Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    136s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    15/05/2024, 13:37

General

  • Target

    sample.html

  • Size

    218KB

  • MD5

    f3b0ab31429816dddacb7e1e5d2ec91f

  • SHA1

    1cc5a74b2e3765c2d8ab87bfb7e344eb04b89078

  • SHA256

    57de9d16e4422d81771c3f7acee2b65472538c6ffcff314963d9d0749c13cc3a

  • SHA512

    b50a5128e8951d9ff5bd54ebe247a5c24733a3f7fbf696d4fc8a066d2a8a157979677326ad359be94d9d7fb78c47edab9932b8e915f7d7ad04f37bdf257e8fe3

  • SSDEEP

    3072:S8c/IYMhs/SyfkMY+BES09JXAnyrZalI+YQ:S8cQYVXsMYod+X3oI+YQ

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\sample.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2168
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2168 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2884

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fa6030b64647e9b00ad6016534adbc03

    SHA1

    c2a615e0fed7b9efda4b476f3024fa02ea27f2fa

    SHA256

    4a59b5e6079b7c31b4256bbd12fd1e56be78896b8f8f9daa1cf4bad821027eb5

    SHA512

    f8ced14c94d550b5d94c624de3ec1d36f862c8cbf9c9a71e905a0dbe9a72fa86e2a1474cb68fe180cdd943df93127642fbaeb02433aabe36f1afabc8a082f070

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ac0935d23f76dc3457dad8d0588a2021

    SHA1

    c6d73fa744dac8bc4567c9d3395df1969f95e283

    SHA256

    e26774b1da16798a16e96f47cfb0f937062ce84828207a72ded1d8feb9cf2b55

    SHA512

    53d5a476432a3e62f8b713e964eb1762ebf784c697ea2379925fd857134a7699567585b8543e661ff49fc143b79e786c48310ee3967301410c1199b3eaa10fb6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ac9cb1eca08a6d9bd42cb3cca88c8d82

    SHA1

    d6473840ff5fa36acd86f1f4f4a3edc2b1ac2034

    SHA256

    78627f2a340f38544c7404fd623208806bdc2025191c9532c0e0140f0d4b7bf4

    SHA512

    2fd33247e9ce13d088b405e7ed45f194461a6830f52422da192089045efd0a27a20f68a7d2cd8c5ef66071b6216728ef9e434faa68a763dfebfd12dcf4c7a36c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3bd6b0bcbb2d5f5f2201e96112ad4e07

    SHA1

    dff4fc9980ac96ffe6769e014910d1bc03817a73

    SHA256

    3885f9851403a5b786e1fe33cb3b65d16c23ba320033534622f3baae1830690f

    SHA512

    5729ebb09ddd2a9d0d97e3abc63e7b7749b9d8c5233cb8f0330c8ab747174bd09e47562a571c0b13a0dd1a47d2846120f7b8f9b709ab364928b74a9fd0eab417

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    307a97c393c294c455a252b60020d2a4

    SHA1

    34e946bd1d0a8f1fd1746714e91caeac62098460

    SHA256

    85fb7715aa4065fc1cba87204fba0a07e6992bad85131106645d04ead60be6ee

    SHA512

    880c527f312e4f258cce7f8d7a25e15514575103b8cb0dd048c3dccd52b71b56df1ae96489a7bc235d2fecd0ef8068a35309b6c4d20ca9a6368d1963ee62f03c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f6ad367d204bc73add8670158b47bac8

    SHA1

    e309fdccd040b6a4797648d823eaa5fa7c7ed6c9

    SHA256

    4939070aec8cf9a945df094b4ba3cd16b3b7354c1298d41c115999621470dca3

    SHA512

    be98440a8ace128a5712ee089b584e16c72d33e40202a1ebeb0b4b3e01568cdbaf1a299ee2c4136ce8bc42f529a9cf31b9683d3f234014a2b515889b6d4051dc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    432cee936413b50d03c3b35e16040708

    SHA1

    b4a7144cfb91e960a6c92b24739a1b3b05231670

    SHA256

    cc64b1f8fe2bd4394320fb3e14591ee7645d14b47d7cdaecccae689ac1315260

    SHA512

    dca7e738e4c38e4333bdf7331a7a99971fac0509b124f91712a65c5441a285146461a882df93e2376667ba82bdaaceb5cf63edd1d1e94e2eb21fc744280a016b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fbad8486d42e6d443aaa7072bc84133a

    SHA1

    df79da7c8f219d16eb3a6f8deefc98f37146d931

    SHA256

    f97b06b34495f568ef068d9d9abc3ec1806b0f2c66f2f4c60c28b2e56eca46a7

    SHA512

    a8105954811e3fd6f25f81b35c711b81efab956cf0f8a28028f5a50f46130127237b0a361717e5bb10e775d3cece5510c080670fd87a1663ffa150de3b57a295

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    97cf433fd45773632b5090e3df3e1da1

    SHA1

    a04ba36908d420b83c1e239aba2e8484bf6a0e30

    SHA256

    889903dada637b4f57e24902e2f0f832c43dcad92bca6cfa4db3e2be03e2862b

    SHA512

    96382f79fa595165085c6510f4e159d32fb5f8d67bc2b66117d7b38398d0032b740e15f014d3bb8f3dbd658057e9526656333b1d2214f370c512b7926bea9960

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1da4a54e934e03f287ab8db0cc80d76e

    SHA1

    b28be2891d2e2df8241f913e41df85bf42cc44a7

    SHA256

    f7078a3f0dfdd565f5ae574e3e79c469f564ea89fda93a4c307f931544f35d9b

    SHA512

    1da1830c95610b469f7a7ad5e2036b1415d8453fb2a92ca99df76cd240fb3063e9a1181c8164d602c09930f112305aa9275a8b0f39bc58184b3aff175402c924

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9c93fcd3323f276d49778dd3df73bfe5

    SHA1

    cd8b6de3c1118364a77c4e3d6c25c88932308d65

    SHA256

    a5641d03efc87c2538e3f5d61567bbe783407daa2bea7cc75822107667c65c0a

    SHA512

    c764f139c52aef19cad99389b53e2604be5a7840e53efbfd549ac47b8c6e349a80082fad10cb9a1e2b756e753c4c719e33a3e9db25f38fa5c28c2b1183e5bcf6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6ec36b65dcbdaaf0c9417a2da2b98518

    SHA1

    a3880c5a1a2e80d4d14c47710c2e0436b1fa960c

    SHA256

    d3702593805fa0dd8846ea1512615a8610eceb87101ba36fdb54adf9d1e5adf0

    SHA512

    3f4413062968bf27e1d4bc0f8120a4ae65d23d690c09eee40a915a63bf172ddf78591a97b8e0480037cc03cb02251daf1a467030b67d9357ecc6892c312437b1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9145615ab9640b8e268ae28c6ac4c309

    SHA1

    1d0bdbc0d3f5f178f87853f1f372325b2fb03f29

    SHA256

    715a01424819d7c6c6f873fc79d9f62576d7e773c374d86af9c49a832baf76e7

    SHA512

    02a2082da4131a7719e94c93673ad948155872d6f3eac0a1a028a0983471059406c0ee56b0626965bdc4fbdc4656abd07fc411b745a35e194fd87ca4c3613fef

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a4f4c0d340334f23b2a1471b603bbefd

    SHA1

    213873cfd29587a3177bfb053472c3b4d08270a7

    SHA256

    d47a1acd5b128e74d50c05523244c9bfacd971f0a2b5bbdde1960fcab28aba68

    SHA512

    7a289eb1f1f691a89441bfe572f87d70409360d7790df0ec698b231cb4e3bea52e6105f5848256c54805a2c9364231616a1fe4fa77a6a0a4141bbdb0bea16c4c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    15596db698d6366e1c5376d48364a8a1

    SHA1

    3499bb6a8fa052ec3d01993da7fc0c07c8db9cdc

    SHA256

    4d5dfbce1a369e232ecb285d0c58babaebc25bd16b8b8cb39bd794c7e8a726af

    SHA512

    cfdd13e3981b19b24f0518fca85d262027566aa6425463cb5a3858afedc9043a9a1d96423ad4f46278d55e267bc739b22831203c48c893cf4f58561cfa6b01e3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    637527bb77364651d075b43b0913862b

    SHA1

    2d541c2d3ea9536a010e64277317d955c3a7a45e

    SHA256

    f1dc9bf41c9d5bb71c43c25c420f114d73daa416d70a912921a3f8328d578b57

    SHA512

    3818408b64a58859a8c94b69e78b66558b158fb412fbd08d516f8cbedd19544b91637de9aa47e947d2587b840ca3b66a8b9e04c910323c3f87add34d28e58730

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b1ce725226c282a96b0371df01a2139b

    SHA1

    2d13cbc7c37cbc070d13a59e53e5b80cb9169aa9

    SHA256

    a826d576a9dc4b917e4f1948fd2ee61e26a55725b16b58a1d73d657c5be7d3d4

    SHA512

    0e6770361ea747f8da0f4f9f6cd06f58523682307c68a33fa90abe60f8a6477733b54beb6d65e15b152d056741ed57c7654fbb943c5dd9a70598926fc3c9e649

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7c561e3fe3e739bd4f710e032f811058

    SHA1

    206527fbe93a60edf4d22f3470a13808a5bf927d

    SHA256

    a2bd018fff1d4f8cf2e718eb5a7f7ce7456582768d34f019d9837b3c14f34a1b

    SHA512

    26f9516e4e06f3d46baa653b27485dc706aa2b86b864b4afc921cc877f9c6b473c8e03ada1c1c0bc6f307e023c3d251c1c41959944921af34ab962a8cdca56b5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f6d1b8fff5c15bdb42a7c258963747f3

    SHA1

    3d8526514992e90b00e4f12c91fc042cea41208d

    SHA256

    db20b4ae944f0860821917ec338ec09bb1e3327f2fddc58e7214e2b3f3aa08bc

    SHA512

    50693416ad48496f7af59412736bccfa67a3296b8b5de8e474df9ecf238c947ee0cc0b189c15264a86d5c0a47f2255213889885716de59afa578ea55e5e6b830

  • C:\Users\Admin\AppData\Local\Temp\Cab1E7B.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar1EEB.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a