Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    128s
  • max time network
    129s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    18/03/2024, 13:33

General

  • Target

    d3a42054f1b5c51973d5562087fa48f8.html

  • Size

    31KB

  • MD5

    d3a42054f1b5c51973d5562087fa48f8

  • SHA1

    8f94c78d44552dee2505b8d107247db527e909f2

  • SHA256

    e0ea016d0ac924f7f8eab1ffa50de7073eed08d10fcc28d8dacdbbca4d840d83

  • SHA512

    c19998fe85f882a44c13d47d73255b4eeba01b33a2d7be722f11d0a3023d7af0f058277eca6d6ca6b17ad7d924ce13b0248c7f856768cd3c41d8d7f472ae2e00

  • SSDEEP

    768:5ErAGsN1CmEaE6P8MJB+IQuVFLBNErSbyt54Vs4i:G0GsN0mE6P8MTBQuL0Sbyt54Vs4i

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 62 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\d3a42054f1b5c51973d5562087fa48f8.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2500
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2500 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2120

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F59A01A8B782D93EA6991BC172CEFFB1

    Filesize

    867B

    MD5

    c5dfb849ca051355ee2dba1ac33eb028

    SHA1

    d69b561148f01c77c54578c10926df5b856976ad

    SHA256

    cbb522d7b7f127ad6a0113865bdf1cd4102e7d0759af635a7cf4720dc963c53b

    SHA512

    88289cdd2c2dd1f5f4c13ab2cf9bc601fc634b5945309bedf9fc5b96bf21697b4cd6da2f383497825e02272816befbac4f44955282ffbbd4dd0ddc52281082da

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5bb880002f23535b1a5e0f849e907e3c

    SHA1

    4ad6a8774791132b4f56ed9e62f1bee6673a81b0

    SHA256

    d78bb7aac7d46538e816d4c61edff147240a8377aae99c23eb7d600697717858

    SHA512

    c210bc999112b1e579030d26c5af9102617240053b552e87a353a8ac96dae5a3911158d876d89a9b85a9d886b2d3e965ad7c7a69fc6317e37bf15a8db920fde1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d3c137f048bb1eb9c7b138db743bc7a3

    SHA1

    ff9c48517b9ef0f3da1d1248ab5c7f585b676d54

    SHA256

    359b54df5c2f385e93593fc9f8d055bac98f5f5c3bb3d8dbb9d0994d918b8014

    SHA512

    4d1d7b8456c9897fa140b1ba05bd8ea7af3528dfa1cdc17365bc5d6202f730c6c525011cea35f7a0828caa8005d1d1581287b8c61245b520b70c07e8d7ea3217

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5cb3341ad35e334b1e10897c4281385c

    SHA1

    d8069c081d958f376ff5f4d5a992ea3ce347ceef

    SHA256

    355657adade31d013faebcb44135cf6be6d75bf4cbe3e4098e8fb91c2d2b49ca

    SHA512

    350b78f4b3a5ee018542c176a5a4c0cb240bf7b25f802cdef95d79f3f2a36cdc8af8ea4fed1a932a89d63ea403066b7e989e531f7d020f8cc1a112a0bd45b941

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0067376ab8de77f398eda66ff5224615

    SHA1

    3fd3242d8b94288f97d3d5eb752a4e6735b17c69

    SHA256

    2d71834c17e5e072e887ae0609212bb221708a490ace5280fa211f9d987fd2ce

    SHA512

    cb1283fd8ed05dd924ce05bab28751cc941eade7b2b052ecde00efa26cc65661c0b0bc05d489089e9f5550b47cdeadb8e88d4e3e71b353cd9ec1b1cec8cca7b2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0fe726914afd2d40b50556d33e3670e8

    SHA1

    24e8f6411c9503ca5ca3fd0d30a97916159814b0

    SHA256

    43196a5d64a057bc091371f9178bcdd772b8ff0e901cc5ab35789849042de475

    SHA512

    91fe45c1ce9e0dbc8869039e82c4e3182354439386b9639ffd999ae9bafae29370819e8143d7ab869fdb23912b70ffa7f18d33d80cb4ecd043a8a018f3153522

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e135457f2061abf1113033d6b16e61f7

    SHA1

    f7abc5241a01d78863dc6ac52b0303064f8ee77c

    SHA256

    1b259e1c8e3176a6d0cf6d603e630afa8b9344835a3b17df68cba47a0ecefc8a

    SHA512

    7952334bcac84fcff45afc437047e3c4fbffc45e66591344013ced5a6f3d80fa5824bd330490666016b5e52f3ed9ad3575f13238c6f318977546c84bebd3d1a9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d63d4130e81a6c0fbf35b83aa62ed352

    SHA1

    334d92f6204ca29132abd868a863e868b56ac98a

    SHA256

    e843536812fd9ddbbfb5fcecda5033fc28603f3c0574456ed00f40f258ec8ebe

    SHA512

    ebabe8f2a4c28a9abf6526620efde71b8299d2cd2c07e8cc979c950433f15f09e730334e3908d5be1872b4e3ef138df9e13965b55f3738e89e826522425c39b4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a2cd2f22327e45f13b0fd21774900e8f

    SHA1

    a910691acccd24411bfea1b63398ced91d29f773

    SHA256

    6206c319d647f294f8e6db53c32262845e16b8b6dbc59e493de9024865dd378b

    SHA512

    e29171a056c9a7f96d3b03ca8e2b2715586b7038a9f975df51a22f86f84212b033fd428263324b1de0862de743528737b5b7f3d4de154b895ada6fa88e0a2be5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    40dcf125e7b70f46c1199bd731781a81

    SHA1

    e8775847dca5871f5ef6aa0d6530a41fcff8732c

    SHA256

    c70ea7fdb670bf07b2c70c7a95bb57e1947a8b87f7076d297f8541a206cb1415

    SHA512

    445d5e9233a8bc5e5a81a7954f5f379d567169e6c7211fd6c8c4235bd30936096a6e240fc602d70d98f04cacb613a2e186a3bbe4d65b4128fea2fac561e9bf23

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b830402936dbcc588d6d4cf277aa319e

    SHA1

    39ebb10573c48e6d6394a7f64c629b077c8d3e11

    SHA256

    83321c0b22e7eb4d5642ec1a770d9b1be8aa648f456dcc135454366f302593bd

    SHA512

    7aeb6d26c5eb25838c824d4a031fd6bd2f32eeab466b8258c804b2c94344eb66d363811ce0b8ab6c1fba81ce7f1c4aa7bbd72b9f3b8e30de705ad98ccdae384e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8da5b73d13edc3e8019ea0ab1f5788e3

    SHA1

    257672390b57fa7bf0cb944e25e27a3bbcc77e51

    SHA256

    387bbd81bf284c6443f563f57ea9884e07f90a174a0020d6dfa2d38530059e53

    SHA512

    951dc680ac458dc36eba100210a65b06cb12e2545615c28b5d317c8404a65305ad9de2099ab6b13ea011966c5cb977df340ce66fffa53d02a3f981501bfe5780

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6177f154e0d364bdcfc7bc4abf6d4d71

    SHA1

    54b1229ac61ceb9c84ad1e8afedd3d0bef9949ed

    SHA256

    d8eed211f8f194a26bb80b09151a596a64cc91d18b580ee621ce5af0de9e41f4

    SHA512

    050f143c0320a9a00874ec74a244f03ffc56154830002bbdab262693ae66c1361332745544e5fcc896006124d1bf2372312f75af058ac3af3b4ef9ef56899570

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b633e40df010f8c9f5e2f57fdc24a85c

    SHA1

    1dcfc6662f3b599b0b21373806690ac843f32605

    SHA256

    2f02a7025312d8c970d8098d419796692b2a9f4cdf432f0eb155d6238d9c5492

    SHA512

    678a81f93b22b942ed776a08e19ad0d9c7d80154dac95087cd54a3d1e4e3743a518c7b760e131aa5ee6296f24d540df9620fe5bad04efb498e18e29e4f98ef89

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8ff965e9bf4489aca77d010fc8996510

    SHA1

    a9a72ed56f72c0a1004955af2df9c30850710379

    SHA256

    4a1cbd93ca821d547e9e75713ddad99dd6ee2122eba81be87a76bd349782ec43

    SHA512

    02888e0c9c773dc2f5baf2faf08ef6463ee98386ffe97f1336b12fb884305fa0b9fe1b1cac265f7184321f178d6457337d00b1df21afcdaff3e64acda9e024c3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    29fb5f81cad3731ffeb2cd96ca108aeb

    SHA1

    e26cfd58ddfe77a6509df42333a914d62ee4e334

    SHA256

    2375433239d96eb6188d9a9096b0b530d9b30df0d3c4bf4d1042c4f89046952b

    SHA512

    fafc9207cdc6382b3a944ee9ef1a7b631b191d26582c16a4c60e80fc7acc015b39dc8170bf3df1f98d4aeea79cc170ebafe3b2bc40b131a53fe6a23c97bfb6a7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    30cf5e797623bd6d8f962beae7872451

    SHA1

    fdc40bf727c4ec0261254f0701e616f56975eea4

    SHA256

    a8860defe85af316117fb9663695b7c933e82a44068f1a23142fa9ed58cff527

    SHA512

    70f6bc2f305eb073464e54e9d45c3b85bfc3565107b5b9f12234949ca8bc4052e8184327ff49dff45729e8a718c9a47175c08a9936532614fbe94b3225d254db

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ef702f80dec79342f7e003a37804808a

    SHA1

    47b628601309e57a49f2461ceca7853ad91c27b6

    SHA256

    36accc3b8b6f4017619eaf56df2842e4cedd25ebc442fc665433790033b52e26

    SHA512

    666ec7a10b410074d5d3af8b7c593a476e8a274a487877bbc2772e958af5033ab43f251a428d852b5703475cfd9396ba64b53c43655297c2bd9d67a962d1009e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7ac0dda7c19e6726d773885693aa28cd

    SHA1

    963cdc18d8501d9c4a822950939ee3e130076ab6

    SHA256

    348dc8f28dd931e47c1f90d9acd297c2015fbabebaa7d26e5ac423abe5cc5e08

    SHA512

    44c011c7df25edbd1468e8624383adf0fd917b4ae23f4a1cfbb7381e195456dc4dca0375affdd1dbef9a2639a484ec9b5008b290ab30ed1eb048ffe3d3540b58

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d739da735f8be3d468e1d9e5b868e2b7

    SHA1

    fb18dda9adf1dd90dd0f3f91ea10c9334730d4c5

    SHA256

    0707c2807a857ce37d182ba60a3ae176c6f72d46273526407212d21866cb4d95

    SHA512

    730b303c88219f2614344bab74cfd44499b19f4af64c3c7f334995b6a7a4d407f0f2c4bc75c827f098746cc4829bdbafbf05b0bb4f740ac0c2d6fd919558244f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8dfbeb0bc6748631bb7a3d7b00013553

    SHA1

    8845df5fd16d1b711dd6ce01d0ad54850420d8b9

    SHA256

    b492dbd5eda207cb2c133438b34a1cf47f788afaf8ac7e5cbe17080e8fa76e02

    SHA512

    486e4e2e58a58651fca96a60b49e36ec5b4fdb907ccde081dc763bc47dc0c8308b9a2f7e310005fa687284dec0f315878baa4b90a187180a05a24e11786d3edd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F59A01A8B782D93EA6991BC172CEFFB1

    Filesize

    242B

    MD5

    87d65b97ff247279137a9ca4f98bebda

    SHA1

    c343414938b16b5a8f64efdb243bf709bd0a8123

    SHA256

    d2a3aa798b4038da724f99e305de593e8d0e36b77539d39b1b5b2373bb1c9691

    SHA512

    be3aafc232a03dbd5e5dc7676726b958b18853639f2f92a9092ee76454ce816046d1f6b69812835ffb8735a9e581445204b57fbdc0cbdc12e7fcfee6f196f870

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\34E5PU0W\www.youtube[1].xml

    Filesize

    13B

    MD5

    c1ddea3ef6bbef3e7060a1a9ad89e4c5

    SHA1

    35e3224fcbd3e1af306f2b6a2c6bbea9b0867966

    SHA256

    b71e4d17274636b97179ba2d97c742735b6510eb54f22893d3a2daff2ceb28db

    SHA512

    6be8cec7c862afae5b37aa32dc5bb45912881a3276606da41bf808a4ef92c318b355e616bf45a257b995520d72b7c08752c0be445dceade5cf79f73480910fed

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\34E5PU0W\www.youtube[1].xml

    Filesize

    229B

    MD5

    b0b2146b0e58d724989562b493810811

    SHA1

    091f0f28f6fb50a18b15adfc1db123e5c3b7de31

    SHA256

    9a1d3b5678d437ca1b85e3c4ce327f0583917c5a9f8f062b3b7bcc9cbdbb519c

    SHA512

    d3177b55e89f780098118b94d2ec04eb257f0ff427ffce92829a69f28da98d511771457428f0a859b9c0183e0dbc51fc9f3623c2dfc8502c4a7ea693deeb8979

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\34E5PU0W\www.youtube[1].xml

    Filesize

    13KB

    MD5

    114e6b26c6c59192dfc964fb5f1cd5b3

    SHA1

    0939291c22b0a8a65e69d94afbfec3c8a9238165

    SHA256

    a4b95cdb02fdf2c96793c95345d6dd3153aba0b1ee352d79832f0702b89fbde8

    SHA512

    6fe2a2800127890ec0c5c70135c85502e738dfb933db915c74b145a5381e036da430d4580dead274e46c6870388e0d5e16b5d6318ff9667fcf7b70cc4c16671a

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\34E5PU0W\www.youtube[1].xml

    Filesize

    402B

    MD5

    13bf5b408d21d36be267105abbe9a377

    SHA1

    4bc75a82b0ae0f841c84717da26e01222cbf4558

    SHA256

    9e632e511572beed148c4291d1288e79ffe48024508c264ea076258284aa5184

    SHA512

    6b91a211a4aae099a48ec0492ba0b01f268cedf91d970db510c7d64f6db122e77cadc0c4eb804300ce59743e34a5cf69cfd5c4e8989139a00041a8a00d4cac87

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\34E5PU0W\www.youtube[1].xml

    Filesize

    578B

    MD5

    6457709d9ab94ce8017a28b7b8250aa6

    SHA1

    6d6779af061c2373c9b463acf087f112319e4f1d

    SHA256

    e17400ef9db3923235312584c8bf970b11aae4e36c8190c2212676a5d0c88b95

    SHA512

    0693764c7f1b2ce97ecc3ac84e9683d073fb97d6932ab2c4af053537a8ab8958d64b9dcc68f46192590076256398b594eae0a94bc925f65ec42bc31dc462884e

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\34E5PU0W\www.youtube[1].xml

    Filesize

    578B

    MD5

    ee2dd5985357a056ff60e03372f34982

    SHA1

    0a8dac5b6719601085b4a379658577caa17cb57e

    SHA256

    4a016ee5e2c750fe81de4a62f8a40d797a28ebec90eac049723143975917c054

    SHA512

    d4811a8d5c59740b20c59282baeaca2422c7618b400e9ae44c17c4fabf2f38285c0bc3860bbc23444a664c28c6f9dae2babe9069ea36199dcdcf265965d77015

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\34E5PU0W\www.youtube[1].xml

    Filesize

    578B

    MD5

    2429b16d573be771afe7125a9bf97632

    SHA1

    18700cd8bc6462888a4279d32cddec7cec6ce58a

    SHA256

    8ec5e32ff09aa1c7e7219642e6129c0e1fd9b9629b2968ca41c9a26d8f36f9bd

    SHA512

    1aee99e77120211b912b8ac601cd10fbbf4eca14e8c919bf3678d45b329da2b87808716a51a8bb2dbec2f5554c35b816884121ad071ba1a5b8beb6f457a79655

  • C:\Users\Admin\AppData\Local\Temp\Cab11ED.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Cab12EB.tmp

    Filesize

    67KB

    MD5

    753df6889fd7410a2e9fe333da83a429

    SHA1

    3c425f16e8267186061dd48ac1c77c122962456e

    SHA256

    b42dc237e44cbc9a43400e7d3f9cbd406dbdefd62bfe87328f8663897d69df78

    SHA512

    9d56f79410ad0cf852c74c3ef9454e7ae86e80bdd6ff67773994b48ccac71142bcf5c90635da6a056e1406e81e64674db9584928e867c55b77b59e2851cf6444

  • C:\Users\Admin\AppData\Local\Temp\Tar1200.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06

  • C:\Users\Admin\AppData\Local\Temp\Tar133E.tmp

    Filesize

    175KB

    MD5

    dd73cead4b93366cf3465c8cd32e2796

    SHA1

    74546226dfe9ceb8184651e920d1dbfb432b314e

    SHA256

    a6752b7851b591550e4625b832a393aabcc428de18d83e8593cd540f7d7cae22

    SHA512

    ce1bdd595065c94fa528badf4a6a8777893807d6789267612755df818ba6ffe55e4df429710aea29526ee4aa8ef20e25f2f05341da53992157d21ae032c0fb63