Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    121s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240215-en
  • resource tags

    arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
  • submitted
    05/04/2024, 18:44

General

  • Target

    convert.html

  • Size

    32KB

  • MD5

    b4631a5a2db30c257ca9469abb348e21

  • SHA1

    9b5488750a2685bdf52aedc35087eb7c824659f1

  • SHA256

    eae02135ea752112346721d7a52169ce6456a831dc906e8d2e163957c39412c1

  • SHA512

    5a55751273764c1b239fd63c70456f96ac75a5d6f04fd40df8dd65c2d1de193b5713cae17665d6f76df1f1412536c35213176be41ead91d8264d05f9ed359108

  • SSDEEP

    768:UvAJfGUUUUUUUUUjX+L64giYWlVweYNUfUYs4oL1f0:UIJuUUUUUUUUUjOL62YWlVweYqfUYs4r

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\convert.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1600
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1600 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2556

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    be01a8bc9249ff84d1f07ad2e2004cc5

    SHA1

    987f7a36b26b44d238dbe8956e4bdf6883d9db95

    SHA256

    a382493e7991bf23029c130a587c92e999c3c9e31703fd3854baeea1e0d0aa19

    SHA512

    c061d67f8f732be080cc8217864c40662d618b674e478636189e594deb67959e0cd562dca8ffbc8e53ebbe956137abfa5f798602f2ef4c2d5a11a6ec95daafa2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ee969662f7621bee4cc5dee6f6179b4a

    SHA1

    0568c9d80e6634f7f4d445e5eb67882fafc7db0e

    SHA256

    addb1aac7698b72a99feea180200e48ebd0183393a211854d1298f448448725a

    SHA512

    54e2b581e89dc1948cbbf7675a47bfad259b05e1c7e8b4de5b775254b51aca66cc30b859b4e2ce562d977572ac803ff0703c6ae3862918c4018ec37d62621af9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    37e73200b88ff43281e4381d4266d95c

    SHA1

    afd6fe5f1ebfdc8c5f95d3cfb79cf0e221e3bc03

    SHA256

    54c9034665c9f908383dfb7cc7201abefeae5ab282e3f7f36aa3097590190a1a

    SHA512

    6298897182a604b922914718b157b8672351f5fe2753caef7da9f733eeb468771bbfefddb0d894f41b8ed2e98ca99a9aed8ce936cda0c679f5a52370d9321d0b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0d74ec7a71bb1f36767859e584313c44

    SHA1

    6b8a68b4a691acbd5a6862502a94d9156d88ec14

    SHA256

    2256fbe517fd1e91061a146df38e0ec446843cd656714c24d6d2cc29a026ceb7

    SHA512

    63cd89e826fd9c338eac11ecadb3d118be93ca1b4a9e1aebd043985f1800eb5874f7a7b96fe3f31a65d9d42334db30635fb3cd33296c00c44705cbfe61649cf4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0ac6758bb0d11ca8fb6723e06e271492

    SHA1

    467b90ffa8206434f702084e3ae038cfca01827b

    SHA256

    c7a51926d0a9221a65370ffdb17b1a23ad219cd243fae5b31c70925d6cfd2de8

    SHA512

    3a73b4baf30c9f7b7f690b1df398dbdc18f8169602f3054ae996e45f7b5a24e131c67fd7d87bc6e27d5a3219b8640ccf64c171bae93bd6a539a20f6c35f02fc9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    853e3cd68ba28a1d59b6b5d46bdd060e

    SHA1

    b34af09333da76880310d73159a70041f7a2febd

    SHA256

    35ba113d982930edff51cd914acc6791ef6430e92f9924b5d7f133b3e9cdb453

    SHA512

    9779cc52db36a9d188864f0ba40a14a2c8b377da89e3570d40ab3fcc126a6525c3fcfb7467e3e4ba571c6e4539e71040008d81284888cf25989b33aca67dac95

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    dd41a161228a08e8107cd0a29e706702

    SHA1

    f8185b8fae458c1b204380ca25ba572c6c6616c8

    SHA256

    302718a7770a1e56b98d2521624e2049bfb2571fdcc059f4a82c62dc368ffa4e

    SHA512

    deae2a4b8dd713ed11a2ace8b1716a690ce552e8feac0668ee79b4c20e80c2a01970b79baed95e8de50eec07d13de7b468aeaf08602462aaa52d5707b612e3ff

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    906a7d07f84fffc8e101a2fdada8094e

    SHA1

    fc4c3066e838e47914f826ecda00c0f596937726

    SHA256

    8701f5cc9bbe92e4ab8666cd737e79cd48f44594d5b3d764994bc511058f29e1

    SHA512

    8896b5486c1838b674b31120c61dec797132dfaf966b5d925e7f90d8447375e0bdbceaf2f812090b646991dcabd3e1d94667322d2502e5f7f9d819707abcdd7b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    58225738630cfd98c0fa0ba4eca245a0

    SHA1

    7242d7402e97bb8f2b056278cd880abfb126cb88

    SHA256

    237518264526e6e1aada6fd5a2a0a986ddd86971fdbf7548dbfd18d65eb01c82

    SHA512

    824d25fec29f4e20c79204b21ec4b537f814f973328ccbe0ff1602b7efa4b235834a0f5a51ac40b710d6c477102026ded5f315484fd195c6906de138162de2f7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0b39fde4d5859b92e9b6bda5d33ae30d

    SHA1

    3a7c50e884094c06031ef75dd0b41789c9fe0f7b

    SHA256

    ce0d0d6a93eafd7f0792cf2db06601f9c53d9d161566a3a5cfc4952439addd99

    SHA512

    b8e1ba6754916258cfe358d0ce0f032648852226e4448e45905429707dec9b1a668299e76e6973c638fe113ac83d4ac712eef7e2ee7a97f7b193fdef3f3a17df

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c58d072985189afd3e7f70f40bbb8eb9

    SHA1

    fea42773b27ff3b3433c771ee3d70bf33883ebfa

    SHA256

    4aa8f94962475be143905f75d5313b7a583e733436da7eaeb0beb40a9fbea9e6

    SHA512

    3404c662f877d3622655fd452705a3440eba48e612947c4954c92f2e9179fe352b2d8170b45a2813cdd17bef74bf219b4dd1086c69d93a6f09df12ee5bcda1ea

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    328f649379e71ce692d9bba374b92ecb

    SHA1

    23055172c12f2e44ad394ba220cd9e9ee40eaf8a

    SHA256

    78700481b4838e98e7e1f6442f4b019142312a383e086b28e0446b06f8c33f09

    SHA512

    bff1a1abc2a7a303b776ae76242fa7d9d0ab5e9f0c6c889e3c74feb481d4a0579c7491f1fb889f8d2d3cb0c1645979489a27be098a36f06284c420a627ebc255

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    da6d871d2f76a3cfe92361256cbbebf1

    SHA1

    06894405d2181dddbb15eebb92f1b2a586b85e88

    SHA256

    51cdfffbc7f2a22fb3b41d740d526e77dfa0409c98088cd930cf0c07faf8e6f2

    SHA512

    afcfebee5ffc4a9603e0620aedca77782602e759b44f7c74a6ee016a9faafeb8a0824d03412af8a78debe3b34e98a096c3db0103984c2c575607c8fd5aed4e28

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    72e1203bddcb33d53cd051d4a5fbc255

    SHA1

    0ff9468ccf8e4a4b8483a10384912be0943256bc

    SHA256

    dfa68f625b16eb71284b3c80d08bf3b6a7b5c79f764f379bc0c2ec58e2126727

    SHA512

    132eeedd22ad5aec68fa5e30a0393da9d6174ccfdc834f254698c210064c4d71fa449946a8b0ba34ad26de22ad6b02be0e9e37e0766986b26524a677abb45b42

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c859b67da88e4fef15acf2e82df2edad

    SHA1

    599ebc1f8c1e534ee0411529a637c5a6dc444a3a

    SHA256

    6db280c4b7865dc5cab550886b034eecc3a4d24a4f4dbe2bb321d191fd5a51a1

    SHA512

    819836cad6bfd5f5094140290138d694f1953403a15720be08eba0b30dcd4b5d9dd1b721c008b44ba022a30dbc9701a9122f9939837bc7945559a570d9be6a7c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0882a0d2a959982046813b9a20ee718a

    SHA1

    2a1845ac2625a5d4e5d2b79f4a5715e0e74a4646

    SHA256

    0a8d7ad4e6f1f6cbe3deb2a7a5c86744c854e5f73a864fc259e99620a5941ad6

    SHA512

    51a4306add3c3666741f42b5b0ea78bcbd11f032ae169b5fb9e1f94594c240ee3aba94dd79067341306afcb917b03e0a345b4c8b6f24751e26d1735ee50d1d64

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    51e6c44186a299cb882c982f57ef5792

    SHA1

    ef3f10c92d85a12d98e0c879ac2f7c1e24f4a5b8

    SHA256

    8fdfe175118c651e16885378c44140f38fafac7996639c8a18992abbcd0d1304

    SHA512

    53c08effe38690a341b3b397ff90b8d340726deb4b5b7de266ed81146f94bb357755b8742c3642a66d84312b40606955e8e32e2bed9830122be5f58386f3bcfa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    256eb25f7d4311034404f8e23987bdea

    SHA1

    00284a080f0d4d96d58369dc3386747edae98ed2

    SHA256

    050be875c93bcb3b47d93cae09c47eb82249f2a00ffe622b9d38226b835d3761

    SHA512

    bfef87dd84e5b128c22aa4459e8dc93a0449cb1cd95b1e32b3afd5931c2e2949ad4177692e2fd0713aef87905b03c37adce1ced1bf6dac0e2f426dd831ebdda9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fdada27130fc01ee1cf981d892a0cd4a

    SHA1

    51cbd4366569f934da3d2b9e62b2afd73a32f4b6

    SHA256

    a40f598717f3ae200d67a0b8567010b82f111bfc35afd1bfb4b4f71de1678691

    SHA512

    5ac968bc695284a282b364dd3e73ab1dffd95af80dc48fcb5165f013d673f96d8a2ecb17de9770fa49c5616d8df543cd8c6eb53d6cacd278504c2f3ac75da016

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    72b2108da7a1367ba0f0b2139000d559

    SHA1

    9adf32170adb2fb1a04ae21a8ea7c9dc2be9631f

    SHA256

    0024ac19910ce464f9b3f5cfa803b629e16e7b183819ee2ca0d3e9330d73fc69

    SHA512

    0c28a197e04238d2f51e1607982b1184e59988bec5fee1cd3e31ac2f6b8484dfd96a720a1a5f386f862f248a5df7e4ab78bff595ecc9376f3ad43329cdd1fc6d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4488782173414a00334ead2f6c44984d

    SHA1

    ce16b981c99674fd6198a09a3b060a50dc95e596

    SHA256

    01c06c7cbaf3472edeef63d551f2bf3da9788a3ebcec63ebc1db41421d5c80e5

    SHA512

    1257d226f638b84653f34fde56e566f4224c40efc9523db7f8b588c8b3a539fc6ea58c398b2ee9e7de822174fcc4aebd7497bfe242dbb28f993ab59d48b5051c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ccf77eb01bd68a36fcc0fcf740b36a69

    SHA1

    4d5cd63dfb82ac393db1b828d87da90f2fb1ef82

    SHA256

    644c787f8dc5ae83ac764b294d07a593e59828bf61fcaa0e4e599d611bd1bd08

    SHA512

    6eb214dd023aed70717909d1a387ff7a9509a369c056f6eee983c24e33b4718984cdd8c4b36cdb0e5f80596f3aa48244529a7a0f67b9d21b5dc9fc1931a41aec

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d05a7e790c30cbc1bc1d32995bf7733c

    SHA1

    8c016108a27a72dfd9a49dd1b27dc898b60d34da

    SHA256

    8217f4a73822103f20240feb90b2c75477a9c46029e0cff93be9197037208bd4

    SHA512

    4fabda6456a7f812fa7d9735f19fde2d98b64c913089557f3dca3a739ddb4718c931b4316d077ea6a33468c546de507267a51ddb6923e0931421baed85e1edba

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    1dd2d5fcd3b76a4a7c898ca514e26115

    SHA1

    e082444b3bbd3a03d418c1574e451276e736f59d

    SHA256

    62bfd38c61c2655fb0853407cc13b7eb8a44f08f222be58eadcbb323e99d4b90

    SHA512

    6f573043be58e29b152a94cda57bda44bf8c45552653fbbe383b83f3f5ee2847962b3cb0cb80c24f2cb5da8a5a5b8445ab1ae75ff2fbeea401331223e2b6918c

  • C:\Users\Admin\AppData\Local\Temp\Cab2B28.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Cab2BE6.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar2B29.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06

  • C:\Users\Admin\AppData\Local\Temp\Tar2BFA.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a