Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    121s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    15/03/2024, 15:18

General

  • Target

    cbbe6f168fcc13d934d51b3fd8ca45cd.html

  • Size

    432B

  • MD5

    cbbe6f168fcc13d934d51b3fd8ca45cd

  • SHA1

    36c6b381b29e0d10b37d701e5e40becbd63c9354

  • SHA256

    425eacdc90d3390e3ac5dabeabcda29bcebb90422c385a7cf93583f7371ce751

  • SHA512

    b64660d158cbb0008710bbbe1eb6cbcfa277709dfca3b7db2f78d2e32607d3ecdee1b9c4719efab6ea2c5c872cee221133630935fd8e8e6180d5e96821e0903e

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\cbbe6f168fcc13d934d51b3fd8ca45cd.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2956
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2956 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2144

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    67KB

    MD5

    753df6889fd7410a2e9fe333da83a429

    SHA1

    3c425f16e8267186061dd48ac1c77c122962456e

    SHA256

    b42dc237e44cbc9a43400e7d3f9cbd406dbdefd62bfe87328f8663897d69df78

    SHA512

    9d56f79410ad0cf852c74c3ef9454e7ae86e80bdd6ff67773994b48ccac71142bcf5c90635da6a056e1406e81e64674db9584928e867c55b77b59e2851cf6444

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c422b3154d8828aa3ba7f5216e46c01f

    SHA1

    090618d6df783d7eae35b9ce8cd7f3831fdf67d0

    SHA256

    710ee3c6472da3cfdf9781bfcf17d6e4d6a33387099ebc604ca4c3af559e0c68

    SHA512

    e3094ce8eca580efecefde234fb67444e95f45df12756e620c391cbba5347a964f1b1055444a9219de67da17de2b56e5395ad278732903a0580d52718593e050

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9fe73e6b41b1eb4fe7a14c5a4a5a242d

    SHA1

    4a0c802357dbc93fc9afef2d81aa61df97b783e0

    SHA256

    794db895c6be060265e4b6d560e450b19d52f9693c799fa8c6f269f611f33043

    SHA512

    140080c31a00b3244a042c0eac8a708b48618dbd72add9095c6ddd8ffe23733b7459bcebd1281d36ea77ab58d9362786b8473ca1ab1c860b091c0e5eec695ccf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0da4f3cfc4530d1f6ddd764cec7a12f8

    SHA1

    a9c4245bf9ba366ace16f2b157227cd6d8150616

    SHA256

    12825b508e83c5085f880d58b5378ee88bf8b6004b7a5ac51fdc344f5d299a57

    SHA512

    bc016bf6de70052d38cdf9ef0d99d1d75374efbf3270da0b6139eaa4fc73b96b354e03ea23ef3266cd3177d0c66d6873e94e7ed51c52a6f81589136138da51c9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    483a4abb645b6f8186640cbb811a5636

    SHA1

    17c295409c2531dd4b329555d3600534de7a3600

    SHA256

    d42a16cbcf61d99cb0a66e1a213fca0e0b2b1fae7864395db4442c07cde24b33

    SHA512

    1b99ebf42366cfe38a02c45fe30e899b34a63d0bb1d8d4d5b8dacd8d086951a150555fed126fc6a97216b77c6c9f70be8af32844d2fcb038b360d2f050e3464a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    35d5a4478f41db19aef2ce6adcf0a33d

    SHA1

    6f4c4d59a51fca82567fc76f71f9ae362b48b162

    SHA256

    4bd9250a4a170903a3888dd11f29f8d4bdd038f2f27218da1089dc53226bfd38

    SHA512

    5e8fe5e08ac802bd70c479071cc3ee3d5ce6cdaec8c79bb12d2551101649590a2c0042ffe3c6943ca4441ae5a0212fc56f80eaa14844886c09caff293d5d2b2d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e3ebdcfa6f17658dcb4b6865ffdf3f65

    SHA1

    cd47602ed0e3819ef62812dea679d51b42bbcbd8

    SHA256

    5613e583ae6c41be0544e50fe80d7e53e7fdaf1cdbce4afe920d80bde058766c

    SHA512

    7f49e2ae0303390474dd50135429fd412c17c60fb54cd784cd3a47ad84d17d2563704b988bb2e5487961ce9bf860216d077772e8b5da2667fc63ff05bf281512

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    123602f1cbde64b772f60896059f15f0

    SHA1

    9bd7849e5a32e748caeac0b2f22d67b70807a707

    SHA256

    c07fea1698fea932cdfd0f0b2dad2b8d8f388df8fb9b214ab3ee263f4a451bca

    SHA512

    ff73d592b4becce2e15b74fd5d18e9a1ba411f3b24152e5250083865e0bd7a20f9e38ef36049e594085bc670fed48e22d549ae502c40ca24c6e0864201bc094b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    62afa1533359d1f54623ea8ec1c97a5d

    SHA1

    f7383028d85f78385456039cafff70a2b97ba12d

    SHA256

    a70d35c9ec84edef570f75180f8c1bdb514f90ba78b06573a9c9ddc054ecb1c6

    SHA512

    e576b872e2b2848f3c1345c8115f73e581c77a5f278f1f0c6e2664152cd3e66e88df9787bb35af1f11ff2db1a3851c30503edf93cc36efcae2e6b0f94903246b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bbe3783d73022574e5777853150ae1c5

    SHA1

    d5361772900945a03b74b1719dd619077957e30f

    SHA256

    420ebc5ae96bb911d26915eb38bf1a1aa7413e6c67c9c6169dbaddc7648ddcab

    SHA512

    fbbc465db7e0ce7dd8b1cbe0060e5bd8439bcf7fe6f588cb224ce268ad02fe500e96ae363715acd1b3de59974262cbd813ec18fcc2b09f6a0d20bd5266ebf1f6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5f9d3e4b9e478c459d4cee3bc87d366c

    SHA1

    c3979945af0d08c2dec860fac05415f2f983312a

    SHA256

    8ceda24115c36cbc8d76a49a83e0af8f0a596b900b7baac25ffe6e86f173c4c8

    SHA512

    f4c3b030ef126b87cb858e8e642b8a1e5053ec91f09712a7d73909fe44a776337396bc8485a7519099a27d9cccccdf1f204013ad8564d56fe63710e0f88cae38

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3104a0a282ceaacdb0957f202eaea7b3

    SHA1

    a2681dcbe4e7c983fa4e1e7d752b0568cad92054

    SHA256

    8388854268a8b22cbe1d60d66ac0f867f2c1805d6ab757f70abda61ad7bb2b39

    SHA512

    3fd806e01ffa5fc194cb3c0e8519be7b87e8ce4fa195a61d3df68513c258a5d9b8f5f23d88477d15181b4811e6b5aef81d7de9c15b74c64a19c61a413ffa02eb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    757ef53177ec18a257012701f1062c52

    SHA1

    e7167b9d8b7ba2cc090e4fc27f81a1bad53b9778

    SHA256

    daf2183ac8f1be3e3ba12fbb27044d134c6a3a59aaa7494016131361c28131e0

    SHA512

    72c5743c811f9ed45293888b3a08e63fb25227ba15842cd84e6394873252919f096d0e6164e9027ab5441256a3aa6a374a8e681fdd2944f2af921a1122679a87

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c61c4703feaf2c04179abf62eeadd670

    SHA1

    185f3fad2b89df1fd1a186282018c23980f9ace4

    SHA256

    a019231a892c67924418bc755e6cc582e2568fd9dc2c9c346bbd2b210230c9e3

    SHA512

    3f6a2af0afa58dd3373840ef9e205d9f99887e7989cfef27f77b4f0dedd9568f9164c716b95667253b899ff86994aa4721c823a74eaee7f6d2a6d32084e07072

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d6e5371f1d3636cfbdf1d06d0c4f2560

    SHA1

    db51b778718eebdde3a775a5aeec3ef72659e5e0

    SHA256

    cd2e9e2256c1e61ac1916705ac29bd108e1d23a3271b42529e49d840372a2a6d

    SHA512

    3ed6f8106191eb1c08823581450b80af69f8adc556e3a68d9277c0a3d166f66c225294185f936d1f9103f06dd1ed35f800525b9b3999064645c168f1500e5b30

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4af915a998a3aa0a178f11c4e7c4b8ae

    SHA1

    9987d45e3d40600e922a6532a3b5fcc89b6dc874

    SHA256

    223b24db616b26ac53312980d7b1f6ae11b7786c6cf858301b188f1f5aacc854

    SHA512

    c591e0d2570f30392b2477eb7ef3b5e68ffe7a7157636d8ceccb2ed80c692b1bc540da9fd1adf1139cf004e20005e23601812e681f414c5b7ad6feeb6b409562

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    25890d1cb3e02194aeafe77942b1b7c6

    SHA1

    562204d155fc44d0024c999332a52db56d44eded

    SHA256

    8a32dc5a3e6fccee73c76854db640a6c79e05383e6ceb419fa8f95426ba628a5

    SHA512

    574c516d2709e3b8823a53c8957525cbc8f06c58bc0f8da5ef5be4206a1b8f8ea513b1e2c0a5bb9f3e36401e07780696a28b00e564f36b7e5dd2e6c58a15a3f8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5b48a82baa72b1e0c4eb767d1c2db6ad

    SHA1

    b2f7ee6008ec20b92f45acffa0f1532beedb0425

    SHA256

    1a5db83f9c0fa3e0a4dbff6e5b0b88be525c48192c7d5ccf7d7d42ab9986dd62

    SHA512

    82447bcebee4631ea87daa5e649750b81f675f29e9d69b5dd66c259305da0c3183f0758a38ca89c01f79b85e5f7c38e6d98061223c5935b4468e2985cc138c2f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    db247ceb86d2f9291596a82db9ca0f7a

    SHA1

    29d6d8e2a5b88d34280371880c2ade21b116723e

    SHA256

    a11c83260a7df11d8df0c58323ae30632dd18a0ae1981ce640f5f77ab583f1f1

    SHA512

    97d1eaf57192315191abc232b0d4b0227d54ce18027e5dd1a92039dfdb66f817669c11838f86f17ce38f84e0b20493d407a411707c3c359c26f7bdae2bab637b

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\imagestore\re26ad0\imagestore.dat

    Filesize

    1KB

    MD5

    0244a6e326183b06061ca99a9881cdb1

    SHA1

    b7b274fef13a3b99ec02b6c11bd3b0ea01a9e0db

    SHA256

    fe44419c6371baef2bd227554cde1ce43f6e85f3dd85fa9da3d49086d609ab26

    SHA512

    ba7035028741fd833cd3baa1ef9cb30786c56bfb140d1d709baf73d66e20adf246fcd85f7175ff848486e1e8ac74624a64032afd425e8f81010486322a07fda1

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\MPR7YYBV\favicon[1].ico

    Filesize

    1KB

    MD5

    91abe01116ab422c598e9c8af72cf4da

    SHA1

    0f2815fe8e067d48537ad168225ab4674271fa27

    SHA256

    b1d7aef06456fe7431124129a28f0138bb5fccfa4f4161e3087de23c005e5edc

    SHA512

    a4d5b20c3014153b6b382c43404917bd2cb5bd2a59bb1e981f5a19eb7dbdec185ace288e9700428d24e5ac623e45d04905e706f0c45a1642b1aa6c091213c23c

  • C:\Users\Admin\AppData\Local\Temp\Tar2F80.tmp

    Filesize

    175KB

    MD5

    dd73cead4b93366cf3465c8cd32e2796

    SHA1

    74546226dfe9ceb8184651e920d1dbfb432b314e

    SHA256

    a6752b7851b591550e4625b832a393aabcc428de18d83e8593cd540f7d7cae22

    SHA512

    ce1bdd595065c94fa528badf4a6a8777893807d6789267612755df818ba6ffe55e4df429710aea29526ee4aa8ef20e25f2f05341da53992157d21ae032c0fb63