4d725cced0db740ff46ad22c322b75997dfdeab4f5881b5ad7afdd4e87d7ab9bd22a24ed2d951fce510fa45515e9b58a71056c3a8cfdcc80d9aea4a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8ed56688f860e6d2115d4b34ec794a92

    SHA1

    feed63bcd21112e016a0263e4bfd48ba0a491164

    SHA256

    7c750e1f0e419011216530abe48009af7fd8e09ca6b5d8b0baedbc0f60bf5225

    SHA512

    3f3a6d2c9bbb5070635a5fe2bfbd4d34b751c599a00255dcaa0315e27ed0401b90f06137553951d3d06cf4955bc988c38ea5e4dfa1e98ce56d62c23fd3f76bc6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ed4a413c376bd6c9db0132c005385505

    SHA1

    3104e8a8238cbee14136757fda873dafc065e801

    SHA256

    f53c56cb02a54a4f80700b7ae25c9006083542fe5401b4ae54daf2518991a9e3

    SHA512

    e7d903a0f8cd55d449c2dd1d23cc3a25f77468b9bcb0f937b67ab73dca01af22663b3b251cad8e2eb5eb0a573683d1b7ac5d405c5c277676092b9dff623b487c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2864487da7c6b06332ceac6a1be99c5b

    SHA1

    d1710a0c373313e6b1bd5a96f65b4507a5ccabd8

    SHA256

    ef537201cf47ce1dfc6caa7fa12461d5244740e74fa5689874a3fa862c1d13a8

    SHA512

    e012fd2469fd52b5bc007bae1f52f8268b08da510a4121cd39274b708f962e3a0dc3039cbb55344aa7522a3afcdf5346d7e9484137d8e874db05ddbad45e1d7a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3bbff7db960aae8d84f416b98e759af9

    SHA1

    e54e909c0dcbe84ccd538262826c4e3fac1d7fa6

    SHA256

    0bd6dcc30cf7c7cd281fc6b50cfa0528d2a2f9e70cc167999316dc76fc0f3734

    SHA512

    f28e9c92fc83eb4311b564f5339054ae5a038f9452ab9166c8aec321b6d2b7202bdce476023c21a9dee6b41f4c91d4a9903e81da700523a34dea3306e1b86732

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    dfa75066fe85f51b35f19808d458adaa

    SHA1

    48012bad9bb57b8c8d3bec0937f82db3889b2512

    SHA256

    e8140bd5ab081d688f9caa3dd2e786227440854695aa13a36dc0bead9d5d34ae

    SHA512

    c3a44824a566752cc15d6cd4c61f90fb567eaefa2ce545cb9aeab7c129ccd82fc503bfc95682139f3fe4747db04fd0dea9964fcebf61b0acd26b12fffc19e0c3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2fa5d1de986a9a5517ae2800d7d45617

    SHA1

    bc2a20850e13146387298b7c9336fcc19c2c2351

    SHA256

    d726fdffce94d80a1e2df828ea1450a87b0f64169e7bf1689915f215e5ff53fa

    SHA512

    bc5f7af7486deb5fa1bc9744881877e3260361fc3090a124280b378d6b115914354f86ef5e545cb333b9786c3b7692173df7d2280a165ff1aac8b61ec98bd781

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c1cb66a67ccd90c4e2c5d6b33ffe9e67

    SHA1

    f540c7d2cf06dd69c1a2c2864e3274c1a9a9f5e9

    SHA256

    857281bd17c2fa5b42f03663ef789a6e1e6bd1a331efb903ed4df488c8212268

    SHA512

    2ccbe379d84a7f41125078a997be49a93106f7a14465870acbff66864826d147ce16ef3773ea1f3fa7cacce87a0083011655a37323f666eff41286dd5068812e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a4c4ddef73f977120d4e38668f3c8a1e

    SHA1

    172b181d9d4948bc6c9f474fec109c5c9d4cc5bc

    SHA256

    c245e045080e85a215ea6488b6a3b533414aa6aa6f20976a703ab64e72a03db4

    SHA512

    7d124d40439656515570a851032eda7577d8434d0210a7b8f49d588b23c0b0e4aa15c0c82c24642884658d9e6871482bb9721fddef5acef7f5d84ea2591e9d72

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c57e1ac08ba79b60f8df72ad5184d693

    SHA1

    717198d93d0627612a4e9d114088059501dc38ef

    SHA256

    c4f1ba118311ab67e2bc1e2ebcd7d0b1284bdb4346f9d135968f56a469712020

    SHA512

    9fc6be74443cc1e70ece3ac0fca2db1b20b51884dc43e68b8e045d995941787663af31eafdeae7e2ecd9b6ad8ff865bbaa854411277cd30b673675628169875a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b9f5a1dc8215a640ec143e85384e6ec6

    SHA1

    832c365c996a08601d76a615355e119561dca2bc

    SHA256

    1640ab5dbbbf5bbbfc54990b8c2728ea6f5f9eaf598cb86b02f7974260015572

    SHA512

    689a0f744cd73b15f9fbe393732dbebdb039ae8d9e7caef734e0dbd2109939159712fd85324b58e2e8a0095a4f39722c9752a6d3f5f12bfac6eb2bad531387a2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    41a8769a6aa8840b6b5a0e9c2bb5f965

    SHA1

    e33dc14951a2ed7e9c30c172c30e0118eb5f8ef9

    SHA256

    8b2066505c68257cff9cdf09f9de5e02b6288c7aef04bc7633c5b364365e3d45

    SHA512

    d22e9b95f9f417c993e938bd8f30839e8d1a60630e5d55611ea5182454d42486a251f21cf3979b1dcb27c78e32468c48fe6fe723d8a4fa1349754e7f41f26061

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3fbc32e7de619d8288cf6ca438974f2a

    SHA1

    e6e5f72ed843ce1b3112e3180715926159aa42f7

    SHA256

    4af44ce41a91ffae30431ec6cf92cadc3013b523e97452fd9d9f16613737d3bf

    SHA512

    e9422c4e627d7db4575057a1ecf8443a74dd53a40b439b13f4e0caacd3e2be35728319c05d958cba3291be684d1e3ae5454436ae5c39e40fdd2ba87f46ea63d9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3de2a56b44341115abdc2769f73a58ba

    SHA1

    e271e3ce7a1966de64444bb92b2c49c4b8a27650

    SHA256

    6269733270e3db14ba3022507b17ef2342cd4d138799aa99b65a0f0e28c5cf65

    SHA512

    39e7b9ef4b71933248557425aaf2de35fa1b3047ad487d53a74295110b77dc4e9fc3c612576f26f70bad99181a8b8e72c337b57ad047da86bd0791dcdd40d9be

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    20f9ed9a735311ed041ebef13169f961

    SHA1

    b4df29b4df3b8d01b6166b12771e068b4fd5434c

    SHA256

    730c5bd3a074d4197e871e9abbdc203425017188744a9d95535e245e772711be

    SHA512

    0acbe8ac6700e1c2ef3d4b077ba6ffb04d0164ed4aae96ac5ac5fedfeae05dc8f9c0d9d96b1506fc6dafbb4351242f1799a54e18ab72d19e5ea80be2928121f6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5fedde105787a10c0d872e0b9a581345

    SHA1

    dc4bdf84c9a084dd3cfa15fdf1b3a364678b0b43

    SHA256

    8f56ef7dd002fc0563f41076dc500a50a8e777ce9e9dfe0be512d2c9d6340b51

    SHA512

    33d664a03b0dc2c7e466e434a9e21104ba448e8bc0b46267bac0259487613714071970ca6bbc91a6c6e3201b852e9666024f86ab4f3e8b71aeda35e4a8a3353a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3112fe4c53f5231c03fdf23b2624a323

    SHA1

    6253efb4b4ecab17ea7d08c6250bdb49a361c861

    SHA256

    8771de89dc7a4a403c5d54b1a2da05410b8c35132e45524bec4fe27fa876fc8c

    SHA512

    ef065643363594043a0bff9fa7b2b34c9f994b9727600c955163057fba075a31395094789689dca33da292dde2ff00d947e9e498b187d452f974b9ada51dbf43

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    431393e055fa29b19f3b2acf43eb7b0d

    SHA1

    791810f45da58eb9163fae28e4120cf8a95086d2

    SHA256

    8ed866ece37503382c67b1e4c8f5ce17e4c49aefaee9ca141d89eecfc662711b

    SHA512

    3c6bbeab45d481e520d7ce345d30ee86b561a9a5add5ad52b938f6b826729dac6661bbb6b3dc0abcbd4a6a101a121b5be4d7e38527643e405ed57b7acb35b708

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4fab990d893fa08ca6ee975c3ab155d9

    SHA1

    20da57414156e79d434b804685623d7a1f92c7bb

    SHA256

    49345d27f1eaa2f6c5e8898429ca6a108a0a631faeddb2e25063e12b4a18f13b

    SHA512

    05201cdda50408464c2b11806f85ecada19aa7c4feea7dcdf59f7fc21c6e1faf23a092193d4a33ba6fb85be43dcf58514b8dba25263ddf76e1726c2c382cfe8f

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\2RTI5Y01\zabedreb[1].xml

    Filesize

    13B

    MD5

    c1ddea3ef6bbef3e7060a1a9ad89e4c5

    SHA1

    35e3224fcbd3e1af306f2b6a2c6bbea9b0867966

    SHA256

    b71e4d17274636b97179ba2d97c742735b6510eb54f22893d3a2daff2ceb28db

    SHA512

    6be8cec7c862afae5b37aa32dc5bb45912881a3276606da41bf808a4ef92c318b355e616bf45a257b995520d72b7c08752c0be445dceade5cf79f73480910fed

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\imagestore\3pl5scb\imagestore.dat

    Filesize

    1KB

    MD5

    06bf61715686879881c0c125707f9e5f

    SHA1

    95038defccd7622e3c7d8cd27364c78f24a544b2

    SHA256

    0860eaafcd43429384a9981cc986ebed279ab79e1b9eaa93e46e08d321b93a4d

    SHA512

    7c6e3a1126aa9d6ea9a0dd39f744bf80e0d61d177062cfe8c1ca20dd6b22a75e776a7cd01d8523024599daa5f4f7d8d7c49b86642e64c63bce33e01ba2af9cba

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\imagestore\3pl5scb\imagestore.dat

    Filesize

    2KB

    MD5

    e3bb1bd77266598147ffec5b094d45b4

    SHA1

    3816316883cfd7c049cbc22c8f29c7f8986748e6

    SHA256

    05a1d4f9290d0a524fb14d16fe269e9aeb2349ae59629a0ef8fd181477a9a0e8

    SHA512

    f19228ba20c791564e3a14025504da083f6fba6270ea724375dec162c4506f810770159a1cf2c910453d6f2ec622f6b90034621b6d344347cf1c6b452b2cff2f

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\4JZQ5QLK\favicon[2].ico

    Filesize

    1KB

    MD5

    668ba1a9fa1890ba16cb8adc28d3dad8

    SHA1

    5e35223b2541265114eaf61b9da2556c812fea17

    SHA256

    7746cf1b553433822522f2dc432f55fe64eee1f1cf823ef6adfde02e58e1d7e2

    SHA512

    212aa3e6ea6a2dd1abc10d4a96b7be179e0e490da187641ae3be7b7c0c30b7272d8d5b37b1c6ca5c75732dfb35a8ee30fa97cdb35704b97eeee11a2163e53664

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\9ZQLLOZN\favicon[1].ico

    Filesize

    1KB

    MD5

    91abe01116ab422c598e9c8af72cf4da

    SHA1

    0f2815fe8e067d48537ad168225ab4674271fa27

    SHA256

    b1d7aef06456fe7431124129a28f0138bb5fccfa4f4161e3087de23c005e5edc

    SHA512

    a4d5b20c3014153b6b382c43404917bd2cb5bd2a59bb1e981f5a19eb7dbdec185ace288e9700428d24e5ac623e45d04905e706f0c45a1642b1aa6c091213c23c

  • C:\Users\Admin\AppData\Local\Temp\Cab25CB.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar27E4.tmp

    Filesize

    175KB

    MD5

    dd73cead4b93366cf3465c8cd32e2796

    SHA1

    74546226dfe9ceb8184651e920d1dbfb432b314e

    SHA256

    a6752b7851b591550e4625b832a393aabcc428de18d83e8593cd540f7d7cae22

    SHA512

    ce1bdd595065c94fa528badf4a6a8777893807d6789267612755df818ba6ffe55e4df429710aea29526ee4aa8ef20e25f2f05341da53992157d21ae032c0fb63