Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    133s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    01/05/2024, 21:58

General

  • Target

    pc.html

  • Size

    114B

  • MD5

    e89f75f918dbdcee28604d4e09dd71d7

  • SHA1

    f9d9055e9878723a12063b47d4a1a5f58c3eb1e9

  • SHA256

    6dc9c7fc93bb488bb0520a6c780a8d3c0fb5486a4711aca49b4c53fac7393023

  • SHA512

    8df0ab2e3679b64a6174deff4259ae5680f88e3ae307e0ea2dfff88ec4ba14f3477c9fe3a5aa5da3a8e857601170a5108ed75f6d6975958ac7a314e4a336aed0

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\pc.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2400
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2400 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2028

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b493d43e984fd00accf33111a1e8821e

    SHA1

    b85429ddc6c6b9920e7400eb1b427a4c3be8f3b5

    SHA256

    621c85d2cc71d2ffbba70daaca9cd9aa26dbc9337eefa49c92ee97646af04d6d

    SHA512

    6e3b6bc109a644033ecf7a9f3c4d3d4778ca7c320f4da864749c7190ff90194fa2e29b3b9949cdfbb175ad04a0eb63e43ad03dae92ca1d1b2a7b57dd2faefd48

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c48c7f353b78bff509475a04f6da6bc0

    SHA1

    d49711ed20aa28cbd4e8313575e685ba2904f273

    SHA256

    7a0169b70dffeefdc539f73194a0024da3a4ec42edbd5e7045956538e8dfa496

    SHA512

    e06b24ad8fd3ad11821c5490e9d443a817538b92c2600348c4cd47a57343f6bdfc221f277216d869dc8b08ce8d209cc21203ae6d0aff813f257dabac59d9fa4f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    dcf724d97c22d093c8a0a940f734a1ce

    SHA1

    0db93b8c34d84cb97c6cf5f2cfe02f39ffe1c492

    SHA256

    80ef4275e20fc7f5c0626a3dc67bcf9965cd32c70b6c4140488cef626698c9f4

    SHA512

    817abf1e8b5d223525fd41b232d8993a1038ab4c88ab923566cd7f5f1751f6dcccda7aa223d7866a0c11d9b6d9dde534ab8e212cb3c69d39fb86a078f3abb936

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a3b341cba01bc9fe79f12fad40198b4c

    SHA1

    7f950dadb2f8cc58e8de6de7056f45c8126e29be

    SHA256

    266a82e57afae9cf8e2173ff5374eaf5c7d611f13fa40800de2f1999a98734e0

    SHA512

    6edda46c1f38db22b8e52db5f622c319f55a99e7d60cc69d7d71362960326eba473c0dfd92bc3686673043f462944ba50cb4239936c95970c2ef6c98535891d1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b11930bd7896948e88a839a3753675ff

    SHA1

    7c6cee4881e09009a866f3a87ec9c7bbf19f1db7

    SHA256

    fc5a9372d89aa69049a271178948540580c36b6973001d09b2aa77278ec8550a

    SHA512

    f9a607b6f2281048d99e795c05e89b1179357ba0f06e99f827cc32a9084d5b7eb8224d3fa10c02c57d168bf542dc3bd88f111928bfe699b27ee54e8ac8562295

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c6b749678b7bc533403b11f9b1c6da0a

    SHA1

    7a9272acaab35effe18d47309e61ce053c5782ae

    SHA256

    fedf90d8d815c3817deb078b72f28613dd7497072d51b7824160d2afe8593c4d

    SHA512

    5d30364982d89c99768877e91f645c81d6802c2670336627b8d95f5a06e205c98362a77b13020da6df1776ef9d669a1e2fad95383abac858ba085ae066ce2d5f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    316f8a76c0df0b6b80355b90deaead1b

    SHA1

    ba9eea6644abb134a619f43c4b7a6bffb98c829a

    SHA256

    217ffe16960ecb47a27f2d218cf207dbd1c8391e9c760aec36af4fc06976ff7d

    SHA512

    7fe2f864c37175ba2a9eb1fcf6c5ad3ff5d0ecb7b8bb11ab38632505f656cf2434ea6796248e81e1b3074014dcbcd49c2dc3c7ed0659e01e8c6d49cf9aaa14f1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    effbbc70dfe5474150a3f71cdeceadd7

    SHA1

    a54770558afcc7d24c64fd960a6fd9547def8fe6

    SHA256

    9d803da226ae2cbab04563001c7ab926a80a2b80dab7bb4fe5c66066c00756c1

    SHA512

    32f3438f97b164a892b4a723358298cd0b7e3329cb19b9af4062b95054bdbc319e0f63ed5e9814ac8940c03a61b0a4b818162c72bce36de394f2aeadc0affb77

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e02bc915a57d2fe3a142c78e0c6d32a4

    SHA1

    776d7c77c2d21448b170c5fec24f62a010981600

    SHA256

    3b8ce70a89a5af60f94f272cad376abbbc0e896782b6901830bf058a456786c1

    SHA512

    d31418a41161fb817e50dcdd2985898e6f96858feb04b4e00701d5dfeeda4a338b7a4e22e8aae6225e567aa7540cd0efdf9aae473c1fabfe7efa202bc858feaa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3f28b7325007dd882f70a43dfda7e2d4

    SHA1

    4acbee26b64b45413c49240e08658c7a090aa238

    SHA256

    797a66690a121f4b733fa78193ad207f40137626977f3808e07a96fb69880bfd

    SHA512

    de29c6a3189640d265d3de711b7b84ab86f789f2fac94dcd78687ff410ed50385e5904ace8dc9409ac0ba98b39d22bc9dcf1a63d71ea449d97b8a5d0b41fd2ee

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b98742714eac3893cce17fa1c5b35cef

    SHA1

    c20108b6c64657b05555cbf9ecad14e9eacfc8f1

    SHA256

    25d392dfeb6a97bf1cbe16e24477a8977e6c5d7d0accee1b0505e07adb663913

    SHA512

    43f4bee8444397347ea04fb008a8422c45e4411fa11f7632c18b89966c45c5c41ac68e4994178314bbe01c07f8034ffeb400cc45d1eaa994e6e54e8db244bf0d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    97c4da5e4bb78c9d2af60ede20c99c91

    SHA1

    edd18988a4758b4a3cf514b2bf423390f1eafb51

    SHA256

    0909dab11f1c5b238a63477005ca7c2e538dcba7c7d3fbd781e88582c8628cad

    SHA512

    673dcb2f3b52c4c937b846ef90bd559a510b460fe256419af0b5a598cbc062b613702a96af361dbc216b8e3eea1b2b77a6f99281838f7f5ad1f6d497e4c02504

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ca956f2b4845eadeec7d001ecb9505c6

    SHA1

    05078f665e0f4c80cc8e2646c0d42275f4f26971

    SHA256

    80b1f1012b73283e8ebea3e587d10ca08293eb66f8d1f7b92bcb4130c26e7771

    SHA512

    a131781ccb26722180ebbae94561263c95035827bf881cac979f51532b821e55b08b12203e69d73766eca448255515717059d5a374463965e9f8e9f48bd2804c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    651ae465fd56cdfdd5139f8c213e53d7

    SHA1

    1943543ef27671a7740b42ec6b91fd70cd1abcf2

    SHA256

    2e058e497e3637e9ac9ec97529c045072566a053647bac8277a304ddbfd3127f

    SHA512

    5cc918682f95ec947b60987f5aad5fe6d490f942ca9500c6b9c19537bf1fb746752ac3e4a285ea9e65ffd767774a4ee8b61122b272edce7a4c109e65d50c71ba

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7826b042e1a6e44635119c5852cc6787

    SHA1

    1cb79ac7575d72d9d3f93bd783139859d2a42ccb

    SHA256

    89fe48c3dac2169ac4d33c16124cf3409fb9821a7c2d165942844484e0769a4c

    SHA512

    202ba12c6fe808a7efac99091ab5f3408fdda94c7285ff1404324d60ef89dfd07921a3914256ba15d508642a278293690f1f871a3f88a865596d340716967ef5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4c797d83403bb1a88f553483bedfd775

    SHA1

    a8e9689a623089ae9706dd7aefc16aca7c34077e

    SHA256

    3fbc2d0234f8214082d88664c3f6c524bf683cabbb27c56ffca219d7e7d12d65

    SHA512

    db05282047076eab3af7e75181c2babce448e6b4f24ae68d1586a9da64d1d238445a7bab2fb640a0d467e4b496f60eb300a61f3c21f4b7db0532c62a817151e4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    06f9e7323d79c8e15095b74ba7b132fd

    SHA1

    956ff8a2d13766091eecca394085d9617b7d2dbd

    SHA256

    489ce744e6e6e587554a9948077ea07c0888fe1629c9084445c0c1ee2b1674ae

    SHA512

    8ace28668a31b046ddbcfd806885f962dc76ea67a596b753e244e1a67a6e926ed7a646eec9efd8f623342b6cfde3f5f6579b6c3c4a359543df4db777f8ba865c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d71f0db7ceae28afe080fb9e4a1a5cc5

    SHA1

    3c94701e771a57de4066396551890ab0769473e3

    SHA256

    2bd2328664b13fa4128fb3822dd2b87b14f39989c4cf0c4833f8553db39352cf

    SHA512

    c144d51e235ed70aa9a7a56e4a18818526531750ec05b3bbe9c6da41e402ddf323da2fbe02810aca7aab79000ed1bf94d1517a935650c1828d62a4b307fd4f0c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4d338816c1b0872410db9140319e29f5

    SHA1

    e64f290abf4ae9e224c1c09964540afd94c3a9e2

    SHA256

    0068c7e3780569a2e89fbab881d17257b0443788f9d004c54f55f7aa75b5cf05

    SHA512

    f1bf1eaec1eedb23b7eea7acdf2c547f904191b3653c0df4512af376d57e509368c8bfe48e3b0ebeb9c034d046dcec1c8eb1f5f8078bbc57abd17f0789d1e96d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b053a43c36b0bb07d721811ddd20acdd

    SHA1

    b0a6461057bf486323adcf1d5714127588af5731

    SHA256

    da58a32c78ef047d11e08f92344624c4f3d9e5f8d2bd7635b0eb2a72f22452f3

    SHA512

    2106055f05f99109ed8bbe8f817d64b887bf5f1bf042e484213895c879d70a43f028b3b0faf4d248b8a396f5c1e22b6f00307063d5b8b35e2f905c42ff3f3118

  • C:\Users\Admin\AppData\Local\Temp\Cab1814.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar18E8.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a