Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    133s
  • max time network
    130s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    21/09/2024, 06:18

General

  • Target

    attachment-23.html

  • Size

    5KB

  • MD5

    4c19737bc0a2e918d25d084bf4376cc1

  • SHA1

    bd750b51f68b71d7c1dabe8c4ad21560c6890900

  • SHA256

    e63f4c7e86f65b8d8e45345375d71ca73f490bc060e27c840712bced9675ae51

  • SHA512

    c10478f6d4d31709e8c954f71aaa8b752a54e62d4c6e572792e1ac14909d1272f4dccf433a530a44be2394bc9af09349a8cec046c747f0404f4a8515c4ff83bc

  • SSDEEP

    96:7iYYJ86taItfXJ8yd8pf4zi2fHQfEfXJ8FJfXJ8v+huOFaO2OfEnyTOlOdCfEVy5:7+H/WKEM+13QfCg6a3QK2j2ZKQXNREyj

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\attachment-23.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2484
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2484 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2884

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    842f374526adeb29e61e432d5dead493

    SHA1

    bbb7d0d6e7f23885b9222c9627027863b9becac3

    SHA256

    49edb4d5f7cb749d75426e08157c22ac391421a9899fba81f0ba8d49e7921232

    SHA512

    362b94882ad81d6b80efc9460d6845c0caf585f97225fdbd92cf9c1fe2cea3392cafe9397eb6449ab3ee4bffca42ebd6ac429704c9426f426207273605a87fbb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4699f345f89db843d59aae9ce1fe6584

    SHA1

    562c036e5034d378ef142f2db7a793607a994cd4

    SHA256

    ec119e93d5c2aca7454cf7ebbe659dbc3b2d410da3575511aac0e8a0fc1b3b9d

    SHA512

    26ad8555fd8b134f23900924acf250dd747f6efd670ccd41d78ae282e9e7e1cd59c054a0898b02ff7adec0004842a472f3858f41587b549b39b7fb0c35b3dcfa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0a7540b13a6af60009b2ae6e668dccaf

    SHA1

    e16d72a6519ba9cd6cb1b556a44b5193b861c1a4

    SHA256

    74d18b051fda74f6df65134977d94393ed30448dbcda0f41a5b4d06681bb9091

    SHA512

    0f1f4b087d88129dacc5b6938974eb11f856df9f5db5c78a651811828ad747e87943501b62fc2008892f5342b1b9048b3ab04017a6195bd356d0f2a02b5ff34f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3c01cd6f633017c1fffda5791bbfc4eb

    SHA1

    5dc00c9461eb73a53bbe8d06c48f5417940b424b

    SHA256

    256db429d332bca46e77fad7f8fe79183e3178e08b25a0d18eb79abbde9b7b0f

    SHA512

    05956c69e41b06677d27fe6aca0c9c21738a313f427c7b707eb5bb425b44f1158e78ca705dcb5b99d97345d5a3d4d49750389845aafa269baa3735a2a852e8f7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    abc35d17ac413b82ba22119b22509356

    SHA1

    3ace248778559227f5c385c4e58d60a35462f0ea

    SHA256

    6c72fd706ccd773a17ee0c9e81f795944e17583a2d027cfae02659e39ce94b72

    SHA512

    937e4f0f1b6f9fc22d6e76e3ef54ce1cd7c40d018af9d73d27c4e1c9a477eaed5dbef15d1e2d153ee1ac3c5e380eb3421cb6388b951138f4ae01396b8d406da0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0ff6194ca5ccfe775638e5df0dc80858

    SHA1

    307bd3d8e284f2d7b652fd4a41315cc8c8d2095e

    SHA256

    8b00172e14fde294e943a4748be6d82b4f8ecd8ac5135dbc2ca69f5c6a1d4c65

    SHA512

    b69bd297048423dcbeb082b70bb2a1f716cd1d4853d8d1014d6c3033dd7ec372b8deb9d6c1fbdfa6b72bdbe883b3104c6ed042bcd85259030e60eb6d3a36d359

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    97e42bfab0867013c12b67ea771c167b

    SHA1

    ce4bc0c2cf9bf53b7c6393ebb8b6b0c2d360e5f3

    SHA256

    3fb7908d02cf173b51a551639e0a205f28f080abbc8e2062b82076ae006d4d75

    SHA512

    07af5dd9405d8f01923759c1ab269ed2377e0d530137f2d64ea72e30a42f344907c662964edd3a96198c57b1400f971baf263586ec83aa2f9feb098c46fc59e2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0bcb9e50fca586c8a571cb5827b9d302

    SHA1

    f846226620554169ecce0a0adf71ae3e1cb42df1

    SHA256

    c928171881ebd92b6570c250f167265ca8905598a8b50359d985773860c24972

    SHA512

    7a08ebace67ee348a9f36cda645457c4a7115b7affa606fe1abe10011980ecbe2ea68c8275ad9cde92594f10d23265f10444617b5f5693b236fef714e53f05f3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ca477d576f6a7821a0200d78047f792a

    SHA1

    55186d26c2df85ad78c22c922a5da382adab05d9

    SHA256

    89fc5cb8927ca1f9e7b57241c40d9071a92d5091523d58bfbb9ae637ea4b8dc2

    SHA512

    7d8498370d953df51de752c16ffae1e277853591c83e69ab2bfb889d2030b54eb675b897013273dd788fdec31a4c22988ec000f2b51e1b5ef5f2fa5e09c627f6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6f958f877e1da53585697cc4b18a9f89

    SHA1

    2798b6b01402f2a5cd969294b24d03e517f9476f

    SHA256

    3d934e88661d02c9ce1466a0070265a8ff81eaef0a3a90bb069c32d1ad58b3e8

    SHA512

    88b45ca6130d2480fdafc8cf61238e337003e5de862430e27f3f655e2a056c23b62adc5c762e77e27cf2a6404d25c7711e509bfbee03217f7b0c6e78bcb4db0e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2c25b64ff07f5d93ba52ecc65317ec5e

    SHA1

    839bc4852e654c8ee094379bf73ae170a8c14498

    SHA256

    1b7400f1c11878a29a1f0ba6d95e9f0ea05c0714b004dedbde837ccf076cd6dc

    SHA512

    a2b3a6df43619bccff5ad9e6d11a8c8f07a55cfa9a62ab00e2a2f9255e66ce331600996a53f2a804bb0baf85f232745e2b42148f23f55c404520d7b5f510a37c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    194f59171143abc951efc73e90d8323e

    SHA1

    09143bc0dc1db565224c6dec05432808a8cbd787

    SHA256

    fa0b731da19c6dcca83c8b42afb99d74ac34d5a5c6f15575f1d4742576d05eb1

    SHA512

    7d596a3e4508090a6960e4b153bd657b0fb51da6108430858a0b8a021f992237e0ea858f83e7c55a6ac5f29bad41582369fc2e6d897dcd5cfbe7199f7f50d03a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5e0b477d261df522fd12dddb67c6459a

    SHA1

    d3ff3cbf0c02ec4c47a80b620bc84e8ca3a096e9

    SHA256

    9855e0dcf10170585bc9b13d2ddf7fbaf14f3e82fe5acbda4742152b99aa1379

    SHA512

    512495e17b08a5718dc5390480ac0e5853f737b6be7993bbbb3925ff8cf5aa147ecc4d2a242845fc8abe295188c2fd7f1283ad8de38ef10f0b5a9e238bf0d154

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    92e87218ccdcb8f36cba0c64861ec8f9

    SHA1

    12ac7cd54cff9b255cd4f898adb3442826d0b952

    SHA256

    28ec5783a5eabab8197481e56e19b67e2ee1335920865cef4187189967a0e479

    SHA512

    72959b26d12c730e79f74157f40bdd2b0a443ba1a3dcb85a64f0e8c5fe1602a87c35cc9ea70fe078bd343e3e0af72742f93b7d8eaed12f16eb70e6b93d76d8d7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6846f4256ab429beee3dcc91d2b87752

    SHA1

    8f5519e6c717979b79f4711aa80a36fcf78683e3

    SHA256

    f412f3537ef4cac243db8c28194dbe94e16fe7a4c1c41b55bdbc55afce9fa7dc

    SHA512

    b99434804a3d7e79176e03cef0245d02c6fe7717c5353afa09ff25c5d480169edcd71c978327c22db46b00ccd27c6ecb746f09d1e325793715b4e782ed2edbb9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    203ce39d03e4cd73ff1fb5a9351297db

    SHA1

    2a115a4bde11b29299e8923d07715cf85b1d4184

    SHA256

    19ba77bae31cb6af968849bbeb5ba5e0ba07aeae7b1bc3e8b127be65ff019f93

    SHA512

    aa0b4049e725c033b07f7981cfe25842d13270baa21c3b01f5cac6b95275e04f186bd41943e2564c1a1f74c59b7aa37808fe833ecfd415f93bc2d2290add3784

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f9ff9fa7d95d835cd2d711813552305e

    SHA1

    5fdc8067bc97dc9483bcc9f1fe63463eccab3dbe

    SHA256

    1fc2b8981e9a8be77f1caabbbba1ef2f34fda73e452a5b9cf000078a22bb6d19

    SHA512

    ffa1c15eaf1ede60fcef7ccbd7afa355acc0daeb43d06aacd886daa1b707ac915e23ff530442aa54ed4417d29c2f7b00550a3916548a019058db0a5ab8532b45

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1668b262bc6f235e13722a63fdaf339e

    SHA1

    9a0dc5683269f9c19d50ba5fc42bd6a4faab4c38

    SHA256

    06a6468a2a9d8195fdf3d4cef997456765887a3bf2d250df8dd85af8aca92b8c

    SHA512

    ddba7101e3775f3685a314354395fd83e68205e3ad86ea3df7b1fd37092c44810db10c1e310f8ff07fd2e0756ebe3e380dafb335ff2931b57a2170894da4efab

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    06a6c7f89307d9ca8388dcd57488d81b

    SHA1

    49e90c7fd776f29f2978662ec805387ae1135a81

    SHA256

    022902532043ebb06f2e31a4051242f4ae761fe07abde5aef3612df856ec3f0a

    SHA512

    10679c3469350b06dc98ebbe092db5dd1c5f6d70525761ceeea7a3a0459fda680095961256417b55d521d1f3dd614d2522b5caddf717b1f5c8ca0e0371e86332

  • C:\Users\Admin\AppData\Local\Temp\Cab8C0D.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar8CAC.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b