Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    107s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    21/08/2024, 20:45

General

  • Target

    37fce7ee5adad214e14c9622e1f95690N.html

  • Size

    247KB

  • MD5

    37fce7ee5adad214e14c9622e1f95690

  • SHA1

    40405f5b722d75edf9de25a6c28a6ef01a4824aa

  • SHA256

    28d710cc5bc70d40c003e21aa8d92ca27527d4e82c2ee2baaffa84fb042bd977

  • SHA512

    5aa0c06aca18c0bec66958d7b8e2ffa27af56f5f78e0f5c77bea5c33704170048b317c93e6f83be1c653f38204f0f6c248e25865b9378f753c54b29929af4c85

  • SSDEEP

    6144:8+eG/Kst0eATTc5hbkOWdwy/GNYMwhW2yYoHtBi8ip6VLvTA3:8+ect0eATTghbkrdSWMwhW2oNB9VLc3

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 38 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\37fce7ee5adad214e14c9622e1f95690N.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1336
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1336 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1256

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\8B2B9A00839EED1DFDCCC3BFC2F5DF12

    Filesize

    1KB

    MD5

    7fb5fa1534dcf77f2125b2403b30a0ee

    SHA1

    365d96812a69ac0a4611ea4b70a3f306576cc3ea

    SHA256

    33a39e9ec2133230533a686ec43760026e014a3828c703707acbc150fe40fd6f

    SHA512

    a9279fd60505a1bfeef6fb07834cad0fd5be02fd405573fc1a5f59b991e9f88f5e81c32fe910f69bdc6585e71f02559895149eaf49c25b8ff955459fd60c0d2e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    ed1bc95df631dd4dfb0a4873e6267b19

    SHA1

    0fe40f7a9b31e6f7d27668e149331fd9cfbf8254

    SHA256

    07840fcccd876e38877fead3be95a1acb7a3616367ab0c1ef4d469a67980525f

    SHA512

    7ef6306ed7847f4f8899e36841f7ca40869553c3e1306bea252795e6e0a835f08b4cd67f10f918bcda358b4da1dfad594bc17d2bb00dca2e040bf9e50b4c6c9f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\8B2B9A00839EED1DFDCCC3BFC2F5DF12

    Filesize

    174B

    MD5

    cdfc608b96444afff27b110e5cb6066e

    SHA1

    5c5aa8132ca1362dcb808595ad0e8daf8fa20765

    SHA256

    9adb5bcd57b35fbc2bc4530872412bcd3e1427b34aabfb1162bdc0955805198e

    SHA512

    6311e44c37c84ce3da40cc9d1a4d22fb1b57ec1a99e50a14b99d40641ba9a5151949b692277504c9040227c64419fcd5d93960edcb765393633a865bbfc215e4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    17b849ef7414fc3ea2b66cd88f7b227a

    SHA1

    ab8a7cf297bd9f72c16a7f9627ed5b5f806733ac

    SHA256

    c8cf7f972d7847f95fa7fd2a212fe29d2035d28f83bea50cf379f2f945097d85

    SHA512

    ca67159fb32e6799ecefe413fe5ad70ba16ad016aa1e93f89822c2c6e7c0ca6c883b677fa8d422b9ecef8892eaa2cf117502e6bb02a6ebe782ee884f35240d21

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5fd8aea133c7e43baa0913ce663946b2

    SHA1

    f053976482d6ec3be90393b048520b60210cc04b

    SHA256

    3e4f5c4d49da7e38c555746ee78a9db3c7217fe6e58ca82cb78ec2672d305b6d

    SHA512

    7576513d67ec251cf1607b70bc04e5b855607eb4643baa77051d2bcad566eb4f29e4868a89839c2f72c7e4b853eb8265cd979cf96a73453718d205515e0ad79c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a9a9945d25fa2ef7273d1b632588f11e

    SHA1

    2627384d36b61ed0b7ab223f9020b626a45d3d50

    SHA256

    1b1f51c39937ca8f1a0adc96693104c045f1d562b86c63c97d66cc1e7e1a2ee4

    SHA512

    195b8f5b0589e55efb81323b1608251de2cb1737408dfbf273cc193e1e99463eea8952fc70e112abf3b3bcc20abe2dc43b6afc3f03090cacb1a796514034763b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a676d786debe8fd5928ade390a083a7f

    SHA1

    746520cabbd4e4f2351501126715dd23e56dfe25

    SHA256

    9a7b837d3a2a9c371139446d3abb40bdafa569bbc33de655cd3ce5c62423315e

    SHA512

    eed42e07dd2e3850c752891dbc7738ae0829708c121949f62c6a8af81d51ec6a687675c1bab0b4d62aff806b7b0baa62d8a81b7ba72ed150e8baafc8d4bb413e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3ac506a3d5a1045a4da5ff7326587fba

    SHA1

    6c464c046d6257228527f138d7f9bf8e1aa7d7a4

    SHA256

    de1c03adf8d4e63fc7c93ae63fc3a75a042f8e238c361ca6308908cbd66470c6

    SHA512

    b9f56308cf8cb9b31407ad7040166f822df876fc64fb725e674e9ebecaf9a5b68a2f762b62cb28efb928ded74a49e169938331463c40814a7d61cfaf513cf763

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e02f25eef056956bd1e652123eb560bd

    SHA1

    435e1a2b5454dc774e4b14a5a964650b0d59d87e

    SHA256

    f871733e749335400530b2739f767c844f754d7c4a8b8516da75736709e24383

    SHA512

    d53143b9a9e7a7581114c96a906fcf583a2388c169ece906e62ffb60b4d591e80d8d7b74687cfaf65d42f718b41d47b991d53459c30a4e8fac569efcc76baef9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    02554e8e689b937a417b8a4faf64de7f

    SHA1

    28e413503113ebebee9d8725d83e3ab616e69810

    SHA256

    72813a96129283c87e6fff2f3f3b61ba0610aac0d3c5b6f1f7aa66d06dd1f4fc

    SHA512

    5d285d7fd40e6a8ec1f8e32eb518c7352a590c94d479d735790ad3825c01168472cd24ae6855070db6dec58dd4b4899c040516e2059014d64dad4fba777a7ac9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    48437ee1a3ffb7b807a75e4533a50755

    SHA1

    47b999be74a777fa5b71731cbbcf2362012646f9

    SHA256

    b2cd7809cab7b370a2dc90698081379cf2c45dd314894ef02850b5101ca5a58b

    SHA512

    52e22338f3b08f8a8f738220468e06d3703184d3a6e8f83e5960df1f46cc54b7805858a9af04f5edc5a5c56664bc3f493e01770fc15005e956ae1ad0a5fe4960

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    dbc62be83829b12fa9aa19167145e8bf

    SHA1

    f61245f926ce287a2adb3fd2026f29d5451c89af

    SHA256

    b4ccae7d6bf16ba992ae824542a52365014a26ad31b68011f4fba11a5e89dd51

    SHA512

    e09f54af097d198b56d106dbf49cc85d9d24148cec03ec2836dd52d9fd44c47b3ac19ecd47a3caeab9e07690f62f7c17d8be7a2be317f26651ccb2b1bc5f86f4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f71a8e22e4bf4496574a2e043a4a1c2a

    SHA1

    fec564a10ff6bc298c6cf3ac69a881dd21f2c8d8

    SHA256

    cf2c16d2b3b55fc073d61c4054463b8be596699115768aafe99e951995419db3

    SHA512

    6f2955441b4f4f59d352d781d1053e4dbaacf62cb2f08361b2f84965a85b8b92cadf231217158206838317e96112d9e51032b78475ff5668bd7cc01fd7b5030e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0221f43d9d3b7bc6bda9b7ee919587a6

    SHA1

    dc21945c47d29b0c0fb12d4ff61e857f7a7ba32e

    SHA256

    214d66eb5fca0cc57f0417df3aea908e1497f6704d2e40863c33dbd11f7798ea

    SHA512

    71510749bed509413449b2e72a97a0b7b993cf4522a9c806d6c1d4e888506500c313096f249a973a93e2d49b343ce856df4a914e5142e36e7453c448564d8a83

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fcf37005282e6cbea983b409caf57189

    SHA1

    073add356b1de667b8cd8d744672244311c5ffaa

    SHA256

    4415ff60815ea7fd09adb727cec7b195e9907cc65501a981233c481688107c6f

    SHA512

    ea1da0f8d377daae59172ac344cd6d4ed808ddb18f0997b1b9cb7eb67c3735bc8b981aa0d08af8f2bc8eddf913dc47c3b58bcc8a5afb2e424b8a1f532bd40456

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    76c4b326b18306f40b09a82a5972b435

    SHA1

    6d4ccd46905ec92fe91371f51cc856661243a430

    SHA256

    0f51a093643817c4f43be1768c147555d999c71e20333bf5fe09b6988029005a

    SHA512

    3e7b1b544fa759daea185fbc627d1291b4e7dbe199e77db4c4ac428c1167c9f56a257b57abcb2e64e1903a2f18a9310766e2a80762b5375cc8625f6c0c156594

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    29ffa341bb637e4a3ca048b430c56ee3

    SHA1

    d4a3e45f2a8e21ea57066f691e1571e9536e9dca

    SHA256

    b9b3e109c49a51d4c7b4030770de4ec14badc187a6460b657c2dc893da9b833e

    SHA512

    7813333ef03db74b2d18854eaf0884a8536e5f1c34dfbd32ad3ab27cdae8e572e910221b167f8ea2eb0872cb6dcd290e73a6e05d06d73e91191d23dae0f71f12

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f09fcc3e4999e34ccf41126eaf5aeda3

    SHA1

    3d966d192266f622976a168c33dfe54ca912e826

    SHA256

    613b5d47a63def3d76c60c453cf68746de3a589bf0237ed78859f7de6b3c09fb

    SHA512

    ae7fb159987e227f884ebc11caef457118adefb2f3b15366a7bdccbb0dc506dcf1e285ad975654b458a9b57265666b8f6f3a3771184e77dbf858c0c5f9738ee3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    17c6bc736e49efc343a0abd70d02fdae

    SHA1

    16bc45e125a1b93e869a934f5ab474cc2ecb5576

    SHA256

    4ee4c9716e8535f08ca180dbca27c85b4a7508a94f44d520c92d07aa4163f3e6

    SHA512

    181917753591970e3d866302f537ef93ee5d0896f037c7bf11cfc180a864dcd905d1507dcaca637667b86909068572a41ea009b5602303be40bb30086e938e2f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    eb0da19967e12b71b69b841beca11313

    SHA1

    41fd4b0fa4753c69cf5fe86b169591ef7c8d8d8b

    SHA256

    9355e86e1de799750f2af3269c1182a196f17278d8cdfd1df27e120d43af4cd3

    SHA512

    f2a63ad414edab4f518452ce7269170e4ee54664e9506ee8f1e5cf3b4f9f13544d7dad6c1d63cb37ad1f4f6f8b7bb65f1eafa83c0677a71121c4130be4aacd4b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3c59f14b45fd8da7b9eb46abcc5db408

    SHA1

    d954fc5b82ca53479f07fee52083dcdcba7f80ab

    SHA256

    585615d81b22a4267d012c2b5a79b7163b6b76f6ce42c61b8254b2db83b48d94

    SHA512

    46162d38ce5b7f0dbad597115b01d33192ae4edaae3f6d4299a73d67b35cc06541313fa05a237822fb2d7eab1db77dad11dc6618a89ac3e70cbc8d65cd2c8851

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f410da074f5292789d3436f54080003c

    SHA1

    932d62a4eaa5c4d93d60d6bfac0420ef6e3075d6

    SHA256

    90b4f313c9738748e8374faaa35d87483eb624e2feb85a64607a77978f186e9f

    SHA512

    6d8deebdee4a3c19f3e7d1ec9af9d41b962e5a92141dedd687cf7322d64f6b8914f08cdea51b99e0bf296d332a7ac6a4fe6c73e0a25d06d8660e80a6e0110dbb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\B46811C17859FFB409CF0E904A4AA8F8

    Filesize

    170B

    MD5

    65a2cfdc42596b7554db1fc5181b926a

    SHA1

    6835d02394a926c9606b4bcd8c8ca3fcc2e88188

    SHA256

    bf8a511365ae2cfed54f71725bdef0e4571d3a13a52cfc4d94b21fea02724847

    SHA512

    ba6cca443eff6a7ddf3f0682f5d03213095ac47fd884104693655f14cb409d68905ea7a742b8a5855137714060a9f89ca24213c53b7a9a630d31575f5519e835

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    06faeee7143688d0a8c5509bd26f02c9

    SHA1

    c0362a5959e9cb7b43e112de5c1380f0fc7cff1a

    SHA256

    b58399b9dbd69ac3e3f6917f4d31b05dd40244005f1f57e2c6b43d077a51242a

    SHA512

    2b8b44a2401db2862e332eec41679cf0334c724ee1b134b3ccc586c8ff9c1ac99240b73b687276adbd1bdc40115aeb06fc97a25e0c50f44d0a42717d81f9a734

  • C:\Users\Admin\AppData\Local\Temp\CabE320.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarE323.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b