Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    143s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240611-en
  • resource tags

    arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system
  • submitted
    16/06/2024, 15:15

General

  • Target

    sample.html

  • Size

    218KB

  • MD5

    467da68ab4c57d9fe56176076471fe35

  • SHA1

    e74d9b0f06a16511f59d95b45339221f387ff8f4

  • SHA256

    ba01d5b61d7cb0833d71df135a1ff1192e6443fb26ad9bbe20c7d5a81ac68fef

  • SHA512

    f3a07a8d9340c7473fce2de3b785996a4cad7ab92b52d4fe9f6fd6d2b712f426606f0a31cb4bb68c6b7add3a3707897df1f5f6c424e1344c6f6a8dcad31f6184

  • SSDEEP

    3072:SznQKjIl6z29a/yfkMY+BES09JXAnyrZalI+YQ:ScKM68aKsMYod+X3oI+YQ

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\sample.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2136
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2136 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2720

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e0bf6461504de85455f11bd0065a9126

    SHA1

    da1ff3c8bb443098e1589406521641b530863ddb

    SHA256

    0d16efa1f2e4b3f32624857cbdfdba52e498c50a916058edbed38f8c19f190eb

    SHA512

    fcbe1d4e8a44422a2dff76bc647249f25ce65b89cb70e380878130129d3eb3a9374e3d1c9e15533f8031f581f0e9bf2485df9d1961b13a02fbaf1770c636eb89

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    77aae097c2c6f0ddba8ca3e8f6585cac

    SHA1

    cb5a2567ae36c2b41a7e9235c35d0be55b4f24be

    SHA256

    82a4dcfb9d94cd16b55e9e55818a032fca2e29224a4eb40133c807207d092a26

    SHA512

    218d3142a26b54f4a7b4e171ab0fa2681b6737cc940cad68e9520d578104b7f658d94d6ada1bac80db862c9871c0e3b815a7f390e64a1d961ea86dc3f663afd1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6b31a8575c2ba6792c538c293a360246

    SHA1

    17caca4b02902b814455a440e774e5ec16b9632e

    SHA256

    201b9efc44f9952fe5e1c968e210ca5c6d308eb30e0fbd7de68afd30e260aa7a

    SHA512

    7549afda4526a065d41c420e43b7613bc3beb00cd2ad9ca29d1b8e0499950cbc3bc2dd4b32abdb743f5c3a09e9e1dc99c6ada66d306933283fd226fab350427d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    67c8601a2c41d0fa7f315c65c7033ecc

    SHA1

    2144bd6b14874984a597a0823fc43700ee881b79

    SHA256

    33159116d86c95310d98bf62a61a3e181fc984268ab16085274efb951ee6a0c0

    SHA512

    661e87ba12cf454abe6b7fc86e9e54fa6c089e1c3cd77d4fe633842e0a757ccf37e9ab17d88d67e51544e3287e3d60571e5776b786716402bcdc47b11577e130

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    12e088ad5f6da3163de2883dcdccd9e6

    SHA1

    2b208d881b03f1faafae766d021d65f654885edb

    SHA256

    3e8a26aa4900cdc0f86e462b7175c39c750c7e9c4052f35924c7fe98d39be76d

    SHA512

    4f5bae9b6e8a59a2745daea20462d3169746a15e2ab4dcd78724c093aac1333e87b555ff39178ca4e41cd11aae9ea10e89e0034ff3e10bb24fb4411c40c0edf8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    25668cc108940f2df3333055b3cd9857

    SHA1

    d006db7c589840a6d8bfb5703aa8b8606dc823f9

    SHA256

    90e1e0d4c010098db7f3803289a4b9ea9072b88ff005087ec11851bb1fa15e6f

    SHA512

    8a1947edbed4abb5585e08bd4fca08ee9f82fedf9f725698ba568a91a81a18b5cccb10d48a47146ea719edc88fcef7aebc4eda01b04be720f396478d4041d4c0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d8e3c1484d1aed354f8187a9cf5c9d40

    SHA1

    f1d6eb583c1d6e118444364b0ab2798bf6d47fb1

    SHA256

    b218eabb58accf8116c6e7a4258447867f4c63f077ac3ffa1cbf57e540a8051b

    SHA512

    d965c3fba1f8447d016f592072d7203108123ba9c8027102f04a5ca912e7221ecf4f4c726c59f040666a3fd59b60f692642068ca195bd3b64c4f802e1b9ecfee

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c0dfd60b6798f95d9db42235f196fe3c

    SHA1

    74d19d37650f0c85f4d3f35fc5f8bb0e88ba30f5

    SHA256

    39dd18b2f9bea3e32eebc87a213d0f5ac2d5092510cd9c146db2751038891af4

    SHA512

    21d975c761f69816ef413e80e899f020b7d0b434a5c4b5fa897eec001e7f7acbd45c837673d03fe9527881edc4581259378c43ff2e6d2b15415d6c91add144a1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f0f77903933d3526736fba30a620654e

    SHA1

    da9e2c2ef3e619715b94519a3407526f1c7a25ce

    SHA256

    7ea361130a4e6a1827eea521d1243ae7cd70b82901d7ef82994d24ce84416933

    SHA512

    71ea4056485500fcf486646e327e8d9c50f997ba3be54f1227a7abfbe3166c377614f887699fabddf523d619e9f747bf464705a010c6bffb3b009108d318ce5c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    dd609945d6c79d922a20f7eb99fae182

    SHA1

    a96ba7fe1547b6f3343ef361ffa569650e0198b7

    SHA256

    1fd0cae4462d3d0b15897596fd02c95fd75822948f88a9f209f5078f12c64a7c

    SHA512

    69fc275c99ad1bcc2b4f6abed96543739f91c45d501d8c441e1ed87d74ebe9870963172daf0b89faf3361df729fc34bc1aaa789ee473ad10bd2248fccbef6bed

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6bef1c4f5d60a3903fa45d7cc28b22b4

    SHA1

    1c29fd77346320e63d64a5679cf806031f50d247

    SHA256

    4d48c1a9b988e867fcf92c67e25de1d2edec85b072a8274cf45ff8fd63b0126f

    SHA512

    12a7d7126eced867a63c80bd7c82c4b412030e93b59b70ffb34f38993ab57b65e6bc115c5ae3dd0ad5e7ab94a2b39222e042927b2e2ae85c81e3e1243e74c12d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e51810bef9fbb6a02635dafe3be6a3f3

    SHA1

    5cd833f355a85d8038bfa2a6a5988b43b04ba9e9

    SHA256

    475070ae7dbc82df29c815a59c8b7dc4e207b8a19df71f11a9a432031cf60556

    SHA512

    5219df1fa44c8028e35202af2ce77d38be2048bf11b20746f805eff1d3e280c13d1f951a97a112c84553b011b0ed4d542b673bf9d6a3572d91564b13be597c92

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    043d82dcd5b1784b96010f80b5cbec0c

    SHA1

    e1ef074595523974c44dfd35c143cd42878e51df

    SHA256

    8d1a9d6623cf01a1a3ba4c647aa0e9216095105c458574d69563e354b10b420a

    SHA512

    5c35b96eb863e71f4eb6478be108e1388024b817bf5feb443f49a8af2aa29d6169619df29b081a42381942e12963a40ec5469071a6a9a586412b01b8145f8833

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    85ad46739289a5f34399aab9828517e1

    SHA1

    b5ab651e5ef5252453312a6fae070b9be261bc29

    SHA256

    fc3423a6c7f9d4d81654fcf0ed2078508807c4b0942503395a2889382a62354b

    SHA512

    760ba0c7d3650827b19bc19e3a10a0206d3d83615ceedf0dfa699946174a0b3acb42afed63a9a16c6fb19b6b226a4f63dd3fd7b9a5de853197b1631f49e9d119

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4c411db552a05f2a07e2267734eab20d

    SHA1

    33a795ac148e8aaa01dd28f206a45afc042a387c

    SHA256

    9028374221c91e90a3a5e59e4541b4dbbac6b72f0b3664638caa388e65e80bb4

    SHA512

    a437d5eb67d646f78badf011982f1fcc3797181ee449be19f744bb316fc97da8af8fe00cd4d6c20917fd548b34b92423f12d0df67ddea5c9bf1e8cb165900e3f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d1a555741fd013b62ae266c04a8ff987

    SHA1

    8e0853a91ce4ff1ce0dec14bfe37b1db11dcdb22

    SHA256

    af89bdafb7e1dafe1ee3e894d1e58844901bcd29ded4e8b1b8e78423ab362a70

    SHA512

    f63f2c354a3f5b7950231e6c5abbf23994980cd9857381e7cee3c76fb95ebc21c7a29da8c903b947cf2f986074e52810704f7b77a0713be815e428be5d3696f3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b07643e2f1ca4e3dfd3ed7c0c8ecc5ff

    SHA1

    bc3e130381c9da1faa61729b280f6cf780f4d6fb

    SHA256

    fb910fb6a1ed81563ef90359e157ca90744b7c56d9e31359f70e042af1fe373f

    SHA512

    e71902c51f70212de961bca589d7b2781e6552defd3befaa06d5c2665dc29b6a62ea20d86fbd26f58719f8de2d494c5ebd8d944a6aa9e16adcfe11a7d761376e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6661fc5c78cc2bcc4ce8316489ecf5d8

    SHA1

    17b4d5b2e9842c23ed87a66ad23611ced5209466

    SHA256

    fa4779d48ac69c55fc3732a302d2472108906e10101873a33a2b4bc76f3e5add

    SHA512

    4a4ef3cd450530eebb302d6d8180d6ca1bd04a763734ac27b7c4d2ba8f9b369ab8ec7674e5ff4d8ad169053d51fd76997de433734dcd12796927b7cb969e48b5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f932269ff895c63aa4f297232a6e4666

    SHA1

    75a3967c4a5d8d2c9784be42a97479e2b0f249ff

    SHA256

    bb859ebc9d3edf644ae6da4d09ec64538bbcb3092f99946ae9d84abaf8fadfa4

    SHA512

    cdb302ec5ac3ea595f68a0cba3c13725c582d9cb38a04a0f72f3449d2a472cc4d89116be88a1df1c543b29ee84cddbc41ce5eb33ea08bc55d083217c91990544

  • C:\Users\Admin\AppData\Local\Temp\Cab57F.tmp

    Filesize

    67KB

    MD5

    2d3dcf90f6c99f47e7593ea250c9e749

    SHA1

    51be82be4a272669983313565b4940d4b1385237

    SHA256

    8714e7be9f9b6de26673d9d09bd4c9f41b1b27ae10b1d56a7ad83abd7430ebd4

    SHA512

    9c11dd7d448ffebe2167acde37be77d42175edacf5aaf6fb31d3bdfe6bb1f63f5fdbc9a0a2125ed9d5ce0529b6b548818c8021532e1ea6b324717cc9bec0aaa5

  • C:\Users\Admin\AppData\Local\Temp\Tar651.tmp

    Filesize

    160KB

    MD5

    7186ad693b8ad9444401bd9bcd2217c2

    SHA1

    5c28ca10a650f6026b0df4737078fa4197f3bac1

    SHA256

    9a71fa0cb44aa51412b16a0bf83a275977ba4e807d022f78364338b99b3a3eed

    SHA512

    135be0e6370fd057762c56149526f46bf6a62fb65ef5b3b26ae01fa07b4c4e37188e203bd3812f31e260ec5cccff5924633dd55ab17e9fa106479783c2fb212b