Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    138s
  • max time network
    136s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    19/03/2024, 12:36

General

  • Target

    d621cc37229cc1a110105fca8a0988ab.html

  • Size

    428B

  • MD5

    d621cc37229cc1a110105fca8a0988ab

  • SHA1

    99d232c720f49fcf87728e148a3c6c035cdde720

  • SHA256

    162136bcaa14a76c73b7ead907ad2efe4cc57b08f72defcf9105c07411601e9b

  • SHA512

    985e7da66b4a7d9bb0b5247f97b82d88e9d517ff108d4212b6b6cd2192667fca2078a44474ab622851b33929a9858f4427c1b3ff606453be0b270acd66045b4a

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 46 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\d621cc37229cc1a110105fca8a0988ab.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1400
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1400 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2616

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    67KB

    MD5

    753df6889fd7410a2e9fe333da83a429

    SHA1

    3c425f16e8267186061dd48ac1c77c122962456e

    SHA256

    b42dc237e44cbc9a43400e7d3f9cbd406dbdefd62bfe87328f8663897d69df78

    SHA512

    9d56f79410ad0cf852c74c3ef9454e7ae86e80bdd6ff67773994b48ccac71142bcf5c90635da6a056e1406e81e64674db9584928e867c55b77b59e2851cf6444

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    89da7ef99449cad84f9debd7d6d99993

    SHA1

    8c1a4104ba48abf60a0345d165cf7fdf835b1971

    SHA256

    39e024e0e13ebec1027e8509e1253ea1a3a375e20a205e123ee090bdff0ed594

    SHA512

    e13330aa0aed57c6f1c4d37390660e68b0dd66776f01a2c280e7d92b0febff669db87451a3fc1e106b1f759ea16685e62e5be42913f32ebf693766c4d8d78731

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d76a6686f7dce0bb6c556d36466b1057

    SHA1

    827ac1ed52ecd20d77339e4bf9fc0c07ea827409

    SHA256

    1f605a2d0dd22580f9321735fc1873a961f8447a4a04b43df37714b621b39aae

    SHA512

    6d81a1093e09e7a21412cc7f97e398c7dfc7f0766f2540cc35495fe818b70b8e6b5d0c103e7719b6108936218ba57eb73ad4b63bc7978fec44e2227181b3be4e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d34685209ce555392547339a233b0c69

    SHA1

    776d8644e0746efc1a406a535184e2c796bf8095

    SHA256

    37061fb1ac5256bbfe9d5a5e7fbf212a9853757a30fdec4bdba431b12fa95302

    SHA512

    6960132949923049542dea74cedd6df57d95b5c403e994e4d8d25123bb6ea50f956f9d9f200449fab899db21b29a793fa3d9482527b1972c0ef86faddf155c16

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f51258a21cbe6f9c945e07a0ed6b9473

    SHA1

    6676ac1fd7fcaa3af0c14c25e01db71ec80a106e

    SHA256

    40a5dcc5e2a6b3419b7a5a947faf1cf2df618bc3fed030c4128e3cd912c90e7e

    SHA512

    9381dd6f79b4a9474d471fe8389cfd4ec1ad9b76d141ddfd9e4e89e7ef6451d54de1082a45e29e383e6bcf8abea093c5e01bcc9270807c08fa20e572ec496dec

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ea1418bf801acbae33b71afac0a619cb

    SHA1

    867c6502f450060916c56d6c300d527f3a66ec72

    SHA256

    734b306ac21a43f6c2ac1aa12c26f2e2b9079f668d7b9b79fa68057f5846bc94

    SHA512

    b2f29f0b7e67342bd8f8990b1f157b01395e7d13243563bc124b9021eb15c90b65203262d1631f61d7a39237d5d5f69f133df86c04cd0bee7a3e379cb23dfb8a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8aec0df3abc3fc999ea1e1db620701a3

    SHA1

    44ad7e6ca707dce425a5708cc68e5e751f16811f

    SHA256

    a1344f6f71a04e5ea5190de2c360a3d3cc5a552ba52f7826374d7de85fa46a58

    SHA512

    4f83dd0fb48f8086db25c8b29040161a42bad856912bb073ee264acf8e1233e1bd7fad0be52b8435a5437ec6df95afd52fecf79aed75905991d438a4f63e6c41

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7e70da4d4e3dfea14b01c2041b111030

    SHA1

    3ddadb82faacbeebfbbafe0a25d575a2bef31a88

    SHA256

    3584a499fc2401e8ef25924001c6f6ab02e2d611c3f0db5ca07443ee647cb8cc

    SHA512

    fcf495fddf10b6a6f1504e77954e2a205cc50486f30b87dbbc6abfe807973b14ef36316a950111c3e0e6611bfaac8c5f0b242d0580a173cf560f9e801bbeeff7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7184c8016bbbcc2c6b885418f1dc615a

    SHA1

    4d00a0ce0ad7750d7fa11d9b30c2855d2de4c2c3

    SHA256

    0e442d4dd190642412083432ded2eca9939f0b7a9a0f61cb791db9064a6a6237

    SHA512

    184be7676e97b296960b50f4c6c88405a19e2624d7ca214b6cfba1b12f8eb4784bbed5f8b12e0bc74bf5ee7076f729e6f106d7cef0dca1fc1e06b12d8842ca9e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a8e102f5bceefd117c1f1da5887449c9

    SHA1

    01c797e8a2d12726890d1fcede8140e168920ece

    SHA256

    bbec9ca936c32079ece2f023381697f2eb061fd26d00e1342e3c8732afbdbda1

    SHA512

    610f7696fab1e62425f057a9e55863a427d95e74f95e12214769e63e8214b88c684b4f8850ad9e94385abb2595266a0872703b16bef0fd6e62099ccb88b36897

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1d3642a1a072e3338f9e910b62f7b78d

    SHA1

    9c9b5bd9919293367d9ee5cdfb94c8d99fe57641

    SHA256

    964f28fa7310ba7652ef1b73d406e9407c073253184f51b24cc03a32dd1fe5ea

    SHA512

    1cf6a4eb8000776d7ccf473375e8e6f805ce31895b4c1c1848fb6a9c52b63244fe9008e90b5c7a66b6990d2c294366c01fccb964e70132759377af702e94bea0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    460ec772a38b6c9b97c48e362159907e

    SHA1

    941e4efa835730d87cc03217c7aebb559ca8656e

    SHA256

    41dd99e59a1ca747aba23e42a9f9fb417d09364cb5d2d3c74bf72c43433c1727

    SHA512

    845ba37b4f78dd677b1d6511588d6edf1e022cfaa30c45af41b3f82874b7b86f5bd08417f3eeb9e03d475fd9c2fc5b9224c02d20c855e397885a4f87a70bedef

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6e66af7821f434c53502f95f84fc034e

    SHA1

    202fa7d5cd2732cbe750a2d08554d8f43e87f523

    SHA256

    6e3707dfdaa65c8e2d442bf68a77c1f50a7f043cacf5eaac75a7e78db3161b9c

    SHA512

    fa22a2d830d07b36ab973b45284708b146b9370937b7e3026867e8308a67c293d97ced5c486b1203a0977fdeb6cce811fe661532efd2748797c40f76231d98c0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2a7e41aaa458f4e4a4280723d270a20b

    SHA1

    558f6103d8c1f2439cb2a82ad5ae4f5ccdd7cc04

    SHA256

    eed196e0d0086c239984d816f5bb771d06cd111e15199c15ae67ba0a0fa18fc4

    SHA512

    7d09ef2fcd6569ea28ddea00132e12d756a925567d67af8b80d67758c1285b3cb6226a7847e9436756ff9228be9a0a0b91edddb998ae2db464e7242a3ba578ff

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    93b77357f23e703d87d0d75b1787ab4d

    SHA1

    871a1a1780e869145b0dcaacbe758cfcdeeff472

    SHA256

    8c4a25ce9e9a62f8180b81ad747465e128f748843a63c3389ab7f9655bab758b

    SHA512

    22b95a290d7ebacf9c39aab73f2f462f578dcd68a78b06c5b606c9f9ded5ef7c47e05f258e835bc4c2c9e2f236fe62c406f0e3bfc0606584c6598da7400d29af

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6b543f86733388eb8ef557512d13a75c

    SHA1

    4c4a40a8decf9c4652d447d8d885f33cab78503e

    SHA256

    5d5850e48d8dbb57358307cb0c5091afb9ee74959a7dc13b5300f72699172117

    SHA512

    4ed04b2a8fc1d818d8be135d51798261828aa296ecede9d349e4c5151156e80ece531ab462cb9a76ff8d2101564fce961172feb7398c1c35f6d9e2a7a3a83553

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9515f710c4a11edc75e979e1c86c099a

    SHA1

    2abe03f5f6915f7703dbe20512eb64572040035b

    SHA256

    4c438ebe2338cdff36ae999e96a3430ac37b78a33a0dc50f987578aba0360213

    SHA512

    5504f0e4297361fa81cf63d54ec779395942276b5bb8c8ca4ac233b944b0b9b494e6bfb3632b43a7495924a727a49a0f35bcb71bc9cdcae575e1c5a5959076be

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a3b2db04201856043638cc1f4b51b673

    SHA1

    322a51bc93a3445ba7834165ead99c0b24d58fcc

    SHA256

    c2d8307aa8e7ddde70e46309a3837931cb04044fec63c4f4ce4938cd1c4ef5d6

    SHA512

    10b5f733d9f2dcc0536f2b6461efd5622f40500f2eae2efb20da7546de3d5d34130a31bebd7d5128b36ff46b0ec11ea4f9a2ae9b4a6fb389eca48449a42cc374

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    38be0837eddcd8f980390062b56bc234

    SHA1

    0b9354feec94b77b2cfc710d40fbc85538f37711

    SHA256

    75d76dd09933658d860f1c2f54a51e4834e1930382b45334f1588ea4a03631f8

    SHA512

    1807d67c3129cdec7791e7b34be70113eee5ba64f6447c99bd3b4f8a59416ea5e3f36e3829647a04712d5c0547ecf572e289368037a0a9314a12318af03e86aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    75b193635e345e961a7e47796d2e3927

    SHA1

    26f7d9f8e2486ae70db975731938282073704def

    SHA256

    3d250b043473c90a19ae2d1ff004537377cd1750d2a33c1e2c9db545082ecaa8

    SHA512

    ac80d2518ae3f11d67700ce81dfae6e41aa91dd7fd6aa1a4d3640d32c73f380e97fbdd2dcc07a4678d9dd8c5f42b78f74747f8721acd608d039f2e0bc0d4fcab

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bf6f9bc1a9eb7559e1c09aa00ce37e83

    SHA1

    4bdd26543cd7759d09841137635341f015c18db6

    SHA256

    af8baab33aab78f2679e1a65749eb05611a40a606885a33a564ac3a2848e47a1

    SHA512

    9ef95d9540817130c35a68a4ee7d1b61c08b565e51c507d80854f48a82ea83213825bba4d0a0118163f8d1a4cf24ac1a0f2f29682d6fe92a1dc7d6e5554cfa6d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    370e761d4a74357c170f90180cc4e00f

    SHA1

    2955b6293fc59d0b441bc19603b3f71cc5037908

    SHA256

    6394e209c756cd3487e7dee3f8800325c1adccb46a199bffbc33e9311da39df6

    SHA512

    e8c6544dab3896a55bc09a32539fa34bd90d48caa700bf063195e7f6800fd9e2be174b6c9be0de3d5221ee26f932e8a6efd9340eb70b8d85b90c970fa7b596fa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0a4ba44f410e14513cb325cede4d3c10

    SHA1

    847f8fdf4e1c576f010e9f661737b850915cfd88

    SHA256

    f8bc054a455812ea38fcd5eddbea5e6847f3ec907c05c340710505ec19373bfe

    SHA512

    d3b7ced920a7ca6107200041b499caf10a31fff7513f0d2c0483d85e037ffd9e6e679d12f4b951d783bbd83e7dbccae72ff38b55786af911689ea4a373769f7a

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\NNJ7O2XJ\zabedreb[1].xml

    Filesize

    13B

    MD5

    c1ddea3ef6bbef3e7060a1a9ad89e4c5

    SHA1

    35e3224fcbd3e1af306f2b6a2c6bbea9b0867966

    SHA256

    b71e4d17274636b97179ba2d97c742735b6510eb54f22893d3a2daff2ceb28db

    SHA512

    6be8cec7c862afae5b37aa32dc5bb45912881a3276606da41bf808a4ef92c318b355e616bf45a257b995520d72b7c08752c0be445dceade5cf79f73480910fed

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\imagestore\q905y6j\imagestore.dat

    Filesize

    1KB

    MD5

    3e97ed39025eb3728344faf03c8d5f20

    SHA1

    d63eb7a63f7e206b7841e468f64d572443e5ee56

    SHA256

    3385a271e4694946f8543b8d204aa0c1c96424f3c99e72f8d242acdd8765c841

    SHA512

    d46e6b6657339b68547d7319d6b83ca1d4b7ff77cc9b19a70fd3a6954bee39a129761839bf59b5504ea7fd3b8300bd780c070530cd7cbe2ea17583aa0d9d4a8e

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\imagestore\q905y6j\imagestore.dat

    Filesize

    2KB

    MD5

    10a8f9f6c51625df80e73462e12f3a4f

    SHA1

    c9861ba7161385914056e3ebcfdf96b82a8dc512

    SHA256

    049068746c5159cd652b5cda1f93332bbd8b0707524af9380d188b78cdeb9dfc

    SHA512

    4e237c43398f5088937d3ac936234390baa83828f23e406d69ac47a40ac865957cfa3f11233df8ef415355dcbdc9a77e3f860ae3ebc94c8e0ee077ef622e3f30

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\L9PN2QMY\favicon[1].ico

    Filesize

    1KB

    MD5

    91abe01116ab422c598e9c8af72cf4da

    SHA1

    0f2815fe8e067d48537ad168225ab4674271fa27

    SHA256

    b1d7aef06456fe7431124129a28f0138bb5fccfa4f4161e3087de23c005e5edc

    SHA512

    a4d5b20c3014153b6b382c43404917bd2cb5bd2a59bb1e981f5a19eb7dbdec185ace288e9700428d24e5ac623e45d04905e706f0c45a1642b1aa6c091213c23c

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\U8A9A2DI\favicon[1].ico

    Filesize

    1KB

    MD5

    668ba1a9fa1890ba16cb8adc28d3dad8

    SHA1

    5e35223b2541265114eaf61b9da2556c812fea17

    SHA256

    7746cf1b553433822522f2dc432f55fe64eee1f1cf823ef6adfde02e58e1d7e2

    SHA512

    212aa3e6ea6a2dd1abc10d4a96b7be179e0e490da187641ae3be7b7c0c30b7272d8d5b37b1c6ca5c75732dfb35a8ee30fa97cdb35704b97eeee11a2163e53664

  • C:\Users\Admin\AppData\Local\Temp\Cab9993.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar9B9D.tmp

    Filesize

    175KB

    MD5

    dd73cead4b93366cf3465c8cd32e2796

    SHA1

    74546226dfe9ceb8184651e920d1dbfb432b314e

    SHA256

    a6752b7851b591550e4625b832a393aabcc428de18d83e8593cd540f7d7cae22

    SHA512

    ce1bdd595065c94fa528badf4a6a8777893807d6789267612755df818ba6ffe55e4df429710aea29526ee4aa8ef20e25f2f05341da53992157d21ae032c0fb63