Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    121s
  • max time network
    132s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    15/03/2024, 04:43

General

  • Target

    ca8363b0d30578641322d72a48e45261.html

  • Size

    432B

  • MD5

    ca8363b0d30578641322d72a48e45261

  • SHA1

    2df1848226d86e296a676a8394f7b0f9b1519410

  • SHA256

    fc42aff1e43e1e9b1009c2a2a847b9c81bfbcd9a65453a0014013ab61633ef35

  • SHA512

    ba7d5ed71884cb6abc83832b8c2ff3dd422be0c919c4a8d939d9e2c37a45fb5db77f7b1400e7db7c38c855bdf7049bae5c4367ef9691e60b1390365e75c3c611

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 46 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\ca8363b0d30578641322d72a48e45261.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2380
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2380 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2252

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    67KB

    MD5

    753df6889fd7410a2e9fe333da83a429

    SHA1

    3c425f16e8267186061dd48ac1c77c122962456e

    SHA256

    b42dc237e44cbc9a43400e7d3f9cbd406dbdefd62bfe87328f8663897d69df78

    SHA512

    9d56f79410ad0cf852c74c3ef9454e7ae86e80bdd6ff67773994b48ccac71142bcf5c90635da6a056e1406e81e64674db9584928e867c55b77b59e2851cf6444

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4b36b9ff3d4b221fb1f4d0ceb96379ea

    SHA1

    b3518b8fcc597392bc66e7aed32d5ed7dd56245c

    SHA256

    173775501dd0bb57e2f9a0a6d2086dc7968d8a685c5d949811d4b3fc072913de

    SHA512

    6111b5dba9e98c7000afce1cde981d4fdbf2feea79c934064e5afd32d9d1ba2e5c6ba7cc17f71d2c09d155551959cb340f9ab97e8962ad7edc907c3084128f6e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7fffa36b17d263a769376b36c9696fdc

    SHA1

    bf3a4766616ef342a29160299134ef6032e678ee

    SHA256

    97e9dcd2c9f8020e3b511da578cb16e21f1e43ef6b0698eb22b3ffa74afc77ef

    SHA512

    4283a05f871ba33ffa9e8b2e51f75a9ef4bc8571c43300781ab6e04bd3d78b6ff7922a9ac1f03e2d186c1aa98ea27d733ce7414e396bfda0e09ba8e9e373d889

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d27732b89bbf6817d0611531d1fd07c4

    SHA1

    e69d45b2859c8b59736291ae7cde4fec3126dfa9

    SHA256

    73d1ae72274df9b4ca4560a481af0f51e1f68e7aef7997b06bac395a92a0bb81

    SHA512

    2812d972b31a2c395d92a6012fcccd2fa964b8a717011112fd97c53c7e4fc0f58888a48f6027c7b50ed75283b7c2fc7aedec5a9f7b84d72ca0e7ae870d43f37f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    aed8a499c0224331700422c1c1384c9e

    SHA1

    abfabcd1602d23275af183a18846d54a66edbfe0

    SHA256

    c12c73ceefea26652e61998c6f020588cfe2dff7661900d15c3703bccdb8b101

    SHA512

    cfd04c7a401cc7060bbb44d998b0fab3f700d7d118e4b4e9bb530243c372ba851a31582eaa9ab106932724ef0dfdb44ed141531cbf2e40a5a03b8f2bd344f994

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0103afc7a3aae773f38fdb0d5ed7acf4

    SHA1

    2fd9bc1bd2b6264b105ec1baf9f27aafb86016b7

    SHA256

    241745d730bb5d612e7ad59c2003f55160af1b608f1dc665b2193268f6fa5349

    SHA512

    44ed96d76d540f3b19d9f712534f6dca28a0178c4cdd21c58afa641d7ce8fa2b2bf82b8fc9ebda7f907922d8298abc8d37e9e6ec1652e513b2728fe71a570873

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7dd3f1d87b5b1be2016ef1ca9d8f40df

    SHA1

    16ca0ae11b882a99c1bb6aeb30314ee59317c98d

    SHA256

    ffabe19a350d2b4ddc39df71aa528acc748ca0e3bf9e401475f461895fa5e6b5

    SHA512

    46f5b3dbcc9f30812d060bc50991738b2e0769749b8a786d5cc03c735ea6f556895cc52946419f3c5562346a21aaed9fa09a7cd0c5fa38ae7515b02f50b6b529

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7b116045cd1030247f24a013ff5858e9

    SHA1

    3f1144d464dcc3407762666108728c80f094b6e8

    SHA256

    a26a55fa12c9469a827dbe2526db6dea7f370a2241531277cdb15f195fc294b9

    SHA512

    af4c2872dd3f1768e8825756fd0226ac0b16cc761babe72bf7f41f01d4e0c5c60586a5c1b48b7fb558e339871107e09f19940ada2142e564ea681b5c4e358d0b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    dbfe23853712f529b20fc7ae73e42953

    SHA1

    caaf6883737e15c30cd5125ce7472afe2ffacba4

    SHA256

    ebf13505dee683ef30aab3ab085f3306d875be84c224f3b937f9f2f503bede67

    SHA512

    948a5e481f5bcda7b402b5210cdccbd401f82958e10b6afca16a0e8ca1f7f64bf95b76e2bb58d070eda9be3150a9b2aa5429a6a6331582bdefebbafe74c120c3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    db95cfbef5f7c94dca711b188a2223d1

    SHA1

    575ec44c164aa104a46bdf42f7725f062bf8cb09

    SHA256

    8ab1930fcf802bd493d370a35c46710c8f36f8f3a3b7f26359b5eb8e800abfb4

    SHA512

    870f12c2248545e34f676d67d7ee57d8f1eb910f9c611c862629613ac093add2c2353bdca5cc49d9d8844708926e666a6bbfba88896dde69f653af5558b3e74e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d27fc696fef2fed9102e770e9d871771

    SHA1

    ce6ca58c8ce6744954af856832862e4bdf0abc63

    SHA256

    2a4cee0dfad64a967953e6a5883ebdeb42f19d7d06314d67d97f242b62751125

    SHA512

    d986fde43441b2773506271a22afbf9e06c85a9316b39d90c12eecedd87c82509e05aba682622bfeb56c266ea5a35ba38df3f99f2468c2154e4e7b7089732d61

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9170b732dc332678073c0126fa876218

    SHA1

    9e0adece77f47fbb061ed5e064152c15b150bf1a

    SHA256

    0c3f050f697e56ff24a7a28b1bfbbbec35c7b2411c8e9a940724092bafdc02d4

    SHA512

    2a5a63a169a5eefa73e1f08e65bdfe462ea875524938e8c3bc12851cbcdc6678a5dcae0806652d0d47e460301253f0f2dfda49d23fd3da7f7dd069d69169628c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    54acea44251dd55b99388c5969933655

    SHA1

    88d49745ad65e9804e54e90ffd8bf77b692be054

    SHA256

    c7eca5b4c85f1c9d360387359df6d492f5e55c774eaed20373a6b66b0c98e241

    SHA512

    5aabf37852d936bed53e0c46bf3c60cd9e36d719a72910c77e639ccf365f10d84fb39114cf959811ddddb6bf974bc3e52e4422ebc454ae928a5fa6f1985b11ab

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    60c92a4eab9ca7e2c65d075504de9ff9

    SHA1

    7a00f20237b6c8f78a54b91aeab001a19034cd29

    SHA256

    681be6ced48314e3161731519337281c0b46943dd23226751453fbabb9d727fb

    SHA512

    a569d22693226bbf2579c38330f0456fff3304d4747e419c6dab7c81c29f7f2c9071ed1c7e67e4b5e0fc68d6b59ce8394f2fc2d840b2abf7aad36a663b453001

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    54b7cc38f86fae5c822d364ad5e9d702

    SHA1

    e1f951c5922b1c7518100dd921b3865382ca3f30

    SHA256

    05da2fe5b0b98a2d9cec9758ed483a61c832ae6ddc7955251d570c8cd07f98ea

    SHA512

    fa2c95b00e9b3c7b4c58cc2d3fcbcecfae4115ad340d37dfedd34105a99d3907b9c64d8a585bb9ecb98800eaf00dfadcda95b789b8136931c2cbf227760a4ab5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    dfdd77015d63c04e9fc8f2592c60cad3

    SHA1

    944e1f3a32c7eb3eadef9e911b3258f961dc2168

    SHA256

    b55caaca3a1ae84b7795d70cfe7bba07f5e86f9fd1a8919c7223003ae5aff1a2

    SHA512

    d33a16c673a2825e4f7320188324b8e9b1ac7c0e54aa8c94aee52f7ea00e4b16908e412c79da3a81676b905bd9903acb3c5807f7ca4fee7d9333a1ab6f380218

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    acc94ac01d7ba0bee26ae0c54b6199ba

    SHA1

    d793cd2a853ec2d79fc680df615fb47b37765d3a

    SHA256

    2e3c1e971a85e7b85679efc4a8782e149b2f5e840a5370e409845061488401d7

    SHA512

    0c71f22083c1ba6430b43811acbfd23213f141bb96bcfd32cabfb9db5b2c8ac0dd35d3497b7731c41605b2337fb73ccaf309e43aa451b7592c4b799f3a45d338

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    52f89760aae7100ccc10aaf802fcd093

    SHA1

    7e19dcee88f578810a36a697c54c3653c1bc2e9f

    SHA256

    575dbe6bad6ccbae2be2596604ac2b21cc5c6dcdca72074ca28f5e35f3cc2387

    SHA512

    6cd0754f910d8834e6a43900403d9c3722a5d0125a33930971ac2af2ed5d25d6a60697da38bdab6ef4d22284a1a128a70a1d78b898ea2f7f81df938914be65b3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7a4e31b745953b95c6d259e06045d0a4

    SHA1

    8d2e6710578662df2126a15cb6fa60f54d8148b1

    SHA256

    e13b3f3fe25cd25aeace6284607db0626129d30f964124484ab7262d01717d5e

    SHA512

    05307b90daee558877cf1fed6b9c5af75d38394de34a68df6006ce8e86bf29e4d930995d8c4972976e4bf473443f01c9d35ced53afd430b4c566d3e347c1983e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e7999aca27c7e8ebb880d9778b900b93

    SHA1

    47a3259351ebd0a3135e633f6dd168a6c461951c

    SHA256

    1d191569143e8e0250d0819b4b3a7d3178b64fb70c23d45412ab35da2dec9376

    SHA512

    310f61da96292b81c88f01b5199e2c25763df59ac4c84fdbc92064a16ba84e59c400386a6f8ea6dc8af7f7af181cf3437a6b2b5c5d64594e0cb6b170337e6816

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\ZVEU552U\ovussaul[1].xml

    Filesize

    13B

    MD5

    c1ddea3ef6bbef3e7060a1a9ad89e4c5

    SHA1

    35e3224fcbd3e1af306f2b6a2c6bbea9b0867966

    SHA256

    b71e4d17274636b97179ba2d97c742735b6510eb54f22893d3a2daff2ceb28db

    SHA512

    6be8cec7c862afae5b37aa32dc5bb45912881a3276606da41bf808a4ef92c318b355e616bf45a257b995520d72b7c08752c0be445dceade5cf79f73480910fed

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\imagestore\sxsuh4u\imagestore.dat

    Filesize

    1KB

    MD5

    716f885c153506b91962c768f9a344f6

    SHA1

    c8877b099b46505acdf9470f8d04d8743e56b545

    SHA256

    48a252eb3224fd70e9f007f7d3aa3e81a9c9ee28de16d8136435c244945c3450

    SHA512

    ca7c4310c43fdec797b079b3a857330d805b6e2ac3fd9d7a659d7de7cd37b8a69cd90d9d04c9bb18bd38f72d074719f46963b6529f5b0903100bf16ebf08d208

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\imagestore\sxsuh4u\imagestore.dat

    Filesize

    2KB

    MD5

    49bc620b7360423fd9d112f8cefc2ef1

    SHA1

    060003943cacd189e0156f94d9688c6c8c18a348

    SHA256

    d7c3c627ce76790b8e108b9a21a54a68dcd46eed14dbe16c58fcbb97880e2631

    SHA512

    dc54cc04ec3c4b23a10f3afd19790a9c30b17900943b6c3305d2eee3d6db9e728a7def7626955a69e92861dd9ecec277ab08ae2e8d348812741730237cff342f

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5OCCPTL4\favicon[2].ico

    Filesize

    1KB

    MD5

    668ba1a9fa1890ba16cb8adc28d3dad8

    SHA1

    5e35223b2541265114eaf61b9da2556c812fea17

    SHA256

    7746cf1b553433822522f2dc432f55fe64eee1f1cf823ef6adfde02e58e1d7e2

    SHA512

    212aa3e6ea6a2dd1abc10d4a96b7be179e0e490da187641ae3be7b7c0c30b7272d8d5b37b1c6ca5c75732dfb35a8ee30fa97cdb35704b97eeee11a2163e53664

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\EDQW9R5V\favicon[1].ico

    Filesize

    1KB

    MD5

    91abe01116ab422c598e9c8af72cf4da

    SHA1

    0f2815fe8e067d48537ad168225ab4674271fa27

    SHA256

    b1d7aef06456fe7431124129a28f0138bb5fccfa4f4161e3087de23c005e5edc

    SHA512

    a4d5b20c3014153b6b382c43404917bd2cb5bd2a59bb1e981f5a19eb7dbdec185ace288e9700428d24e5ac623e45d04905e706f0c45a1642b1aa6c091213c23c

  • C:\Users\Admin\AppData\Local\Temp\Cab1AA4.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar1D0B.tmp

    Filesize

    175KB

    MD5

    dd73cead4b93366cf3465c8cd32e2796

    SHA1

    74546226dfe9ceb8184651e920d1dbfb432b314e

    SHA256

    a6752b7851b591550e4625b832a393aabcc428de18d83e8593cd540f7d7cae22

    SHA512

    ce1bdd595065c94fa528badf4a6a8777893807d6789267612755df818ba6ffe55e4df429710aea29526ee4aa8ef20e25f2f05341da53992157d21ae032c0fb63