Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    142s
  • max time network
    147s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    15/05/2024, 10:17

General

  • Target

    sample.html

  • Size

    67KB

  • MD5

    a8197c877d0975be64abc8bfa8de8a5d

  • SHA1

    262f5eac63efa7c0147a0bf11a4fefb63b9c9d7d

  • SHA256

    fa4df056e4765db9f19044b6b3e431bce2497d6f7c0b21cbab17830a5203bbd8

  • SHA512

    2e03fa7ccdc0ea1ffc3ef2e2835cfd9440b4639d52978c578d5b2f61bf5fedce80647da80adb7cb0e78d6b39355b325a1475c5e3f113b197a723aa694e7c88b7

  • SSDEEP

    1536:fq1EynZYJSjpFNaYH45tK4f2y24UO74h6Rx4NJEh4fc143Vd4hp74yOEa4/RdaNZ:fq1EynZYiH+8kDdaNXo5YXMxINx

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 34 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\sample.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2932
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2932 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:316

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\103621DE9CD5414CC2538780B4B75751

    Filesize

    717B

    MD5

    822467b728b7a66b081c91795373789a

    SHA1

    d8f2f02e1eef62485a9feffd59ce837511749865

    SHA256

    af2343382b88335eea72251ad84949e244ff54b6995063e24459a7216e9576b9

    SHA512

    bacea07d92c32078ca6a0161549b4e18edab745dd44947e5f181d28cc24468e07769d6835816cdfb944fd3d0099bde5e21b48f4966824c5c16c1801712303eb6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\E0F5C59F9FA661F6F4C50B87FEF3A15A

    Filesize

    893B

    MD5

    d4ae187b4574036c2d76b6df8a8c1a30

    SHA1

    b06f409fa14bab33cbaf4a37811b8740b624d9e5

    SHA256

    a2ce3a0fa7d2a833d1801e01ec48e35b70d84f3467cc9f8fab370386e13879c7

    SHA512

    1f44a360e8bb8ada22bc5bfe001f1babb4e72005a46bc2a94c33c4bd149ff256cce6f35d65ca4f7fc2a5b9e15494155449830d2809c8cf218d0b9196ec646b0c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\103621DE9CD5414CC2538780B4B75751

    Filesize

    192B

    MD5

    459967a949868921c13c796aa270dc94

    SHA1

    e4b3ee6e78a272f39d4e75b71fdc576a93aa8ad6

    SHA256

    8c747880f336d085bb8fef6fcbea261a595cf5d73f2f197f0fe4d4b7c06df506

    SHA512

    8b5090bf03c59a1881b46b9a342a74b568a33a9a48dbe1a9fae26ea534e7c2c542300d5456baa72d18aaedf569884bfab31c1f2bd0a8eba1c80bc7ac1c526c21

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\103621DE9CD5414CC2538780B4B75751

    Filesize

    192B

    MD5

    00e8b601ee36884ac481f62c75ae54dd

    SHA1

    2eff3475bb82b2fe7703e291e7670001336cf48b

    SHA256

    8e1b411a4caf37747e3b007ca6d8c419378325029aa64060fb27865cc1382edb

    SHA512

    a333177534f8c0a204b062e1b0ebcd6d262dd09625080a5bc060077552e7082c1b9792b3613d88b67fa6f3b40cded2250657ce949542c2663db35801c66420b5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    410B

    MD5

    8bce714dd79089a88ba6d85b61d8dde2

    SHA1

    76398b3ebe4fbc57b2e8af86706201bf56cc4831

    SHA256

    ea49ff7c02cc41b228a23d99718b5a0416688dedd3f9d7018d837ec1a362b247

    SHA512

    dec00b3695d97bb9e205a1deb852d883969b3ea64423bf50489d9bcb777aacd00d4ac55a5b52dbd147997d1e33da51032689c65e90dcde8c69e84c5b5ef96ede

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b07b3629ac7ccc57769424f120befb21

    SHA1

    251d8e04536b4dbb425acfeba8335c84a887710c

    SHA256

    c4a7151f3d449673edec832c2a002e086ff8c4c903ecfa97e5abb1ca03dde4c1

    SHA512

    204bc1f47fc9f9bb376a6c1fce372f828882f0943bd6d3602976b6603250a26b83d33af6eb261e3e8b9b70bfb26933658017c3b21b03b4fa8f842dc280a23bfa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b9f9e7b7f8e15847da547aeb914366de

    SHA1

    3f996817b13e7305a54c9ccd1fb9ddda6b48bb06

    SHA256

    d2ce0e993239ce7f5c8ef0d01b060060b4b17c3257a20be4bfe7d63398949be9

    SHA512

    0846b40913a6922bd1ad3ed1f3aac3ec7974ed5336cdb6a0d53fe899a3db8bb4bd363ec5a7c16eec56f0c9c0fa75dec608bc5701eeeddfedf010936889291c2e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c118d8bf10fbbd76db70129cf65fb1a8

    SHA1

    94a30d152ec20e865a3747ac24f23be7e43ea892

    SHA256

    63bc670b58377afc1b766408ae5d5b9631e1e81cbba2ebde332ca24c7c81930d

    SHA512

    94c677dd9d8000cf1a4659f12d5b0f8e7bd29e8e5a12fa285e6c30cd3078b5843408c2c3893eb3766a10bc09935669ae286731017a9deb8a51861c831be76420

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    edade40f19cb7d9e25f6fe33389180ce

    SHA1

    9562f73ea67a66972220b2dc7e722be0ae63dd70

    SHA256

    40ea63aad77d1505053b01193c6b76d2f9c639535838246e943ab1b926c5c704

    SHA512

    e7a4286c96a93d345993be2393de2ad4c6d17b4b4dbbb8044509f2eb833a7c6c8f560b0c3df2b8fd7b8b9008e09f735af20dc39efec4592bf9b76918c15c318f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6a6ae682a1ce668a945eaeb9ac6e2427

    SHA1

    fc3b949f4a59898e4419443155373a82bf5a3f01

    SHA256

    3fe9425a371be6c1f248b7d98d638fb1a320af36029260eec0353f2a05d757f5

    SHA512

    3e112dda7d23ec9e3753bfdebfd22b3178cf7b44f22571ed2748b8fc2781e0b825486d6c288aa4c4d615c9461bc28c9fe3d9d9d62894d01e98b6bdbb6ac6a78f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3e0a7516ad4f282bf8bcb66c7399dd53

    SHA1

    4efe0e754e03666647e484f98c4f2fb6d551fe29

    SHA256

    eaa0c695cc35eff5fb55aec1ea353493ffeecbbde6876016dd08dc6e148c562f

    SHA512

    081b036cb8b2f41f6a616eea245871f80bc7a7b9dcfb5806c3b495fcca846e6fac9a0433b0a06fe8f0e66b4fbd75ed1c41e35f9199c408f38e8c1e0c41a99636

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2b7df231477efa8a2233c9ed52866604

    SHA1

    6937aea542131d1c254367ddb6245bff7e38ac07

    SHA256

    2da5d70a44f6a927e73deaf629657609b2141a4d2c6e579fc665bdcd1886176a

    SHA512

    73c69a0240d9dc739099cfa2735f313f29a62e68052acd1af0f6b1b3cf8cf56b837b5622020d913c581b5858fe38eb82e2c83616fcc1698c689d407363298083

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8185c799e1f6fdb6d4c01296190857b0

    SHA1

    ed107211106e455a54d00840e6a95ac7047c1a12

    SHA256

    1d0c5b2adbbfe2017b60b431eb8d30d48d4b3aa33df2e849f141446572aeb52d

    SHA512

    b50043441acb64e7efa31f1f631ca6735ee480ac56a847dfec9e3bcc7b5247747590e78560d7ee525047316d40da0db7102c03c1a777aa7a07e5b4269fc83ffe

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e88322cf9b35e7ba7902e6f6008598c3

    SHA1

    c7ca8867a6eba4eea661c97d2684602c2ea72af4

    SHA256

    4f70fe3db0e247b18479fafb487527dd7180c5e1e22423279595777ae7cf1c57

    SHA512

    9d9d63a72bc61a21b59d5131c2900637095ff43a961da4be5c75679d05c79d8d8296fdb0dd5e29223cdbb7a45b7b1e06203c2f2e084bc75fe3528350e1bf3c3a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    56047a21312204c353a5046623f41651

    SHA1

    3312ae85b9f0c49f41a0a3e5d28d00dd7bd580da

    SHA256

    e7926aca5ec85bbd0d3e00e20628be675cd2d782dcd3872f3b125dd46c279900

    SHA512

    4e94f0467676605caae6c8648c29f1f83a2d3a79122e53b3f4d52a4401736f1cbdf3e70a1f516be26ae147ec72f07d38d7e7ae345ace923996795ca766b6c298

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9e7e6fad6d9f46744e6207dd0202be32

    SHA1

    d04808781fc0d007426652eaeea440b641d6f61c

    SHA256

    563e09f61f345492006843525fdb4db460269ad0a90c4ac6254df532bbdc2216

    SHA512

    0ad3a5e3d471aa122e6cd22ec3ba4e2e72dd7bfbede7c1b97ac89760ff0bcfeadd69f0cc3219a6cfd7499cf476bc4bce75af50d579e3d8ab6f2c25188b276fc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9ea5fe6a6dc59d0200a27b9a6060e943

    SHA1

    9060f4fddaf783054c7e56a17f645828e307a0e6

    SHA256

    e3f0bd0495a2479dd471efefef3ae07a30863e874435e8d824f6bff4eab7a0d9

    SHA512

    28a56246cd1755740a731958685c65f03717e696f958d2fd9c030dad5e8d4fa73ff5453d0e3301814f48d9fb0724ce6bac8ab03b9489bb6a79c767d3b6b15cf9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a0546757729c00aab37703f1de7e6ed0

    SHA1

    bf235afb57a98e177a0ce171d3fccbc76fec084f

    SHA256

    b9773882b1ddf28c3fc8b39389817e5649e8f0697f5037d1a014e2e1faa62780

    SHA512

    f687ff27ac00df55b73f3ecb6e4ecce39894d987094b7a2d94890fd3b6f0598c909e1fb02bb4c1ce39116b1edb957688009ce3b83626df8c76963874608cc664

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    54ca8585317a487e900bdff07b143c2c

    SHA1

    4e706843f882924129015b6321337a324cd0b5e6

    SHA256

    2f95d4c0125738e54ed31f780a497316ff70a03b6972e5c63f30431f08414cba

    SHA512

    c8199984ade36dd2f7f2a8d922c8cec1f9b6aa24c16ce22f8bbc0d342a271f3254ab5b92209e5978ae54e00ef2e2f6d672d0152d228c0ff6389270ff1ea81199

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    96c5e911cd260cd9c720ae5dd9ec7448

    SHA1

    48d55de4920059b710bf786b7076f1f5351348ea

    SHA256

    67e4794d952637770c9f514af9eb672e877db57f639ad58bbd64b1aadc107cf1

    SHA512

    7654c9b4876b198bb6585dd657d409a359091d7bb971f159ff4482506119c342b2bf9351f81f1aa87d4caa68b24bcb5b0406a194e9e99e63a2e77a07022f36f3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    49ea6acb9a295c169821283b52ab46e9

    SHA1

    ff0663dbce39ff040351847b0e3d6910ecb059bc

    SHA256

    f355373977f2398abcee94c020a9c3e80fe024c7b53a3266df7978255fe9b740

    SHA512

    543baba6ae4423aed0e9ac38d8c64791aecebc499ef25aa5863499882290dc963ff535200b8ef6189d2e7820dc4cedca3780eb4b5bc1df651ee17e59eff1b636

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    75444e0d2eac519e8090ffb92fe41af0

    SHA1

    347dc0d148c07e23ba54a71d98219f055139d2d5

    SHA256

    f6f53f318ec89a08ba3112b8edb57ec1495552b5e60ed2dcc16dc8fbd968e2de

    SHA512

    81a0426cd79617b3700dbe7e2d2c1ac5e54797b9f36d444b454dabf1c951727bd744984ff55216addf877c9256f6774f46e9ea89bb3cea8677ade2529b605847

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c161f026ff9da3f30b41cebf08df9e1a

    SHA1

    015c97fc1a267d5d6e16ff2d2f51603b7b40378b

    SHA256

    4374408db8d18d451d99af67d551296933b74c267acd0c18736af05aa9c90399

    SHA512

    cfe3c280b8ddd97b2ab3e3d03411411f0230a7efb7ebb8f73c1c6cf7e90d25173562b904d7fd808577fa52ed6df887b857a353df6aa384091091ae684386e474

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b16e6ded14ca9afa2c5b3cd9571893d0

    SHA1

    153793aa7aec1c48eb75ea84a3da6b968d3c4250

    SHA256

    62936f69c8cb8cde5644a9b092951228410ec5db01c42c991d570a2d2d7d6c3b

    SHA512

    bd7eabf2942e44080fbd862df9000b41239385ba683c84c5a1565a9f17b5f31083377351eede1973c0598fb756b45f5a88428640aafaeb90d339d82134cca90c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f4441c3e4330e6a389315a647f97d2ca

    SHA1

    b3eeb6c6d7c56259809d0bc39826051db6b820df

    SHA256

    79c90bf4640784ac30185b44b09f787cc8b536d20f2b0a7d752b76dd1ebd44d8

    SHA512

    000377b3592924f7c406b85774e43fd2469dff5c24d2ad7cf11ca708b45e0211893e275147eb725ae1bf15745ef6c3a878b4818f065598236cd976f421fe7ed1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    efd95eea3d1742c63af5d7f504048724

    SHA1

    9eae8b7a0482cd767df7045ec3ae3a72135bb02b

    SHA256

    212f3507dfdb930629ecc7420411fe954270774ab2c386756ac180a54ee88302

    SHA512

    3c965acf69c965b1b48c07cdece473348ff07f4723d74676d65d6bee88dc4e7b0a5700685559f240499297fa70d18657e83387ad348c69a2f7fea85719a88aa1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    542e7aedba2c2bca32cdb9a47100d54f

    SHA1

    0fd90b79c0548e1b3d7dde7cf840eb41f087c732

    SHA256

    865d5e6749a0f67ccea5c4d47dffbf65a98383f1033b325286754018786b0f68

    SHA512

    fb67dd7337551c94d0e5ed1f47012ff8d86cba27009da02d08a4f1f468ee7b927082d8eb4e75dc6dcaa393f733b9c8a5c60049bad94f48cffe35273d1243022c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\E0F5C59F9FA661F6F4C50B87FEF3A15A

    Filesize

    252B

    MD5

    aa92816fe9128dd6d27f474f44cc5535

    SHA1

    8dc6d4e1e732e0d4fd68bf5a898c5777603f3624

    SHA256

    008a33b3b031a58441b699b2dfdad7d8f95f39c0de4f21b9a6ee9dbb9addec82

    SHA512

    7b0a1af51bbb78ce3a861c293024d4674a5456cbb5957ffe02940a2d2ea1cbdc83c03b011b53e93108ad9a71193cbeec64a86fc4d4890cbdd97225e494b99cc0

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\MEFTDE7Q\content[1].htm

    Filesize

    196B

    MD5

    834f686a6061544e99d91ff3047feb38

    SHA1

    cd0dc9bf19001e709e3d0aa9a47a51a980f029a4

    SHA256

    6cae54bffcf6545559dd65768c972fa3ccb1bc238e7bcf745c9e0410410cb34e

    SHA512

    47c7c20bfe0fb77c5d7461f0b2619e94c29b9f1419c59424b4d69b8e92780b8aadda1668568e66ce47228a38124e889561489e79af5d3b12690f949aa543447d

  • C:\Users\Admin\AppData\Local\Temp\Cab1E2D.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar1E30.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a