Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    66s
  • max time network
    68s
  • platform
    windows7_x64
  • resource
    win7-20240705-en
  • resource tags

    arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
  • submitted
    14/07/2024, 21:25

General

  • Target

    224ee4624c6754de6592b5e5e9d18870N.html

  • Size

    128KB

  • MD5

    224ee4624c6754de6592b5e5e9d18870

  • SHA1

    a381d2791749e7b1d2efbcf170a3d119627e37ea

  • SHA256

    37f00e94a327e1a35a277e4ac328289d95d47294d2f952ef8a70e93e293d261b

  • SHA512

    607d75a2740e6c89d585088f19bee5a4d817c7a17156115766e85e14a8c2260a8656af03000f63f8cf89ed74268735580c0edf41c1af5d8c7e3af0c85ee2a632

  • SSDEEP

    1536:jxZ9K9664p1PlRGApkkIeqsHRTTv1e2HKRYKWAuf2Aw8uwowFIx/m+1uetT/9kEa:jHhlRPHRNe2tMZVHteDN

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\224ee4624c6754de6592b5e5e9d18870N.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:3016
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:3016 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2540

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e08851fbff4f93a28c6c94c174ade79d

    SHA1

    1f1a4936171c58670f7a03f833aae700ca364720

    SHA256

    a95a6a3543e4ca5fec4fb5b90a7670b964826bb9883b29e7d654ff8b825d9c5f

    SHA512

    975f11a7237b26e40de1d8a35832fccc78823c7738d0a46905d1f3ded3c48e80681181ffe3fd258fc3f5d1d8efaf4600211b5f7c890dfcbabd46ab598f15d6f9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    44c6b09c00c000222316bc477831a88b

    SHA1

    264c0c0b8051316dcb7395d7132b8e5d968e82e0

    SHA256

    29d4e3d476aef7929b0fa747ee07c260822feabbc2064796b3f8e419f6cf0908

    SHA512

    daa6e8be4fd38e34202dbc4472334daf09d390b4e0a8d0394214e4bdb7be7bba097454d0cd50caffee0652fb837ef98d4cc66410c0d797d76423a6c76acff658

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    83f3f30039e10b4980c377a6039fe429

    SHA1

    cf48263f22c376d98cf2ceff432d6fa956377967

    SHA256

    5f9ef283e3a4572a4cb00f5c8ba410aef3a2663a21998661b1d6295ac8a8079d

    SHA512

    9553fcd0db814884e34c7c7250b3c0bb710f828903cf2fe51c17ddc55266d46fb8a7e52b715087da560e0f1c06723b2a5701bff4d2ba81acce4cb953f57264c7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    75661f10d2540d9aa4491d301694aefc

    SHA1

    fc375ddd9f9b9e0d148d5e7ab43dfde4ff3264a3

    SHA256

    aadcd8731e9ac12fe8a514894b912ece0eaf83c7e577b3cece0618d731467f5d

    SHA512

    a7e5b19ef10dc834fd77b46ec21fc388250456ac9a10d4864c159e42e276e69e2c9d6dfaee8cf91e689ffdf2667b77a518fe7ada5a092562012ddc62f7f0c3e8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5430cd648159b13cc752b3cd7019a111

    SHA1

    91de2a672afdbef406c8a17b0810734164818278

    SHA256

    fe2c8e8fd2e85dff96d3388905e64e1e35260de3397803e00804e0469846f8a2

    SHA512

    7092c5ca8746a076128410d3b62f7d25976109d345933c148159f937cbd4a7c3db3f8db7abc879436568f5e529cdb2edfcc8736c30017b3dd5fb3d87816e0e36

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9003456839666c9b834f6721f94d3119

    SHA1

    bb0b1b68b27027ad18478ca6b41cc2e01682d45d

    SHA256

    a85507e73c5bc05a8a423644899e9f13b239e61b72835be6ca5447d6ff1393a3

    SHA512

    fc3fe883e049145bc40001a56b3442dc631df316b1915446b785107733bca378d1c35586772bb1125f9a6aab4eb510cd580d4f0c282175ed3c3841d4b2eaf1db

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7d721c484528136ec9d9c4147908280c

    SHA1

    edc400104497bb061d54cc2a05ad5097eb510730

    SHA256

    bf656ee6f30fbfafe4783714b910260839757ca1057902310388e0d7ee4ca4aa

    SHA512

    fd7888bb255a0b04306aa2bd2ea24bcac2b726a4f88ef6fcac2061c9add6895da40f473e7fa9677a8cad49ed9dda911ce10777b07c91e75b98a620b0b95c53ca

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    833ab718f71d2baa3ff315abc31b33b6

    SHA1

    07d8c6ce2e03b1f5097226d148d0f8a88431bdda

    SHA256

    b22d85076ded6c52b9718d847765eb9d6be3304c088b54d4919c96e48d6f9383

    SHA512

    09e2e884ee9a611445ee7f8772fe8b89bc03fa2c46c77463e76366b49b00fb481552ec73c83fb6c3f295b7fd3b02de609a73c5219359274a811e74000b308450

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    356a0f67d8704966a4bb3cfa79119cdf

    SHA1

    6f0631558ab56f51e6600f2d409041d13a963b38

    SHA256

    8fa8ff4e1093625c91eddc5216e3bf3878ae55fda6519c1331b325e0c91087fc

    SHA512

    fdfcde17e690da2a79c6d06dec1e0d234e77f16251258885b86925734cec825828b76c15fbc0fe1ef5507079b637867c2816b513e66296c42bca3a233afc3ad9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5f7fa312bf409c7eaf39ad607e3bdb44

    SHA1

    9134b897a5590f80a0ad13ada51ae564957d01cf

    SHA256

    86ba3835d04745edda5d78a300cff5033d9b88a359e0d584c8ca24d10fcef669

    SHA512

    75f3faf4f507702daeaf1b8b76f2fa125d8a3e8572873d5f1d5debae46cc77e869b9552377a354f9165103fc5e09d48aebebf0902c94293347820bd74138013b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bffe54c4f31a8db6f1a28e36be5fd72e

    SHA1

    cea99f6cfd46c6b2a1c208de5a4bb2749623c1b7

    SHA256

    8af9952a68528786d1ac0e2a919d898466b85cede2166a9bdea2d2cf53b53cca

    SHA512

    019e6f9400e99b06a30ceb39456cd680ff2f9356cc507e3d7af11aa613118c76134449679a57b207b2160495cf2bd505493f76cd0159fd807896421399f9264e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    283b837dd817db4ffb23645ef8765125

    SHA1

    81384bd3e5a69ab634c678fd0558100512e1f45d

    SHA256

    5fdf125533a016c94fcfc6548ede5f7b52cf01d8ec6ffb0a8f3efa92bb8293e7

    SHA512

    ef152269be186e19596adee7c41b0d71c09707dad19e5aa64554e297189f90c4548b2410ec9e9b1e46a55cb89534de3a00ed3c206a2f5372ba5b6a0b98864d54

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    736a8aff80b2fb8970e9fcd61aed0d34

    SHA1

    6cdebb0773dea3458b75d87c8b79f8df9f707ea5

    SHA256

    b2ec543a3513842767ad3eb4e0853730f7c3e55d8ee3ae4b8b59cc89cdfc6e90

    SHA512

    5a9d8939e4faee5c5fb85c4f233e3db28229d74872990c4206a45202d05ca56f73b54eab15ca1bf4cfb3bfb2a6ab2fd3f4a23b6467f0ba0d190a9c0ee665f6c1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    16b6d815627443869d3a501481333b5a

    SHA1

    24bc1bde731d7169f8b53349b009fe8dbdd3e162

    SHA256

    fb35b225f25e01c2e3854f746c9a169ac7cfc205d59cd9a51c1c4e77fa35c432

    SHA512

    03747c1c7943fa46edab2da8ca062e565e9020659dcb711c77812b9a57c90940b7362f3ef30b0d2f39e416246fe7dce35d8d4dc53499a6a152d5ca5f13936f4b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3734f550083cdfca87cd96bc673f6422

    SHA1

    963567a5b4d42231e780a3ee96a31f874f4ed555

    SHA256

    5947c4bb41fb172a1c8fe086946d9515f594404355a31778626f9ad2469fd94b

    SHA512

    c0281f8f6130fa153000e3d14bbbdfeef78b05314296764c4bb6da1146cd86848ae002974f5053c9dfc8394f8e74af189fb4630190d1fc66cce4a9419222abd8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9a4870f0fcdeb2a28f80d9ec6cf94f49

    SHA1

    a74f368e9df81b0a8735e2b39258f070ad4c9673

    SHA256

    3d1fe234141b1fd08cf8199b825a2a7c6a0a298aa5cfb0dc6682f00a2ed8eac7

    SHA512

    2f8e0f5728d5273516e4d1e3dacb6bb935c337786fcbfa1c148f216c5ba3cab58a4ed4a08a0296b6c3ce7e3e8ce95224ce98d5a86e5737b9853c98dc9b7c8641

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    781af2b810faf2c95e6c31f3b581a965

    SHA1

    db91a29d73005d19621c3b4534db0720cb24844b

    SHA256

    0e7bad79a5d3d5ecf3154b312feb66128b075db3cffa908a0ae597fa2c2c9ecd

    SHA512

    9c435010afc14c0fea9d650d4475983a3b0ddaaf316755052a7218c00562648861778743172615dfe2689dc826e40d2c44715d2a6ed8314ee8e619d3fdabdef0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    355f54cfdb92f29d832b6418b5666adb

    SHA1

    5c82cd6f43d99c651a434e943b3a2b59a8b67e52

    SHA256

    35f812a7e3b31fbc9837b19d94637e72b3f5c453cb04e9e7b111dec7ccbfd266

    SHA512

    0262d0c63fd43cf540f5162babd3cffd878da593a60adb5d6288454cc22835f5ce08ed7e1e83a374abee54aae8fef57e90850fc02d31a665af5c9d237cc65903

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    76d6343378650236b8fa72e6dc893a50

    SHA1

    7b8fd75ad02ef81ef9c98ca6b15b83550caa4fd4

    SHA256

    c8501e6a89a7ebdd3ad63c8936ce2f3902d33533842ec215b87be571ef3133f1

    SHA512

    511024d17a21bb8ec26317573dd4abbd5804e24708f40de84e9a59e9034dcf0da3ac023cc3fc8243a99ed62e45b7eab3003f46af1ca5fe144c43860165652fab

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\M7GT0RRO\dnserrordiagoff[1]

    Filesize

    1KB

    MD5

    47f581b112d58eda23ea8b2e08cf0ff0

    SHA1

    6ec1df5eaec1439573aef0fb96dabfc953305e5b

    SHA256

    b1c947d00db5fce43314c56c663dbeae0ffa13407c9c16225c17ccefc3afa928

    SHA512

    187383eef3d646091e9f68eff680a11c7947b3d9b54a78cc6de4a04629d7037e9c97673ac054a6f1cf591235c110ca181a6b69ecba0e5032168f56f4486fff92

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\M7GT0RRO\errorPageStrings[2]

    Filesize

    2KB

    MD5

    e3e4a98353f119b80b323302f26b78fa

    SHA1

    20ee35a370cdd3a8a7d04b506410300fd0a6a864

    SHA256

    9466d620dc57835a2475f8f71e304f54aee7160e134ba160baae0f19e5e71e66

    SHA512

    d8e4d73c76804a5abebd5dbc3a86dcdb6e73107b873175a8de67332c113fb7c4899890bf7972e467866fa4cd100a7e2a10a770e5a9c41cbf23b54351b771dcee

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\M7GT0RRO\httpErrorPagesScripts[2]

    Filesize

    8KB

    MD5

    3f57b781cb3ef114dd0b665151571b7b

    SHA1

    ce6a63f996df3a1cccb81720e21204b825e0238c

    SHA256

    46e019fa34465f4ed096a9665d1827b54553931ad82e98be01edb1ddbc94d3ad

    SHA512

    8cbf4ef582332ae7ea605f910ad6f8a4bc28513482409fa84f08943a72cac2cf0fa32b6af4c20c697e1fac2c5ba16b5a64a23af0c11eefbf69625b8f9f90c8fa

  • C:\Users\Admin\AppData\Local\Temp\CabC43A.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarC43C.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b