Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    136s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    01/06/2024, 10:10

General

  • Target

    sample.html

  • Size

    40KB

  • MD5

    c81289bc9eaf6901d828ea33a9bdfe0d

  • SHA1

    d6c3bd505c871bd635303deb52cf948b7687b9af

  • SHA256

    9fa8daa787d5596c614fc3ebc9676a3906da85f039fcdb8ec1d6d88629e5bba5

  • SHA512

    587d76cba935e327ddd5f60a88bbf6a23970c9e3975e3b607b0f82c8f28e2de87660556ddec4aef5c603e3b6dcba8482f45b499f2177cd26af1432b13420a3a0

  • SSDEEP

    768:Sdmh0OG0m+iXEROykNUKBc3Z8vfnm+3KNMAkJ+OMsXcBL+kMuIkOj+sNrbIi5+MU:SdmSysERORNTBc3Z8vfnm+3KNMAkJ+Oc

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\sample.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2908
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2908 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:772

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ebd02ab524357a6c1eaddc1ee3c2188e

    SHA1

    f81b3db4b307268737c828a6546cfa1bd75d222c

    SHA256

    34f928a1bee90494d4df94d9e7a7fe07a1a390b2b96044c5e9be69af7b1a0d54

    SHA512

    afecb969d06e2bbc37cc4e2098e50997961cd202632f06c49a3b7fb6cec53049a1621ece38a6e064dd9526ce2e8b725cd199dd0cfe7349a07de7a084f8694c83

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    73553e871cf59f5c4a591241961927bc

    SHA1

    0c75f24ebff5870279f471dec45afa41003991c5

    SHA256

    bbcb35436abc17d2be4e1cf6312db533d1167150736de43acbe577e1a7bdae7b

    SHA512

    c60eb583e9966e008e31fe45ce42092511c59066f2e2b93d0314233f00dcc178364f07a0898e908abef9bffce6a802e2549e872fecc61577fdea539bb670b493

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ce131a57e19088032485ca773c255c23

    SHA1

    b94d1ba986b82f50b827560bba9f8aca6b5dc1d8

    SHA256

    fcc502503d129f43ada92bb540744d9a2e07923d6d2af1e7f6d1f9a2b47b2ef0

    SHA512

    629138247d8d03455af3d3a9efaed33188b8b5a214016bd5eb3124edbd9cb5b973fcb830bd114922e92364fc77c7d793cf96f9a9dcecc3c2a30a9a1e8544ddf0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    38d73390e039f66e0a2162b1a8064642

    SHA1

    f75503a910f5337daef4ea7ae66ede2892b41a07

    SHA256

    6653c396f5d8f33fe73d27c82863270eeaf55f8d14ad8a89a78998f2ef28bd2e

    SHA512

    78fe5547c489158bd628c28839204ab4e975291afe532a861aa5a811950f1c4d8e94e2703bb7d7d7320926cf866549b1e45adf292ec4acd6fa7894327135154b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d49246d38918303277e7c8f2db75e969

    SHA1

    1620a428d5a98f2c0abe53131589fa0638047656

    SHA256

    b634fa03761f22adb544afd2e3a18502d49ed00426c77482c90ef975e4076424

    SHA512

    abfd0f83ca750e71c2c4d026147b31d935d90b12df3b5a8cf07a13f84d5e396fb48f20ebedd29882294f669174aaf82236edaa6e780ad1e7f3e5f7a09244f95f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    25b788bb04afdfdc4ca8ffa01ed66aee

    SHA1

    6f55f5c30409ef690d7ee7c22738fe21eea68b19

    SHA256

    4712765540a621d9ee59d44ca4422552b5fcd00b377591a98fbdf9aa77d09bbf

    SHA512

    934f1dcbbf744c84e4a47427471716a6f04674dc551de84622b1595a11cb82464d92f6c29cc4d87bedd1274af9df234649a639ebc05399de54c7563b2b90f1e2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c47fb24b9288ebd384f9eaf15002ec8f

    SHA1

    2e0d849f37e18fe26ecfe7dee05ba134ab2622ab

    SHA256

    9f829ceb190882bec93fe11b9c66c7d58f75d5103691d1eefe216e3c0343feb6

    SHA512

    fa4af0d4deeb0d950e6ff8410aa70f9394802090416f21324f28ff9c09b374401192cdd6738a31ac8f1de218207ce7e31dda5c467031c301e3038aa01919bc09

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    08a129948dce3d2e7d9005816accfe50

    SHA1

    776df2969c939117904e87684c66b61d8a802768

    SHA256

    3ae947ddddb910caabde8058036d0ffbc923ce58d26c1af36939f976d141b736

    SHA512

    ef274006c11e3a1a030b20396f01ae62be9450a559b6e363a8f37b8c96d39e7212eab8dc0da89e4ea35cabdda3383e65c1cb14fb5a311509605c00261c887895

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1ef43f27d09b4f8ec3cb1bcfc10b6a9e

    SHA1

    761f7caa4d080691476fd0f7416a5846e3a629b3

    SHA256

    a76e622a76790958c14d1fd74ca6f1bfa3a64598aab44ddd358b7148300d9bad

    SHA512

    a6bc2b4ec8f32211badea2ef604c2ea93ead48623ac46752420e3eec951be40dc4cc108076a38bcc3611483a6ef3093c6f5888d734f836dba6a57946616193c0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ebe65ccc998a875b04e167aff656d6b3

    SHA1

    feb237b9a0e49327f63656015fd302831bd68106

    SHA256

    9860788cb99654783d8735d4692dcd5004c14b1f102c6bfbaa7f3701b50122be

    SHA512

    ab0d381dd2c0c3c7980363014cd993037a5a5cf8630d1434e7f4cf193b166e7389278a56d5108b3d5f2b8eddf5fcf23068aa34a3404f84fe73bb4615ffe713e5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    64047a70276c4cf216925f25b2e64021

    SHA1

    0767ccb45053fd9de4eec4c32e45e81b610cfb86

    SHA256

    f79fecee2d611921353a841552080d24de01868700ebd520ee0371c74e6e176e

    SHA512

    e6643e7bcfbfbe48bbe398f27f5ded67a563bfab16839c9c270c951bb770621d0cb6ac2d61f1c9deed7653dcb64930f89040a701032f031188bb86eac9f080bd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    cc9418022b30176ec23c8a810fddadc6

    SHA1

    4e0465a026f3be9a045cdb7d956861f61fda0059

    SHA256

    87cfd63f148cb084b9e5cb6e30d65c63faa21d2d660bbfed7cdb1f141bffaf47

    SHA512

    af761b1d8ccd4cc378fce7922f9ab48d792bc45ec76b9d8825196d33b72d62adbc526bbc54fd21bd990234a1674f4ed918adace776667c8bc476dcaa452c1f2e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a694ddd0458f0d085617ea1496e8d07b

    SHA1

    e8e700a201b945fd83794c233168b72e6d02cd03

    SHA256

    53a616c0861358c4f4dde42ad44d59106851fab9503dee1c0f92fffb35d8dac7

    SHA512

    8e316d03b6dcc56c223b0cf12ea6b51cc8f4c54a3e9f37aa660c48bf29234353df13b375918e617600ff9338db69cec5a1ee8861bc2abe70bc83e28fdc631dcf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    cc12cf65a144314569fa833df5d87424

    SHA1

    d889726c0883e80de6cca77cc115d468c6b95fc7

    SHA256

    1c2f0e2ba8b4492227cd4a15f251bcb5af21f5b88ff0d2e8e408ca410cb23d2c

    SHA512

    8f3a4e1cbbc2acf0c42293b472d819ad743eec61a99d8898f23d5582fe3605b8e67d00714320a3b7ffaa29fc0a7bd8f1e6feba768c92a76f321eceede3e57e76

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c7299841eb9f39c051749572949bd67a

    SHA1

    8f5553716bd8c401b60b227c59d7b1323536e870

    SHA256

    331ad4997127e91a1a26a1c0d55020f6e5704f070963442797dcab578a4f34f5

    SHA512

    7c3ab2e041227245b0fcbd233210288b8a8a614e7f4efa0ac9386e2791e50857f0a29f9db03baff9fab89989be40a897ebeb60772e9ab616c23c4a041b59e919

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    cd780b5ecab65ac6fc16bdd4012dab0e

    SHA1

    0c6678e25d108dbcb1ec4c7d471943b431e3369b

    SHA256

    242b30226c9f2fabc74512ec5e0c46f3b8ed7da0903dcfbcfb0872e38a14ae25

    SHA512

    b5be2e7e725a52c7b2bf3133abf9ea4c47ff77f2bedd28d68c75986e7cca72daca8053878efa1341a58fa69b97b4f7707a2b7fd9abc0a3d3d7d976cfe1856b30

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    881cac9039455ba41b99f91d11025fa9

    SHA1

    c64ba83ed7e00e933b58be24730686b89939c52e

    SHA256

    7a174d8715bbfa2525306cf9cedde0573008e58e32bc2bffa37b7f37a5319e99

    SHA512

    5ef1bd0b2c70788b5f35ac023a5c28f2ff22353b1c847601412ee2461589563a9dec767ecb30082ea31eb43a56795d1013ef52124dd96e1e77319b1ac68a718e

  • C:\Users\Admin\AppData\Local\Temp\Cab781.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar863.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b