Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    135s
  • max time network
    133s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    27/03/2024, 09:08

General

  • Target

    e14c4fc8cccd6f004ddc4f99cec84d5b.html

  • Size

    3.5MB

  • MD5

    e14c4fc8cccd6f004ddc4f99cec84d5b

  • SHA1

    6e5ff7a90f2b126f51141d6bb788e14ab6783ac9

  • SHA256

    047968c2cea1cfae0c92cd86c994653299d3688bfbb26927cc7692aa19ab12ad

  • SHA512

    4dfba881c6167f12cd7c934ed3dcd7dbefedc11fc92c64087615e4865fb0a43844cb6245d11577ff82b6e55dffb95fc45323a0a28aae43764b37bbb493a9e7f5

  • SSDEEP

    12288:oLZhBVKHfVfitmg11tmg1P16bf7axluxOT6NfE:ovpjte4tT6NE

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\e14c4fc8cccd6f004ddc4f99cec84d5b.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2100
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2100 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1720

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    71b31636fe3d704fb4bf1c2701eea4fd

    SHA1

    473c674251af97b83faf0e958cc0ce2aea9333ab

    SHA256

    68794c48102a30ff61d2a5b20368685699fa6ab7aa57bf1fdc0c960413c2095a

    SHA512

    8c149cd18810f932cd453413395b23a13cb242337b90f98ba92e1ef766f98b60b264129b15b91f7c6afa288000daf8f57e1ef4fb5f26d2bfca0d0e6784713b96

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a4dc277eae74bdadf50f90962fbe748f

    SHA1

    4d92686443189fdedb8a2e22fae954370ce8453d

    SHA256

    33727758dd8232cefa4d06fa747e74e58b43151fe65a1e5cbff1dac966d38973

    SHA512

    e4ed1cbcaec084c2e0ee74a5ff89fa5cd4fa0402640358db7ca4c3302095ca57db721a911ebb1db60817993087f9e8a806d53e23032c816a3a6569d8360ca588

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    28a05cec5c3193a40c0eaff4b4237440

    SHA1

    01e2dcf6726dd9414ba97522b8e00fdfc05f13fe

    SHA256

    da7339ed63f43b5aeb2d6f06b9882d2270e89837db310c0fdca5de7de12f654e

    SHA512

    5d763cf36d6086e2d95346e29fe11e367b39bd17d3c21bb0bffd226cd8b71cf64807d6733809f02050628917338d812005b328de018a0d06ab88631a5b3b8600

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    882a03b6afa1f47af9531d9ae6fc86b3

    SHA1

    9ce089d4534d043826e32b41223b55fb0a5e3988

    SHA256

    a98dbc6bf94fd940e5ee04d03c4ad7bc426ee5b1901a1e9dbb0540f0c8c3510e

    SHA512

    9b9c241e2ccd60cc52fcccc7eb500df78a949121c37d539dc35707f2d896a4af828d96facac69ff7b14d47e75a8c69ae857be24ad24a74d6cf54c981120dce8e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a5abc453e074b35c5755f4ff2db81c19

    SHA1

    7473b6be794fbecce70b54ba7a02ba36efedd0eb

    SHA256

    a703b7e9ef1254148b961326b739a55bb223ceef447f0a2df2cec8c6838cb720

    SHA512

    708abbbe0f089221d3f73457af7fd8e139384445457d5449c95ee665a5c5012beb7a20d726382271b469e01de3d61a8f6437fee280a0264f5c6e76c1182468c2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    387494a89d7676f3d25880fbaf3343cc

    SHA1

    68d6ddb7321522675e550b340f7abc09c065236f

    SHA256

    92803d3354206c4fe146aa8b4af3d1e1c45d58b6dba96ac0df23a8a4d352269f

    SHA512

    a7263e68e1509adc4eb36d15bad2740626877b82499d0c25499c39a73cb3e0225acd8ee8043d465edc3c4629016954cab214e604b3159dd4d6903f6b23769ae0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f14086a9a46ac26fb0af693053ae67a4

    SHA1

    04b522545236cdfe15520391c9d2912c45163c0b

    SHA256

    b7436ff0ee369cb6626a30883911c5dc5506ffc1729c2cb57e595d5f731798ad

    SHA512

    b77e0c9dd65f9c41e20f654df20869ab5740317bc80ec1c6ee280eb9c11e98beaef260f08504b53d0d105be9ddc246d70008aa8718e8f18f553ec18412afb4b9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a90e259a4b1de37e59c2d92b12a75dcf

    SHA1

    e884522ddb29d96e6741e007e52c193b9d2ff61b

    SHA256

    c9700eaa29fb6039e8ca6f0e8efb936c6d5c82753619f2f8dafa733ce04d4afc

    SHA512

    a6d40c4cb4943d4ae521eeefe31a82f75fa3d7f1c869cd41411991e2355f5512ffec7033b5bcf71346f7e0b161ddfaf918dd53dc159595e1c7d5a5b9e116fb5f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d745aaae86a03c8f35bb8c821eb8ae44

    SHA1

    e1a92e381db50066ba9fd0af709e501d45f29cc7

    SHA256

    e4f9ae6cfacc4cb80ecd8be27a70f94ac7c213f3ff55458175e069d896298f09

    SHA512

    712a7968a1a2b3d6f7703b88cf7e5d195fd5d0763adcc60a5f5e5339f54a582d8326822812a1b6148d0540bdd81ad997bc39b8e8de6a86e5523b349ee41a376a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1d1da028a7a6d305168819aa690d9762

    SHA1

    aa459eff2c5617d017f1ecdc848d00a244e29e77

    SHA256

    0109a7f9435cacdcb5afee25e7366efe99091fd2295d93238b3544dc88d95a63

    SHA512

    bbcb6ac9e8a490e6d183756c4a424bfe9f8be49c6bc023d525d652e01e3a94432678d13f1bc5fdd64f45d89c772264aa9a4f64e0a943c41329954a9166424fb0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7dfbdcbf4f5895d7dd0fbb0a1c64aa63

    SHA1

    3667189c2f6016b555617d8fd074630346ff7c99

    SHA256

    5cb577cd1d619520f3b0944c1598678d097801dbec5c19aed778261c0ff1b3d2

    SHA512

    3af95cdccab60378c0315eff963eba93dd9bbce5831cae3371ec563a9d93dcf9ad0218bd76835f2934ee368da8e587009ab60c519a71754e53ae86f2b8fdaa4b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d0782608bdbc07c2d5b87591501e6430

    SHA1

    36178cf1603b445527093e512d64802e097cf317

    SHA256

    000d7c880a2c638829206c51d6d6ca2ea86e69705dc1c424d3872096f25983c5

    SHA512

    9822e66880bdaeda1fa128b09d3ba56b40e72ce8e3a58e9b90f14884941e67e343008e479ab43226bba568a95a243581715fa5cbb80a07801d76894e6de13b01

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    14f7d745d4055b9e7709cc5fccd4649b

    SHA1

    73e99bfaac74982017b372b283e10eb9421a93c7

    SHA256

    d7e604b73689181e39e991a6b4b6cf6f679ed59d2ee16652284a15a3c7ffa0c2

    SHA512

    83f44d72b85d17272d515c6bc5d86bf418d2af1a215f6aa7da2230593c7192b3a4ac5ba4fee3db76a4d96b67cba80a57ff2ba50aa24aae7d34d28336d3dbb69e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2f72f87c97b9bebab7a727d9b41f4eaa

    SHA1

    18e95b59a4bfbb0cda79c69226daff9f90aba3b6

    SHA256

    032aa05d623fbc78a441667f78233f819b62147de537f7274a1b4ce4a651298a

    SHA512

    1cfd8716bbbdcabfcf4efde21b73af34382383e041878b96bb7a4c7614a0e892553c0c6e88571b56ee46ac7f4ec1908690c20ebeaeb6f06dcce7601b2f7b52a5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8afa078530a957b62ecf6ff95208f873

    SHA1

    ea0714f12529cf067ecd87a2a8f38f3d89d1e805

    SHA256

    13ddf7e6c31f5a47de60b089bd0d6fb7c40d8eb7c36a4e5d2683be005c0d6604

    SHA512

    3d78d1c7a3ce853d23d12cfe464d3a254b709aa9555b3c04b07a9b039544165c5ddf2d1b56bf6120d0bc3dddbd726e1b671a6681b86ac062fcf043234c12536f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0041b67074babf04219d4c600262209b

    SHA1

    d6f73647f7fe3c40896d6c5071552e612b979478

    SHA256

    d6d41e676c65cd6510162621d31c343e2cd1e4bdfa3a37ac53567e2cad3e6840

    SHA512

    1321ba6dbaf9b55c0488e566ded5a8fa09368d95087d809ff8b66c72dbf33109f677c3554653b8de150d85240306d69bff1a3ad0fd6c2249aa3780b7c558624f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ccf0d595405e89fbcfbd71619e06cb11

    SHA1

    2dbb744362a8701e9b3b7e48b56153aa355a6196

    SHA256

    4d5d192a477eeffaeb9e101f86e6d3cff8365052d0b191139f411e75b69860bb

    SHA512

    e7fd55f58f5dbf0ae3b6e0650c05eea4742dec678d65b3a873ed6f7822dd1255bb3e9aa306e6327ce439b8efbfc8b247440587cd36debdc1ceff5e366dac4df1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1da66852a44cc63e9d84fbf0a4768ab1

    SHA1

    bc1973067dd77218fb3e9e48bbee16c156457767

    SHA256

    9391fa9b232ad208026c03fe8da67cb9eaeff683a103408e3dd3b9f9ba5bdbb8

    SHA512

    0e1d3456c6c52146dca22f504d3a8c270e546dec662d8339a0ccb163ef05c5d9beac41b3a2eb41010aef0e16906049fda0f7c3291b433ebd9188011bbf350cad

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    eea794ea0556dffbe7072512591dcaba

    SHA1

    b978f0ec4b3c692901bf65d121e13d5068b5ff08

    SHA256

    c84faa870871dd6ccde7f8658c5a76ff8046c98dd2c9cb12b2c1b8275a1264b1

    SHA512

    86e81896596f4d715578c7cfead55c030fb0a68489493e6b2a15b7b09974c206ae79dec942e1183735221d9f5892518647799be82608d157c1cd16d6c3e3f6d3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b5872738b4213195d790c6bd4372afd8

    SHA1

    72506d1d94ae076fcb8f9518b60bc3eb63ab024d

    SHA256

    cbacb3093ed42ffcd8964e0f3ba9eadb060f50d6a1df2e73ca8af5c1e010731c

    SHA512

    3a6b56531a33c751913f18e562670dcaaf852108b9363fa970de6a90dcda1253af95f6314c0bc60d2e530abb9ad002dce3feb172c0836dea3282380e8f5d9b9d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b94c8f01c4673470795cc5894ea306a1

    SHA1

    17933944d8623e4b5d8e40abdf8cd72751e9ced0

    SHA256

    9ea8ccaeab5d63f5be443066804ec6e9f34b6b1d459c48023c2953e8384f05d2

    SHA512

    fa2a145c772380e1c7fb59c63ddafa696e26765d000f05b37658ede23021e123ababb11add964094538e9461910eea1559225d3431355511399fdb4277f4bc15

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b7f53df28b060813c780d21690a6a060

    SHA1

    2331209c8caed2d44528777a06dd2b665af22308

    SHA256

    53ccf0cc7e5af73c60d104412c98dc84463cb1833b349cea5095605b64884d75

    SHA512

    e7e700cb4159ccc19bc7b3f887d565d9fa585a2dcb90c9b95b28b75abd5ef31e4b9c5d462884324e4bab6b5034bc8a89ef0b98b1e5988fd0626366cc8f5048e5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1b3eaa50164e9e07582caea4822b760b

    SHA1

    78523dc462b1e171b5f00726f1d98b118e9f62e7

    SHA256

    d014d2d15346a1994d3c283b4500f3622f8647d50a08ea8616902b36acd231ef

    SHA512

    fd7ef625dd06f8fb34e1a2c3b4afb91e5566254dc246f27eee92d989a429ed9db0310391afa00a25bd65506d3f2bf1c28a364f98a52ed142202045330c76e1c7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    7d2bf1d31e26c9e4c7f601e67ab9e12d

    SHA1

    a4eb6ef92a00ee66c953ba354a3af9d23cbfed75

    SHA256

    7a57a86f5ecd338991995fadf946b121e8255c82d7b7fc9245e7339da39f6d9a

    SHA512

    1b0442083ae2ebeb948e7cb4c78c4cc18551841d28fe3a8117b8dca5604d9d300dc63af5846101a3bf45a00b34cff0e8b282c2668be8f359cf286265be91655d

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\I819HQXH\beacon.min[1].js

    Filesize

    19KB

    MD5

    dd1d068fdb5fe90b6c05a5b3940e088c

    SHA1

    0d96f9df8772633a9df4c81cf323a4ef8998ba59

    SHA256

    6153d13804862b0fc1c016cf1129f34cb7c6185f2cf4bf1a3a862eecdab50101

    SHA512

    7aea051a8c2195a2ea5ec3d6438f2a4a4052085b370cf4728b056edc58d1f7a70c3f1f85afe82959184869f707c2ac02a964b8d9166122e74ebc423e0a47fa30

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RSAB58HZ\jquery-3.1.1.min[1].js

    Filesize

    84KB

    MD5

    e071abda8fe61194711cfc2ab99fe104

    SHA1

    f647a6d37dc4ca055ced3cf64bbc1f490070acba

    SHA256

    85556761a8800d14ced8fcd41a6b8b26bf012d44a318866c0d81a62092efd9bf

    SHA512

    53a2b560b20551672fbb0e6e72632d4fd1c7e2dd2ecf7337ebaaab179cb8be7c87e9d803ce7765706bc7fcbcf993c34587cd1237de5a279aea19911d69067b65

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RYNL6UIN\jquery.min[1].js

    Filesize

    83KB

    MD5

    2f6b11a7e914718e0290410e85366fe9

    SHA1

    69bb69e25ca7d5ef0935317584e6153f3fd9a88c

    SHA256

    05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e

    SHA512

    0d40bccaa59fedecf7243d63b33c42592541d0330fefc78ec81a4c6b9689922d5b211011ca4be23ae22621cce4c658f52a1552c92d7ac3615241eb640f8514db

  • C:\Users\Admin\AppData\Local\Temp\Cab26D5.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar26D6.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06

  • C:\Users\Admin\AppData\Local\Temp\Tar27E6.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a