Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    138s
  • max time network
    150s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    21/04/2024, 01:55

General

  • Target

    sample.html

  • Size

    21KB

  • MD5

    efb0c6e2eb70cd4703660a70c350c112

  • SHA1

    a1e28c7ddc1b95194d7ea27b1452a1e4c815f20f

  • SHA256

    fd94887fa9a7e09f6baa2607c8e3587ade43d134c8c8a605bc0d97a889e3154d

  • SHA512

    0cd3308efac5263a3ecdd96d308bbb172ae89a6439ccf448f69e2645cf338716a250f484fbc7e7beea89c031c4eda53b079e7fc966053dbb5014ef3bc8572ff5

  • SSDEEP

    384:1SFpvs6uUWCh0Txl+4+PLBCobpH+x010/1RFevMotdvu3hl:1o9/ph0S4+PLlN+x01nM+dvahl

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\sample.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1288
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1288 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2920

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    3d9934167bc8aafc005aa5af672f17f5

    SHA1

    5428a3327c37fe08a1ffc076abf0bf1403037fcc

    SHA256

    1537a510c06f703173d3a51b78539ac81c1de36cfa69a027f027492cb555bef2

    SHA512

    2f53eedc6326bdb561e524e27ea8d2d4211cee22b5e60e0402eb24f2e11867b14cd3e03f0a76f13da6205ce2aeaf9e07b949606ce2aed69d1a213457152a0680

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    799566107d2d12de7436d3f9d9fcca7b

    SHA1

    a17da629ba31a781c55b541f8406ab70c24e039a

    SHA256

    47b08178c3d2fb6a5b70c8db52535db390d2b6dc9fc0ca1f223b27b516c1e248

    SHA512

    70bc2f1c1684aaeea44977d331db51ce87f2d85c1cdcd3d66729c9b9575daec2274498277f0feef4bc50b6fc59262310a5a6f360ca923580e0d47c6b39dba65a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    28975381bd45443a5c928ff0880943bf

    SHA1

    f463bbcdb06fa2973889d677e54276776a165bea

    SHA256

    30a48b1ff8e64256e3ab76ce7a1765fb51949934d55ed1779ce0d5598a22c055

    SHA512

    dd4d1a39d853088d41fd8d7d8b242a1ae92e42e3bec2d8215989f90c86eb7f3b5d4fb1a9315ec960c50aae10ea30953cab19d8c6a3ee0c095092c6a1f962c408

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bac6b32fd5018c9bf5c9748fa14913b7

    SHA1

    ec42b359b1e1258a13c5d11f00173f84ebad47ef

    SHA256

    b1bf78bb682983b111c819156f2e7e61eb2d6c23d0c79ff6e79c5e44ff38ee70

    SHA512

    48a0521b367262d7cb0b2afdefc5282aba857c4a43ece9586f9689e0cf1283416ca5ec7551f46828f561386d63f53d44d8eaf4a2b93829359dc3485fe659b9bd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7db8070ec9e7a8b71749ddb041ee5771

    SHA1

    c5c80311dfb33c607e827fb072b0ebeedca1c286

    SHA256

    a19fea1bd4245bae847795343cca184be99f2c9ac6055a6a4b9a7352eb1f800e

    SHA512

    74daa7c6a896aeb2170796fb8efec28f4321b065fb2e626c8fb432bc43cec7eac2544e4752d7327146909522ad918ecb0ebab46e435cb213b9ec3cb87773f67f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1dbfd725169af8f62a99e798132ab25e

    SHA1

    d55e6adee053f21a58e4fa7a6892761b3e1beacf

    SHA256

    11964d961088fec999354873bcb03b518ad5df6f6ef8b12a66a386e2305ebeab

    SHA512

    d23ab92f65a8cde912c1f8b52b63e51d0f68691f76b770be7e904706005120bad0c28b750cb6c072f9d69bdc5ada2effbc2a37f0acf789bd5641074f2c0123b6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    75bf3ab6d00d1d76c6ed1894401f33bd

    SHA1

    b55279c15fd413ced1dc2d19962ec59460df98b1

    SHA256

    6f21a258bc6b7b425ffca4887b030dba78023a6ff28c38fee2458e6cf5662677

    SHA512

    4550ec5d360e693d371948b4cd5b2628514a7eefc1fca14a677b46711e7f824b9c4dd29c30c338c9dd08c934979df4a219575acc1376fd90639df88d2e3d8c27

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bba93710194473a8750121602d9bea5c

    SHA1

    f6faa8547eee59166c5b289f7ea1d3fcc47ea629

    SHA256

    d5d6b025f75db82ac1cf43a60868937e6904a8ca4627f7e34fc5d523f64d34f3

    SHA512

    f7ec68629b44636503fc073499bdc3fb5afaa94a53eb2dbf2e6c722a1c7bd730a8e52c6085344622b5dc353512f40feb8ce72c4fc4332bba2221d67aee7b9c31

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2118d82d48672586d42d72ba1f2e4c04

    SHA1

    05b20062b1bd9445da702caf4b791d2864908d7d

    SHA256

    0d7a0f54f047a9cbfd8dd5ecff5171d9c40f5df2705eafb797a6a35dea8569b8

    SHA512

    17738040a63cbd7fb2f5cbf399b09fee2c0b5462155ac42cb909df939d04a52b57abe3b08b6f8216bffbc0462dd0db231401b3def1c0de5065996abc8fe7efec

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d51995fdb6f8e957b7cb5d0b64c25129

    SHA1

    51f7598879d00d7f977473bcf941c7e40ffa965e

    SHA256

    666bbf4aa2d82099d0bfb5966b8191022bcc36c94713750d3fd12a3c6c791303

    SHA512

    104d5fdc66dda23c9171fb1b6b2a4937462344984bc9c3a17b8513a1365d0b67c8c442d4083700ea01c0f0a9707a0667598219908fbf0cdccf59a07ab19aa4ca

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f0579bc7d93ac23f4dc73bd42080b1bc

    SHA1

    161bfe3b2effa87f10327b4c57e8b18069da589b

    SHA256

    5dacafa921273aeff8c7100b7dfac3b1525d636482885ee6c60ecc8b9b024bd4

    SHA512

    3bfb33b4a26c22786af8ab21367f25cc9ef9deabf9f780e21190f63e389cf0214f14b5cafc53a68d0259ba40da91fd31a42aeacf18165dab3e3466120aaef121

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d8ad1a88401def9e398b351e2f2ea8ff

    SHA1

    892daadad9355372b4feb0d1e434b47d0e30b311

    SHA256

    251f170faff98c22510f39189d268f3740985ea267632280fdfd67473850ed8e

    SHA512

    eb8d9fe9c8f06ab2e14e29078b25a84517a8d45ac6552cea2b663b1c0326d687edb53970e560523acde01eff70e5e4eac7d9781349da855d442a12781b2cebf9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    03154ac90f764ace1d57f90dae69a9a7

    SHA1

    9b86ab0baba2b8beadfe4b45fb5da5be6a2f55f4

    SHA256

    46a5f09eaadc16c5a3da95a5f0ed3f06acbdb91129981a04350a70a88d5eb752

    SHA512

    558bdf8172aee11070f5b92a2b043a28a90dd26e2f3a494591081cb61db34f8ddea22b6f4751450e0d7266b1b9851de58780b7b6f8c9c236452df4b1eb5ceb88

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    39adccebbaaa6bf5efe1bb76eedb894b

    SHA1

    66e057f54640cde3af8a02ad903d6a80fa38ed3a

    SHA256

    acc0038c7ce4ec424a40e298c1181f7199a4f1654ef0a360477133eb87d399b4

    SHA512

    3f9000f4e57681f316f340cf8de2b2cb31703d8a2c8b1040505773903e5da9bd8c5081eabd8baf8ea7deb5e4cb4aa13c1364c2734c790acadfe7d2e39ef32301

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d5c085618e012853990af36c2549409e

    SHA1

    974ecb6569edff65bce294c858af4fce6ecb631b

    SHA256

    fbd04d7a00ee882a6b967a46e62eabbed1419c465ed055b846cb5a7fb0c5779b

    SHA512

    41f217970e92212d6dd6cc5575ba31edf850c5722e44481eeff1520fb35418042543bb5926f4d4c8de7e33b4db9e8486628c985dd91583bfc947c46f28c6ca6d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5fa7e3b5a5d7cf3ab54faa73322f69ae

    SHA1

    81361f6189a070b550b3df855da71fe892df16de

    SHA256

    7b1c38966c444f8d9ee2fbdacb5097eb2eff36a0246b2d5e7798233d0a929b9a

    SHA512

    17a5a36cc2f884d9d4689c1b067a668e05a60592e505354f5bcc828670a5d36ff3c1c0b78b34ec128e7d1bc436aec395881cc944fc21df731cfb6ee87aaeaed9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    beeb612c04d61c0d084d7aa1500f59f2

    SHA1

    ad808fcc432af6cd681f71434e75209d0e32f0f8

    SHA256

    312764aa681d96cb6cf96638f32802d1ff3b274743beb7037cd21e232996681e

    SHA512

    340a34c301ef4bf6f29776ab1234fbc0171cca1f0a82488198c6b6912eee2773b335a00ed9d6418e3717d26dd0d98aba9198f9cf275d93a18ffd6598b21aee11

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    aa0a14abb4a13457aa012fc9c35a6870

    SHA1

    2a8e14ac14b821b05cea1341726a6c7635c52850

    SHA256

    41066f667c92820166c67248a2d662a8d4fe79baef8bf1d8102e036a4cab7757

    SHA512

    93324ffa830304d592405fb1ad9576aa3ffabde3656186023c1305bb707815a34fd58c021981f7bdf26cb59706972d33ef2fb963e5b0c3b7b33d7d66e6e75df8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    eca719f347264c238b2e66c5f7936030

    SHA1

    6eb6db0d1719022a7a4fa995dc973700c460f54c

    SHA256

    5df74439b85be17d01648135702a27e6c3f640d7ed0d3370e7e46b0c08f4a0a4

    SHA512

    f4eddfbf191d9ad9fd1bf774ea9b78c23db7ea0ad1b1afb5bdd56dbabe7c685e133deb19b421b294cc9f73bdaf04c9168dddb51e09a0fdaf4955b4c4d7b6da48

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c38376bcc22677c7dc993c13014cde8f

    SHA1

    1cfc20bb0bcc0437ff549a8573db6927c662ae63

    SHA256

    d2a6d3cc42cdb4b6136ca852545de76cca636a0b68de574dbf4fbfb888a18f2f

    SHA512

    83b3dcec8603adc79b7a9127c89a3baf701fe0b8e587c90b8834f4a60f14d4f732fe6defefe18c722345823b08d309aeeb45b39447d1afee93a89cea13ce80f0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    876d1b081bd4d8a4e8eb9760217c90bf

    SHA1

    e36551a0de31ca35c4b949f1e1e8fa401d0ca018

    SHA256

    6638f7e447b2255687ffab22a349d6bb68a8f66bacba79bb5f05d6743dde475e

    SHA512

    3bfc57de198db0a03a1f7d491f59f41be4f8214e3fb7029bbca294840a0a6d9eff6a73c7838aae1826d7a04ee696cc4bcdd65a0e30a3c417985f176e3b205cb5

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5DKX8QD5\ETUWUQBN.htm

    Filesize

    113KB

    MD5

    41f9e743dae70464f8dad42ff1ff51a9

    SHA1

    262d3ef7249403954cdac3d4263f9b0c1e9ce80b

    SHA256

    befaff273a00d6a640feb0c73f872f7f1c7f0754abf7ee090ee5e10c22cb9226

    SHA512

    f86c2826ac944cd1c53ba5427694cfca271d55675dcec7914a931663d321f57fe2dd0aeb76961ebf86275ac83d8e3a4cb9155e278fa105f488525126fd99e458

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\L9PN2QMY\Italian-Milf-Isabella-Soprano-Loving-Big-Dicks[1].htm

    Filesize

    5B

    MD5

    fda44910deb1a460be4ac5d56d61d837

    SHA1

    f6d0c643351580307b2eaa6a7560e76965496bc7

    SHA256

    933b971c6388d594a23fa1559825db5bec8ade2db1240aa8fc9d0c684949e8c9

    SHA512

    57dda9aa7c29f960cd7948a4e4567844d3289fa729e9e388e7f4edcbdf16bf6a94536598b4f9ff8942849f1f96bd3c00bc24a75e748a36fbf2a145f63bf904c1

  • C:\Users\Admin\AppData\Local\Temp\Cab8F46.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar92F6.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a