Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    118s
  • max time network
    136s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    26/03/2024, 19:57

General

  • Target

    dff7f9ebe587d394b490cad9aa30b33f.html

  • Size

    68KB

  • MD5

    dff7f9ebe587d394b490cad9aa30b33f

  • SHA1

    a275fab9cb9aa0c2460644d988626d25b69003ca

  • SHA256

    7d2ffda8c4c003da44b0ddb5d4a3c755e64720bcdb20eb33715c4317fabb1163

  • SHA512

    21bae0f1350f368a00aec0984e3aae32e9422f9d69bd349402939dd1645253c1cf5ee730ff7f1e2bec7e1e34628aa798bb845ff0659c0c676ae9b9e457791b4f

  • SSDEEP

    1536:/aablmYga37vnIUpBk1II/C3CYsZmRvAQCrXQwfn5dRl/tKJzak:SablOCvzpBSzyIZm8rXxfn5dRl/tKX

Score
6/10

Malware Config

Signatures

  • Enumerates connected drives 3 TTPs 23 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\dff7f9ebe587d394b490cad9aa30b33f.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1176
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1176 CREDAT:275457 /prefetch:2
      2⤵
      • Enumerates connected drives
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2556

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\E87CE99F124623F95572A696C80EFCAF_B30D8E78897D1006055E9AA2AB162058

    Filesize

    472B

    MD5

    63ba582395b5f1e61def0862ee3ecd90

    SHA1

    99bba37806ed63ec60c336c3891b7d15bfcda006

    SHA256

    a08a5ec6faca2295a7db419741b84b637515c1f1d50d16df324f2acec3255c41

    SHA512

    d0ac07073a4b055942ef5d3dc3f05db8c000d8fdc1209d286d5f0fe33c46b904a0442a44490a29c8570dac5d3c8b9df7e2437a888c610a7b493ad4a0730d5580

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    331845dc330a6e383bfe724038173481

    SHA1

    90332c0b022e4048aef402b1f2a60a31fbb7a372

    SHA256

    b3324f7f8300d6b5040204b72be13d22d73ab4cc0f36a5dd7d20817932c50172

    SHA512

    f4cfd228f0a6283f5b4be5673298f6ad1f37e13348c518b6b84569329426c2434e5c9bbf608646aa706def5947f05b666c1447abcbf4e694f0d37e4a7c755dec

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    175a471fbcc47dbcd0ae7cfae69d5cd0

    SHA1

    3834362ae46645d3a99d839db49564415d5ee2d1

    SHA256

    6edb3403e28a3ddb17d76c02ae18e72f0913585f55966005868851f398c2c18a

    SHA512

    c19ae4018bd6506888fc880bd024b368fbb0c3a2e9afafdf95554d8bf99ca669840a5a0756cd9c3d3d0b134aadbcbc6ecdfe59c5282344cfba2bd048af9c0dbc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    93301a0e98206863fec1749f2b75945b

    SHA1

    ccdbd5294b9724c5734768366f2315ceed567cf9

    SHA256

    44db103d45e981141bf2aeb781cc0237b57653d2a3e15fc9d4a4c4ae386d0586

    SHA512

    5cf7acba8f4daaa27fba9442865d2fb6df97ad55f6dc568e7c3a83db7e659e9cf5d7c7a67f80da7863532d9b2c1823e44f5e8eae8cbb8329b93d680c7766a3b8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    16dc531e9467a52cd6555234e958b34e

    SHA1

    e214566e6efc26604667abb4da905f876b52bae9

    SHA256

    0d78473f3f6f5a2c11d8a03bb94aacfd66c40f0cf6b383aca038f03543d03119

    SHA512

    f38946a29a65ec369cd154da0a6131c71aec5d5fea733a2bc8e2cf082bd08b8f3f3c94d921462f61561da8f6826457f55e7ba4f01050d4525eed868802bc8160

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f2409a122556be4624dbdfd8773b4012

    SHA1

    04b14a5ffcf7692b4915099c3de4913234d25cb4

    SHA256

    8bede5e7893efdebd4db173040a6408c2e8ccfbec24ffb0fa79515e35de15fe8

    SHA512

    170f223f1b575181fb1460c719bfcc41d4f9d846aced6da38f20469a2ba457b75ed55ff3998609b2471d2d6a67988c8472c81548c33a6fb2948883900901c52d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8312b11ddb393e86165bc298ef578548

    SHA1

    8f0ccb9856d52d01d6a69208f23dac43527800cb

    SHA256

    095ffef356ba7359019b8c2daafffb1882cb65a1c596360bb868b43fd7c7c281

    SHA512

    7729056ed0ca6143c5d09b8c3116966dbc55f467103df590cf8932e8915d51a5bd0343c1248ca90c6b4114233b646ff12f3d256c3f6d9d17c8b7e3f999836a1a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0cee2ad55b3f362d58ddff4a0fadbfa4

    SHA1

    3749968652c8cd3413debf69842413ecb7a7cd40

    SHA256

    ba7e8181df06c923dbea63072a004044a8eabe57fceded5f09e2aeda227646d1

    SHA512

    44a268bf6ca114ec5f477634cff18bc12fcf87a240ac06fa3cd1fd61d7b9692cb7941894f6780d471f9b7037112ab74550dbe569ba967cff488cc85eb86c6a25

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0f6deef578ca01c57fca3fd14e9ed145

    SHA1

    7824c8db6116ebb6e411287cce18e981f0013a5f

    SHA256

    dbb1b1ad890fb51d605779e5274b80466acc05319aab69321cb5d3b99f206912

    SHA512

    0fa0e9311fc4199689cc8214d8830a04293dddc1c0c08b97ae4e667ca082492cff72f1bd925a320b1dc21a4be63455f2a94f6cb56d2c9c2b2a9a486ff9118c10

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bb36d73708fa8c9796d64ae991c42c2a

    SHA1

    cce923028a2fe254b9f9caeb660bd2855e366b13

    SHA256

    ca1e26b2feb1ea232048b6c1e68f1763c3321f3f0d973b329302b1e852c5a2ef

    SHA512

    f6efba412af4493dc1e2d9f22785c7ad75f87f658ee46da3460fe8d3e634c83c62a83464512d824698da115d75153d554c22a76affa691fc20e0a1f98ee74642

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    888013c7a9394648dc3e7a7a4a3c57f9

    SHA1

    5adf173a34a8629b01c47e746e9971a04c8675ea

    SHA256

    4a01ae48702986a70c63a4332f3a997eefd03021317f5f554568c0e5c64a3b73

    SHA512

    29d04c6a0a1fb135d4b89c6c521bfc2f7dcd3d53074166f5081dafd402a9b05ef8315cab17eb2a1b50dd757cd5713b3c2f8c916943e95d77f48b7cede0210424

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8c040ddab2986b665ee16be020bea535

    SHA1

    77433d52fa20fb188592a6461c093271402c914a

    SHA256

    7bae7b7a334557c23eaaa521a9a129eb572a33a87192472e8cf2a28ca180a729

    SHA512

    8ca3cf8c54491ce5d8c125c81982b8051ee6c2cbcaab89825a54a9b3d51d1628ffa15879a8f189dcea17d0c300a92e39ee2240f71183a2ddfdd51e2c3c3a8a8d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a4abfecd2cc942c8b712e260c0e87d80

    SHA1

    a873a288c5c691b9d7c0db1608235a1c026cbae3

    SHA256

    b3115ef50975a1e1695d30dbd96155929bdae9370ad036175eb68f41af2e9f61

    SHA512

    514bbfeae628d6f659df1ae83a05ba7b0b7c2540119da3a73454fbe5d5fa81d92d726cf6d39fd9faacc5d49869dc18856765b35fd7f90580d801da95a4c63160

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    04bdebac103bb21ba4d3666cf11bf958

    SHA1

    cc494f65e2e2bf8c38b923a177c1db9e406e62da

    SHA256

    8c8b33fbde46ebbdd39ed5e05b08f0cd87426ab90713cbf8d545c537d0d6336e

    SHA512

    71a79952dc5912971c4bafe3fc06f7292a4e4ad1f66a2d2055a8a3971be4cbd1dd80688a6eb3c0d0da5c4094b7354ecaeeca10e254b7ceed8156b6bd9ba8f102

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    13157fd2dc811374048175bd0188f256

    SHA1

    6b8fd06ee747e90e2dfbf9621aa4ef8139f73001

    SHA256

    646ff9a905504c99034f5a119c76eb42dc16e5eae4567b7ebbf0e37ad23baa45

    SHA512

    4200d8b174bce97546ae5228981d04381ea588d4511c3a9535dd26ff8ec1f4038f010a666e2318d8eaeb3782b5bf2d5bfdd94c723d320279ed48d168b1ddbeed

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b1e807a4a215baa20645a78633c4bb5e

    SHA1

    260672355bcc9308a24c1600bcfbfbdf20702940

    SHA256

    1b5dabf8105cfff57f1e303e362d3081e77feb52643cc9f816d0c594e87eeea1

    SHA512

    6670968438719513952b8c9554c657f04d747d91201e6ccb9cccafc76a44c23d85d7e52b15a6b236b6068b9b6153f4f6656496ef21ab5cf05bbe15c5f3fe95a7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c1b553e916255f9fe32002102c17e0af

    SHA1

    7982caf5a32504750fa93da2fc7a46e185c32fac

    SHA256

    4ec8cc3caf8703dd1abf3b52e98c43401767aaaafde1c69e0fd0f47d325ebb3d

    SHA512

    38c447bda22f18a1a3937ccd791b56377bc8d12bfda58c32b7133d55606b828e990f8a30d151c720f604e00d4cbfbacd09ff37484775876b2fc58faa70862a59

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7d17fbbd90d50b157a31c290aa8e26f8

    SHA1

    9b4b6c3fa1f9b4174436d6ad779a42509752c650

    SHA256

    53d57211d5c438034e92a898e0d414002b5cac88dc63d75313c1837657fe275c

    SHA512

    e513ef7490160d1d9d7d9b2bef481b870934ef8b99dc6441b6939c7c7e4738b16e4663ee517378bbb03266ce994fbb5787a82447cfddb13894d4181507690c39

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    83e79b06c2cd9dc71d6a101ba3b5889c

    SHA1

    9196a239c5eaabf57113e4e84925e0356c18dd8d

    SHA256

    463b2f49d0cd1ef3cf96259787f9e6929ca52aeb272690cda734e3de4df70d66

    SHA512

    f8de40ce1b424986f79683de3b3e6319645f1abc33d47da5f2524672394f222fecb6cec85a136233bf4a1c0605039d19eb81b18d9af6f59779275c9aaf1700e4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    470eddca0996416e0e7452d33888a2cf

    SHA1

    0da34223884f89a95c2dff4401bd78ec69291f4c

    SHA256

    256b0f6e7ce7d5d200d164dacdec624399438fe1befe2b765e5663c5fb10a5a4

    SHA512

    df6c2cf5d10f58d5af9239b214d8f192a8f28319893d3336d607133c16dc123462799b8e8bae870eaea2c3707e049cbd97d1905c66844d13c0b1e34c93884852

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5DKX8QD5\1794065108-widgets[1].js

    Filesize

    142KB

    MD5

    237f2bb58852152d777debcdbbadaa9e

    SHA1

    d33fc2246ff9d0ba97a79911073d9033254d0e69

    SHA256

    8038bea4138c6f4160aca7eb48fba293f6aea54f00094485063ec6b458dfd6f8

    SHA512

    2cfaea59e3c99447e1644d17092725676c6e4db175ddd5791b4f7817795f6cf9d4b37b88529cf201cd1c1b87c41f933c64f40c44d63cc5062826728108624e0a

  • C:\Users\Admin\AppData\Local\Temp\CabD673.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\TarD696.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06

  • C:\Users\Admin\AppData\Local\Temp\TarD795.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a