Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    136s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    10/05/2024, 06:10

General

  • Target

    sample.html

  • Size

    41KB

  • MD5

    eed9abb99c8211dbece7cdb8962a3c55

  • SHA1

    848a1e6b0ae36b94b103d09babc92da17bcf031f

  • SHA256

    f75835f404a5fa19632d010106d149340fd9e6ad792d5c31c2b35161477576b8

  • SHA512

    2415125d22f480ed5f2a8343294c0ed7d27cdb8e4b72ef27b89b5c09eaa3d1bf238e45560f1cc55b88d7911854027c7d2f8bd73308a5ddf151ee9918d150063f

  • SSDEEP

    768:S3mh0OEZ6B+kc/OGNwiZUCJgBc3Z8vftq+pL1bcI8J+g6bYTJn+9tAQnMj+i3lJt:S3mShZ6Brc/OGHjJgBc3Z8vftq+pL1bM

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\sample.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2916
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2916 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2716

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1683efe88b14363d2912ffce3b253e10

    SHA1

    24fe21f13f50f4d514d2e8d7d6d7b0bea8155063

    SHA256

    400d8d64014da74d4400afdf8113840c2cd16a91f72d59be143bf02ebfacd316

    SHA512

    32549cf709ed0a7020e50fc3b3803b234b6a80cb1e4f73bafbd9f83ba288170e4b5312550209e6c69a8b7e390813bb36199a3baf05cedef8c7fea47fd146cac7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ce94dcbd075616d44d0c8c120ad10f5e

    SHA1

    208f8a7bab4fcb4537c36a719e5eef99b8c187a3

    SHA256

    5692061aaf2450a2a8ed21052aadda72c02cd1b56317e0a6ed46454dfae3da97

    SHA512

    62705df649913909342fef06d67ed5122cf5f7d27f209d674e8d9a8dc33cc54245d20bb44930e87e34ea3b8a36fa5bc33e65eea7a887edcd8807c812d59aca6e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    12c7e3a52d00f91540b86fd4e9e97950

    SHA1

    aa306ed755740cbbaca64ecfde01518da6b50dbc

    SHA256

    8adc76fa8cc1b407b6ad117d03324a6ab23c85d78a9a51478ee7bd26a84331d1

    SHA512

    b7d8ad1d7335bcadd3daf41c4411b8076170a5f924f1a429513af7ef966cd03565db9cd4558be7fd33c84aa5d9b58c249f4ec5c2c52ca7a7435a6a672513d8ad

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e19cfbce17f23d8d21809b9d819f28e8

    SHA1

    e6e5cf4833cb3cdecee1033bbab9e30101631016

    SHA256

    ecbc0e89f039656dc95b76f62e5d6a811e4e2946627ad5685ff0d8adbfc5cb4d

    SHA512

    c2871b3e53afd39f10b9fc6167d331ce1058f11d62dcdd9e63ec28ebee1e806d48134fe6332f82942b8833759314aba2f7b5b2834e1f40e85aa1f9b8c4d7ea3c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9429679d305e4c151c24e5b499691743

    SHA1

    20b58eafca8f95ca1407e0f65a22fff6f1e37218

    SHA256

    c3eab284db16ae61d046f316f3134f30f4e4e0969ef843fbea8e30727642434e

    SHA512

    4e722eac7dfafde2c7387e1e1bc51297233ae306b9bc22db42e43acbac9ee2cceaad3f049f3dabfd5424e49127a758c50fa0c4bc6deacb4bdf1c632ff2df19ee

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5a46eeabf1f36c0149f69fdb6c2d9eb8

    SHA1

    bd5e7fad602c7780dbe80e038652ef7e99e5d387

    SHA256

    86b284bcb7663cc04a8c26beb2b42971a225d5bcec00710306aee9dbd091ffe2

    SHA512

    bab43f05c5c722b7528392d7d3e5ae9d9fb4304b5b9a8ad9acdd3cb34d5474f462b44ece15d69578f9b206b24436afa9d0ef6cccb134f9504cc2b5e563b0c3e6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    12ca7262f98c8a11519cb020807767c2

    SHA1

    24876597d7346f24a76b461b82ed77da1dad8fe7

    SHA256

    118e315783e6510b9eb7ac940f395e33d8c1cb352573f4d0856d4268f604e1fb

    SHA512

    d01f9e51a11ef33c6d467a802d4f39b14fb8aa9d6009f92197f1d408307d1227aa8841aad16b417507b762abed8cac0f55f7e9d6b761bebabe0367b21b5d7daa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3436f367e463886b1db6ea7656d92768

    SHA1

    fc9b9f9002b3f30191d8d7d37961ea968332212a

    SHA256

    f6b69a428442ed6e982a86057f170718bae38bfeee3f4f7555e4e80a4ec22f10

    SHA512

    994f1ef3f3d21324894d39e41a3db184fcdc872dba0360d1873fcb7ba73962f7b79af972481247ddf9df28271fd28cab4b2f009c91e563efac431db2aa4e319f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e3d5cfa3d00732e3ab42ea8a2839b658

    SHA1

    0d3c64530db03ca75d3539c32420ab0cea2a4423

    SHA256

    c62ca419b31c1b75e97519c3dba83a201bfb4de20f64411f0c07ac45c99404d1

    SHA512

    500831592de35ec0f4596e80f40719d78f70ec6b3d84df85b0a5386b70b78262380d4a20e4f20fdb75e44134c565ec99bb08a67a7801f1df3a8988ee8fe5c3a4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    dd737727172f9069949251da3cc28632

    SHA1

    4c27da447db9f309d1aa3914c95553403c6ae947

    SHA256

    00939496b8dfa5b4af7273b2e0d1ccb4688c3e8d26b5d1030ae019370329dbdc

    SHA512

    a9b9c404885c89d2a9d31dcfdce033c9300fac6409cb974a69b383aa78c92aa5bd45588fe8e85bdec1bd39e6e7d3e76333607748661c51200954a1dc3231e0a6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3cd81069b06b1847479b8207e4883e44

    SHA1

    7bc40e6e5af554f0ec34a77cf708fdaef181c22c

    SHA256

    dafa2c2b6119e650e47f681521ee23806100ffce478818280c2a3eb1a2890243

    SHA512

    37c97d7a2a0af3c9f2df3caa4983069798b14b922fd3e962bde9d327a7c18f2407ef540b1bdc4342657cc47bd70c4f3ecfc765964e8598b731b2799eea0a3069

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9ac9f8fafa987e967a777adfc81f5491

    SHA1

    5bbe4d3438d3e9ab56c9ae6c771cebbe69213b11

    SHA256

    e07832cd7e037c130af2bf2c1810318a70d988d684a6b2aa115ab0965a44269d

    SHA512

    16c306afbe958c7a0d5d2d8593a839d7c553022b2cd9e10e86d7bad0bb5084aa5b5078c8506d21f287c230ca6340a431f241890c3d2e6860f38638fc09f05ca9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    36f724add49f83c805f860da2d511cd0

    SHA1

    17107b736feb8cf8ee62b3a3c86429de5d7dffa0

    SHA256

    d2404d333c12e2830ec71641e75231a900b01e181106c6b2888e1fee8f255fc9

    SHA512

    ff314a09dbb1b8b6d494558b3b06b59a1f518a071e624b9860ad8031d05c6e3f61a992dc26cecf858a980e9182a68058c9098ee87a8d45aac337b776677aec26

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f87ac1f2ba12f92b176a9cc21b90224d

    SHA1

    8d7ca8f7bfdce183dee59ef710e4bd73dca2de67

    SHA256

    f9670b1176bea3eb93c041fcd2c64deb08a141749fc6947673620de7c17705aa

    SHA512

    44d87e8a565a88b8a501760407e2dfd21ec4359932a5cda22cb3e24dd55970163ada5dd2198e20736dcc0155d21984559352a44cefe6a088a4179a46e75effec

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c4690046f266aa7bd363b345e4b9ca58

    SHA1

    8ba897c319ff4e2497e29bcee3df863f06e73790

    SHA256

    2314500377f065b08d6536e5e7f74db4730ba0a4284f12b905be53321bf6fc3b

    SHA512

    fd6802f08099e0b4938aaa6039dc0e15cfff88f1473387f12bdd1758043cf434fc33a01ebb4bd203b2c8d475ab0684643c74d75e5156e063202b6513450ee226

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    58f14efecf821ef8210c7088db57966f

    SHA1

    8272dcb0c6f3b421d41cf649184059aee423c210

    SHA256

    1f5b00de42f31268807456d05f29c181412b18361dd7b5cf547f854c629b68f1

    SHA512

    de57ca16dd92bb85e76ad1dbf91209dc0d23ad059e26b7253d4c18ee79ecb5cd527ab4d4b8021d8733cf715123514a56d96d88a9885b3e18b0cbb6a38224465c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bf562d7bfae1a41c8291eae3697cc2f2

    SHA1

    8bb1e2a941e05d191627d8fb02520c14d66ffaf1

    SHA256

    f96778429c2cea3f7c187e0313a16345e80f78f48b211aca4606c60b4c1733ce

    SHA512

    417abd29125ccfe15018c0c03f489d6e623b0c56b099e2f9088a375bd43824e168117579368b0dba805aa67717c40bd7e4745e2144e7ded3fe82591f344eb56e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9f88574d116b0a0e61cfd266ca9f0612

    SHA1

    e00ffefeed67f39872a11f5fd36a7d3d4838b7e8

    SHA256

    b3ba9742b0774e0397968c3af8d5b0239d0ca52fc1f0132ea4ffdbf310854284

    SHA512

    3749dd08adbbd5c61012bb22db917459a27fa79329a7ffa51a4d744c45a5e6829ad8475fda8c0010fd32f5a6c842dca88d562539ea9fbea956e7f5c88a7c390f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d3c3c9973f64d3e029f28e9b58588f34

    SHA1

    f7604909e8e2fde98d1a700692b6518f90c51dd8

    SHA256

    8bd02e691403a687bef66893edfa7c739961470bf5572f20c1460c0f9590f0e0

    SHA512

    f904416d934453dbc06681349c4023ee6b8c13a491423c9d274ed51ab5da23bf21fdb72c3a85027bd4c12ac80822f5c0a0fdece69b827443023eb85c5182dc06

  • C:\Users\Admin\AppData\Local\Temp\Cab2D3A.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar2D8B.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a