Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Resubmissions

19/05/2023, 22:53

230519-2ve5tabe5w 1

19/05/2023, 22:51

230519-2ssm5abe4y 8

Analysis

  • max time kernel
    136s
  • max time network
    142s
  • platform
    windows7_x64
  • resource
    win7-20230220-en
  • resource tags

    arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system
  • submitted
    19/05/2023, 22:53

General

  • Target

    adobe-after-effects-cc-2020-free-download-1516601.html

  • Size

    58KB

  • MD5

    81f57daea4cfa6d044a279cf946f4b83

  • SHA1

    8129a0e61e141185075560d512787b2b24cb5482

  • SHA256

    b8e92fdc145ca8d7a31b2da9f562ad2435b45dbfbda943b4844dc29d6a3cbdd5

  • SHA512

    256739a366da4d81b68015c4ec2cf092dc397729c2af8fd0d2ae418158d58350d4b1e5567044bdc3da1093170a1d1feecef39c0b6fda454a67a506dabc13c673

  • SSDEEP

    1536:F7FLIwEH6jgFR8iBSHAr7Q3aQSOxgzSGfbOAa6fxWR8:F/IAg9CxON

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 64 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\adobe-after-effects-cc-2020-free-download-1516601.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1128
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1128 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:652

Network

MITRE ATT&CK Enterprise v6

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\070E0202839D9D67350CD2613E78E416

    Filesize

    1KB

    MD5

    55540a230bdab55187a841cfe1aa1545

    SHA1

    363e4734f757bdeb89868efe94907774a327695e

    SHA256

    d73494e3446b02167573b3cde3ae1c8584ac26e15e45ac3ec0326708425d90fb

    SHA512

    c899cb1d31d3214fd9dc8626a55e40580d3b2224bf34310c2abd85d0f63e2dedaeae57832f048c2f500cb2cbf83683fcb14139af3f0b5251606076cdb4689c54

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    62KB

    MD5

    3ac860860707baaf32469fa7cc7c0192

    SHA1

    c33c2acdaba0e6fa41fd2f00f186804722477639

    SHA256

    d015145d551ecd14916270efad773bbc9fd57fad2228d2c24559f696c961d904

    SHA512

    d62ad2408c969a95550fb87efda50f988770ba5e39972041bf85924275baf156b8bec309ecc6409e5acdd37ec175dea40eff921ab58933b5b5b5d35a6147567c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    62KB

    MD5

    3ac860860707baaf32469fa7cc7c0192

    SHA1

    c33c2acdaba0e6fa41fd2f00f186804722477639

    SHA256

    d015145d551ecd14916270efad773bbc9fd57fad2228d2c24559f696c961d904

    SHA512

    d62ad2408c969a95550fb87efda50f988770ba5e39972041bf85924275baf156b8bec309ecc6409e5acdd37ec175dea40eff921ab58933b5b5b5d35a6147567c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F07644E38ED7C9F37D11EEC6D4335E02_0B931C13A5AA79B672090C0D1D0A52BE

    Filesize

    471B

    MD5

    b3937fba8ce5a36f4294fb1979680a34

    SHA1

    5a5a4569f39892ef9fa0fc8666b4ee8bf1be8fdf

    SHA256

    7e9c031375d71a703ea18e58d70cdcc6d7362d6f83910b33780246107e4d4c90

    SHA512

    77fc8251e9488698ed210c60d6eec146477aabd6866ad9b7319f6afd0dedfbbd4b6436a6c27f564bd4cd452b79cfffbf1f7c918c18b215d9426139118b611685

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d16c6df7c1bb75fc40a4ebd828b21d57

    SHA1

    87b484aa7270d4ccae2e12c51a56fb92765fe2fd

    SHA256

    87171fc61050376a3280db79cd1d96a1a095152913957bc2cd64e136c8b03a1c

    SHA512

    febd73e062497dc713053606f215e63886c94e09ee99c03edfe68fc2d6ba51b5969e2012c1c9d92529e787ba1096a96127c7c21195b78c384724a9bdf31ec82f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    412053cfb503a816e8017ea082238f6e

    SHA1

    9ee7b0a2c49c9df155ea9fd1f4e53810b1581a3a

    SHA256

    3fea222b02e29ab0009b68cc6e8cf5728ceafdef4822e5f3751f80465c637cf6

    SHA512

    4d93555c0867d50f76e38fe411c4bf311e9324aef6b7afb6cc445eb5caf3594572148d64b699c54a7196945a3b548fe3add4420e96a07cfb32a3e1d89c0b49a3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5d37de32dec4cae23bfe5c504b07364e

    SHA1

    e327b7e72911c0817ba5854b50071198991d7b07

    SHA256

    c035e54f24b0cfd0157980b7884abe2d4ec910c3b057cb3365c6ff3e0b597c3c

    SHA512

    a8d4f973a7aa94b74a2af3192e3458523f35a95f09c464f0ae3bd54ff898dfb56a8260c6ab157443528cf4d1d93e923ad7c76739b615b1d7893ba983957ffad2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e79525f524f86454cdb7c7071a1d7e7f

    SHA1

    f4e86ef5a6fa71d7397533f9051ac499361b3d58

    SHA256

    511377548b39b14ed91c591952384ad206bb59656df19e103ff4788038eb11eb

    SHA512

    adebd9c926d70be55b23de552190343ff43bf3df545dd05f1c74c1e3802b3974e470925a6e2bc786dd83bcfc793c216402acb316e7b99b97391396933c5f4c60

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b6a2949d3240c2d1847fa4fba7603882

    SHA1

    a461e01841d1c4de3e17aad71b7e45784833e5d7

    SHA256

    23ad797601a88894db7c593740aa3c298194eeb9f0fb18e3538c6c408067bfab

    SHA512

    e496cd8971347331e4a0b6e3f7302850d4a6ae6674d153c5b37c2ab49d1c37449c69abe6e17d381174af43694af70b02d393c3e52bb68d9d86160a295908b8be

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5fe302f0cdf724630db57ac18f8b491e

    SHA1

    5460ebed3cb3571bfdcde83e8d29691acef5a225

    SHA256

    71ae3a095dc0f8e73ca7539c94b50b18f8cbfebfef5b66058d52ecb95887f8c7

    SHA512

    d507121f1a283b379085b8b18e9ba5057cc099a20d7570de0b3454ecadd523b1b2fd49397c28fbbfda0a0d23aba0f29ed7ede9402b9aa631130ae4de7375b9be

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    29a6d1727fab10fcc64e6793240862d0

    SHA1

    9aece0ece5de1608bc091a678182f02f9ed46c6e

    SHA256

    9c705ed2fb62ae4f2f723cb0d341a07d2a7b0d6b6e08f996feead1fa4788df80

    SHA512

    9dc0b95dece2f2aea8d193f6929d1fdf3bb2e26da631c24d9398ea1868062c7f846e133f88c9ae0c725ca0f51df563012fc8a551f218bc8f3a0f1af3704b117f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8907a25b5f56cdfc8d9f77760f80bde5

    SHA1

    6d94b4ea38c3566bb4b4c12a3e9b8899ab633e77

    SHA256

    0af540f8957e5fccfcf45609172615710341fb35fa9ce32645f53b58a03dda4d

    SHA512

    835c874334a32fd01f6011a7e7a157dcc967c5c18fd9efbab600941e95ea20567dc85d9395b1bcbf67fb2342e1002122eae87cfb7ed90ee9de5fb4f7cebddca4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    815dd8e045b802309ca398c8c8ea10c7

    SHA1

    73777a11eef1fa277468204f02037aaa00249637

    SHA256

    70055139b58c68b8f8e0aeebb19012949c3b22055c32251588647d43a5d948ea

    SHA512

    255c6c5a98b0af0446177c79ea33ff64d2a61452e9958386a6c2a5783a477c0f7ce7c682169a973304f614190cf917e7c77b658e4ed9b12673fac983fd6f82f4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6eb0a4e4da5ebbfe49db5e1d63917fbc

    SHA1

    188225f3e92a1f8cc7313a5ba2c383a7f175da67

    SHA256

    7936199842a3d13619456f96d66cda74d2d1dd0a3afe21547d9bb2d464e69871

    SHA512

    d25c3e9c1c742d1bc2ab1ae635b13f3095592113ed9fe75971a28bf5a71a99850161ba5d9affe3887916e970b22fb7b230224dc36ff0c1109981f3a0a098eb93

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8231b1cc130e7f7cbd05ee5bdbe24284

    SHA1

    ad9395bf404ec8d32b361d8099c80fa7a90954ec

    SHA256

    3a7cb5634aa0e837dc4fc60a8708a5719bcaf4b286c1fab13da5d9d083d69a77

    SHA512

    63d33236bab9449c13fe7ce1d2ede15b7d9fb578eceb818bae45e42446a055863a761d3eb4866f11d85fc2754bcd975590190ea5d64bc4b9249de19172007517

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7d2e6fbb6ea2de563e1eb2927ea5fca2

    SHA1

    a9be8f5c8daa432b2c5e7fa32272d184dc79c18d

    SHA256

    fe03e6f1389ff044bc4bbef5bb3e568e2c89051b0acbc8a2e8d3592f4b3b7d0f

    SHA512

    f5efee5aabd858aff3e2b40d4576c2abce8a1b73592c2d06cfe6e6a33ed04086d2acb2e3df372534859a0bc1a1870b2f3e8000951a05ba463d804cf329a1408d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    10b1c5465d2611c954c91191390a0391

    SHA1

    d8afbddaf0028e64cc5b21bfa18a03fdf39395a0

    SHA256

    7905c51fa6bea1851bc88df79524e0937297a866c8b660b4a7658a242de5d695

    SHA512

    6b7b49e9b9c1eed2afe0ee5282048b441b1310027dea8c1c32703c65350451b2a321f6c7e643655faac59c1dbcc096f68d61d9b7cfc120b0857b87b80cd226ef

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    54236aef36be08284fe727ca123bcdfc

    SHA1

    6185968e41b541b73878b8f30ded88639ceb1074

    SHA256

    bec73d1f308eda187d445d6644e3d10f0b42782a4f99e20f4ed0ccc8b5bad258

    SHA512

    d18981001b66d90f62310c14ff9ba40ae8da7c7f531b8991565542cfcdbf0295df947b50c76ab78b9d8bb5fcf0a8760fb3ac18b414f28a2d5ce86dff621e8baa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4ace3548f0acc9b2696557b92d61851c

    SHA1

    2a964b3d3fc9a0336e1a0cf976fd69d0a8b6701d

    SHA256

    570fed7d9844b2b19b470cbadb9657b2890d9af5cbdfbb49c0b1a3c161aa63ef

    SHA512

    adec2ec2b73f53627524609ec83c04116d6a030c0cb88c339faff0c42282a99544a3cdac1963a65eca10f751d9dd9dd42a330d4de103414149539762d0c59a18

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    742f306ab3f0af72d865031e7cdf336f

    SHA1

    02b49afb95aa03ca8f3adad9a594ec7900546ff9

    SHA256

    d16ca5e22a2a0c791a2c0a228be3dd4e75f73b907f3a07c4c45c4bcda17a6b73

    SHA512

    d595f73d9ddd04f64557710c9f80f467e178e0b779a6360289157d7420465ab8903c2e418f3f28f1bab1b694114c9493733d23333389d4f206b925b915d88dfc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7e646e1d4f2e5bfef76cf3486d9eff8f

    SHA1

    98509eb3887a68208aab12ea40af80698c6d2efb

    SHA256

    2d2e8f3276b0df4b0f8ee873ed6ac89cedc9f966605e2e46f349f9605cfd8684

    SHA512

    f1c792a3cfd32661439e929355741d44e38ce6c7015ef655947e04c4addf7a70cec4e7c2421379ee5c7b970b292a0e56f0b1e305c4fc116bdf3aa8d5d0760ba8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e9ddaf0f2f73d7de8e5277f57b790447

    SHA1

    d9d14350a741f9023118cddcf2aa4a7bf27a449a

    SHA256

    0cc98f71377cd4d4989cf46c0842f84c37e6dd7726bdb2353b4a72f5e98f560e

    SHA512

    fc2b34d3d804e27691b48f2f31d4314e3fb33a6244304f673741fa523be9018481d04a1cd64bde3a61fcd0f4a289809634bd944a0d17dcb9a8fd0e97c9aaf7df

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d7d585c52c3010d5079b2032e0e5c178

    SHA1

    7259e0c81e22f1cbc6960ffb0e8d4c9ca995d508

    SHA256

    04526817b7d60eadaefcc456252d591f1e5779e26578fc8ff12fbac18b1eba80

    SHA512

    6aa2eed802e1ae5b565d45be2692d8e75c44818702b3546004c5dc0628f2ea05558830a9f731cf4327d2ea1c409d5f44cfe7f235973b0f0a1c1effe31cbc5c2a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    102523074fae7a0e31f200dd4e7a317c

    SHA1

    21ddb2fc2c29fe6a92a85caa078adbd2fb76c61e

    SHA256

    e4986c832a1c685cc72c7d1d70d7d8b56e1060a1f5de30cd8818c5cb1979512d

    SHA512

    d78b88e445a3bc964075b1959ff8eea738ee57af11db069e6929e0c850450819719ebb6eefcf493879207ee566972564ff441a69e000c71a748a4fb75e1eb561

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1b53a1faf1c14a84d7852135b6a02fbf

    SHA1

    8a4f0a5b49ae1b5dc0b07966c8a9f50045e20286

    SHA256

    cd5b0124a9fe4d9293e783419c215977a56c0e71e7729f9d3b6a6f480b2479d9

    SHA512

    7d7445359d9eaf0c9b1cf7f5228223c0f8c223d7ef80e49ebe23baa293c2adf42b2a39cc2f1e22d0f00f7dbd36a21899e4d0837619d309d54fd3d5995951e3cb

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\U6GO8VEZ\disqus[1].xml

    Filesize

    13B

    MD5

    c1ddea3ef6bbef3e7060a1a9ad89e4c5

    SHA1

    35e3224fcbd3e1af306f2b6a2c6bbea9b0867966

    SHA256

    b71e4d17274636b97179ba2d97c742735b6510eb54f22893d3a2daff2ceb28db

    SHA512

    6be8cec7c862afae5b37aa32dc5bb45912881a3276606da41bf808a4ef92c318b355e616bf45a257b995520d72b7c08752c0be445dceade5cf79f73480910fed

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\U6GO8VEZ\disqus[1].xml

    Filesize

    239B

    MD5

    016e0e5ea2ec6d1587a440d23c62c55d

    SHA1

    3825a2e50b75fd6fc11ab467a99d2c46d005a881

    SHA256

    23862b345749549aa6837e929d2237622f1b772a14b5536c538dfb35a6e24356

    SHA512

    30c8976f9ab5a93a68e76bfe70ec1eacfb74c09dfb183a632280e5f7b9754b72cd513473d13732299a794c2a4259d7e2d47c0ac98101104d37b2b77d88e773ed

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\U6GO8VEZ\disqus[1].xml

    Filesize

    323B

    MD5

    332cea3c5a11400beaf40ca911db720e

    SHA1

    e3f3ec44d12613c052a7fc963c300c5d4842c95b

    SHA256

    b5dc29a0364001e6da1a5f3515dba14a2d31eb74e5dd9385bf7b1949a72caf36

    SHA512

    097835d450e947d7fdb497c74f3e58b0f89bf87cca216d6f04e9c3b810f97c812ad431c73d9797467e76f5e653cbcc7ab8d72b542751983b56dca83e46c83a7b

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\03S7L47X\suggestions[1].en-US

    Filesize

    17KB

    MD5

    5a34cb996293fde2cb7a4ac89587393a

    SHA1

    3c96c993500690d1a77873cd62bc639b3a10653f

    SHA256

    c6a5377cbc07eece33790cfc70572e12c7a48ad8296be25c0cc805a1f384dbad

    SHA512

    e1b7d0107733f81937415104e70f68b1be6fd0ca65dccf4ff72637943d44278d3a77f704aedff59d2dbc0d56a609b2590c8ec0dd6bc48ab30f1dad0c07a0a3ee

  • C:\Users\Admin\AppData\Local\Temp\Tar18D6.tmp

    Filesize

    164KB

    MD5

    4ff65ad929cd9a367680e0e5b1c08166

    SHA1

    c0af0d4396bd1f15c45f39d3b849ba444233b3a2

    SHA256

    c8733c93cc5aaf5ca206d06af22ee8dbdec764fb5085019a6a9181feb9dfdee6

    SHA512

    f530dc0d024a5a3b8903ffaaa41b608a5ccdd6da4ba1949f2c2e55a9fca475fec5c8d2119b5763cabe7ef1c3788fb9dcac621869db51d65b1d83cfe404fb4c27

  • C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Cookies\V1URFOYE.txt

    Filesize

    602B

    MD5

    d396038ec44bac5f3d7bbbab8daed56b

    SHA1

    76c974e837fda869d6c572a70f3f5c0af3601c7d

    SHA256

    8420273b4e8da27526ada50c01da0a279ca56bca512f66c72069530eea0549cd

    SHA512

    55e932de8cef5533dcaccbae1f0596d207cb560346c4d784d7baa1757567d5242abc529d7fa35ccae816295700ca0d3ce95f60e64aa5945d9d6bc558c4e4bf17