Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    117s
  • max time network
    135s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    16/03/2024, 02:02

General

  • Target

    ccd4d6997d6c389bdab56f5f3fc97e93.html

  • Size

    1.8MB

  • MD5

    ccd4d6997d6c389bdab56f5f3fc97e93

  • SHA1

    b3abe45924849ead84fd3f825f7be82b9f6f8ad8

  • SHA256

    6f8833c3d9df7bb029cae2b76859ddac41f1db67f3efdae8d35679d39b8b5e2b

  • SHA512

    1287cd22b2745ed36302a9efe6a4518e3ee16d029d4b0f0e3da8b6d7a2c1a278446bb805afc003443d15d64a82520e068bbed6c3361544f5a843ec3898ded243

  • SSDEEP

    12288:jLZhBE6ffVfitmg11tmg1P16bf7axluxOT6Nlo:jvQjte4tT6fo

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\ccd4d6997d6c389bdab56f5f3fc97e93.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2212
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2212 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2692

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    67KB

    MD5

    753df6889fd7410a2e9fe333da83a429

    SHA1

    3c425f16e8267186061dd48ac1c77c122962456e

    SHA256

    b42dc237e44cbc9a43400e7d3f9cbd406dbdefd62bfe87328f8663897d69df78

    SHA512

    9d56f79410ad0cf852c74c3ef9454e7ae86e80bdd6ff67773994b48ccac71142bcf5c90635da6a056e1406e81e64674db9584928e867c55b77b59e2851cf6444

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    246f69709e1e03c1e90f757d422791aa

    SHA1

    f105b907bc2552b9509e5fd8bee72965227e56d4

    SHA256

    febbb9bf1455672cac9af460dac63598a5d1eaf2c94adc79e2ccd75e5ad2a003

    SHA512

    94f73c95c007d829a673c3e4a999bef3308350af9df9c1a23ae4f238a661223712077ebe300dc1ffc3aa01931dc73e8ae70866dd518ca5f7eedb7edc17b91906

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    04bb77b4522956bcef1727548934cca7

    SHA1

    6201af9f12027522cc82d538cc6ec173fdf57ef8

    SHA256

    234ad3bdcc00c2db276db12982e320fab795b966c1a8c391f8891dc852c5208c

    SHA512

    637d10b33cb653dd720f7f985c6946d7c2a66b516eef47209d0aca77c9c566a3f75a4a8abb7929fd4094acd8f16cffeffef9971552ecf380c8e73b42b2949575

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0a9802885926859026e36e7a500b2019

    SHA1

    140cfbcd7e517beb402d9cb2cddf2ccc333e8915

    SHA256

    32feda9c26ad94aa6ffa495babd3f230cfd4c0c68e3f9a0965d0b6c924278166

    SHA512

    de69a56c96abae1d476e838788ff6b34a963d8494e7ee727badd35cdc1abfa6581f872975d799cb339dcd5393591d84397d17a3154fac58f00154e07c68d9cb8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    749ee6058ffcb32da077ae7786a3f175

    SHA1

    d8487a06164532bc084588440bf6a83af77077ab

    SHA256

    b774a87e7349c6c87b00eb230e20a3793b09f3d135e341b9da982970fafc5da2

    SHA512

    f79ee3d269ca164ffe0f43c459a382ac06cd5b65c16109b200254ed1653a0ebc12057e0e4d77ac74a5cbd18df80b10f58aa7137151f102c10a4a3d12e6855302

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0b4cb042b5421312a8fb42e84f57147a

    SHA1

    05ca9eec48e636450ad5dfa9d4fd693bc500f2b1

    SHA256

    3dc0b000b3d5783426003827f9cb1ed3e36fe8d8bbb0ca16d65fe52c79a32a53

    SHA512

    bdafc8d5fcdea1176643ebb0d4732fed1d57d65917896b771946206c2fbbb4301bdf7d0ddd68c1e1eeef713bb6c0612a6d139d35a98bc59922a9de89a1c2e694

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    197740fd6fb79d9a63c97a55ececee57

    SHA1

    40d8927f2fc95c3409919bd4b8a5492ebc05b755

    SHA256

    366f1ffd6d595c95a6c444cfa9081ed7388ae561cee8eff14df30daa805ae11d

    SHA512

    41f8853237a33423895241ade1aba307052c327020573179423f758e089f1ecfba862c3edacd8f61957f1a17afad2942828d1bb2fb6935446779b94b293ff789

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f8a02f9b33602326eaa64bbc468e1714

    SHA1

    c3c8fe919fff27b5fd7b28dc13044ca698924f5c

    SHA256

    e865c2d610d7f8bbce92b18c8e38e96ab775bf82437a23fda7339b6459e493a6

    SHA512

    c19cbf53fea99c71144c21a6dc0babba1a9d6d1981ff8060d8fd4ab86f868051abd956baa38acf5a5be36daf8e76728ce56ff5333925fb08f0fbbe464a71ef7f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    147c36d0e328d6fcaeb5fa8d499625bc

    SHA1

    ca64f472ac1da33df40866f6542ae21a2e3554d5

    SHA256

    2ee5ee54c18e87828cfea41385ab6bdfc244bac9bf98167154fbcaa5f99bb86a

    SHA512

    d422cb9f2f1bb835d8abe660d7f2908dc99017af7dd5eb32f0492523e6f23c1bd77d2f8743277f3e88a0ac6c6f56e8bca6a3f1790661fff469c0211d952f66c2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    40ae121a1319cb8000399a5b1ca058a2

    SHA1

    38f28abd2366c870ce7ffc49a8c8ebe3db5f414b

    SHA256

    c5af06bc370bf0787ea20a0f508a5063ee1b37a86bf18aeffdb30a0780c1d9ce

    SHA512

    9e0a53d873c1374335a8b5c8ecf24572de68fd050d8b37f66e4b20691ac69d2e07f2746882c4d791951475b2655e5076f53f9d7de99a2bec368997149ac56deb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5cd1ff8dde54717a7d8a51d235f1af4d

    SHA1

    60ab9686e2cebdd3388ef41f2f7c0441c1c9bd3d

    SHA256

    5cec83c64b0e45cb370246d93c316bf1bdc2cdfa66a9d3c15e88332169834f64

    SHA512

    757d818dd995cf6c4b2245031d8dbc9cc1f5480d3cafe1cdb71ec87a44cb162a6b7f8dba5bbc2561b40237746366891418c9d3fb5eaf0dd4b94cf05605977878

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e64779b474ba2b3fcca931299a07233d

    SHA1

    1ab61037ea597ca041a7126010a621fc0290d469

    SHA256

    1e7d707d662c00fc434277f1a0404063c02b98c0a1f2fe4b51d5cd244d7d3235

    SHA512

    8dda0055c1730f0922eaa1e4f8448020f251ce455bcddd87bd28a30fe8245d7b188e270e3b7e575c631568a6b92d9562ea44c5e894707dde802eb991c68c0f27

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    492c0649bd7860eaf675122ea535044f

    SHA1

    66a28e891c7da7a87896598b737882efe3b15c47

    SHA256

    fec54479a50f1c288b4352a596f8a4dd5bc7aca5840274e9beff041b2fd6c0b0

    SHA512

    5570c6e791d611ce0a0a01199c718d8a1a2ba7a2f50b99cdba81262f78322d547a146a445a85030237d300f2089f569bd45731f0d065cec78c0eadd015b45e2a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    72a00e2dd30eaac5ea0ade3bc91be2f9

    SHA1

    2ea309b35dca0d3359c491e8895b21d2d9f9ab3e

    SHA256

    4c2ab07b77005bb90293c3159e09f41eaceaaf166ab40309826d720db22dfd14

    SHA512

    cf46774ed335a9eba721c01663e0e2d345e89276f4204e8199b2c60f0404755d97cb78f296fe69e8b870c727080e7937bf7a82975ccaf3322c5c05c4e3ee4a81

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    38bc892fc1340e3c86a155b857a514a2

    SHA1

    ce0fc9dc58b79a8184ca38d6c1f18bf8b7dd6c21

    SHA256

    a5fca0bd206a8f2fbd1382d40858f321b70ab6e1e72e79a9f78619ec3968d3a1

    SHA512

    bb41f00115c597cccae5e3a226a2ce22fd096695bfdeadde1e63cc104eacfa161bddf06db8e92875fefd177028bc2738f5ea129af287242cd92cb120b26ee395

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4873061ae3eb00d11325bceba89b425a

    SHA1

    f1f9e5263f0e5175e0c56e351e865ad465127d3d

    SHA256

    e0ebe18bf5e44c032ee8ed124251798f33a178e3a1aef13f1cb8bf8d7534048a

    SHA512

    223ca688dc02b2fe7f89cc7342f4d224638eb6c59a197f705bbecf16e979c50aa8d7e40a20fc95bba7dfb1b66ce4d6ce155d264f939ad59572eb3e8b7bf3de84

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    399e8648c3ba16407316dbf578995440

    SHA1

    f04363e5db0762efb0e2f48d86162d9c51d55454

    SHA256

    7728ec01ba630fd28118d32c6572a07f2dcf36b668f789ee9b689ce6875a1d66

    SHA512

    7f73468937bde827e9560fb258c74541876e7b0d9be4fa107ab83b88488825d19520f36e2c1b0986b845942d51f59addb74f96cb43517b786dcd7c31591357b3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cbdd9394a7563e76e93805a6328c351c

    SHA1

    65616db962d480443399d645edb464028bb1884e

    SHA256

    1be400845c2081df028e53ec8bd8a76ce1faf26057ea852d196858edfe170755

    SHA512

    468d1f407a91c021e51c47ee45bddf1a13d48a3aa22af59acf287a589c151c1fe63c68600d8fb900f9542c24beda01f3d41e7ed3355d5a01d62ef7aa0287583d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3b2f30a460ebc89ad5dae3f70499863b

    SHA1

    8c374ad404bd6f46438bf7f86979a304117d70f7

    SHA256

    8e84e6c5f3c4d836acc59b81e60bc4aa2a9857ba1f23a1dbb799cae487579acb

    SHA512

    26059514cb6ea53230b086786a526f6da1c6b24d4069c421c8305ce94304799d1647e4cb88d3cef7268ac96745383b16aabeed1ed75df7f6828bf31a15ae4c05

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0010331d45494e1ed2026e3cd4f235b3

    SHA1

    463b58e8d6ee0d95483dec222ca1559f62456471

    SHA256

    9d6f8ece7d4ce2a11af9d2a9bd0896f6cbb030bc1bb66a3c8839ac39d5e13fb6

    SHA512

    7dc67a8e4a899ec2b9d291508728184c260a11df4ffdebe32393e2ffca487689c10e762f73a31484e4e9c55de6d775fd379ad72a8f5d29391152c1adde661f52

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    10f0a6dd062c5c72b0a5770e4deb17b3

    SHA1

    3dd9046b08d54cc8a7ffffd1aacbeb6be27b1918

    SHA256

    c326213a463d006c5f3547d5c3516b55633329bd5ab2932862a468d850b7d38b

    SHA512

    f5b7bad6eeeae2ab8e4a55880ed218cc0c97d6dd6f1b428901235d63a58cd3e3136ad4c68d302ef3f73bf2ce61c9dfc9e58ba18f82d787293ad9bb907eb3a7c2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e33a09bc18ecb956c7c117fd42871bbe

    SHA1

    c1e4f1209df8bf1f5dcb76ad4acfbb0bf5168cae

    SHA256

    31671f6c68c8a9765bbbec2a06262fffbc316a738296470e62744bb62f24b5a9

    SHA512

    cdf425db84cbf6e12e76fc69eeacdd7db1b3270b0dbaca869fb3c8d47eebe858d8f349cdc98bcd297acd9485b7947452ad7b9b3dcf8350365f2e57884cbb0c44

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f63f734d33f6a0a348c4fb6c4b689a0f

    SHA1

    c0035f2bf6a8a136d0b1c9e03d600e1f3a33f82f

    SHA256

    9640e6abef3c27c7e76897b1174a8002d09aa0fb9466f8673217db952b140048

    SHA512

    b2f6ebeda8b3d1e2f211eb9580f6758ceaff2aba60e5f62c3ea71f1faba8627d702549b12aac396a80b35f769558706a534c39959c7dd03c5eca137a38dfc0d0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7a604ea8455a2c185648071c27229eec

    SHA1

    cd1ef323dfac724e795e20df0f7f3096a15150fe

    SHA256

    df07d4cee6526b700949f40a8fcfa31c5d8136077b6ffe535eeec91ea4b11fa7

    SHA512

    fdc4031a9c759c8e9badfac56a219a1ab30c69d56cdbd105e0aac7d395e24581c2fef60253ba25d705bef4e9d5d3a9aa0c4d7123c6d7cf233e72a9e771010d36

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6fa6092a62ec28263b47bc904e94a70d

    SHA1

    bd656eb89fadadc1400f53f52360c57e91268708

    SHA256

    9358f90e492aa3bcd06345fd150c890118e194e2bed51b759f249ecf64878451

    SHA512

    9e80aae5fa9208412e0441878ef1ea8d056f5c2d2464d63ce276af00cef1e1f4c635829cd3f9a29d2e1a13dd9199d4009ab2b43497a328e55cfefa1cf19cb5f7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    092e0a9f304123632f0e52fd63f6b6e0

    SHA1

    1c4ce32b699f112303f636db24d00bbd0edf45f0

    SHA256

    3ce500a50c59122d562ff99c59e7c6e8114f9bfaa632302f259e8f8dd1ed8991

    SHA512

    23797c25b3253f69170b7f7359266d344490cadad63c1f05d3ab11d315ac2bf9dee52053524abc136fcfd110b16099c63ca716ed3cd09c528ebf97ef1b214dda

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    84a2268e55d6255b26ec116e09909ffc

    SHA1

    a6d91fb11f6cfcc098164bf4535bcb3b9e7a7c0d

    SHA256

    efcc6673f420aa886f34894d2cd1bba8442930ba8b56866c92d1b3a52bc11fbd

    SHA512

    2f16184401cd8a906ed9cb7795b6da6c88f54689e87910501822db9544eaf4d282c1bf1d27a6b7f13439165c856237b703a6249a703f5a0b79e6efaaeddde35c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    71cfb22cb3836aedc43036de38439049

    SHA1

    8a12ac854d2dcc5b1d0e9b77fdcff57330dd8e21

    SHA256

    16497a2b4e3408c01ad518ca19da2a4cdfebe848a3f1da1e57242287fc2ef126

    SHA512

    ba51b0a5c6bee01d9361dca798a7a3d91d9699d69f1bf9e1dbf6249b0c290236bfb2319cd801a6927fdf2195d98f5455c85d61056ecf2974e9370368090de32d

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\J6KMOG19\jquery.min[1].js

    Filesize

    83KB

    MD5

    2f6b11a7e914718e0290410e85366fe9

    SHA1

    69bb69e25ca7d5ef0935317584e6153f3fd9a88c

    SHA256

    05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e

    SHA512

    0d40bccaa59fedecf7243d63b33c42592541d0330fefc78ec81a4c6b9689922d5b211011ca4be23ae22621cce4c658f52a1552c92d7ac3615241eb640f8514db

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\K224YIDM\jquery-3.1.1.min[1].js

    Filesize

    84KB

    MD5

    e071abda8fe61194711cfc2ab99fe104

    SHA1

    f647a6d37dc4ca055ced3cf64bbc1f490070acba

    SHA256

    85556761a8800d14ced8fcd41a6b8b26bf012d44a318866c0d81a62092efd9bf

    SHA512

    53a2b560b20551672fbb0e6e72632d4fd1c7e2dd2ecf7337ebaaab179cb8be7c87e9d803ce7765706bc7fcbcf993c34587cd1237de5a279aea19911d69067b65

  • C:\Users\Admin\AppData\Local\Temp\Cab58CC.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar58CD.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06

  • C:\Users\Admin\AppData\Local\Temp\Tar6727.tmp

    Filesize

    175KB

    MD5

    dd73cead4b93366cf3465c8cd32e2796

    SHA1

    74546226dfe9ceb8184651e920d1dbfb432b314e

    SHA256

    a6752b7851b591550e4625b832a393aabcc428de18d83e8593cd540f7d7cae22

    SHA512

    ce1bdd595065c94fa528badf4a6a8777893807d6789267612755df818ba6ffe55e4df429710aea29526ee4aa8ef20e25f2f05341da53992157d21ae032c0fb63