Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    136s
  • max time network
    141s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    31/05/2024, 14:11

General

  • Target

    sample.html

  • Size

    220KB

  • MD5

    797d031e3d3bda1c8ee4ebbcf7b3528b

  • SHA1

    4805e582b1d0249a7e49ad23505c8ef3de9573f7

  • SHA256

    c7972488574b33881473ce06464b5fadf5317922e3c7409e480f59063eeeb081

  • SHA512

    8c57302e26c5d8fdc393b2a401e705d915fe3fc351d7a3e75735f86b3850b1c66e55cecb74bb5c6e27739071dd139f39547882534375da17371dfee38e893a86

  • SSDEEP

    3072:S6Lpf80rT0y+HyfkMY+BES09JXAnyrZalI+YQ:S6NHJvsMYod+X3oI+YQ

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 35 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\sample.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1524
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1524 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2992

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2c5bc706b31070e401cd1271bc771a9a

    SHA1

    29f606edc3608c20b7c7ba9cdc58bf43d55843dd

    SHA256

    d51f5a9e8ca0148e7b6165158d901cd8f42125b4af92e7fab8a0454d380e4327

    SHA512

    2ef1bfbf4fb2bf21cf53e16d8ffa7975884a3fd75855a78d53cbf8a32b0e68af3dbabd39b192b54156d8d7cbbbf98d3a1da734e9d5013db35070ef7e4f512ae2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5835b67302d212cf868b22370264f9fd

    SHA1

    52c4432be379d1e5eaa24a76dd38cc3c0b35cefa

    SHA256

    fbb0522db722505e20386f3aa93e4195fa6695b6a7efa9b6055505ffe73bfc99

    SHA512

    38e8cfa2823fe5f888affaf8a1b905e3ea399052180b24c5ce914e475c4e8d337715667918f07ca543e54127de99b61801df0d47084ff4f0b8b834ad65162caa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3c4e6163f59b6a6acbba1d470c7ae866

    SHA1

    69ffa8f1700e8f6380c21ba2af327f127611d8a2

    SHA256

    12f8f795e8429a86d349c74a25b274c205bd3457b1d78887aea60380991946a7

    SHA512

    a88da586077165485bf90ddb04e5a057c16b41cbd2dd75dcf91731993886408916cc6c9b1482e65ed12d9600a3ee16130c3d908ff8a0b52b3376f446cea9acc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    81c5104a6616318e976a51ad64a21464

    SHA1

    aeea9a8b063ae005faeba6ab6a52206c5266fd0a

    SHA256

    adb0c8b6e6206c144a7d4f66688a0696272dfc08f69d7dbbe74cf4721f4d0281

    SHA512

    5187fbdd0d29c1a0e6101e374deafb293605f105b07c955d0c91b94857c56506c0d75619e720051912790b32c8cf20989792a0260fa423f17ab3bb9dbce57217

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    297215f3330e09843c14af2bf3c33730

    SHA1

    d1d3a9a263027f0172496c12f2db4470df885f07

    SHA256

    8d5b6066099e21a426f5d15e964c9227ab4f596d5b1f6a6ad18acc7e19a2b359

    SHA512

    b856d1ebca113cbb742ba87dd3768c25eb205ab36f617821d5687c7aab14195be009ccbc7ccfa95e18a2a1593ab071ec4b7ded69a8d670c69ecd1b2587edc877

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0af429e683d2542d8e20a551d578aaf7

    SHA1

    b56968b93c32edc1a27f3089c6622aba2f38214f

    SHA256

    ad4283df25778b9c85a57d08f1acafa47e195be7a4be509d8ec9aaaf6b208304

    SHA512

    f639f8b8a8c414f301c8f921cd50c0a3878375528f031be80f022ba8ca50fff634cd710173257e8e489426e15666abd5937a605dfc42baff7ae7b100804bbfc7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a4b053e478f1dc7a13cdab672a5fa111

    SHA1

    919d9820e33ffeb9e9cab7112155a47cdba6b7a1

    SHA256

    ef6bd32a3517601fac4e1f738249aa5c02ea903ab2e73b546f4c355cbe4228f8

    SHA512

    51be60cd3836ed4abc30c4951b745d93293e2a6272a9b472f14fabbec612870b08b9cfe2cab19cb18ad2c32572faf284ccd2e13d8f7234dcae6cac88a415bde6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e52d21547d165d77d378f7ec3a1afd8b

    SHA1

    25c79b93efe8f7b02ff262f2306989d57d50dde9

    SHA256

    d7a3a57caba0ceb4448223e80b03a87244c2c2aaf5b65313ce61e3dc6d5e9b53

    SHA512

    1c058bacef204d1ae1897014c3f1f70d87fabe45801ef8676f1d05be6c1c1c5e425c8273068c251baa8c9f92a7b1bfbe962d637702fbea9ebf6cc385a37af3ec

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    03e89a67338ff577ded7cca1665185a3

    SHA1

    e461a56a682b825345ec3dbb4738560d02f62532

    SHA256

    73591b0fb392d4c045f1b87ef781c63e890b9314cacb1ad45bffb683cbe03806

    SHA512

    08031b6dc098ad9370f882f97672e512bdf7263b249f91f3a505bf0fa5ac3f489a20825ecdc9da4d32212f4a604e7fec2455e746b88a4d247f43bf0eab96ad6a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    70f233f42035c166d73726cdd4f684ee

    SHA1

    5d304905c6b6122065e489a3d883041bec1c597e

    SHA256

    01361b53f90a354bd55d23123a3e3f869f052f1444d3af3a4879cf386b1b053e

    SHA512

    8d4f366714b8fb5fe9f5fa0effcbfc91a52adf7a287aec628bd53c70134694d709f3cb182814ff3664a909b9ccfa7969b016ccedc94ae9060bd71b9852fcf785

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bc17e6251b4264eab3c8424c8f2eae26

    SHA1

    034722194064b36fa38dd7ec7b1902b8c461c4d7

    SHA256

    be51a2fec2e5e0c13287e2f0d07d8f10beb1f00d1f02f69a674765d0d54c7147

    SHA512

    45ca8b456ae13fc25616c952d2e7448db753d6baad08a74f82693af7a3bb31841d976839e771126d30a734d92a71c4db7c2af2be89c36002a52be5f656ce0b12

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    757861d4211040339576ff79c806535d

    SHA1

    e39af1fb0cc5bcf433ba5d7bb14028e2934289d7

    SHA256

    27b4f2ed6992c49f28f253a5deb7a595335490e08eb199632588c9fb021f23ad

    SHA512

    7a847d23f8f0e90e75b6c6d18864f8d89fcc7d504dbf951111282c3dcc86846116b80a8c472fd9d017c92fec631a590ec5b2a77329b7c2ad4b7c57d47f22025e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ec1d8329ba0901022803acab4e80d6f7

    SHA1

    7b68d0504b92a8a275417fd37d697c632d772659

    SHA256

    6696f1e88323627f24ca86aaa731724a7693d0a5f895b0ac1a2ef2735f32805b

    SHA512

    13bcf41cce0c256d548124edf6a8f06391aec79eba5e11ae33dfe141dda97a93e1a91a489797d661222725aed21f46f991a144e1c1e8faa0d63795d6ca1d3e9a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fe0c46f775a9cf79622a071e12602a5d

    SHA1

    342f499f927f0a33d7fabaca6e33508c757cb075

    SHA256

    79667f6c91d9ccb7a0ad1fdf6cfb6ef220db123a49d63cb2963357d1dc2a1b88

    SHA512

    bbcc96cf3451a00b252ed3d3e7107bc41419ee6ef90cb1c37d4ebf7b463db57186c6a8e29be8f0c3c81d61afbf72ee18213a726954e71d35128af869a80d6e99

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0fe29c5aeee31c1573b6e2e885a3a51c

    SHA1

    4e02df9dc54bff03628dacac820a266cadccecfe

    SHA256

    1edad027868115afc1c9989ce69b213b72be88e3faf5dac2e9704d9d599f14d5

    SHA512

    759b0ee6be2584e04b52c58152898b3b7686eb0c396246c545ca928f16ff0020db3e0b7ca6b866fd66ee7e6a208227c97f7e664e4881eb6f95c05ad8b47feb2d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    410b24f88605979e1546fd6d80c57ec3

    SHA1

    3eb08ec2fb566f6957194f6d16d612d44009b6e2

    SHA256

    4f9baea1b35599bd769303bb27f67c675fbac44dacfb0b212d205eff4c3bdb47

    SHA512

    2716e827b9c5ea1b2042ee73f36988ad46171c15675f1d5763eacefee9f85274d5fdcedc161a7300841fbece29fd432638b9ecbe5a7657feaf9ca504793aa1da

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b2870d0cff6003d992ce44235bffa5d1

    SHA1

    38b4ef6b5c36639d32f72e70ec88823a877fb2c0

    SHA256

    d40006a7d70bd1e5545f458686496c4d272f03a0c15dd504b8acff3a6915b294

    SHA512

    9784b592f2383bb2e6f8df6d3d364b23be127d7196290ad1c86eef0a747157ac6ebfd9f240851df94e69f026872e75e4930b68e4ca33f7723a62d1f9f16c25cc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    45bbc5d884dfed472c646881678dd648

    SHA1

    79c87dc2fb27ca2104388e26f11d23323bbdafca

    SHA256

    142a6161b2e2f845b05d1568402b32f52e5c208458c1b9f107c91ac4200bb050

    SHA512

    bbf7e1bf6242f5c42dcc3f27346fae1c97761ef68046d6e5b60fbdd820e4cae082b5909ffec1c9d838f09a812bb55a7481049f2785fefe8572965f2e00702e88

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    83ea4bd0bc461446a9f1e6a04f507a1e

    SHA1

    572db34700074b17c5ebc3386900eaffd70ffca8

    SHA256

    a2d1e6d3ab5c37b19e58e4913cbfbce9e98690c688513f0c852cd4f20854b030

    SHA512

    0e2679db5dbc50bf2e5ea54775c17161407c2e352e8c61f94ca5ca2b13f20a65100d83f74c4e08e138c7b6823203f763830e6b093055531db87ed955bfc2f4f8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    380201a6bc9946601df3db6c34536af4

    SHA1

    7c93371acb49cc8790f95e2a0e023c570a06d926

    SHA256

    b1d74e821e36d99be5caf33259ac7558920b974b7f9db2267f120f817daeee53

    SHA512

    d950c9fdc88f596b3ed599d4293d267a2e1281ded14b63752510e73225536f2a3e2ded92a42ad013b65facd6cdf602d59b1032eac6556f22fdd0b2829819e444

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    55e6bbac9cd9b104894cb773964546e4

    SHA1

    697a4ad734bddb9c1170ea15ddedc4aa233084db

    SHA256

    a2080a7916a63ca09704dbc79b86809addcaebc1c91dc126ec3f65a89e3f004e

    SHA512

    c27a8356553d296de354a2532888eb07ef7a4d382a45c81bd180f72a3ee04f89c4b41b6526dc104445b5657b949d6c73f5f426449b81e0104ea43df9126c7f9f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d85307a0000c4cf189e177ef308c273b

    SHA1

    9e28b40785bd53baab319c4b1b9f16901df72281

    SHA256

    8346e1ffcff5ca32f68cf5cc3a1946930c1527fbccecd3045082a0e1db68a3b9

    SHA512

    1d229e16b254d2a5cac26ab647ae3257643d885a48dc09ce4aeea140e6035686a44a7c8840557a1c4089a627b75ba5bea63255759c77654b70f9e66bee490104

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ce82cac299def2ffbed0a6770fa6929f

    SHA1

    1ffc20310a0a5ee06a6ae78f63d145e5554c98bb

    SHA256

    082004eaab8d94001e5128c1ddfb0594686fbb1faffa80dd0108f1378e6897f5

    SHA512

    fb41588c8fde0defbc36c8cd5ccaa8f1060264dd1889ca03f62a273418610ea8655412c4ed55d842c4429053d1651c9b0ddf00e00e2e6148ebcffc1f1b3b09ad

  • C:\Users\Admin\AppData\Local\Temp\Cab6B53.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar6C82.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b