Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    78s
  • max time network
    145s
  • platform
    windows7_x64
  • resource
    win7-20230220-en
  • resource tags

    arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system
  • submitted
    10/06/2023, 22:39

General

  • Target

    SKlauncher 3.1.exe

  • Size

    1.1MB

  • MD5

    021b53abfc25a261077282498e5726a0

  • SHA1

    ba7f38a28444504e6e8e1f995cc40ceb70ff6409

  • SHA256

    c3db9475c3ab6b53d8f6d711f587e5218c9b8d332229a208277bc0b27a24b620

  • SHA512

    484bb65ecb1ccd3e5472a27737fd2fa4471240aeefcf4bfdeaf4e49636cec9b3e43a5c2feb7134074c92af01f52a456b8074aca8269480e210cfa3b51acae81d

  • SSDEEP

    24576:7h1tjL2uma7hLQKaikK21SHCJ3ny+SGiPsGSa7tLC+/e0cUEcnr:sghMKai1viny6iPH5hF/e0m2r

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 38 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 11 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\SKlauncher 3.1.exe
    "C:\Users\Admin\AppData\Local\Temp\SKlauncher 3.1.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:2004
    • C:\Program Files\Internet Explorer\iexplore.exe
      "C:\Program Files\Internet Explorer\iexplore.exe" https://adoptium.net/
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of SetWindowsHookEx
      • Suspicious use of WriteProcessMemory
      PID:1968
      • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
        "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1968 CREDAT:275457 /prefetch:2
        3⤵
        • Modifies Internet Explorer settings
        • Suspicious use of SetWindowsHookEx
        PID:524

Network

MITRE ATT&CK Enterprise v6

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    62KB

    MD5

    3ac860860707baaf32469fa7cc7c0192

    SHA1

    c33c2acdaba0e6fa41fd2f00f186804722477639

    SHA256

    d015145d551ecd14916270efad773bbc9fd57fad2228d2c24559f696c961d904

    SHA512

    d62ad2408c969a95550fb87efda50f988770ba5e39972041bf85924275baf156b8bec309ecc6409e5acdd37ec175dea40eff921ab58933b5b5b5d35a6147567c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    531fd8a1862857f876557e013ca528b9

    SHA1

    3e8965e2ddb394011d8fea9c16e030569f29fcf4

    SHA256

    0a93b4ec28ed5cd5f08b5895122d4f8e5b945bc0bd410f3abe4d9df4410b183c

    SHA512

    05df58de060e8281830e45a049d4245c79e892b03591a93ce2f64e4ecc6511f60ffaff906e00cd8a8a1c8786ab6932e83fe159b887adcc97035e6229e21d6187

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    f4957dbddea26d8d903f022ced5ac196

    SHA1

    8f97d347719d0f37daa6a19608c2ac5d898577d4

    SHA256

    dc40cd4d1981bc3673dacf35240cfc90c06b5ddd6c3ad3360d04c5deaa0c9abc

    SHA512

    3b7d22a4e7bdf62a7d1662f2bf741902f407d553e458fc8a9a4b7a0c65bcad5ff685e6197058658006872aea61ce63d277445a1648a4c30cd6a0eebe48e991d8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    53965bcd659808d7bd4e464fc9659870

    SHA1

    aa87b491101de8078a20936823c64fd5309f49cb

    SHA256

    35eaa26066c1b38c9ef5a487021d23d8ff1d121815309f64d304528c2e43d2dc

    SHA512

    8058ed5d26aa64a8ef8ba262156f27e14a7516d38762aef50640cc9fc756d708f2b10c38386c8f207f2c7edc56d0db8320643337aa31b40917602c75f2a629c4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    e3c836860629ee556704ce857f2e4761

    SHA1

    e554798327b97c4450efd336d874ecc91b22f05a

    SHA256

    b0adeebd987a841ab39f03366295796d8afa67131a02c4ab26f15aaa57048eec

    SHA512

    becb4d514ace5a57c6bf2a2d6c3ab14166dc418b12fc95636b443937e2a75db27d835e62d47c5a8879997b134d6d9028cbecc9d0153f9caeffb50b4c38cf8026

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    fcabf047d4594d34b66f91d2e7cf7ecd

    SHA1

    5d941edb9a3314cc3cbdbaff94038ee81b660ee4

    SHA256

    9724cddddcdfe0886145b94a7ba752d96f5117557ec61d7ece6db2e9e082d23c

    SHA512

    97207f75c7e2212d18d9adf13396e272c374b3e589878667146a913152432f14dda20dbf5fd5e347c3b1fa9598abdf6c8837417e0bb09796839114e5fd3dc515

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    c925b286ccd684091a7dd9dbf16a5a31

    SHA1

    892edf19b06f0d6943cc7a2548087eb1afe1b246

    SHA256

    662759d14dd04efefd59c70e13ee8b6259f3ba24abdb14d129bb924810f33b48

    SHA512

    694328529772d6cf83bf96663a267a7bdac7c92cd7997589494faf8ef80cf5b3bab2d5aebe4fe564d06a2f7ed5ee526a5f966c564a9a3ba20c315f0342745b00

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    9dd6167a9eb79ac7e3b618db71802d90

    SHA1

    bb091ac9c272cec37618a3b8b25949f24daa6239

    SHA256

    630824b1972c703c83e48538477a93b75a4a5df32792c5c302c5149ca56cd338

    SHA512

    797def157fb840bc3cb8d5b6d24d74f64f85831c68f99cfc10828a2aad80f8ded661e27fbadf738f949470375091ccb4852c8edfaa33c716140ee6e7c54a0575

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    d7bbda6b362e5163439a968834cb74ae

    SHA1

    d9cb6c9083dab2ff563465bc50f816b7505643cd

    SHA256

    0404e421cae163f79a18fc184e6037501a0ee38ab1b66d6016fb833da1ba19e9

    SHA512

    5d8afb8b56d75521ce233d1f5450ff48fbd153dd3468da93f11987c092f7c99dde34f84c2973f4627eeead5bc9bac3255357a0d9ab5c1b06db4f3593546a69a6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    b6609831a21fe4dcb1fd07fd23ef659a

    SHA1

    1d7438613df498d0623d4dcde08f28f4d8930953

    SHA256

    735ff4e0fa02f8825130f1d00ee3b23c234d79b0a7948804390d0bcd912ac845

    SHA512

    94ae093824b57474ef02976d719f72625eee755f4379f61761d7336b963753012de3d8056b8ba331291d62c12979c36e3b9e4846c27e403545d196a429894049

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    99bc50ff99e7e02f8f5dcbe71cb5a4fc

    SHA1

    0cb807a9c0ea8e21c96b803a1bddf219b282ee55

    SHA256

    459c581e02b62800c9ec17a39ef0fcde87876fcfa00bcf4f5daeb2f86afbc9f0

    SHA512

    8340b57857da7b3c7810c097206aa87e174ecebe878839617b5afb818715376bd377b10f038b00359053538f650767af466eb1ec121a5c2850df5968845a86f9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    6f64068218ded7bb2ad7b932a07802df

    SHA1

    4af42aab944d9464fe87a076fff3b80b6238015c

    SHA256

    de4088ad9df433960fd416596999aa1de70d480883002e422434369700ace7fd

    SHA512

    d7a18a95fc08a18dfd2e6d831a8c287620cf63a3ed22a0d4c140bea1a71ef5108cb30e579f38b1c3949434abe09a7fc4c83cc22a98e848589316129ed9e6f887

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    648bc0be3a68434a4216a4001757c26e

    SHA1

    415cd7a93787ab103b464b5e3fea055c92b51e82

    SHA256

    c6e166285a55a71c9cde081d2673ed0c19030c2dc9467ead135a671758769b36

    SHA512

    4ddc0ec00f03f6b0c36a5336cb80d9478e64af44d9a8364724eed4a5dd157ad9d4873241220097fb61a0f5f128215e436e15867a3179233969f1da614437ec59

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    fd9f583054f5e2ffaf834977ba1a34f9

    SHA1

    4d4d2512ea1b241ff2a9ebdb1b59e15cb2187ec1

    SHA256

    4e739a38f6456376c31a13b4eef9d8ae28f68a211946322833e6b08b70718d1c

    SHA512

    12860a4d3c4fed505ffbf50305eceff51a92fac24f17812d160afd30df744f104cc728c71e6b1a9cbb011f51b115ae0f2ee595dd8ffd47677139168ea31a928d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    92bd33dcb463f507b6f6142a4f0c6dee

    SHA1

    6f80f9249bc3ee0d634124d3705282b56c983a45

    SHA256

    3778ba1aa128c8e6f58516cf45337ba25fc053d7407925201dc977ad5ccc189c

    SHA512

    a0ca6427652410bef90a3608590d6c91744c1d3dcf44f4ade4c128bf85414e291af01d37a29301a3186eb402b0be04e4f267579f31d9d4c4fbf2c9525ecbf38f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    946d40498465d3fe459cbe9fc77dc5e7

    SHA1

    4b6563880d10592f1b115b14c439c6453b272048

    SHA256

    0ac3b65fa60d01ee329a15061bde2c48b58adfbba9ba0c3f6db200c1eb3606ec

    SHA512

    44ec4a0894f62e671fdd907a891503cfbc48413d2874d57ad040e53a7ae45bb4aea4796079c0154b53166590d3a9a60b97624c6e0a3979b0b2bc18f91941172b

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\imagestore\07asiie\imagestore.dat

    Filesize

    7KB

    MD5

    4d6d0a423c78cd97d2bbb4ac522eaa74

    SHA1

    c2a38a1ca69798c00c3423a0afabcc296a2ab1d7

    SHA256

    54b23174b35acee7936b2992427b907a553ac4b052b477cdea5cac5096fa5e9e

    SHA512

    e2e8abec90ded37631b11f9c4920ec3fd80182b86b5aadf8984ca7d61ed57d7d37c08c1f3f26c1b6e7c185b1af694fcaf601f18694efb485fd8c27b37e995be7

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\S7FIT0B8\favicon-32x32[1].png

    Filesize

    2KB

    MD5

    df4253088bb850c76f81c91db284d4f7

    SHA1

    46e3e3c42a159f22038d86bf39fbde118c91dcbf

    SHA256

    590d33ce64b321c321644bc8c840c354257371f8c247f776b788a5ce2c9bbc72

    SHA512

    7804f8507d35adc2a3f65a4fb017bc50219fd2ee326693dfc5011cc9e22df61f50533ee7eb597133ac69e502683b7089df89735f03e11807a4724564061b0b22

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\S7FIT0B8\suggestions[1].en-US

    Filesize

    17KB

    MD5

    5a34cb996293fde2cb7a4ac89587393a

    SHA1

    3c96c993500690d1a77873cd62bc639b3a10653f

    SHA256

    c6a5377cbc07eece33790cfc70572e12c7a48ad8296be25c0cc805a1f384dbad

    SHA512

    e1b7d0107733f81937415104e70f68b1be6fd0ca65dccf4ff72637943d44278d3a77f704aedff59d2dbc0d56a609b2590c8ec0dd6bc48ab30f1dad0c07a0a3ee

  • C:\Users\Admin\AppData\Local\Temp\Cab49CF.tmp

    Filesize

    61KB

    MD5

    fc4666cbca561e864e7fdf883a9e6661

    SHA1

    2f8d6094c7a34bf12ea0bbf0d51ee9c5bb7939a5

    SHA256

    10f3deb6c452d749a7451b5d065f4c0449737e5ee8a44f4d15844b503141e65b

    SHA512

    c71f54b571e01f247f072be4bbebdf5d8410b67eb79a61e7e0d9853fe857ab9bd12f53e6af3394b935560178107291fc4be351b27deb388eba90ba949633d57d

  • C:\Users\Admin\AppData\Local\Temp\Cab4A7D.tmp

    Filesize

    62KB

    MD5

    3ac860860707baaf32469fa7cc7c0192

    SHA1

    c33c2acdaba0e6fa41fd2f00f186804722477639

    SHA256

    d015145d551ecd14916270efad773bbc9fd57fad2228d2c24559f696c961d904

    SHA512

    d62ad2408c969a95550fb87efda50f988770ba5e39972041bf85924275baf156b8bec309ecc6409e5acdd37ec175dea40eff921ab58933b5b5b5d35a6147567c

  • C:\Users\Admin\AppData\Local\Temp\Tar4C08.tmp

    Filesize

    164KB

    MD5

    4ff65ad929cd9a367680e0e5b1c08166

    SHA1

    c0af0d4396bd1f15c45f39d3b849ba444233b3a2

    SHA256

    c8733c93cc5aaf5ca206d06af22ee8dbdec764fb5085019a6a9181feb9dfdee6

    SHA512

    f530dc0d024a5a3b8903ffaaa41b608a5ccdd6da4ba1949f2c2e55a9fca475fec5c8d2119b5763cabe7ef1c3788fb9dcac621869db51d65b1d83cfe404fb4c27

  • C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Cookies\R25ENZD7.txt

    Filesize

    605B

    MD5

    f33e4cd77b3d77229129aeb0d04af608

    SHA1

    60f2a6f8c6e9c39dbd18f959e7e5809ab92232b7

    SHA256

    e6ed79f909b4b0bc1392c33f5be196767ac2e1221c3e41dccbd9ff3017978d9b

    SHA512

    a53f6f8b24e50ff041ea5d2e91c8143459d19398de667ad6a362273ad76e226f0d852bc3ff8ec4c3804a16b2fbc224f6d7ea78644676f946ddd9e116d978c9b5

  • memory/2004-54-0x0000000000400000-0x000000000041C000-memory.dmp

    Filesize

    112KB

  • memory/2004-55-0x0000000000400000-0x000000000041C000-memory.dmp

    Filesize

    112KB