Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    145s
  • max time network
    150s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    18/03/2024, 16:58

General

  • Target

    d409f1fc262cdf08059e881f387965d4.html

  • Size

    61KB

  • MD5

    d409f1fc262cdf08059e881f387965d4

  • SHA1

    cc2fbef4d4a9b4eac0fca4afac1fdefc73999c6b

  • SHA256

    8d2966b719685039bae7d585b935f00f49bfabd06fb5a096dc220a6f0ddeb2ca

  • SHA512

    59dc01fc75925f5337c073ae129c38e8c2f3b30d796cfaf517d0461b5057cb310f462712a387b5b157ecb2a9ca35333c7305947c00cec212b512d4af95ca3c54

  • SSDEEP

    1536:A0tbJ2NLHXHX4m0QocAM1D5ez+ov05tGkAUX/hsef:B2RHX4cocAcD5ezlv05tGkTsef

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\d409f1fc262cdf08059e881f387965d4.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:3012
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:3012 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2516

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    67KB

    MD5

    753df6889fd7410a2e9fe333da83a429

    SHA1

    3c425f16e8267186061dd48ac1c77c122962456e

    SHA256

    b42dc237e44cbc9a43400e7d3f9cbd406dbdefd62bfe87328f8663897d69df78

    SHA512

    9d56f79410ad0cf852c74c3ef9454e7ae86e80bdd6ff67773994b48ccac71142bcf5c90635da6a056e1406e81e64674db9584928e867c55b77b59e2851cf6444

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1d134557facfeb58cb81083d03b452e5

    SHA1

    4d5fe415cac47cb69b7c3f4a17ae06158cf59d59

    SHA256

    4fbddf11692acaa9ba4ce4c8bafab81cfac85768a05391b8eebad7a921139626

    SHA512

    1d3b7f21858b708a42606ccd1ca925a79a4766a88647560caaf8c7b1530e5ad023bf8362763577370edf133239da8cbcf964601b66895e6a6f863050b04b5f6e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8e4d4c6b315e31e7e098f4338fcd4a6f

    SHA1

    f6f491b4bdb73dcb802910c509c6faba16177cea

    SHA256

    6fe5881cb4dd12e79765bb5becc14537d3739e7701c441c2174ca81940a729e3

    SHA512

    ad5ec9a9bfe640fa25494301b573a3134252a7329521221ab336ba6740aec03cefc4cd33079ea6b130376bd48b78bf52851c0baceae7fd3198b34bfa2077108b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    eb75b2ea2a5095a1e6cd0b44d425048f

    SHA1

    f2fd707147cbadeb3eb76e56e5927e62c46c93da

    SHA256

    d591c7fe2ccffde5bd381257f896de3dd492efb589fd7fadd1db6410317f611c

    SHA512

    0353053fb3f26687baa47783048464d5043486be29a771f143479e3eb1e9c3d587fa8a8d7f77a86bec60e00dcc582cab7fda057614be48906c2a54c5be82ab05

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8484c23532eb67e9d692928dbda34da1

    SHA1

    a82e6de2fd2eeeea69005ddc94e5107a8dd9432a

    SHA256

    118ffe9166ab438b3e6847061d58dcf078ba6c7ec2d3a94438b0ba192632f3ec

    SHA512

    16e9660c3ac06e573624f92a62894bb6ec3e17190a375e1af3ae9f07d30f6361c436fc6223922676c2d37f1bbab0ed57024079973f371cfd2390cbbe4f691e44

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    372cf7af91cbf3b1455ac94965f036c6

    SHA1

    1ee99703887319f16efdbab3e944b44e23a9ca5e

    SHA256

    239edf6d108fceba76272e3ecec8b891644ef1f1d74e78d0a06a0135102c7000

    SHA512

    f9e40b74fa829858eb0f0615dec64a29b2374186f877fb54d023f0b28add269cc24b8403eb2d28bec1904035ea024360488851f0e2631c30e55dccad3720d4c4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1e926f3481d4fa239d25f318662683a7

    SHA1

    d10e47a86b0046861f72c5ffc937948347a5e6da

    SHA256

    6b14eee990791cf5ff98d846bee73aeab4a6a36cd182aeb7dbc3d07c24a695a5

    SHA512

    a50750b3c9a18de401ae16b6219f0710ea011aae5636edb36a57fe96cd285d9a9cc30fb8dbfc187794333c0edb8ddd79621a66aacd2fcace2901e5f5b03275dc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fba1c69e9daf96f63cb31e61546053eb

    SHA1

    7dc7fc2e25366b61cb51990f0ab15e62369206c3

    SHA256

    2b5d9ab60bd961b767af67fbd00e111f7993efbf45ea08d06246068bd5f4e71d

    SHA512

    a89076f584cd3e4a5b2cb4098936f384c897638d2c2659d1696bd89ccda78abc66d7807765b091bbfcad2c550d4317dcddd6dacfe6116764823b7c50ab85de02

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3fd64d98873f0ba364cfba2d19b20825

    SHA1

    13eb368ebcdcde4d7b6126e3fc136aa240f8af7d

    SHA256

    84409864bf90a93cccaabcb4ba8cc7ed408bf13370816aa0a8de89f99d50cc0a

    SHA512

    50d4691b6fb74e880a7cda40fb6f6592150285c3860d7dea45aa04b860956e4016cacd68cb129618c74346943865443ed18f62b3b2891d0e2f40200f186860c0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cb3fb9a53dd25637ecb10e89bd1535fd

    SHA1

    cb1428d98198c02971a0899c427dab34cd475c07

    SHA256

    e45c178f4a39425c985b1d92d81c0ca26a944133dd83c4c3b4c721f73cc2cd87

    SHA512

    e13839d838b81fea9c4c3b7b64de59fae002d6bfc74f7807f243248889e8feebda9bc5223dbc3f71958784ed4bf7585dc6d47f376711eb214ef7136291767a69

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d009bcd208b44fa0c0259d53bb6730d0

    SHA1

    c171b37f7e9c075444ad1f3be8b032ac598394ef

    SHA256

    f296786bcfa587c37f9722a7d531d1d71914a0d6b97cc30093f54d048f571551

    SHA512

    1951c7a1f3847cc8bd4b51d71682aebf74d99f879c8e96e1f5041db37eb643313b7025c0ad2be18d41e0a99f8613aa6dafdd5b57b442ac302b8e42fc98bf18b3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d90718176e38a449306e49bb8e1dcf2c

    SHA1

    481464304c513b07a76489e4e3125de74cdb3e68

    SHA256

    102f5670f0260a485189aa77a3f6794b80511f20a3b890134620ffcc48868872

    SHA512

    ef06c423eeb71ca0b9f3a8f19bc91b1dcf1a5e826a63dfceefbe978fbff4585f24c5250c3adfabf5aeff0d2a6c009875afebb8fa588734d5f531ba1f449f6346

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    dd3fae9ae6e0dc3882a4a1bb6519f3d3

    SHA1

    0ed489ef29e98bf54aa9f87ba014b340d1a67b19

    SHA256

    189bfaee15eb05a0825860552a9be5186f017d4739663edc94c725919994fa4b

    SHA512

    df12f752a8865c382be38c3b4095811d90bd71a747ef552539af5b45eef8daf9bae3c96e077928ba97f2a07dab92b8f3cf749e5ec1770bcc0398e34136aaa46e

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5DKX8QD5\platform[1].js

    Filesize

    54KB

    MD5

    747d3cd691e352f56f8e44adaba0cbc6

    SHA1

    f2a659470ea72c344db7410ff5920fd5275fadf8

    SHA256

    a8a7ac9ad00d3e22712047fb5640d31120bd47b00538582b18a0d223cf9e90d5

    SHA512

    3766adee9eebb07843efa12a437197eb454fd37a161d427729beddb3bba4378345695c870076948bb76733e788cc4c07c4ece5183d2a70181c8de60e423b67b0

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\9M0HR0P6\cb=gapi[1].js

    Filesize

    132KB

    MD5

    c23494121f5468488a8e79a6268f4648

    SHA1

    1fc2646c75df1b8528667487997ab1f5b308133b

    SHA256

    100700c4795780ff97f999795e8477954da09fcb92a1131cd17216203914c425

    SHA512

    956f396bef9df5a542ae410256686e2259e1ae67402615f937c2f2c004ff2f3de5f5767200661c0ce204fed9b32b1a8707c26a566da1d3aa120d428901c39769

  • C:\Users\Admin\AppData\Local\Temp\Cab90DC.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar9298.tmp

    Filesize

    175KB

    MD5

    dd73cead4b93366cf3465c8cd32e2796

    SHA1

    74546226dfe9ceb8184651e920d1dbfb432b314e

    SHA256

    a6752b7851b591550e4625b832a393aabcc428de18d83e8593cd540f7d7cae22

    SHA512

    ce1bdd595065c94fa528badf4a6a8777893807d6789267612755df818ba6ffe55e4df429710aea29526ee4aa8ef20e25f2f05341da53992157d21ae032c0fb63