Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    117s
  • max time network
    136s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    15/03/2024, 01:33

General

  • Target

    ca23e7bbe1c9e9bdc6a483a80ae519f3.html

  • Size

    3.5MB

  • MD5

    ca23e7bbe1c9e9bdc6a483a80ae519f3

  • SHA1

    808eecb0a5ec2437085ab52d7add5899b607af50

  • SHA256

    dbb32f17db16d49aa16e8527778cbf304c7f6073ff1b6f0e3aed7f101250147a

  • SHA512

    1f3b0b14e733ced33690505894fd5fd0bc54f95c173c8937c4ec5caa4455140229c0cd731ad0f4ac63dbd6c538781e02516eb7ea013d3b5cc71160eabea0e5f4

  • SSDEEP

    12288:jLZhBVKHfVfitmg11tmg1P16bf7axluxOT6Nyv:jvpjte4tT6sv

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\ca23e7bbe1c9e9bdc6a483a80ae519f3.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1540
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1540 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2940

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    410B

    MD5

    dce3459ea5486964d4847d2604bc8821

    SHA1

    6e9842f86f07fcdf6476e926d2fa83921cd31b9e

    SHA256

    a6bdcb9a6ab7fcd948e52e6e5cb603cd641ec176fa8f21224725924369d64c3d

    SHA512

    50eac3e0b0d336487b3830bdec35831860a0642c6734e29eb952da69f7796d16ee070475678a084f9833e1470897aa45deb66676cf662a49f7662642230a69e9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d894109c1fe0f0de0f924930e3df9ebd

    SHA1

    e04111d0fee102ff5f77165e2cb87288e00e8cf0

    SHA256

    e8153d0dec8d4c9f086b1a9fae3b423e964a611f1ac96a4d8a76629cc61d3d46

    SHA512

    f466792a0bc0ebb7d35250f265ed2b748ae3acf76e88beaaa8244187af499394d12359b7932fe9f4d8b0c259202b1b2b0ee3b6f50d49a8aeef6fcf7a63d90a57

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1a4eee76fa8dd093b5450ef611459f6a

    SHA1

    dc2653acf416ac8b3b21c8055029a06fd680e59f

    SHA256

    c3469d989f8d40251fac52f6a7b76524d440ce58f2cabd8d072d0c135c68e36d

    SHA512

    3674d5c036405aec810c8a950746c8712be21efd202fbe850867254196a550334bbe877a231734f9b58bf7658ff966083017c237223cb53e61c6c2b09658c664

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    185e05f306ae176afb80235ef3427454

    SHA1

    cddcb3ad7001a6a4d31f435da6ac93a7e80ccbb9

    SHA256

    609172c9e5bce39da82c6ab3635b973a891227c523e49cbd4c7f815abeea7561

    SHA512

    e81fbfa71ead0f72ff60b99c41212312989638c49fb4299e7facc8766e8fa9b9e909772b128bf61ab04152fabea1565f8cbae0c76b67805812f288eb48419f1e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0af49bdf4df0b50ada4e6bdf571a81ea

    SHA1

    9cda6da50f9fd4d848eba7f77cb533b6cb8f99a7

    SHA256

    6021b935d60004e9ee2e5fbfead7e564c4fc5d8856ee7af0b02c17ecef94490f

    SHA512

    81c335373fd5d64cde609d46ab17df64281f452fefe8ec8fade63d5b708949d9a219ba1f97fabb33e903e33d95fbc7be7e6c4784f2b7d2a3f6f426b147eeaecd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    870863d050963378bbe19ea1497e1160

    SHA1

    7c5c95957f43f6d34669bd0c4df44c925a027002

    SHA256

    68d425e3e243b29a45ae56cc78ab3e1ada37b92dc1ab618804592a9eb32cdb78

    SHA512

    51942872066f6ceb4c08dd83e243bc424011dde33698955285e65731e89c97ffee5fbb3234bffe30d8af588880e0aacd49133ac40ad498a55d9df74e71b4640d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    11e80701f940fe9e8ad981637a235ad4

    SHA1

    a8307336fe797d7a42ce1c2a7eaa7516d4fc0eff

    SHA256

    3156eabddbb7401e2e03110e592cc54c249adde38ba7dffa2263973f6412cbf0

    SHA512

    617cf407f8bc08fe9fb807ff45b323ebf9e7835062c194ea91773fb351e6b223f3fbd3c51d2c6d67f8c64b995cac4c1dbcb562bcb134d0b9f55c45ecba4ad0bd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c5477a163c26d0f9d72e82b2debec707

    SHA1

    91a9bbaa8112b84df5c1ea93c1c15aa4f4eef284

    SHA256

    57942fce7477df478018553bbd91e94f0515831559e3d7948a05ac61c43f332f

    SHA512

    1f8cfa832c14e69aec8910522b32c8c8cc330f6a2702dc754c7d077a67454387ba7f19169f209380635d8611df5add01ddbc37e61bc84bd2d814da83ce962cd9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7ae3fe41a82a4c446181293e78fccf03

    SHA1

    e4e7944e5bc8bd280d522c9009f3f7f1f8e26c38

    SHA256

    e93f3f54d87106e5d49fd78affe028739ef07d2711b814408673589c6d9ef288

    SHA512

    cf31868dd8be2ea32f9d15fb59b0274e2b77b3bbe013f6a0c47d8ff01ab180cdf981c704e222178f5f0613fecb16af2a3b513493b6b2ce387939c1c87b88deef

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f2f63b4b9786d29155d444060db0a5a9

    SHA1

    530b8e35cb8d080e6af8e8d0128b3e96b7bcd85e

    SHA256

    0836a6e35bf373116f7bb7169560d1f1c0b7eba193a5c9f4e8f43cb25d2a9e00

    SHA512

    5790b7fcc1254bccb96d87e2cf826e2a9fafc49be05be9e184ded5e5c127cc428db6c759bd631d6ca0f7ddb7c949d9d5737ab0ecc1acff799bb374751f8f6247

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    72a805b0c5812d86bf95d92bfb29134e

    SHA1

    e6663096a253c03f43b475884364af2de78a7204

    SHA256

    61d53edf2055def63ba7f489e530d6abd6bec418c638a55978c55435447bdfe8

    SHA512

    7e87a3abe16f74ff882180a471f861c3ec2b406ae1a41a6fbd889bacd8ea3bd2d8fd50fa7dac77f86c9c8fc7f28161297d254e54097bbff2e76610e29a4ff27e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3dd0b189289d485734a73234a5fbc935

    SHA1

    5d990397975b023f8eb15e2f145dfe888b5478b3

    SHA256

    f953dfc087868d1e293ec266fe6565e3997551870d43beb7b7f986455133fad8

    SHA512

    d73f533ddb18edf50bd760e311d963e3429cd7eb1bceecd804f27d879b6c3a41bec9408504a219f396a5517d8f2d472f5dc18e0c818e4a5209f30cff25ca664d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f38b239b96badd69701fdf5841e78ea6

    SHA1

    08df7271aa33fdb73df825b43f9aa46aa9c41307

    SHA256

    d61e23ac6b4087156d28d85c815f7b00cf5cc4a6702d36202ef925765a9d80da

    SHA512

    81474baebf5fb1cace03bbd018b4686622b43c3a21765896dfa6442f78f4f7a4cd897dd16390b94e7dc4947d8e7721412064e9cdfad943958574f900fa307338

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    041021c1c3b9f60c80011a9f206b1db5

    SHA1

    90f80ecbe7db42ca3476bb7ae377734406da22ce

    SHA256

    12f5305537a3933fe8e278dffadf3c864e8b350658bb6d02afe5d2be5d0cc507

    SHA512

    03e6a8d6433e91ba7ea10e35c8a999665418516b7959a2a2e49c5de5e5c21a8bf6df986ff368ef3bbc6d147b18b80ea74ea32b0e33c7c5949e1f12d260132c65

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e31ec5a5caf865e86166772ec95d5a57

    SHA1

    809b70fcd26c2f1ea59bdd1c0afe77696833b480

    SHA256

    8862101bf49a73e2e00ce3d62eeaf440417fb7d1bcd88eb294b24300246618bd

    SHA512

    bc70f7e5595d6429699c532baf0153080bab6465e0d384e0866b004ec219b3242ea5866e31ef816fa700a0ee871f1722f6bae77652eae5edfc3c3cc42768a973

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9258051a9482e5e6d1e13c5adf8e41dc

    SHA1

    0c8a21485fa095264300db03c659912c72aaa9eb

    SHA256

    0c1f3edb8adf4a5003c910095ecfef531d7e529ad1ccb75b51b62ab99ea3d124

    SHA512

    39570b812bc8933c787d3e2ef34e572de30e6035ec360a041dddb6ee9c7e2db51c9b56438e5140f2944cac9c1cf533e5983cc25e48aff69b67fba0c3619f502a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    36d90c0753f95f5cbf3ad847fe7bd0c8

    SHA1

    cf922b60652938c957a4a918a63d66eaa6393273

    SHA256

    548e465fb46a691029e6e4d1050c2568a086fe754e8591529572aca7560a2e8b

    SHA512

    748e0c38be75b42ab772cc76a28ee842094845d4a2496042087af158a8ddaa9c6192a8275de594577db025a59cb3e11ab5501ce7ab34bad0ea6b1d4fe6e42811

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    48d0ec74cf5c686cce385263e2859c6a

    SHA1

    0ff5ab786fc53f7110da85f6b3fab21e07651209

    SHA256

    33a840d8fb05332c360c69479a280be39034edf52227dedf910692aa71f0beb5

    SHA512

    d2f4c3adf3f1fdda55b6c8def408f9925120fedf6aa402546b19b3b506724174fc51c2d03fdefa916ce028dfca636a58dcfb5ae27433f88977df187b78d38a1c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6668ec120634461ed8fd6ded656ff361

    SHA1

    2c9322aefc1c248d20fa83c099bccadb5185e5f8

    SHA256

    9b2e378e22915ae735685782d878257789d7564b16dcf67cef9bc50a70596a0d

    SHA512

    4c4e1a48f9b66d927e0ecf68b23a6e4034a8887d6c02b889c1c5d08b25cd5938032c3053647cf9b728398f0cef17f6f179a3171d212a53e5de79c480e101015f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1476ccdf40491f45503fdfc8b9b8f005

    SHA1

    1da14d0921464529172616ca9cf80e257dfb2f26

    SHA256

    3b60d8caf81ec7b38dec4a387714c795ee72c4f05e15d1290f69cca6cc2659ec

    SHA512

    26abe9db08a1899a850ad57ff216dac40dab391a713db84ae7da776d4f912fcb549cbf30d4aa0460cb6d9230cb0b31da6f223512540635728171632d63032749

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    90e1f1e27997b96062df697e85d4a7bf

    SHA1

    da8fabad5c492710c49f4cab8243e89b36cb0d35

    SHA256

    86faff5239c1f4fd3b723a6587e809f4b5cdc737012d1ae3593169cb4dc3971f

    SHA512

    51090f76f1623db78fc2b29e7aebde87d073107adbf2bdc31cbb7335c358bde0a0870c3efde61b7b328e01b8a087e0777d20c703783c5a14c016d1cbdb159fc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    37da2f8ebdff714b4e25b95255037f0a

    SHA1

    e249e41cbf8453a60e547c2ed2b68deb23dc83bb

    SHA256

    b93d47fc6ed70b44d508cd507c14164ff5a1f59428d6638dcbd935ed8b8e7cb6

    SHA512

    1081032e968af71d4c5ecfc1ff3dd5b8100d2f46cd172f6961174265e5ad2a604bc61823c5a199a9080fff7c85c6567b83874158a35e5488b5ef035d88398ff3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b5ac29aee3edb2c18adc85eccfd17fcb

    SHA1

    1435a03aeb4aebe4efe5f970a48a2d3eb9caddfb

    SHA256

    f6394310f6b82b3b27cf9eb4d8e8ed04486919efca5e1e8434891ff7ee760908

    SHA512

    fdc4891be6471330b1b6d14d6fa0b44a3639aa5508f59010e9db779c42d55f1099fd481a64ded6ee5e5602d325ab3d2049daba53c55c2732779fdef02581348c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4307f657f32659f5a6dc7080765bd577

    SHA1

    ba5eedfaa195343f3798b8f3d26be012584645e5

    SHA256

    d5a38f210f85299e57142d3a8c53a44044093622bb54f8e17b204e5e99740961

    SHA512

    707167629ceb1b5bfa443ab231bb473885281071564c98c0e69244d4a0efc999685fe0c432c83e61e7acfc2dc355c263b54b10d0e656f7cff011c543ee4ed65a

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5DKX8QD5\jquery.min[1].js

    Filesize

    83KB

    MD5

    2f6b11a7e914718e0290410e85366fe9

    SHA1

    69bb69e25ca7d5ef0935317584e6153f3fd9a88c

    SHA256

    05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e

    SHA512

    0d40bccaa59fedecf7243d63b33c42592541d0330fefc78ec81a4c6b9689922d5b211011ca4be23ae22621cce4c658f52a1552c92d7ac3615241eb640f8514db

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\L9PN2QMY\beacon.min[1].js

    Filesize

    19KB

    MD5

    dd1d068fdb5fe90b6c05a5b3940e088c

    SHA1

    0d96f9df8772633a9df4c81cf323a4ef8998ba59

    SHA256

    6153d13804862b0fc1c016cf1129f34cb7c6185f2cf4bf1a3a862eecdab50101

    SHA512

    7aea051a8c2195a2ea5ec3d6438f2a4a4052085b370cf4728b056edc58d1f7a70c3f1f85afe82959184869f707c2ac02a964b8d9166122e74ebc423e0a47fa30

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\U8A9A2DI\jquery-3.1.1.min[1].js

    Filesize

    84KB

    MD5

    e071abda8fe61194711cfc2ab99fe104

    SHA1

    f647a6d37dc4ca055ced3cf64bbc1f490070acba

    SHA256

    85556761a8800d14ced8fcd41a6b8b26bf012d44a318866c0d81a62092efd9bf

    SHA512

    53a2b560b20551672fbb0e6e72632d4fd1c7e2dd2ecf7337ebaaab179cb8be7c87e9d803ce7765706bc7fcbcf993c34587cd1237de5a279aea19911d69067b65

  • C:\Users\Admin\AppData\Local\Temp\Cab7467.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Cab75A3.tmp

    Filesize

    67KB

    MD5

    753df6889fd7410a2e9fe333da83a429

    SHA1

    3c425f16e8267186061dd48ac1c77c122962456e

    SHA256

    b42dc237e44cbc9a43400e7d3f9cbd406dbdefd62bfe87328f8663897d69df78

    SHA512

    9d56f79410ad0cf852c74c3ef9454e7ae86e80bdd6ff67773994b48ccac71142bcf5c90635da6a056e1406e81e64674db9584928e867c55b77b59e2851cf6444

  • C:\Users\Admin\AppData\Local\Temp\Tar747A.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06

  • C:\Users\Admin\AppData\Local\Temp\Tar75E6.tmp

    Filesize

    175KB

    MD5

    dd73cead4b93366cf3465c8cd32e2796

    SHA1

    74546226dfe9ceb8184651e920d1dbfb432b314e

    SHA256

    a6752b7851b591550e4625b832a393aabcc428de18d83e8593cd540f7d7cae22

    SHA512

    ce1bdd595065c94fa528badf4a6a8777893807d6789267612755df818ba6ffe55e4df429710aea29526ee4aa8ef20e25f2f05341da53992157d21ae032c0fb63