Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    137s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    28/05/2024, 09:44

General

  • Target

    sample.html

  • Size

    41KB

  • MD5

    dd08d7401437acdb8360c836a1ffe142

  • SHA1

    03315f27cc5e7cff48c5c284da63348527fd1157

  • SHA256

    77c2c958ee51050d4dc6c430da4374e6337f67a3aee190fda73377454b4e18b7

  • SHA512

    9bf7877ab6333fc29e0a883c24220d0bc824f9a85c3576e884502afec1e847ba039066e0441ea294ff14d0436fee5f5b5237ab9c86a102fa81484c379a5d52c5

  • SSDEEP

    768:Samh0OG0m+JfoNeV+5RDpSBc3Z8vfyT+PcFUCnJ+pqP5AVg+LGvqMDj+JN/OhNgW:SamSyboNec5RpSBc3Z8vfyT+PcFUCnJR

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\sample.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1336
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1336 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2700

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    53a30e5292a3e3871770a548aabcd5d8

    SHA1

    fd5af828460237694c69c692d13f79a96b2665a6

    SHA256

    1f388021009c1e512899133e41d0ca609138d3e56cef660d8fa900a5a89c6ce6

    SHA512

    29d7d06277f5cb7786876dfb686b0985f91559b9fc3280b085620e2887163b038619b168c601b4d5a7d0c0f2f74f105f50c21f233c89b09e2c84fe72c584e346

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f19c0617344df0760ffe1256d9c22ef5

    SHA1

    c1e0aa2272c15831ae29fd41ca822d761f0bbe39

    SHA256

    a9664840c7e79483edb1ac19121f371d084863ec952ae869f0dad2c72e583ef1

    SHA512

    52fc2322b52fc71dfb38e9842a108c3f8051c811789cb23fbea8f4440cb4914a32f708a14f3d872d51c900fafd76046e956a193217a6d54a131718aca6a07451

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    df5d47c7363c78b5c27e5dacae677fb9

    SHA1

    aa6c24d3df11a0f83442865bac3733f58cab8fd7

    SHA256

    3cb233744cd7d1653df65b23fba8b3909fd0eec20b1c6b8ac6d8175cd6d7c499

    SHA512

    901c7d547755dac7da935c61445766909b0f8165c94523afb0bbf5d7a1ea90624422c955661393d84480c571335f2b01feb2995b1176cce8143f2f8970625ad4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e6b8181a9d0cb9680e925cafd67dafc5

    SHA1

    9c1ba3a3862bab2e5677a041b98a05b41b5da98a

    SHA256

    e62fe11eb0820caa8ab64a417a0e3ee461f9de84328272bcd1466ee8ea3355cd

    SHA512

    92ba72a031930b0e0fb3921174ba4aa361659abc7c5e4a182a790457676ef8f0bea5938aaeecab2284f02d87e017a2bdf54aa3cb54e36252ca4bfe03170472bf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8e3fbbb4bea5c85f6edcc079db0cca83

    SHA1

    52974521551045a77acaf4d49fa4ca293b35b11c

    SHA256

    d39d54dfaf8cdb99a87a745b878142881f8e7dd55c6d6a35205929b492002c8f

    SHA512

    af3a2132f25e78822a1fa2e9a0736dac16e5dbc13741830b75bc22b24676d086bfae2033e33102c0d56d776324bee2fc749b60c86a48c8ce5ed8a65c107c3232

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    882aeef82df14fd64769aac80dac3126

    SHA1

    cd4d3edd75be6cebb018d699f0bee66642080634

    SHA256

    ba9c5fa0e36135729898dd4db2cf5935b71bbdc16b3207ee91ea9186ff0a3126

    SHA512

    ce641e084765ace80243fbd53e498c8998c8adbaddaa5cfe9aca21f8a18bce1c4d5242cf0e56d236681cfabd77e2dd905d696f1b435f88f0a262bcf4a561b40b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1e73ed4df7ece60cbfdbc954a2c777f9

    SHA1

    1fb327aad295a866964746d1834e35f7b8af6abb

    SHA256

    8cd534895645b42b6b649433a43a4424839c9c5a2c4368586ef53a06ccc5e37d

    SHA512

    c212366e8a1794ea653c0343af629b46c40c21b451490683b8c7a58527ea0473622678d721bec75829379520b8f2ed151b83f33ab30fdee675ab87cda3c1efe0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    31198d825843b70625f6cce25b3581b0

    SHA1

    650365bc4e9cce2a1392de85715b25f59df96f4c

    SHA256

    d06a172c2e544077c2f42771d352c82e33d6eeeb23cb1d938f4aab099f03e3df

    SHA512

    5ca7a256ce85cb3ea9e881e0ee51996ad49e30648638b93f53a8735af486b86e2adc7d08114dd06e2b79426cb7ee6fff4f1bcdcb4fb2da4fab97d56615bb950e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5c5d896bd9f6444e6c8299b1cb42a8b3

    SHA1

    a44c6829a0d82a2997388a99d1c034df8b06ece9

    SHA256

    9ca69acce4e670953c7935c5cd4174a8c50847bc5d682c69c21b5640f1f5fd9c

    SHA512

    1bd145ddcf479f2af52e7ebc5708d6cba51523c592edcd2f98081c11cc9cd70dfa2336800b323d3dcc08a70a3d9808bb29b4933133dba4c6b39c018500c5fbbc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e869e542d1d8aa2d6d78598d2d46212c

    SHA1

    f795e6bb5995f522d80f49b99f654ce7afac732e

    SHA256

    60bfe8cc64f525a09e240a5ea419c2205b52cf2d53feb69e6e2ff9b303611ebc

    SHA512

    2b1c778cc2d343ae69c3e9eb8b21050281ad7ac95a80258598760fd90f48cc8b06708a141954c6e3d201b41cd40e6d5ceba0e714c40f4d0455081600c0ade5da

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0084173a89cd33b0a158b1a983ad2954

    SHA1

    99f34fed5eac6997080971706d940890d91f3b56

    SHA256

    d1f555f19e5a87b29fd3da1ea2e333a0f558283295031f4acceaf1816d64106d

    SHA512

    07a49516a01a354ae653ef12f2f103395dc82f41d816328bab98d4eef1fbf87e310364ab9144d67da7f0e541b6b18f36fa2eab158e74a58eede79624c3394c23

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e4bc19994254e9d48b8a746dbcf6ac47

    SHA1

    3507b37783a7a7cab7c0b28aa80f48b9999178fb

    SHA256

    b4ff1e40da43b7441eca1272a7ce2a29060957444779bb92e630379159a88daa

    SHA512

    dbc77c92df11dd7b69fde58b89b255ec068495e181493855500d755630369bd6f12070247dd3c18d9c295dbf006e3836dd3e2587ab6444a7e683b9a5da6bc419

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    699a0e1d1031e017bcbad87c146ca20e

    SHA1

    a480dc71733e1a30fe00e725640a67dbb16d8d83

    SHA256

    0f2b7149b47ea24c18392ca5053a47d64e84462881a4402d314ac038ff399412

    SHA512

    3a33407e7c057e01041c54790bd2469f7770a370906f77ad2bd3d5df35251c45d219edec0f1fc4b8608c8f2c46d1bbca802fe5feca48c44e2e686d7e2684540e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d0a20199e40c8399b73d4e6053c0382b

    SHA1

    4afbc61dd613f8c9cf4f33a56aed158fb6ba2515

    SHA256

    c0d4522c0a5e381e39d2929531b09586a06dddb888cc02ea58d9cc94928c2c32

    SHA512

    298c13476c5bd8d99a445ef066fdf92a6055e95aca019945f08a6ee99b02edf48914043b5d11ee22b283225b26776f27180a5ae15c809d700473cc44a5c2fc5e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    42c65ca2a494a1d69e9892ec1e5ef6f2

    SHA1

    1fdf601c48ca4240ca8c4828cd7bb1c52bf090a4

    SHA256

    64f57fc5352417ac5744f58e7fe3a9e292f70e659d13f6b5646c81f079a194f3

    SHA512

    1c28ee11736ce59b8522031791815c5216d37b85ae23b81987f3dd65ea44e497d4bf7afacd0ccec9e804c4b03adc33403bfe90efb7be5754a6641759e8bee025

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d93e209eb3603663e168f8b85f9e5a46

    SHA1

    87b85b2ac73526202577657db20ea9d1201fb696

    SHA256

    d8de220edf83104dddcd278f4ebefcc33864bf2cd7bdbdd2133b72db77b5698b

    SHA512

    d9952cfcd61407a1ed39b298dcb1ea44decd2c9a6802f42f618c81ae992b37a91a0e4b13da41b90a38ac5de9aa7507be693ccca2141b68212bac143411e4eecc

  • C:\Users\Admin\AppData\Local\Temp\Cab9879.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar995C.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a