Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    134s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240215-en
  • resource tags

    arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
  • submitted
    08/04/2024, 17:23

General

  • Target

    projectproposal/fresh/Sign in to your Microsoft account_files/prefetch_data/boot_003.js.htm

  • Size

    634KB

  • MD5

    4cfbdab231025e8b0ee7d08368516d5c

  • SHA1

    6e3036d1312a4be039d0175e28fc9a6ec000496e

  • SHA256

    08d8da450a7146932b1f6b41b031d4654ad9084905fe6c356c45a6c40a80cd19

  • SHA512

    287bd71d3c8c7e14ef20e587291ccabb7b7727a21eb82ab0d0bd84f35f6ee30db0e223066894271454661e32f3079407b6dd71dd2af50b241991704020c17722

  • SSDEEP

    12288:tvC2YJrhqU9W192Hs6bKRCWSnYExs9VzB+Cdj577tz:tvCrJrhqUE19ws6gCWSnYExs9VzB+Cdv

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" "C:\Users\Admin\AppData\Local\Temp\projectproposal\fresh\Sign in to your Microsoft account_files\prefetch_data\boot_003.js.htm"
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2824
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2824 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1336

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4f766484e458b970a0d5117af3d63517

    SHA1

    4c2ff2b22cc9271ba09e7a5c7875b0870b45575a

    SHA256

    2ff566ae1c3abd669e1bca9cd6c435dfd64f5d0d6f9509d9d0d908c6e324c7c8

    SHA512

    f11c75727f6981a9238cebcd7e3f335d20ddd9b8751c6d1225d835fa7f4c856dc034a8274fdf9d06fd4548992c9c0e4dd36138ae72b471a926835835006f8853

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d0cf964530601370fa548eee9f26845f

    SHA1

    f1650810c5a526654efb9f83cbb48d8e916bd8bf

    SHA256

    8789f344ca3c92c0564d4c13796bfa7c84ac79d2a514a5598347fb0b5171e636

    SHA512

    2f2d6698c53a52c3813cc797c8f4ac507bbb078265c1e2e4f54c9c67f274ae347ccf181938899691f8ac8f67bf9fb5e695e3b72a62079bf053c7cc1e702059a2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    317eb356b1efabd3295993198122db80

    SHA1

    507b5d71c7480e19143d30ff96a9dcd8dd46105f

    SHA256

    441c2847f7ee240b2fa8dbfd4be4c06772f4e3a52428c007248a96d675bce4cf

    SHA512

    72bdc26fb8c4f70c5979b5c595382577e4951a22aee8691901f636aa93b155523e7450004a68bfc9337d3a95e8fdfd964a2872ff45097db67fccd80f1a6730ed

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    984e496630c02a2a6dd45e96a70733c4

    SHA1

    6197e250ae34e51d276c8f545ba192f3568879ba

    SHA256

    cf9fec769081c92954c0f6dcd2e53a5b393c50b0fa38d771dd809c3d38fdc2b7

    SHA512

    602f83c7d5d2f985f341b41a74e93a3a1a69813417515811f41c8884815f8b19c93cacfc7c1610ebfb42ca87ca60286d41ac3d1713d3ac69383ded0b637688f7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3bc8058e3a350144fd1c585a50aab605

    SHA1

    4b1a5600a3b55eddfa90a738806cac15428c92c6

    SHA256

    88375b91ffa47d0c49f4885bc45eaab635d4336d4cd6bbc6dd5d1fa5e9116872

    SHA512

    90267a19117c5f269a4bffe4ea21417a3f825024040dc66bf7fa5f58e700b0b4a22ab73881455c3fd3e24a5a70fea25c15a3a22d40fe82dbe59c23fb87c8af46

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    af8658f21a1346c21a2f9b120abb9778

    SHA1

    b3ca670e9ce0c47b9b74120c48298197493faf3f

    SHA256

    e7e76bd69d4fb67772b459b38a38b207ab3692e72569ea462dd302a0587ef1a4

    SHA512

    5b79342d5ded3afe14984d97dfb84d6dbb5e7926ece586c6999fe09d7c4e8470b664071ad20254d316da4dfc02ce4826dd47c9caeea43d3a0392b1f63af18d40

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    27d2fc7e9cd7a7f84f5976df53e165be

    SHA1

    4fcef6a5a0af4b24824a634fa0247bf751b83191

    SHA256

    465a19ee6ea3a96f8c77695ddfc972428d0fae743cbc85796b78e365f018ca85

    SHA512

    bbc7993d3047fa709c4d894d08e98e5c46f4cb561c0dafb4bd13387172d2dd6d300053596416d34d87f3d0e971797e727931c7be6a77683f513c718a2c07fd95

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1351c7a07278c7348928e7284e3080bf

    SHA1

    223e10ea8331c86997dab2c05fd1dc0859c9605b

    SHA256

    d7d409e9beb7ab12fdff7fe115813475787bca0836071de5bcb07d6d9769e017

    SHA512

    dc8513e06d7edf1b432956a2006bdc987996cc4b764a6f8adab4f1427af43be54a69feb5f7403fa52daf8bbcc381512486e70ff1d21687a3233c77f85b79de57

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ea20454be943da43743b12f177cdb810

    SHA1

    157df691c73f0b31d83c94c9bc7ec9420f60dec0

    SHA256

    c10358557f9b02c7c3773ad9fafbe50b7e0120020c7a66137ae7dd9bd766e7b6

    SHA512

    f755bc3666b6d2e4af52ef606636e05f5564ae817ed5c21bc651adbbb386bcff203c40c086d6038b8f08b0e745f930b617c35e9a1515924b08cf5c8168a12eb7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6c5ac8dbab66e6dbbfa194effece2cf4

    SHA1

    1cf182e223a988070544046c02bfd0ace80bdc3e

    SHA256

    2fe3143346158481d33ea555836d79a095db5401e8b1721c367985d3104362ac

    SHA512

    25dc062ae2c83b42f7b55cb79b85b2bae7e8c2c4963fa50f3cd5bbf1a88cc03edb90a42c3b8da2b3811c7188ecd6fa2eb0a8cbb7aee4a16ca6741d5f2e2210b4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3b7c63fb29d9046e4bf29b1aeb7449bb

    SHA1

    96a86ec1e450687e7fac5ff31e0546abc6e517b1

    SHA256

    72f55b166c341065b68ee43195aa2b5f18f5fd8f86783f448b58113c01fb9ea5

    SHA512

    2053fb61a1c54a024b768ea7d1ce8c3c2ce68e3aed34d6dad9b46b1b3fd781065331a4bcc330553e7d91f10f2f6cf79796e16e8e725a5702846a5a576de6390f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9de98ad3c6321310beeb2759e8a52980

    SHA1

    60469a7bab3b671b76cab3ed4bed1094a88dae83

    SHA256

    a9fa7601e940839aa6cc7f1fd7a3546ad6a64446163111873fd55103471d3cb7

    SHA512

    2fcc947116ab53453cc04a9995340037b92653c17163772920a36fac150d7099a3768d74daffbbf755e465da4767aacd2dfd84630abb9f5676d607b5edf0be8f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    853a2b154c60c65ac78ba8587b727831

    SHA1

    943bb47365218e745a32ddb88922002c298a78a0

    SHA256

    4c75029ec80ac78a1751c0c19274fd04aef9b9dab460c3fa6f7a4d3874f5ec23

    SHA512

    2e49f510f45a62a423b8b4238f242542bb140de2c716a20924e8001b5f0caeffd00f66ab10d6dfccfe83bc1b3eed5edbde4788b887ff09e3fca32e528228159f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0dc8692a197cc9e41792f654a89c10f6

    SHA1

    16ab9c9d86ed8ba57707d3a09f73b74ba955ea04

    SHA256

    a3f6c9e040b01fb1f07e21173123cc45755a2c9fcd8a2fb2ffc09a2291c641a1

    SHA512

    74a48668c873a537d104e1759c8fba03db4e6231f2975cd0a59680a10b0411505d8f7c6b5126728e5294e923aab4d652e522d9c5fe036c196b3b91edf5cde0ee

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cac54c3d157f973cc797eff8708cd857

    SHA1

    df5156a4c2d0fa0edfdf5fdb83f956701bffc8c1

    SHA256

    bc1b05fd8926eb845a348633948c7a2ff0d944fc8b99922a5d2224cf64cc1f15

    SHA512

    6f98ebdce088475c4e149f20fbf897d2dbf409d0c0b62170c4903560309336ff5bece344aa869d3da752e19deabc94fe8cdaf3c3db86e2b11762fdcbdd043bbe

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cf516bfb8018df6e8f28966b801cfb0a

    SHA1

    7c06af39df7a2f2e7095820948f837ad89a1a188

    SHA256

    c64c63c6d89c9fb235faaa973c53121591e037503bbae549a522d48b04cd7777

    SHA512

    b12f444dd5693d782495f98ceed97bb41e118e2b0965e630de4a4da1c3cbce264f3462a7d2fde4ef9da07ff9a60cd8350703d722afc8925d58511f29997bb5b1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7e81c2e55263c2271cb2d08fece89b7a

    SHA1

    84e666a754886152244a2a91703c518cf3f73590

    SHA256

    d559e9824d249021311a78da1c41823c94d1a0e8b662d64eceab588800ba45a9

    SHA512

    b54bb3cbb216c387b2e0ce85e72a17e8e90e38ee13fd0ec0c48f9fb4f3b3c2a11c530d153cf911aa21d8dfe99f6d62af184ac88cd78450ab374517ceebbca9f9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    603a7508409edcbeedebd68bc302608a

    SHA1

    de7d858c9cf5498d9bb3e9ef3ba213db2511b087

    SHA256

    0c287f07791fa90af3bc0966e4969c144af30caa849d38642a43b2d62d0e47d1

    SHA512

    9f416a53ba54e9bc7ef84dfc8f4f28733c56c22010b031b855fb392f49f8173085ab5fe1e9954ce3ea739ba1c0281ac84ebcdb4006f69c919aa503d1112aac70

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    92db28d4cd7782d01142f67e391b5453

    SHA1

    2d9db24354a17e583885bd864ae9908cfc2aa9e7

    SHA256

    7ff5c5c8d9166f27209acd0a141f61480cd51cc2c7eafb2aac6ef0a682a6838a

    SHA512

    311871814162efb92c35c064c3c9e7e48f61883e68209b2502aeb367ed7c737a1d976b78062257a9d57bd4bc8c689df5d70550cef1ebc750c11c94e5d3831486

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6faa23d3239b9a5afea6c69680edd9d7

    SHA1

    654cef4ba9c63a7d9094e9683327736b012ab73d

    SHA256

    cb6eecb207c7e79e8a7de212c563855053c55524e6deebeb5e0202cc1d0708f4

    SHA512

    19d162278702ddbae1540e6a37e726a939b3694306916c1618dfde3f07403c48cb4b13ee952f81a6ed20e2a4448e7894b379db85692d225f39f789bd4df984f2

  • C:\Users\Admin\AppData\Local\Temp\Cab2A8C.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Cab2B88.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar2BCC.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a