Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    136s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    11/06/2024, 00:45

General

  • Target

    sample.html

  • Size

    41KB

  • MD5

    113fa206aa4a8b0950f3a15e5bae3fe5

  • SHA1

    8ef00412b95e2594d4882c7abebfe3f9e2dc4299

  • SHA256

    e965c28fe5c80ed4a1955aa49476d4346fa4d67499c948ebe9d6543b7b3b7ef3

  • SHA512

    a8f2ecdf21b0bf6bc8acc878b6349082fdf8062f81bd172b7b89213c6432d8c12bfa1ed75825e3be15ad343688a794fd7d2d0ff38c72c63fe27859ca71f43e7d

  • SSDEEP

    768:Snmh0O0YM96rZsdB0S+GBc3Z8vfNa+HkeA76J+Mh5DNzP+pnlp0Xj+p1MbiKi+QK:SnmSuM96rCjf+GBc3Z8vfNa+HkeA76JB

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\sample.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2024
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2024 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2592

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c2c161f4b1b62fd5feb9af452442d4fd

    SHA1

    a4323fb3b02b4fd8402e5f56d8a17eab52e331c1

    SHA256

    411f0a7b75a69acf57618b974aaec475de7a60fd4d17d1796d4e8203917b2a26

    SHA512

    1cd398bb4d34e0d790f6a0489b90ee6a235218c22c5ab3272eeb85082a6f8b9c3f45796a8a06acb44f5f387afe2019a8937c90efa9182d836976f14b8c0c0193

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    424a8e57770c24a7b4a9fdc9110ebbfd

    SHA1

    1afe5bb5ae7c441af554c343d9ccc9a33bbdec49

    SHA256

    c98b41eaffc0475f90e73afdf182e5cbad4e520ef65aac248b373dffbbbf9114

    SHA512

    4ba32bb034c17b0c6b475d92ad09b1de52e4769dbb06d88416857961acfd8825a923256c8b566727d59ce2199f3ba869d81f4528affc308f952da9ab4046c0d2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5fd36288c7a335f0a84cca317265e650

    SHA1

    f0e782356e5909aee7d390ff48273766188ea209

    SHA256

    3ab9f50dd1d6207a7607e975eb7a6139f9fffcd9173902418cfb38938e386cf3

    SHA512

    59741bd8fd5c78c65dcae80746379200282f79cccc0ace20686cc6e9d78810a1628ad8ddcac174d84ac44f8ad373aaee7f601db40f2da22584e42c05da1abf07

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    edc05c819c5b45082cf03cdc3587a3cc

    SHA1

    c651f5c9908c780a4454e1c6f634a1deb685638a

    SHA256

    466f425f407f989ae286375c3b6500ce74b6703b000848ed2d6adf3aac47dc0f

    SHA512

    53255d4d4b5aeca16f5f1903522b04147a50f0cdcfae2e5e4d6ab57a9971790364736bba6b456bd02ef362308649114875d88b43111cfd6cf36470b2cd76730e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2b9a27ef578ef0aedb2f32d6cb351060

    SHA1

    926d8c30b75e2b73873776308e76992e8ef10cba

    SHA256

    cd8444db5ca419c3c6eca8a3f5d8f75b0e5f67d02a83e13aba9f24391f64c06d

    SHA512

    8a8ceebf2377527017d007256abf1e5d67098805c316a1bb93591842ee111bfbf79480e2d06e6efa2f1ed1fadcc39e5f667abe664a05018a0ab4ada44e9c1900

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c4916164a181e3ab99df717f43969343

    SHA1

    40f704075d1dac44e5155d7120fad3771485c4df

    SHA256

    4c84cec240e278e9214606287c0568b52236be71de512baa039259646925510b

    SHA512

    1a249ac47b474b36e6bb20a18c6d50166aa619f03a1f0ec582caf01a48bc924a1cc186b906899c648d7c3bc7846a33d9dfb1b8073fc476251fc37eab85842481

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b6ea66970a5d9b8f3a418e09c0d3bab1

    SHA1

    dc3280c103908904f83f9fa1e13f07a185bbbeb2

    SHA256

    f03f240df938ce1e211b186e92d9cf3ef6b202bc77b66a6a767eafefc89eff5d

    SHA512

    6bb1def136d34fcaf432e74ce47d7e0b78412d96cb956be78918d6c1b8a9d9c7e4864481648d81cb2d253bc2dfaaf6784c6b8677ed362ce235cf157781ccfa37

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    747e85710ffa1b569d8746df8f3b4427

    SHA1

    5f328cf742add7e450ed993bf4f28b8a82abdfa3

    SHA256

    4759282475d06ba86a72d2857d5f0141a2288188be1516db9eeca8ce7ffb87d1

    SHA512

    9459efc7ddfec718e81c53ec27d8ef48c433203340e5c2b396e90225dd1007756b78b2b61a96b46e46a5a7035d667c6efcc50c58702dfdea3e53f3101336b76e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    02af9159c7e95a3d4e0109a985043e6a

    SHA1

    eee970be9ce4e79deecf7b9274e51326b0aaadcc

    SHA256

    0f3b773864310d5e2ca136796dc8943a8d426d6fa81535cd505ede937ba52b7c

    SHA512

    5fb9b841c8b7b39f2e724f62f4f6b60b3cbe32a2b091f7934a270b44b7f1b4c1cda683396bd3b0ad9104cc8b767b5ccc3cc09a7a7a3ba5d2d087f2cccdc035a2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    53fbaf7f824a06a35c328649dfb88563

    SHA1

    49476a7b8540f5ccf061e51dea7f62885473b525

    SHA256

    b44f6ad8999333386fb45e229d79755bba937e7f81717fda734c906bf49deddf

    SHA512

    a8aa151d40a623c8c9186b1b72b799f7dcce5833ced3fb3b7106496d3242080ec225fed867520bc4d457805ef799d144414327303fbc72dcbaa72cae4a93864b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d6690a57dc2a39dea24beb43d25ccc6a

    SHA1

    1892d25ede2b3d2b54f07c0de95442987c2f4f56

    SHA256

    6b03bdbd0875a9ede8a2c0af08e7367077a8245a88a854638f6b8106f30c45c2

    SHA512

    4c626117a69ab8e4062339c498582f0cd8a7901e7baa78039de51d0e315966411a6d59234522797e9b46576598b2d7f0583b53e387274e823e5c869799433784

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fad91619b6bb2554d399b72e4ef47f26

    SHA1

    626b43716941a74e6c54ba1ebdd1ee9def503525

    SHA256

    5dee9c2a066bcc6078d4d9b0c61e58b4c82fb7fdb992221e6dd8dbee328e02b1

    SHA512

    c1007ae4584dbddeb6dadca722fce3893bb0e8b8d032e85e13fc6b66ea239e64b9c6d17f1a639cae389bc2100e9a52259e948c3e4db437b26785f33fa29590ff

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0a549d34a5b4e5314ed4de8aea47aa08

    SHA1

    de6e1f22bbf6f0d8d3ad186a891f873957286ba3

    SHA256

    eaac15dee77bfbb2ffaf2d7c52f76ee77f95ff278c3c6ccc7f141112973bb777

    SHA512

    e39c48cab31e4963ffcaccf11f75cdc3fc0bf721af9ff569887be2d6c9dd30a0cce88844ebcf48fb619ad9a36b62c4f71956e3da7d0ffc3638b4bb07172c7370

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    467cede060b6a6dc9e3c53090df7bfc3

    SHA1

    f6933a96547b3346e884cd340b563ab6542ea348

    SHA256

    16aaae998150303987199dc23e202a28572eea2f0dcbc913419347137e4c9794

    SHA512

    ded55381d1d74b1f91dd3bfaac7fdb1aa9d6cc9914f74af1d80413218ffbca3f54fae7c56c44188238bedee75c6ee15fb4aa9ff1bfbbbb71d55e65f8c145c929

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    26d578d8d95e44a93f4830b75061de97

    SHA1

    e4b9b523e4bde217d2e614371f545582b459358e

    SHA256

    3bf730014f42368a24cbdf1901835c156e92bb5f87c92dd269322ef447f6218f

    SHA512

    44eb7529e543ba386494fba7c9307dbe6d4951dcfce0e933844599475a4584586ff9fb33f317c8d1a1e1b74cfc6ae81ac25d24a67969fee175836e8c72e74a5c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    26a9ffaa1774fde204745a8aeb28c1ac

    SHA1

    544bb061da53d8d85304661ea25c1c21ef3a1d38

    SHA256

    3cb2c2b8f197b43e374d24b4f908c3dd5a7b8374cc9bfbbde486cebf02320c94

    SHA512

    a9a95d85f2ef9f92ac95a9a1f78b27e0807c9c0347abd78198cebe64df8cc48cae9b013e775b4491242325787f7734eacbcecba6662a1c56be07e3ae3c8eed71

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f450b09dff286354b8440dbffe67c750

    SHA1

    cbdf171396907e5360b9765cd2d227929268b51b

    SHA256

    a4639b44677ee7f0c34692f1c8c34f63432a72cd76f04b61dd56fe1cdb872fc8

    SHA512

    be56553a64dfd0fe2b08d52700fe70a99d916d92e3e597200a7520d42f4cc803a677d188501f7016fe4b77c9b003e4cab467387e8b31dc1a0f5fc30d4090284a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6770fec52202e0650f0f1093321b2c61

    SHA1

    8d0fef8aa6e4c77b6335c0f1637137f673fcb87e

    SHA256

    42eb83892838233643d225bc571a50c35c8eaf777c83e398a435b12ed7c41295

    SHA512

    52654d76675e7840b71e4e6cc8407d67136b7e7dee0036198b94376292d50b75819cf7f54d62164ca405f3781217c31de90881b8519f5b1f4b43f48e7726f185

  • C:\Users\Admin\AppData\Local\Temp\Cab17A8.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar18A8.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b