Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    134s
  • max time network
    150s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    16/06/2024, 04:03

General

  • Target

    sample.html

  • Size

    213KB

  • MD5

    89dbf1b24108a392a688566b05c7bd8b

  • SHA1

    f82f2820d65a982a0813740a0cb1f37031ae65a6

  • SHA256

    32b57f393e2bedee0a95b0aa0cb34634de26650c8514cdce641c141271ee1a17

  • SHA512

    d224146d632c11cccd97c07d52e94062b6b9324f1098f8a93b46d0e969eb82e17158f7885e8f1c64221894882b7994210fc0aa7ce52539108c8a959b902c5205

  • SSDEEP

    3072:Szfg3+2QrOD4wyfkMY+BES09JXAnyrZalI+YQ:SL4mbtsMYod+X3oI+YQ

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 37 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\sample.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2216
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2216 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2820

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    eedd1067afbe4c5d81f95d82a7643211

    SHA1

    c47775af2bccae8c15e9b4a54cf7adf17a536c17

    SHA256

    d6036275919eba90caf25d410d263fea0c700b309109ecff1ec6673aadd5f9cb

    SHA512

    fe81582480e99fe0718e550587eddb172d7cf1d7e1f19356dcf2fdc7be620f58472e2eff1bbe4ab58c1e6a4263e9b155a92fa602c805ecdfcda03cec767b9833

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7aa38ca58dd07799406313cf04642c0d

    SHA1

    8f687f6c1de3e5f0aa5e8630eb84ca4d70ad0bbc

    SHA256

    a930737435fafa84c37c145adda996249ee6eaf70a963c9e695cced119539afd

    SHA512

    b6ec3306ec983dcfd43a315cc09647b23cf2c3849e3e245455c679768f72eea67fd46077af8157f48a3bc55f03758dfbbfd604ab478789daa4bb14ca8c2b3be6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    67bd01ca8bd8e69317e75fe2f955004a

    SHA1

    ffd7ca097a422a64f9ef1958bf17dec762a99d0d

    SHA256

    403043a16e764c59eef4cc73442c5ca78ec272574c58aa74cce819525e0c9197

    SHA512

    dd95e9ded60af77b0f8a6a2627dcb406a1edcf98e3e2c556f86031bfcf873e69dd6c7abea66a4d34d59e1f8c05d12dbdd0ea837a93f71988e660b1583a963a24

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    57e39dbfd48c65434cce636d1dc45819

    SHA1

    79f40f80c6f930c0706184c719c8dfc02fe28df8

    SHA256

    4631f6f284985389adf3d3e385c982514c3b5d529b1e40e6474b8b489b26c7b3

    SHA512

    a9ae3eaa82f791ce1d1cb6e8d783b0db2818768d9ba3d0c6f48788e32532b65742279e9c9dda902c5aca6c97eaad50b9b21700a7807a94cdaa845272ae836c7d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8e215da1e6de404680249c786ced3dd9

    SHA1

    3dbfb4e38e378e1b621f84f29506d2275139a178

    SHA256

    ed9e7955ea1af4122b1220d7c2609b3220a45c51d51fa1fe6254c44acebf1927

    SHA512

    681dd1f6f0722c2fdd2039b2f738e0905edf851bde110187d387b00426dea3509e4ac2b5f4d2955b2e5573c1a291a9801b54488e8bd514a2a3fe38f382c204f5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6afc0eea8f6cb4210a63968921fb67cd

    SHA1

    5c46c2240576ad7f0def12053d0328e4509018f3

    SHA256

    06156d1eddb7a4e4e829c17b9dd8f1bc7829b05ad0f52057436f31a781f0e948

    SHA512

    939dda511829ba718f5dfb66dfdb891c4c3d104789672d61c241cc73a88bf4cc0adc1d11e6134844cf08caeb39ec9ce516c21ad6d01dfde7179b119cc366ea02

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7d114e4f8a96943e29176499d9754abd

    SHA1

    d2208481b4eddcdc6331c7b884a4432579f2b1bb

    SHA256

    b8e0af6bef52c563de2e7160110cf7d56222318dc4120177373bb3fa9d632bc5

    SHA512

    e993b642910e7749f38815f44a60861e471b50b8d2ddff5452cec3a992fc16cac07b4ea616acc7e5f05fe54ed4044022aad738ea2e9addd3ca41db8969aabd4e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e723e5b18ea4e82b01225d3fd2bf224c

    SHA1

    867e3866f1832ea9ce8e09fe24931a5461e92e1e

    SHA256

    3131a82cbfc2f07d175b948cacd66b2208ae8f35017bcb62c4fc4aa2c3b7d503

    SHA512

    63772019ce44da8c63055893bb5c8efd9524a8a231b658fae99ff4048129d38dbca8a1e9904bb7adac96abf927fded36cbb5dd30c3bee1287d69a3c0971ae6d7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2a52a8d2fdd1f430c192981ebe49f357

    SHA1

    d0c4cc296b13cbf85d72479b64586147f92474da

    SHA256

    4ed97a33c9ba758a29d91ed88ab8e04ef4a806601b6ac82cbaaa1e18155a6e12

    SHA512

    2ba00df3aabdc3daf145e0e46b3e282ead6458bf39cebfbf673d21efd75219ae96727d48c800cba5cf700cefadb8b2a0af18e4ee8b911d2d97decc202a08d47f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b16045194822e59ceb8f690dfe7f8d74

    SHA1

    789093054b0547bd3b552405b63ab313d8fde600

    SHA256

    f5d782e2302db500d3f1f7d9096120e6daaead16b666ef682330b913d99f00ad

    SHA512

    896e9f33ea1763dd976298e4ef443826544c43a95fca23e7fbeab9544b6f435989528fe067d7f3c12d02e3b8413535a715e1ddec013f7b52a2f0d400c6f50e43

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    cfd03a37d440139d1cf772088e400952

    SHA1

    aa778cd6440983999262f99003667a4db812d89d

    SHA256

    7e435db3fd8ebee5835e0393315c5ff526c927899cb58b41b7f5c36b87b6224b

    SHA512

    a70127daaa9c52ee95d5d83cad383416f621e7d1c9d212fc9a37fd445e3e3296ab72c0e4262e4f409fbb28632899bb45d8a64b2942393b5a43d573144a02efd5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5cff9aa6b5196ccc5e9e082133470b86

    SHA1

    de47e5555d6dfce7c2de7ca1394091abf56fb28b

    SHA256

    580b5c975ce2e91ab1c15f11e46e5a9760bd3b8b20a0efe0a8d6a72de78aa362

    SHA512

    44dbdda2ce11e43f81bcc306a6df05b3b9cf97f3de07b602798fd26031effb6b20c7b327501ca2dad66fa3acbee18b434ab3db817b470a5ececcc9e52375833b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    125188357986b9ed4b657ceac33f2524

    SHA1

    f9d3a70fd6a3f13a383bffbc2068b1ecb5ab8561

    SHA256

    e1b658cda0d83e56a693c1e12d8aa0bde322a551e0de553670f3695d6cf7fe4b

    SHA512

    bbd2a4e73031424cca922a7ca92ed429869f11cb62471337d2a03e5b066fd1b58db5653ef5182dd819d9bfa8425a9b4847c00e421b47b4f2cce9eda635386f81

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9ee55a48bcc94ef305798ed38ac1bb63

    SHA1

    55ca0bf7517a8f9140682f8b2a7eec54ba2f3ccc

    SHA256

    cfa5f68e602b9eb6063fb51db1b935fbea141c3f1d6bf40a52096c42aebd9fe7

    SHA512

    1f9d624a2932611d5cf870c6f3f222a1e94a6ef46aff34b0ad37f43928204a43711915570d3a1481644e711bb0cb1f9663a8769faf1d4c93306168feaaa1f76c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b75542623353b50a31f653d4b930b1aa

    SHA1

    d53429fff6b18a08d3e841fe15f8098d6de2ac8d

    SHA256

    2ec89b966652fb3a4fafd923e9c065c5c8945c633751df6155176082c2480e5d

    SHA512

    4f95b76a8c0368ce657fd7b2d2f2c1d3a1c307ee30a8dca5d83906e7176313cfd5b1f8eebe1a334ada44845b1ab3dcf630782cfdc0a3778e5ec8674f8f0bc989

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a84c4a9529efc22ed50e0604176c8e99

    SHA1

    0a79e4bbe498113b286ff18e7163daa91fb754b3

    SHA256

    2cadf4bc3f28ee0653ea0239262ae2d1ff60dbaa5c70c2bd0f20ad836f129c3a

    SHA512

    c06c2dd8fc54757aa2cec8ae20fd1bc89c7179324a7a66d11bb66a468089f5b5a5e10c3d1aa9768388ac013f23decb1865d92b7e814e0aa5f628e8677ee267d9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    528da307e6bceb75bc762c0efe7f87f7

    SHA1

    d0cb39d6897819274cdf080428bae529bde48bb5

    SHA256

    8dc813c874fc3fa9f29745f8650c48291847b6c796c42dacb31d0ac12024ae28

    SHA512

    51bb0306592e26bf749ff69fba20acfdef28a50bc57e49b35c723b8f7e3d10fcb0a0a8bba25e014e1d98605cbc162ef922d98d0ff8402a04ba35e050ba898343

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bf701c56b39276521a8a50c6e5bdaaf3

    SHA1

    0a291e585b94ea56490c8d787cc5c612f439ef95

    SHA256

    d0bb8db28d7209b81ad71b328463f46d1486a93d2ef556120de0876418a2662d

    SHA512

    3e4f3768298a1bb95ecddf2d57b64b52fc0d1f27a32ce344ffc1db75fd31ab7ce48c494ac615940de016409cb35fc43e7d25bc50dd15159d9850a3e322a3cafc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    729a55d2bd00dde3a30380081d45be7d

    SHA1

    666b22af4dca22bdfaca8736f5ebaab82e92820e

    SHA256

    14b3da2b8f7e71089529b4f3e7015194fc897d077c64ae4fea30c0e6fab7ae1d

    SHA512

    371ae27bdb63f2a4532ecdba60bab773c4fd5b16613c32cc12f6e088f1e47305c8a6c0a5ba5e2f2843e75b5c4b1298f59798bcf146cd0c72bd39e280d3c9fb80

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    cb4ea8d7967ef907a5f0b67265cf7203

    SHA1

    26b3521a20fe843e394a605abe2cfcb8a2dea6e1

    SHA256

    ce010be0f56a2ef5a718cc45479a2bb6f13987db17a29cd50b688374201ada83

    SHA512

    e4680094ba420cbb445b5ee0b6f3e9b8df49aebcc5fd414e8dd0532749c43e9c71c75d1888f48682d630bca508c443c47550a9fff982735482f2c45b6df07ab9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6d920d6af147eb4ef3a4d0fbc1c5efc3

    SHA1

    46c8da1d446504984324bd71db3a96e6abc1da26

    SHA256

    ee7eea78b72b5592c1067e0006a6c259a33b3a7746225d94c48cf573e3135944

    SHA512

    81f456a3241a9b910a78500d9216e49a58a6740fa940f4fb8ec804f09f0544789cfc16fc715529e9c7258358dcb3b6541960dd907209cffcafc0e207e1a66834

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    e1e8d0b0649097e70607c121e048f094

    SHA1

    9d5306b09d52eb0bc36d197557ca588823e6c105

    SHA256

    2d12c10881ee8d84b8e84d941867500ec059e63b45f09740c923bec9dc3d25b7

    SHA512

    08bf8fcb3a27077a6c02ab5ec5491a05494f21a64c047adc92ba9b3e6fc7785a65d3cb0895519cc3d01c9db190b4603b1003689febe386729b009974eb928e90

  • C:\Users\Admin\AppData\LocalLow\Microsoft\Internet Explorer\Services\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico

    Filesize

    4KB

    MD5

    da597791be3b6e732f0bc8b20e38ee62

    SHA1

    1125c45d285c360542027d7554a5c442288974de

    SHA256

    5b2c34b3c4e8dd898b664dba6c3786e2ff9869eff55d673aa48361f11325ed07

    SHA512

    d8dc8358727590a1ed74dc70356aedc0499552c2dc0cd4f7a01853dd85ceb3aead5fbdc7c75d7da36db6af2448ce5abdff64cebdca3533ecad953c061a9b338e

  • C:\Users\Admin\AppData\Local\Temp\Tar10A9.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b