Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    136s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    08/05/2024, 02:12

General

  • Target

    sample.html

  • Size

    40KB

  • MD5

    6459d9aa953a66fc11e692dd41e5ffad

  • SHA1

    8dd732a1d3156ab1916173e05ff0393852b84cc7

  • SHA256

    d43d0cbad69187202bafb80b0333112a4e92e9e7e053ca6a7e5eb1556a1eeac2

  • SHA512

    e6a96dfd60994cdd30aad782e7aa3ada5c499fa677ab18ae22abee209d702e85b69dd382bb2c34a7a01948a7e1e803d6df0359fc57697df2c0fbc1da6f9b40b8

  • SSDEEP

    768:STmh0OG0m+MOTDtxIy2y2KuBc3Z8vft1+4dOmWhJ+Bjt87sH+3ygPu7j+79tEW1P:STmSy/TDtxJl4Bc3Z8vft1+4dOmWhJ+O

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\sample.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2280
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2280 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2480

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    61d76544fe525046d181b3ee491acc2c

    SHA1

    8d89a92c532ea8fb24d654a8f730235b0807b2f1

    SHA256

    119f94827e53d35c8ab6536ca711301fa27e289621f9cb0fb51ba25bd20abbaf

    SHA512

    ebb0e473b84abb5a1a7677f394ec59423bc67b66832805cfe68a9a08a12832109bfb091d18e486d8c30e50fd86611b6e3691de886d4542f1be179e3993e1be86

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6f88fbd520ca98a484cc6346528562be

    SHA1

    d091c98fa5d17c51150f26d0d296814518e08498

    SHA256

    5b21038958c0cf6eb4b80c82901acf270699ef5f575d161da74a89f63fdae377

    SHA512

    cc54c0cc67d4421f7b0faa9fc3ff780ad58bc9c334ebdb1ab1f649b2159ece6b5e33eb54f422832918c6f4c1954b264b43c455e06faccac701aade3a713c8912

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7a6a8e29ccf2383541a5df2c7be4c211

    SHA1

    dc6df44bff5c5bc0f9733b796c18064fd2eaedd2

    SHA256

    c8e62ed8f5450ed370efbcd204806a8c1803f21e57fed70d1ca8117c512d5aa6

    SHA512

    8ec53eea4ba287bf2f674effffb24fdd3ac27dd73b9185ace3c9570308f5395ca174d22d51f3b33c3f500ab572a441d5378142aa5936ea87fd44a3a514c7dff6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9b1ca7c76614d3dfaea9a7182ee93e26

    SHA1

    140b017ccd1731fc09623cbcb6a99120a10e6962

    SHA256

    24f88abc04380a54d40f4bccfec814ae5530877599e38acf104c66b86d5e90db

    SHA512

    d2e7d3899e9b73c29ee2e1da1757a38ade55aa411a28cc30f093e19ba03a34125013caadc7d49ab824fe9474a69d01f192ba4a3226e237be473aaed2dbc7f246

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    525fad7f3407221b5c655dea0c8c4f16

    SHA1

    876af55febb983bf3366d9db4329c6e466f0f138

    SHA256

    347bf6d82a6f483ac8a05882793c3382c1047d9eac63c3163d9f32653d02294f

    SHA512

    3008e1a7efb6bd3c704baa1aa8cf86ad4fde710a033ee66be90f5bc9f2b52396100333a05bd326b72bf5ac8356afe63944dda6cf625063929ecadbadee9def2b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f08c3ddf1e63d9840f87422e193113c0

    SHA1

    3f4b20a240f0379006079f5ddb5ff5532dd72d16

    SHA256

    eb5d384837dd2088aaeef6db48c4901e64a4cef0d62e013ede27bb4aa15abf2d

    SHA512

    d55d6b5f50c0f18feeb7513de5b9ba5843e3f26d1ddf538d586a3cf4d29029bf1e0a1c30d429af15bcd8d8f286ec8a9ec311cb24ebc23cb50590c9a129390465

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cc6fa6bee9eca574217199f381c09367

    SHA1

    8b584da2029bca4537e8559259a783922b14d206

    SHA256

    a3b561f918e165aef8c20b55a2d12e34b12580eac1db9f9c1fa3fd7685858929

    SHA512

    6ac76e4e0d472b58c914731811a182fd2dc89095e8a47f72c4f1b3c707aada60cd86f24702cfd3649872f87bc969bcc26a65396ced67c116067adfe6c8129a41

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9edc992c68f37204055c8180da37b2dc

    SHA1

    044b2fb76701688d72ce4f588e66672c8e4c8849

    SHA256

    5d7c65f271d6185e2e83dea8bd6913b0d35ff7e47e6136287459e300714ecbe3

    SHA512

    0c5ea6d6683600a1617055e0a542f799bcc7005d5faafa2bceca85b1555713cf3f2df8f4da9156672b7e6fc5d56bcd96b02f04e99149bf03ef93fd5007b1bc9a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    50d73526df0ee1519732ed376261471c

    SHA1

    970dd7127695a57ff5548ef426dd950fbd80018e

    SHA256

    d56842ef89fa29585fc35dbf9f2c293e5938da71f656f9efa258e8892c63caf9

    SHA512

    05da36b4d368b832699bec3da872e79fce0eb7f6f0ddd69ee918b7b3567512fbdeee33907e4475e82b12cc81ed049f14879ab06e010efaeb384239a6e402aeac

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c32f684df42d1cd6a678cb43183828b7

    SHA1

    c5b84dc031c2075ed374467b8e23d5b2449bc6f4

    SHA256

    de24832b5f01a103788aaac6a3244ecb51d2150191462cca600b8273322f1b3b

    SHA512

    230a8276955aa4fb379fdf170e43b1dd0a78651b62c53ab9f0461779b4b5e8e806df72dbf79835cb7f65706b3c49b84f4f7a09bc0e572c449e95fbfc6e675761

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2392b8da1047d1e13356db8413b152f4

    SHA1

    80cd2f5f9a25c225b3c235a36c3f841c3937ee39

    SHA256

    ce53bc2ce60c52d67a2a58841a569a2563b7c0d32b7a947e918a3ef4b938df64

    SHA512

    d417fefe64b7b63d97006285c75823355cf9592df5b9f5a6ce090e0d9e1af2d3916a1a4f297f21bfbab65d38db74929506407579306c712a3187fe164c2366ea

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c1d891786fc0c34f6a692356c48dbf37

    SHA1

    225c10139a6be6bb33bc52fb8951d8da887d7dc6

    SHA256

    214fed94a0b4b906efb71b75c47c9ef8c7d09fed10317b6dc2841a003c4919bc

    SHA512

    49812bf9231cb4080425d57ac5248f31a937fad6591549c5cf19b94482e96cf49f9cd928ccb517eb0a3426dc7cec8d32f72f028c69105f03026f7aa3a7294a6f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    68bbb3b39fe587f129008b2b377c5d48

    SHA1

    be8a488ebf5a8c2b75e86b74af88433c53827a6f

    SHA256

    c713894020cd45a776f49580a059602e4bef66a5d7157c13e5d4e377e3d975ce

    SHA512

    e09d196e61d97934ab65e0c69860c83f9ef1f56d6fef6bac1199eda6e1c68b4a02b4a4c535042e787d2f65984497c9fda70966d7177a46481012e3ecb818d426

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    32ef01640dcdb92b49dac2e2981bd52c

    SHA1

    4a6bc3b3a48b290ca7bcf7f93a6c472f1022d0d5

    SHA256

    b446fdd753ed7c2f0ff9ead91b0bf27be5115a2158390358632dee02f32e2fba

    SHA512

    0318e0b28f228abe87f8c405bb5967260d80b105781c14029861fb08ce434bc0389d9531c3f25d525c907dc6e25425459b29c0b0c3eb8d8f958843bb2d4625b9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    05d9f517c76852d43c69def77392ddae

    SHA1

    fc013db2f09030b30dc916815b43403990c01a3d

    SHA256

    12a845988bca34233a471392664fb9dbad1b53be770a5492a12101960c9855bb

    SHA512

    124cd124b9d877cfb95be10fc071a7e093a71d5caa4a69ff5812abe1a62603cdf28abdca757bc878423149ccbd53675df6515cb8e7d80e8523ba98a1e73778b8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    75a0fa450d052ccc8ca42025763d0983

    SHA1

    c4097c215b6ed86fc1b96c21fd606e9bc586b710

    SHA256

    ade5376e0f9077db9c971841a812985b581568d71bbc438580c8539be03f3438

    SHA512

    d1a9654896e455c87f00a64bdf82fc9d94d8420eecd1f39cd32904ba94ffddc9fcb2055a7bcdc90619fc01d26bcc850ce47991cfba8386cfc9583a47ab0d5dee

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    21a36605a608ed4c0a7fbfe928cb464a

    SHA1

    f2a3dc6b01f62df7d06059f905b6df5b1850b0ed

    SHA256

    ebce8f9440b57b70610281a005e996a8432b2ecd4f37a00ada4ffa2f8c29db09

    SHA512

    b686ac852a0d8f80c7e7ec02f63abac5d3f6905d043fc0f9eb931e7d1fe946451d3a7b29833eb3c9aa154f594587ae38f908e5336611e7795a2b5bfa35da282b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e3cb5995002187e904103202dd5eb1ea

    SHA1

    ece42bd6cda8f7df6f0bcfcf8b075692fd3df5ba

    SHA256

    3522249191b75e7f0134093785d33e7cac41bbf5c50b9f7ed05fcf1401f6de2f

    SHA512

    33c59d836d5b6d87aeed9ccc7270e6d96034657578c47634b8f03b0845c6a0e4fa3c6408c8e1655b5303d27b75468aae0da52ce8f44549957ff8237dd91061d9

  • C:\Users\Admin\AppData\Local\Temp\CabFCC8.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\CabFD85.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\TarFD9A.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a