Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    135s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    27/05/2024, 08:48

General

  • Target

    sample.html

  • Size

    40KB

  • MD5

    372ec0773d0a932a1011b3dee552335a

  • SHA1

    3a7276024feac0423c30b44b2f5f65a8493d1709

  • SHA256

    0abb52ff0cfe5136bf5790c5700df787a5f920767ae637c656d03f6f78320911

  • SHA512

    191b113d7f4c1a3b8791f7a648159023b91c685895f9f77bdf2aa1f3c0211305dc6f4a3ea777ab7af8ae0e42c45396dc71b3758c239ea834dd9c45355e2f6a25

  • SSDEEP

    768:S8mh0OG0m+4UvTqsarWnjjBc3Z8vf0n+wTULINJ+ehdU5Sy+LXxpjcj+e0QReAJt:S8mSyDvTqsEYjBc3Z8vf0n+wTULINJ+R

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\sample.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2132
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2132 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2480

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bbf38d2365c8b7c7c67101693e902656

    SHA1

    f10ebe158217557d9aefe0dde9e04a53af19d289

    SHA256

    4e3f9a2073beb1edf40da9c9d29e1e6c7ed2dfd33fa1ae74d640bcc13767ecb6

    SHA512

    961ffdca9b6e662f3bc791e24ca524a3c5c5860c7113b72d9fdb94cf810791fc543f2edfab9c2097068a17e9dfe3a12f77c520e6b1b51ba469e88970e818d8b7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    61386a9308388db74d4cee4802a08790

    SHA1

    1a71c96d2849e697bcfb286ef8a50c8c93b31150

    SHA256

    dfeac85fc5ae2f6ed4beef7f28e91bd0e6922403833d7c0f2d5428753b680f69

    SHA512

    49d9442b750362e4c5dd81ac08f36916457864d372094d4d0e911d1831d09a4b751dbc4732c5d66c87ef011626f5081869a9f049d6ddc0b2c80570b60bdb681b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f43f135932b928ccfe90cda88319ebf1

    SHA1

    924b0768ae22969900b65da8f4a00d3ab5f5cb92

    SHA256

    e13fd8918b6d7cdb6c8f9c7937e9bcbf3052113ca1ce8bd4a70e82cab4cb9e75

    SHA512

    74f90e59592cd2b890fbc44dc3cd4ea363bb4db602678c9bc2b205f949aaf979f64e7ef743df3a4c1394fde2aba243655da1f1f4ca51a407f4d26823ec547de0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    43f96d5a0f6d20e56860163ec1424834

    SHA1

    ed5ca45ae740f863a3538e93c78f01abe47cee4f

    SHA256

    83129426b04b84613ee4bdc013c107ca9e93d8e9f45a19db6d206937ae1a69b1

    SHA512

    3b425e8e9d877e52062bc4191b94210dc97e75ce1ae327f3db1b33b52e8b61f82b3bb4d75e8d9cd8037d15fa7df5d533a5b063936b5ad7c54b1831352acb34b1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    79f2d6645575fbe6021e5b6b1968b5bc

    SHA1

    5c3b56361588db4e364e5a467ac2701399ad7dd5

    SHA256

    ddd2edbdbde589b06eae9af2b5c4d10a520b6e28095326a70cd22a9b2f787cf1

    SHA512

    fcd89c14780fab398e59945b0c2250f5fa6c5413420b7a798599765aee997d4fd1505f10e635c7d82c29d6a50bd944e74efc792d4285b4eb7fca8cd765af830c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c86ea79d96ad93995478d48e7e590487

    SHA1

    46bf2d4c554e898b8c1b83272c509136d3b1e735

    SHA256

    251e584230883dd35ec3b60758c6a073102d0e378131a0666a7b3bbc8e5fed70

    SHA512

    bca587a92c7925b92eb1d03b7b184dc289cdad0ad80e01d25bc55a3d2c1adbbafd5ff761d8c4379133888d9c8d28e724312a7717a8870d635002b272f9198e9a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d97f0a9dbbfba0d8e966ebaeea00abc5

    SHA1

    8d3936b8b3540aec7e19e6954c81dc1ccde9dbb9

    SHA256

    82eacfbb1e63ea38c07d57d6459beab00f1a73488fc05fc10d3ea388a709b6ec

    SHA512

    e893dad50d79d7d8348d98100339d610874335e34fc2d0493112295a55d8013f40366734da5af435a05c4955b5fda89496fcc0d50ab64532d0f55a35fc7ff038

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    65ec4b507da91b0f2b2930a82dfab0e9

    SHA1

    b2abf4569f24daf316986c138852c5aa0d140e32

    SHA256

    452455c82bdf9ea2be157eaf9c2153d174bb98015f2971c6b1494a88bfd59ea3

    SHA512

    9641a3dfa5881ce863a57fbc58e2a25c7e5cc45d103307a85f42e173471591b3e0ed19aac13264bdb3e5cfba8968552af5c6c6e100322f20e0b5b4709a991870

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3220ff6c793921e2320e54f1535bad3e

    SHA1

    2ffcccf28b1d4e445f4b627795003f216d7d5efc

    SHA256

    42d11e93c047fe0a68342e686965dd8fe1876ffe30faf9102695a321e6e5af6f

    SHA512

    255bfbe1962d3a8a711c0b9e371a41e12ff3b792f907f97ab99fbb557eb3b8484a5820f0a02c5fac814a48b2827bf2d6f79d4e9aa5c4b00d2e5d71f784b89511

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7a47a3a7f94b06dc8a7a693b76b45731

    SHA1

    ef2dcf005df708b5656e8759a8a4d08580f4ecef

    SHA256

    dcca288bd9c6628035c7cfbe7556d8b239e9d95d7e1329c4a925dc6ac817ae40

    SHA512

    6261110a8adec5991793572ef94b7a144f472810c6486f28adb285043e3740f979410fb4022659e60602c4c8cf4871d580643d9b3b8f703eb5cb7374a3120bf2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    aa198412aefcad61c6331aa920f6921b

    SHA1

    1f5c0a8e681abe85a12f56e11a7135845d5a9bc1

    SHA256

    eb7eaf9aecde5546aa8b5e0a05673df99cdcc0405a636bf580f9b0a092a538fb

    SHA512

    909c68a5f0c0dcd0bef48448c26dcdcb00a9236acb9a0f855d44196f8d878fd84f6ab3b6667f886408508f35c3c1ff10d658be292f3062a203d8eece26905867

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ac4ea1ea5e2b165d284211d7fc13aaf1

    SHA1

    5fe6d48da33f61497c29b7447159befd679052aa

    SHA256

    52d335d8b1cf09c5536ebfb36cffabdbe8f71865826d44b4f2030896abb5caec

    SHA512

    064ac64532737f46db1914435f74e57ce32d48258bc57f8f8327049a897fdcee28ce31eb80c2c8f4351a995052b12174198651eea08d3c441609fad04ccc2abb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    17f1a84b5ff7e6a2d6e48ba5ca166be4

    SHA1

    e1991aeb0cf41dc859fced75e441dd90e3f107f0

    SHA256

    f669d399089972af1f3f5c58192585545c5c47676f84760db5c5bacacb5f2982

    SHA512

    3e86cc31cb5951ad61a5bb06b707a4fd720bc5a246f0cd200201647586b66bf870967905fcd6dbb3f3f393f3e7de6a5fdc92106eaba19a8f0733bf24c60eb6e8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    569296b8653d7dcd6a03188ec89ec76c

    SHA1

    750c6d8fd06dae1e4519a4daa3704af58b4e6477

    SHA256

    0320b48a91c024bdc5ae409349b7007181873127a6ae547d85c0a5b04a424d6a

    SHA512

    d06fd4295a0da602eb4a363fe648e510ee04cfa89af8e61fd9ec592e53a6adb1eaaffbf4673a889a3855060fbd6fb606580a55ae243a391925cb912918a0e519

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2cfc99bceb6871f919b4e0d2d96c6ec1

    SHA1

    9b20234c103293c2706b4c916b25fab18d0fd880

    SHA256

    502fa1c1585c62d4ee307c5b7b085e3ca27ad37dbe65e55d0b21d35bb416fa6b

    SHA512

    fb68ac90732c07423c6e1c53e2c42a0a750afb3e96cb31884e514db781c7a57c409d578efc5c67d09707122fcb6214f12e8aee1a3114df99819220bc2d11fd4f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    81e7e23d55d87ea14268a29cfdb665e8

    SHA1

    cb07082044285e837eacb2c402b69cd857e6ec8f

    SHA256

    677b5b4d6477a9a12a26552efe01e25812779fae04836adfd13119b07957d6a6

    SHA512

    c35e12586c12075f33244bdd5555a9b7dfd4c17001f3fb50881644b96079b823a4ddd3c7192ad530a362d7b11dcd4bf102252237caf199cd269c0ea3c3ebf4f7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bbd4ee7f7477ac3f9b96f9e1f80e6e92

    SHA1

    72f75fdfeefc59c477fcdc1caf8313eaf0c510f4

    SHA256

    136fa4cb0604dc82a8eb867608549244e0ddf7faccb653a39584cee39f23c5cb

    SHA512

    dd53b9c2723a79f97c7ec922db2ba29c9d346281ca4263e27c5cc6ad96f1a578c7b498d6446144fe54fc3a82a63d26da3cce25e8ddfbd380ea0baacae9f3245e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    73dd56fee7a76ab1d468b919d7cd0ac8

    SHA1

    34e064553b86635028b8ed42901e37a594d7410d

    SHA256

    e9ad02e3b58d8adb63b5dd83e8e2e54a8e473a0d5ae9fac9ad41d55f6b66df49

    SHA512

    f5d6cbb82680ce8a35ae528fc261cc0ebba42102a4c5f2019c891bd4932b8719d10905df5b3d9d677fd694f5825f667fe8da2b8cf222a4b94810661ff9cd91fd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    370d3951266342345a9f25d61a0b88cd

    SHA1

    4d2e7e204dd62acc1e2d6cbd8d092a465faae7e4

    SHA256

    aa0e154ae65acab658b01120a24f996569bf8c7fd142f612be80c4ff3d31ba0b

    SHA512

    7189ac83821e5b6ab1e3f9e956b13a42e944c605a3011108fc8a7c46a0aa88efdbbace89f00e789427838d372e260d98915e886ac68a7d32eeedd1cbc27be156

  • C:\Users\Admin\AppData\Local\Temp\Cab22FD.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Cab23CA.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar23DF.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a