Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    1558s
  • max time network
    1562s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    09/06/2024, 00:29

General

  • Target

    sample.html

  • Size

    15KB

  • MD5

    ffea0fea80843d01012cd500ec5717ac

  • SHA1

    8f02af6b4ddb63e06a1960e64c9dbe1e15581472

  • SHA256

    255e69cc3b0cd8f47ea02700edb123494aef72bab6931e8787e49471d7b27849

  • SHA512

    50fe741e50551c766328255e4ee3c396a97666cc4fd82fe78a725da5142bcff63b80eb8e031564664121978a4385eead1d4fbaffeb3867ecde6a9dae830ad736

  • SSDEEP

    192:PNxyShvK9moqTJkNrv239n+hrlzp0YRIgKAitjQrGNBy2N:yShi9boJkNz3z3KA5uBN

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 38 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\sample.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1404
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1404 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2064

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    522cf9c55609faaefaeacac2b9ef7e87

    SHA1

    9c5f78e588ce491fe0197336c3fe075ddd27d46c

    SHA256

    9e1e2f9bbc6286617572040068e433a50be61409000e144dab17a07a147642a8

    SHA512

    651d1acd12a9d50aa3d8efd0ec4334f4395ceeacc450a1d1b163447a6b3252eb38f08e32fdb40dd359d05101f81378d78b9b77910688d9650ad95da9a29ccaf6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a14bb9e5e6730e86590caf4f0f90e435

    SHA1

    5d231c75106a79bd9210506824f5b6c906643db5

    SHA256

    c668e6b46b0cf7dae826406d46e109f23c0fa0a725ed3ee0259ed9bec04807d9

    SHA512

    ffe43aa683dca554d03a5ae1c1c43879f871adda3cad831b0d13127c590a5db68405240f87f23f410ec0e395ca0382fa18ffa4b3096f7afc6930188f02982091

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5c0486396555557da823edb0c36a92f7

    SHA1

    ef2bfd166e734540fceb6dbecd4dfebc247f26a0

    SHA256

    f3d46880f690ceb51963a2a236ddf521242dd0f739c247551e74d15d208cea32

    SHA512

    a1799dead80ffcd391cb8c294f7068a8c8168dcd82f9ca928950ce8a9343866b2a1bd9e08cbed90dbfa5e64370b950af8b66aa666b44129083d985c4a4be4e0a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    63b7e9d6764db2130eaf41bde478c171

    SHA1

    c7b794c3890347e2fd445a0d36d1953300274d3f

    SHA256

    852b4f184c204dd3304cca84312438d9c739490a18a2c0b2709ae5a239e9c7e9

    SHA512

    5a8664a3d7f509f7b048ed0bde93cd7049ac39181bc5d78f6f0f47edca6dac36b3c2c0db27e61494541d857cb3a40cd86a0931ba9e5d955634b90e63e91284b2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    290100c26a57a2c16529474827028164

    SHA1

    b394d0c37503c34743f4d919374e226f175b2ba5

    SHA256

    4521e29434bd146d47eed7272248867907ab2185c42dd72d8df517af62ead10b

    SHA512

    8434999958c7c4a16c679efb5486cd2cabc81e1fecfb49b0bcd123ea8da234472444e299881f738c1dba2f8ebd67bf9ae41edcf811e08c21e5c8c8ee22a62d23

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    cefb19e997f235a418a29506cffe65b0

    SHA1

    71eb987a3780f0399efbb7fe8a7b1017c25ff566

    SHA256

    c6b1ed913dca66e45e956934ecacff3b3b6cd8a449443152ae9fe8682310c10b

    SHA512

    12117619ab34a19a35b085c3a8479812eccd0ef3e718e0f6f44194796aabed94020b809c1ef83106b99c14f868e02cc182aeaf476af9f1e127bc8fa172565b60

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    aebed94b28f6a2f4d943a3b6a4bc2380

    SHA1

    12ed73f438a3c59070f6e542fd428be9f7a944ef

    SHA256

    f642beba9f96313c541d3a4eb84b1c89e8b7f04236a52a38393c1edd157ce63b

    SHA512

    5a8fd7bc5f083ddb6e67c562be0cf44dd0108f46f2fc19bdcd21c4eeeb580837141981ac91f65e46e979d0ebda47e670670b2acebe12cb1bc563b28a2bb32b30

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    091fa75697890a351db4f9f35ae0a139

    SHA1

    27b5a319e3a50c77aa942207b3a897622699dc1e

    SHA256

    42e035cf55632a2c54c336b4d52e377a95afcb730679eadaec022562a52f5f13

    SHA512

    d5f489e391098cd284cdcdda698473fd61577778da3e017dd6a2cd9a1c460f34397fb65d84893efe951402128f9b3bf1fa4e7209cf07221618f70c829a86fd93

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b2d147314686f5e4b8733c6837be6b48

    SHA1

    344a82a82848ccd5101fc5452d7404133cfd9cde

    SHA256

    83e1f001356e73019ddd486888d6a0393e772822c0dfd0355cf4ffc8a87777f3

    SHA512

    39b21d206fafb59baf814c27f9b06d9003ec83b92e2e355ff6ae1c7d0e32906317d5c861d63589ef03328b7b153b18c63b94bf083ac368aae891bb812d69eba5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    cbbb6e34808ce4e44cfd6f6d500f0e29

    SHA1

    c1f842694bca9064105832826d1d334719e35219

    SHA256

    1d5bee0e9e61afd9718980c69ec946b7e34e4269eb460e9767dcf9d9046b5994

    SHA512

    2e5fb093f6fc47e47a3112adee5b62ed4c67cf37b9e62c15582542ae954c8ff9f3819ed57352f8be494a74dc6d824650247db91d19b6c0f61649c44400f6b665

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    929a94477fccd53ee5408fb10ed096c7

    SHA1

    56fd1f08441ce97363a50c0032ecfdf9bb27a40a

    SHA256

    3c6495d296a472d6f73a5e9f772131d237291d9c569def6ade6864d5b3f82e45

    SHA512

    dfb1fbdac68583fa5cbe3ef7863f3313e0f7faa173281ff39f8392f87e85567c1cf59f2cbaf1b1b6de987ffcaef6743bb9f7b3f9d4724737c5b942f9da50baef

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0ab786741231459f06b2e0cd49646b11

    SHA1

    434bb782be7a07d23f74c2b1eaf859ca49dec5b6

    SHA256

    353330e57b577f4a9df07b3bbddbca33d60b04517ee23298da4fc5531735246c

    SHA512

    bc014006d572ec90b6bbfa86ade57a06848806c3ff74173a8a6c2f79a7e0c91e57abf5082cd98c0d95f51f1e3f7c5791698c5e1cd6eaebcec22f2e760ec386b2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8fb34195ecb0038f66776978d6888d78

    SHA1

    04f018b835cc10e0fc11a1398ecc897986a08aca

    SHA256

    55384c65800a11d71eeb4e4a192b15fd3a92767f85399c891dd22a5f8d52ef2a

    SHA512

    bfc7e468b0a4d75f2756e8fa8875b7fcf8ddc474df4b65c4e3314526ac89a50701937f66baa86e07486a4107d2e2c85f4506fad30133f0406254348646e63324

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7531faf33a597dde1c55139be61d6b7e

    SHA1

    68fca318f3c5f95b7d5fe65cf5ba4721798f0dfd

    SHA256

    2558056e909ec2bb8a552230b9f5541aaceb6c80b89a0a34021431531e440e0b

    SHA512

    881ab593a85894428fde9bb8e94aac0735bdd8a41ff5b877ec9845ba4717573bb3592f6492db15916d5af1c6c2637cc9567b804983e96679bf1f0f9eafcfdbce

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7cb330a2d848e462a0cf3173a0341187

    SHA1

    5345b2fffe532270386b962ff4f31d6bf709ea2f

    SHA256

    4d3194cf809754661d70da5e3319364f6626454112f21a3c1396986cc7989061

    SHA512

    48c6a2462270298fbc7f27966a040bcee1a0fe6ab6be4d418ef2984d50d1ccbfd4613c9847173565cf57a8b4f8377308b414909bde2ea4504fa208889350b7aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e1b657482223493a73c97029a351c1b9

    SHA1

    4c19d753e7e1b43a2a17d749822b10736db74fb9

    SHA256

    b66bdd334f2f20c62b739894a49ba7a60ca4d8bb4e800f2069e5c11437f0d760

    SHA512

    f4209d762da90352f44ba76adbf088da86249ab70ef197c964aa766e2a6eeb2abe5891d5b95da5dfb72bca446b02417982bb984331869bfb1961429b12900bb4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    095a63e0c92c826235366f0b729ef74b

    SHA1

    547f9f3c2ba0556ed1ed6920f630c6fcce65c5fb

    SHA256

    23c15d750319bcddab1df8d8db3ecc24599adb8a99b92163173078ed7de42716

    SHA512

    8b9b1523de1a878f1dc969d1c657c7877acbd8c3708e00fcd3a0edf6f610e40691e521342d2fe501960147846623aa647047610b77011710752bc93d7d04f267

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    815d0194fd695429c07c92d97d5eb0e1

    SHA1

    815c1cb4aff3e293d98b214cb7b188e9c288a423

    SHA256

    cd91ce46cda015aaa609ebe2589efa71d849fd7149638ad97bed0bb63f0f2c7f

    SHA512

    e93f559c4d3b84c11bb36692a04e285d259c38db2d30e1390480a2eb86dfce7561cb2a8d6a9404aa35943121fdf01b6e937254fa5b96e55117fb71cdc67e5eab

  • C:\Users\Admin\AppData\LocalLow\Microsoft\Internet Explorer\Services\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico

    Filesize

    4KB

    MD5

    da597791be3b6e732f0bc8b20e38ee62

    SHA1

    1125c45d285c360542027d7554a5c442288974de

    SHA256

    5b2c34b3c4e8dd898b664dba6c3786e2ff9869eff55d673aa48361f11325ed07

    SHA512

    d8dc8358727590a1ed74dc70356aedc0499552c2dc0cd4f7a01853dd85ceb3aead5fbdc7c75d7da36db6af2448ce5abdff64cebdca3533ecad953c061a9b338e

  • C:\Users\Admin\AppData\Local\Temp\Tar3B80.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b