Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    143s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    29/05/2024, 02:37

General

  • Target

    sample.html

  • Size

    218KB

  • MD5

    89f226b9c3246ec69fa0869fa651a1fe

  • SHA1

    f9d8bb3a3c9695a79576e6cdea43f0e1e5c4c6d2

  • SHA256

    d70a0ab298a3e613ecb6af1ab2e1811d0b61af02fee97a7580ea19ffd426c524

  • SHA512

    fdcafdf7d0e147fb11c9a2696af02f13408757d938224165f972cdc4088daa679550c4047f69f3669ec61e6f8f035688cc2af4028a8c70f42a53ae03f6fdaf7d

  • SSDEEP

    3072:SAGyaHBpzCw6TyfkMY+BES09JXAnyrZalI+YQ:SAGRHffsMYod+X3oI+YQ

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\sample.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1952
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1952 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2836

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    afeee4afdef9f2121c4c49b039a614a3

    SHA1

    3d6dc9f02bfe799787a11a81dafacdb21c99a5e4

    SHA256

    519350538d3d0e32fb3bd1de106711e538e371b31a96c753166760bff106ab1e

    SHA512

    9ea112c4ca2d8cd928d8d3748b727446d01c48b87e2323648de7efcc2f06286e6ea30a1984ec6b156c6933996c104af0cbb7466b9511bf7ec28787c372c4b7c2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1e1aecae28daa33740f02b074d0d0b91

    SHA1

    2558632615f6a6fe5c482032620e5f1a6ec3d0f7

    SHA256

    567257a97fc892cecc2b7dce5303c039cfcd3ba90b097eb1db9404fa977a31ba

    SHA512

    3cf3690147d57631ed7fccc4e38117755e91b30fa316340eff4e29fdd664d186048c7197149546ff713523dbe899e290940a8b322597dd90f903b15952a225dc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    80a6c69cd3598ad9aaf2058d7183a680

    SHA1

    ace511e0ed99d021e025f4c0602262551974a8b4

    SHA256

    eb4b6361eddf73f8faf3957d42112514a94fb685fc0d44cab575be8f5e3c28d2

    SHA512

    f35af54945edd4f1a9345c3f5bb2dcb5a5d69b64ee70076dd57340a817267c7a29aa3b2231296ffac6e2e79d2f6048c923a3b585f2728174dfe30eb6ce2d3b38

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4638545be9702d0979c62cbe1967a8ae

    SHA1

    a3bdaebd6cdc9a1adc4dc17e6740d55edaa42774

    SHA256

    1aad9a67e8e59d627a8ce252b6b062ec0e9b671564a9bf3d576d88f2b138a00a

    SHA512

    d1b6dc52bc70073c0ecea0aeececdd2a8a0d97c561cf0241ceb2e3024e216b194fbbe9d0b9f9582ace85903d4d45ec24452b8d2da570a51f66254c6c3a022ddd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5d86691e5b3b99953676b8bf0d63d696

    SHA1

    bbd5317e1095c6718a2722258b301a3e8099a4d7

    SHA256

    4c1022ce6e5dea254b8b26a4d57a69dae8674c4f84584472de996eab27d1ea82

    SHA512

    02357cc7e2ad21ae38d59d1c256bdd703e1cb9376c27a6aca32dd2ea7e9284aad4d66d5247eb0e66042e777b903a70846d980d3b6c5da2e49daa2c614b71b5c1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c0da9595c33381d557ad619c86686cb4

    SHA1

    8e60680b0e011325e91fbf7a6e36c9524933ba93

    SHA256

    3b246926a26c88e1f5937ce75306bfe8e19d4c155579516eda1866ed9c1ad0e9

    SHA512

    f10931752cd83eb3bca61e270b1840bb935e4d965a114e9c0897e4485e7fe7406126c8e30fc429bf06051436ab4040057cdb91c3c5bb4a5a14b644edde900b7a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4510357a4c6ee713bbe6e798170f1bc5

    SHA1

    006db0cd80a640fdd555d72e4057c2e4e6b714f1

    SHA256

    e35758671a067083807ca8524ede58db6d6b474583913529680436dce4e5d81f

    SHA512

    6a0d3b5255f704af33b1fbca4d45639426aec311466ca0d032e5cb2030d01d601dc6db3fbf9dbb2388318e06b0d8b0f328f9f620bc6b36f087641e607411d2c9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a0cbf6e35808b39f189894ad7dca306a

    SHA1

    71604d3a9473cc17a4027d44bee374cfeeb8886f

    SHA256

    ceef80855507ed4296af6f5a3bf3b017ba388072e572d0e7fe00633c29f8d672

    SHA512

    5dda2c7470063a76373e7aa8e32118a021901c41ea835738c9ca9d5083ced9fdf6d98931348571c60e9d5797236f033d9395fb290a3ae39d355494069a86cc34

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5d514a154f9ee72916f7ac34b2da8fe3

    SHA1

    e07f4941a41a1c4ff439059b60d82534ca9d0b42

    SHA256

    d59709568614e7546506c315603a0bdf0a65352d27efdb51ec30a2ca7798a8cd

    SHA512

    19eaa059dfe4d32f2af590de6dc49f8eb6f7a78ea72ee87eca030bffbacce19e6896db5328c409f677b6de6adafed66da52dfd88042ed35651d289187d255ae5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ea2d712c2bf6a93d1f07300040f0b81a

    SHA1

    9c13e8137ce8ee546fbd3089f833cde9e8d170db

    SHA256

    dd01f85b079ff830c1910bca3ef71db8b8f413fe6cc8de0e81c67704b9eb44a7

    SHA512

    4aa6b3e6d31d3098ef9f0c070e5eb6e4fbb061e0e8c42d0c3b8d85be5b2d78d31a9901450254dfb7340e08ee8213609a07a3fa1498563dc5d5ff83f8beacb585

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    dc049bc3aedbdad6086b230b907f29a1

    SHA1

    e0a1cc4ba80e30e814c7d16f6fcad5cdfb3cea47

    SHA256

    9ec2528360f992bbf25e53ba1b5ba17d40698fb06957a96505d7453e0e87c185

    SHA512

    43d367708629178399ce461035135e6847ebc4358f9d45ecebf3c9cd581848363704dd93b4ae902d226e46fdb64cd9e7da85e2e5c90998b33bcbbd225ee8189c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fc66c5d0f49ed3ef3fbe7f71c7cd6320

    SHA1

    6101d8a89f4c156eb09be4da4598ce9f4dcdb0ed

    SHA256

    12d54a5f050481fe7168afaca73281db61862296b22c196827fd224cdcc7ee35

    SHA512

    2283c6505011febcc6f8768e0cea372ad1548c60c176ef3d65201af255530171029ad5f111785d75fc93c59aa5e4a8b00defda7f3785ef161344d6231343fdec

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d319da5e362cd197c72aeb13855839b3

    SHA1

    50f0466be0b76000e5c68c4a5b8b492ec621c8db

    SHA256

    21bbc318dce1fb6ef6186faf8757fb400209d87481c0f48e94f01f0bd9156dda

    SHA512

    a065675691759ba7649c6ec2869230d63ea755928f65577120562ece8a52eb88a8685b0cc555150a7aaad4c6fca571ad03f819b7b1d6a6263a6d9d28b83719a7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3f850bdc0b1393437e5cf97da209d5e2

    SHA1

    b01ff86455a74d903a6849d9337c0c740726f0e6

    SHA256

    12397bc7a5ccd892d81658c360334096ee3cd2d4dc2b50e9ccd58c30d691f226

    SHA512

    f0679dc702153acdd8430668cf28d27061013dbf72f112c700b8426c4d4937b7522a8e5b89277ccda6bf540ea5cce7838f689915ac2bf0d55195317818e7aead

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f9631a6d9feaab80f3536ba31ba2ea5a

    SHA1

    bb49b1f34ddd3d0da902f74b8b0e3a810cbc11c2

    SHA256

    95ec6da4d8416790b49b135c6e396cecf4759c71b65719dac48040b236d66137

    SHA512

    61c9714e4401cf98d7187cede176eb5225b488f5b3e0cd0638f943d0e7a750d77c77700548b7c8493b7b6a7abb338054494832d97b16add2e405b6757a003d37

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3280d3aa3ae1efc0ee31f44c516b3448

    SHA1

    9b1cf19b1543992dfbc2eb35b4a3600f3b5afc69

    SHA256

    0083a6cd36e923a58915e13aaf23d6433245a2b757d1e853f37199703c57c86b

    SHA512

    a0cd6ddc47eca05a5839a61182653e1e19e5113f04f8b41ea858e6f331b9da6ad958856791eefcfdbf577a4e559a0625afcac7337b92acf3a75fe5caa1b4106c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bad7f6c62d59b3839ffd66cc18d44fb7

    SHA1

    daf7fec129f403a56bde90d08901d33a7f949de9

    SHA256

    17ee332ffca8b76ed631b760710dfa43ab8bb681df94ef255103ff3756a19dd6

    SHA512

    dfd0146afbfb5d8851af687e6311566d884d915423274c4aada0aa00ab53544a175bb81ae095931f59752a1b6ced0881ee78c2e7b72ab4b7f27524f06fd80d96

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fe80bd8f9222b1c2a7530c5eda21b779

    SHA1

    1a0bf1b961aa029a51aefe2cdc0e31bb78b87b08

    SHA256

    121ceb67435db2385b387e01fa42778e010fbc7151e850ab6adac548ac1ef3e9

    SHA512

    fb23fd7179567304fb822b028d6165834caa0840803d29eceaa08bbf880acf8fea1084bf29b5444f28d603c12a79a849662a5067926b8d0f177e3d44d93a2085

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c6b2efe9d7a09ad0c13ddbfba625a658

    SHA1

    a8ce751e3f74cd182248d17696c498f1020bbad7

    SHA256

    3aeb09d2623fcc6bdc130cae0de40f8a8249b871c56418a49bc0a51a69d6b19b

    SHA512

    283eba3d6d31c612094c760477b9c6e91385cc1b46bd2c2dad7c208f21a3c04f4d8a50330a54848abb39324575f31a2635576e052cb4a9ae79d237e6c71a735f

  • C:\Users\Admin\AppData\Local\Temp\Cab2925.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar2A25.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b