Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    143s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240215-en
  • resource tags

    arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
  • submitted
    20/05/2024, 23:50

General

  • Target

    sample.html

  • Size

    218KB

  • MD5

    f50d4859c58a5f2fd8d6cc339cb763d9

  • SHA1

    3f411095899c62eaef4448ad9feaeeed3b1e6822

  • SHA256

    b74e1d9e53e19b077a8af2662cbc8011134ef161851417449520a6aa322d5847

  • SHA512

    cbdaed8cbcecb33871b61e57b5342878c139954a133b2a1fbe91759fedadc96f7307999b01adb9b2d00effe8e7e913587f0e54dfd1f32f32c9d2a83cbf238ac4

  • SSDEEP

    3072:S50n+Qg2LIyfkMY+BES09JXAnyrZalI+YQ:S50/gsFsMYod+X3oI+YQ

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\sample.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2744
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2744 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2540

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    300474874eb09fa95225af0426491a15

    SHA1

    ebc620fd1f9457c459a7974bbdb230e142224ee4

    SHA256

    2f4df3fde0bf9bb560f4e7f8da9c4daadd6529c4b0560b8c9e176fbc751422bd

    SHA512

    9d3f79ae6e38fa7e4eae5a456240bd4f616346004ca153474064ddb685f21ade1b733b6be3a1b5d9f6ebc38634bda2cf4d1011e88afa30d8f1eceecb64b7cefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5cd1301b77b958526bd70f976c9891ff

    SHA1

    50bf116778ec882c06fb181bff938104acab9ca7

    SHA256

    47584f230a22fb6bc30cedad8125de008017f55ceca43abc9b115e21349b4077

    SHA512

    458b930462e60294094534df21a94e2d2333d5623f67f2853b1796ded1c820cc86abb5253e766b231415679f105ec8c8af20fb8e5d49eeb3f9be43b6f9e63f17

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    30fe943e7674b5e36caf7b29ebda0917

    SHA1

    9d0f81592beb7e741699f42b1edaca7a760d78d3

    SHA256

    72accef9678ee3140d384ae44c1828adeec42708e34dbda53f74813feb80b067

    SHA512

    65990d39440c214c58f5136d57622349284f037901019f65187630ee2ebbe81289740f279bc14e34e13f1c5fa986d2cb36ac14a4c398b5eb839fe03c6be47afe

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9943c1a143112a333125e42e917da0d9

    SHA1

    d664fb8a5e1ba310b80f08e2ada821735c04b5f4

    SHA256

    1b5e9e0be4c67575f178fa4fc6a986db90d3569342d9e177541ecd4bc50ba066

    SHA512

    9bc072426b2851cb8e7d41ad1d6dbaada9104adcb3d8be45d82112a56e52f7b3a453adb1a452c712ab2db19c6716a038139e23b7154b52ea974b692a77da8b03

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5c9b9ffb106f52d084b0343efbd4eb3e

    SHA1

    7a2d8673dc4c0c83f0983b074a0a666e293025db

    SHA256

    ca6fbdc05c46ff365695c0e5a5a880cecd13693da6db5e7ec30eaaf8c4a4056d

    SHA512

    6ca1bb1ec238cd98a3221beafcfce09f22591480a56252a3f1f71833afdbc68727d3f4c191d3458b35f9cce00739fac0f5e548f3c783ac5696088a0f4ecd0197

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3a3012ea1526c0c51458911d57cf64eb

    SHA1

    5cf8dfb86554f4babad2b84e9f4a9b16a129d358

    SHA256

    e0399dab240cb83826c98cd65847eb96b1fc54b6dec22864be91205512406627

    SHA512

    7e71ecba6a700df17bcd014547a907e181f436b46346c12d7e8d6260b15934842e39165df80324cd11c36077c467b7034925c30abf8cd2f8450b014a6dec2c0c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e8ce7fbc76a9c8a0fdf2c168f456e74b

    SHA1

    d259841bb836513f491d929262c70bd18fdfa948

    SHA256

    04ec6ec317379e3bd1b3ad27684bb1ef0fd0dbd99173150cf4ab10655f326624

    SHA512

    e1bcc550505c838f619fad7bfd79bf54973bcb3cdc76f2483be7188a25903e38a056dfb7381c0b67359461da2fae2553a58feee0655b0164c6ac4f0a96af0952

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c559819d7db6003fe302a1b074f7f492

    SHA1

    cf185d83c6c69aca7a7d7b7def49ced42946e389

    SHA256

    a086cf0021f083823db9b7d111926a8960fbc620f2b962c0e41f19b1bcee9978

    SHA512

    441f353591dfeab0c388f7180eea6f649d3d92dcd5d71e1efb5018edebbfc4e76d04b9ebb8612a2e164839115c9aea988b3c8582a325fe16302ca935f75f6a7d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    dd31afc00c31c23e1912a5088f001dc1

    SHA1

    d0c2d06e29648fef5fa4edc0ebadfa52a3596529

    SHA256

    1c23656e14db1b14e3cb12dfe7963358b5caa5a30a72b06102e0f440c644e2ff

    SHA512

    f2d8dee3ebae2e3e7be8cfe7d95468caa630a04b2fc9a1cfe4c1fecfbc00b7d91c949b7f8f05bfd98316efa89b42ba69211701ab9b96cba30f3cf17aac5b9116

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    64d7242b0457ae937ce03e2d28d8fbed

    SHA1

    f69d194392590a59441deef6520bc8a3b5dd5907

    SHA256

    394cf44141d9a1105470fd960d243996b695f161129eca8ab758878f0b9d00bd

    SHA512

    559f393aee3de70b77b6eceef0344ea4abd175b06d7249faec114920ac1bbae89b50717d80f727f240dc159def92e1225459e53ec7f832efd13694260c514546

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e067fe59bcea8945ed46698d113e907a

    SHA1

    a83f2ce28ad069a35744faa77d2f41537b20c443

    SHA256

    a2da3051a697283566c06cc23e758a77da7b415df2c8b075ba4d24b7f5116295

    SHA512

    082baa2d710e494ccff2d38d83abc6398db43286460687f9a64bc3926d74446d6e01f59a183aeaf62c065e82694bd36337c962be3284e36062d9583dddbfa060

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    75a6f70e17433a2fcf038c885c1aa339

    SHA1

    4382b784f0666564f33b7ad6143ceeb5ef0983d2

    SHA256

    34e5eeeddd24657d0734308d54507063ac3051ef8b3ddde7dfb6deafee503fe6

    SHA512

    118cbf468fad30a11aefbf008adb5d430d0e092641abd70f9d5c5d4c27d12ba68e28829293f16f2178a669f4ed30f844206aa06a6f0bff5ba8c07aa4a963c73d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    91827451c664a2f9fa3ae2f5819b0dbf

    SHA1

    e6174a7ec34243a656e4b2e437825ac366077778

    SHA256

    7a74a387957e93980683cff5b53534fd61d272670203dc6944643ca6c3bb0bbc

    SHA512

    92e11a14ab9d910eab71a7a66418cbfc8fb7c1d105eb72d6d38e58fcdeb4fbf77c608b37b6480c9fd1c3bf5f923fcae1e4446b4941c47c96fb7017927e666638

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    91423f0d683288adc47a3033337676fb

    SHA1

    35ce8d83b92c02e0b3d9811caf496c8a7dc7e86a

    SHA256

    623d118394154f3e27fad4fa2e966dbe6ba67e4ca2fcee4ff96d6e6431925a6d

    SHA512

    4242c48b87fbb307d8d902270a805df6af664541da9de0f524616ef049069b6bc8d7c57f91d1915bde400ea3946f40819eebf9745a68ae090db3823cb0fb98c0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5ec9e83b625ef4cb7b3a9e04e9c7037b

    SHA1

    c5f324d58e3b608dc21c4b89a95e2d7510df7710

    SHA256

    9ba13ac353b42df8177606e20b8cfadd996d1689e94b0d84ccaccacc1f488925

    SHA512

    53405464f1345df9a0dd7bb0453e61edbedc86e111c8cfd15bf73b066cc973b45cfce3c60ab14262cbf76037de18b0341fce6d59e597f179603f09690f961909

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0ddb756d7c49e5f5c841b63faf85a06d

    SHA1

    4a1b863c7f1c802996c2b1aec08416cda6143178

    SHA256

    560d97443a53db4c669b9282401ec4add9d4910d68cad66728ff65610bde5b1c

    SHA512

    fe786c45381db8a3811db18bf0cf9b195ab496ceebb17e47e165fab222514d0728845e2e8cb44ba6b6d397bd31ae5697262ad85fa4b5036523346a744de92a22

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b4df507bb1a810a58903571a820a69bd

    SHA1

    0a35bdb21daa35c433f8a869ac6490e451d21e77

    SHA256

    74d50967142dc4c756d02e09795b6fb9ae714d8b34e5ceeb1c3f035355d8a73c

    SHA512

    61b6133c45c92fb8fdca5ce588519b4e49ddf37d12d787cfbe06987193665b61f768e77e56a21e65631df5c20fe3114322a481a6c9da53f1e30f3180ec0c7d74

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cdec818ffcd141e5ed88f037694bf953

    SHA1

    b9c9b06c71271bae553d6027a1a9b07ce7f73177

    SHA256

    53f161379ae237799c0be0430bbfefbc1d5b302b62c438fb908b113b343e75f7

    SHA512

    4c73e65fed19a47f16f29be7c93d27826d9bca81656453a96587f666e610aa275441095e6d01849514787521d77ed30dec1f385759ad3269dffde539b891335c

  • C:\Users\Admin\AppData\Local\Temp\Cab8D7.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Cab996.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar9AD.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a