Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    119s
  • max time network
    205s
  • platform
    windows7_x64
  • resource
    win7-20230712-es
  • resource tags

    arch:x64arch:x86image:win7-20230712-eslocale:es-esos:windows7-x64systemwindows
  • submitted
    17/07/2023, 20:15

General

  • Target

    SKlauncher-3.1.exe

  • Size

    1.1MB

  • MD5

    021b53abfc25a261077282498e5726a0

  • SHA1

    ba7f38a28444504e6e8e1f995cc40ceb70ff6409

  • SHA256

    c3db9475c3ab6b53d8f6d711f587e5218c9b8d332229a208277bc0b27a24b620

  • SHA512

    484bb65ecb1ccd3e5472a27737fd2fa4471240aeefcf4bfdeaf4e49636cec9b3e43a5c2feb7134074c92af01f52a456b8074aca8269480e210cfa3b51acae81d

  • SSDEEP

    24576:7h1tjL2uma7hLQKaikK21SHCJ3ny+SGiPsGSa7tLC+/e0cUEcnr:sghMKai1viny6iPH5hF/e0m2r

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 11 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\SKlauncher-3.1.exe
    "C:\Users\Admin\AppData\Local\Temp\SKlauncher-3.1.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:2364
    • C:\Program Files\Internet Explorer\iexplore.exe
      "C:\Program Files\Internet Explorer\iexplore.exe" https://adoptium.net/
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of SetWindowsHookEx
      • Suspicious use of WriteProcessMemory
      PID:2600
      • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
        "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2600 CREDAT:275457 /prefetch:2
        3⤵
        • Modifies Internet Explorer settings
        • Suspicious use of SetWindowsHookEx
        PID:2632

Network

MITRE ATT&CK Enterprise v6

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c896862a905e4c2733d1cae9e572b6f1

    SHA1

    ff943b52268ed34f6cc13b61dab3b3a6a83a6af7

    SHA256

    8d5c25e4e55f5263dac46af1bd5850bad780846f54dfa163bed121332d9bf3bc

    SHA512

    023919ad6b3eec2d29c001c834a1b96634289cf771016d95de8140250879a5b553330732589ca76e8926f4b23c7fff42b537e47beece6ea2436928558d6bd2b1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    31a40ca5a5f26b61e8fa838c81c1d9a3

    SHA1

    fef91a83802d51eb62df5de670797f1e30b77f81

    SHA256

    e6d5036860ed62c477132774889f70165fdbd80e27e823acd412659b068318a9

    SHA512

    89d5457725a1c8ec66e17b1151892783758da48ae42c7a6cec49b5a7be036ad2d12c0c30f4895cdeb6c9aaf031b11db093eb4479f21fe3ac7ca4c2c594309dc8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    486bcea69d8fbfb21a5f560032053645

    SHA1

    be8d0de4375eef20d924149f64879416f1339fe6

    SHA256

    e7975b47b5573c33666d0220261bbf8ee2ad0d78b6613324e3f2ab527409c4d6

    SHA512

    65224cd9582d60026fe78ec5edc09b9f8898a876d35c36d7ea7e66c5d157791b447b2eebba53e6109e350369e21a52eea26002169a25c916099ad6f3cf275363

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7fb6a3cd6ef9382c69bbd81f3c37e3f6

    SHA1

    ec235f23df64e56cc0caa8d734ff2717e1f285a0

    SHA256

    51ebe004f8c03fe82f53d06a7602f9e53725a28cd7001d761826858ac0a5d963

    SHA512

    807a05e93fefcbd4877d8bb4f429dc46ba0c59d98fbca235b248bea3f9ac6d09ac2365ca78308c8e565772412e38a9b95ae1515901bb8919690863032a08013f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e3885fd07051bf9288f939a4bfd6baeb

    SHA1

    2197b751e3fe7dabc825333dac1462da2153208d

    SHA256

    60993190e48e0c87758276170017d4daec5b38d4b0017a080659aa94f6e0ae71

    SHA512

    2d23f0e8e1a3c97e725cb1cc6a9116a9061928b3eb30e05a5ecbe7a7fad857024322269acd24bd45a2633ae1297c7491bc3b746707e3ecec44b24694ec701ef4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    05c43704536b098730bdb81bbf8c71ec

    SHA1

    dd8f167762ec9b0ffce6f09af099393c72c12dcc

    SHA256

    49963fa418724bc3357cd4ffa3836555b4a3d9366cfdf4927784f1cc9b3c1c85

    SHA512

    6b6f6259682470d1846c8b14d84b3f775bc305d6e0dd2058ed2af86ceab4413e1824abdac6df5ddbb6764f0aa1accdb7ffa67565a19da8cc0be765b88863908d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b2f61dcf61c95018f01b328e8785bf06

    SHA1

    b80f98470d4e0b98f3c78c1e828d3aefcee840c0

    SHA256

    1aef81e601ba819bd81e8fa61a7e39091e1e905faf722117149b508aefed975e

    SHA512

    7b81e1de9332cc216c3e8ac662302d2f371c46c1264cd6573edb32c8f342cbba957e0092df3a0a4742edcfa1a7d0b7c3521f4b9d9d19b97f62189e8140852213

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f448f3bc07cbf6b8079e565dd2cd1ca7

    SHA1

    2b6657533573f059f345f2f8a81504d1fea8a377

    SHA256

    28e16bfd679f8994a63480395dde57c4ab8ef9daea324f7f47a56a5a5610e7f9

    SHA512

    683d373e3d1f126674268ce336a19b555a953631bfb1b6441f6d931edc2b527fcfd7160898b057c71ea44968213e38c3295d1017ae6ff1e2dc11f8ee722d1bfe

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d890a0380d46d930ff8f5fea341748d9

    SHA1

    5ace2ac1b18c9c5b25fc7238d968f3a323ffd43f

    SHA256

    bfae1a952914357be1ff98b01bd7034a30f854aae2d78c7b93224f0b1ed96192

    SHA512

    1578b264373205969b1e012b59f68b156ef424b3716dc8864a126ff598d40c731aee2f35adbcbb5ab81a08855984e2e83db42504cb2ce5e0503f42894e0ea974

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e8fe15b3b15f58ed399d59abc98d7871

    SHA1

    70bb47b891ceeaad4e69a52a9e61a2abde4c24e8

    SHA256

    474254c17fefe3858c353c883469a9ae0c78282df8bd4c0bb47d208fd8c600f2

    SHA512

    e5978ac23bc1fc0daee9f7457e09832b53ef21267a23182b0cfab09adf0f6d95cf3987f6b1b11018dd06b2282746baa31bc946c1b49757c8f0b0c5f491b32c47

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    62c0fd2a67497e0c6e5e612f11fe81ac

    SHA1

    64009769cc6d0e3cee15e7a4c48bd7f7ed7fba29

    SHA256

    404d2e02c714636fc471019c1770521824a0e04e85e394631a9bd33c65fab0de

    SHA512

    817d2c320e7c3b0db58bef1a6403a73190f34e74fbcfac9adb780b9677f203b51075c0666e4345921bbd1e6e7f431247dd7c9248841be6fe5e3e3fa222e89468

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3924bac971912577ccd80e05806f105b

    SHA1

    398c6945ee573e2535839f3b4676aca60e30d673

    SHA256

    1b39d9ce4ccfc8ccd8588d8076124781fc37c5b7d91c254b47704709242ab9f5

    SHA512

    67db75db8bd110dd30c5c2f65b0eeb85fcc8b67fc2540643357f149e9ecf45dca2eff774f8dd0847e499d1455e4453839f5a6d1ba11f35d04c9dca2dff8dbe44

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2d4ee91cf91407d9addd97c9326f442d

    SHA1

    5e49a14f1cc64e23fada433d61571b3c1170d70f

    SHA256

    e24a765ec472a3ba2afe73968ff49cfd9874ec0decfc60d03e9391d19e71a4d4

    SHA512

    0849b819d6d20ee66686669d37ddc0a3c647fe838f587e9232a8fb9e9fb69ba6431053989089106907066513e440b62d1a2bea25a44d96656f9937754511342b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7f1eabf54ec6647b52c24c86ffd5b6b3

    SHA1

    cfcf8c6554d76f3fc4399eb56f1719ed492deffa

    SHA256

    ab97221d7094e982ffe0797a2d54e14adbc894ff8d5617a93cfc2e02bc97193a

    SHA512

    df75ebb8b689c82b80404375159d478b40564c373bc9b14b0ea424a8641070bbdbd29a95ab436f9d7abaeeddfaa88e1b2efd3946c0ad62c327c6e489bedb15b0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a3839b9bec5127eef8929ad09a28d3dc

    SHA1

    12a71c5ca1b5e98a006b02b8c9aadd928afe6878

    SHA256

    c92f74dbb31e8ccbb654267b60eb96efe9e5a051da62709a9df7cf78c6a62dc8

    SHA512

    e01dbad0637a73e3374496a7fff732015a73c37a09be4808cb9ddfc19312f0e7bce1c6475d284f4043e1727c2627c855f12c4f7934ab1c42d06d2c337096c9c0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4ca6f4c3ca7e12504f83f0f0b1151398

    SHA1

    41b52664c554e119bbbf6cc191a549a02e5138a6

    SHA256

    853f691af7e21a4ebc5b9236ca6515547f473ecb22904118069e30bb0e91e357

    SHA512

    f5aec437e0245889a4d88a4f82eeb7d7a6e5a704bd4dc2f994831175ef1bd73f53bc42f909d018d3e54769ffc120a86e2f7005fa4f1ddd2b0f2ec83e0ffbef44

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\imagestore\xhc7bka\imagestore.dat

    Filesize

    7KB

    MD5

    1085906bad22b88566f11143740e1bab

    SHA1

    402a6d31dc63e0543cb9658e124023ef3d0b760c

    SHA256

    f844113f2a8b8bda03cce6dffce5881a5e85416ce4d3c672851bcf31111ba862

    SHA512

    21ce61f5c56a57a92bd83b28a758b5db4a84b56f67cd5263f0d3f5bc4348b067ce684f82032b9b5bc25da0974630961afc838cc1deceb9afb5748a5ae8d8a3d4

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D6QM70SJ\favicon-32x32[1].png

    Filesize

    2KB

    MD5

    df4253088bb850c76f81c91db284d4f7

    SHA1

    46e3e3c42a159f22038d86bf39fbde118c91dcbf

    SHA256

    590d33ce64b321c321644bc8c840c354257371f8c247f776b788a5ce2c9bbc72

    SHA512

    7804f8507d35adc2a3f65a4fb017bc50219fd2ee326693dfc5011cc9e22df61f50533ee7eb597133ac69e502683b7089df89735f03e11807a4724564061b0b22

  • C:\Users\Admin\AppData\Local\Temp\Cab1D7.tmp

    Filesize

    62KB

    MD5

    3ac860860707baaf32469fa7cc7c0192

    SHA1

    c33c2acdaba0e6fa41fd2f00f186804722477639

    SHA256

    d015145d551ecd14916270efad773bbc9fd57fad2228d2c24559f696c961d904

    SHA512

    d62ad2408c969a95550fb87efda50f988770ba5e39972041bf85924275baf156b8bec309ecc6409e5acdd37ec175dea40eff921ab58933b5b5b5d35a6147567c

  • C:\Users\Admin\AppData\Local\Temp\Tar2D3.tmp

    Filesize

    164KB

    MD5

    4ff65ad929cd9a367680e0e5b1c08166

    SHA1

    c0af0d4396bd1f15c45f39d3b849ba444233b3a2

    SHA256

    c8733c93cc5aaf5ca206d06af22ee8dbdec764fb5085019a6a9181feb9dfdee6

    SHA512

    f530dc0d024a5a3b8903ffaaa41b608a5ccdd6da4ba1949f2c2e55a9fca475fec5c8d2119b5763cabe7ef1c3788fb9dcac621869db51d65b1d83cfe404fb4c27

  • C:\Users\Admin\AppData\Local\Temp\~DFDDF57775A682D665.TMP

    Filesize

    16KB

    MD5

    0f156d5baa3d75ae71b27e38c06d10ed

    SHA1

    e4728f6188a0ff60fc449c4aa8e23687309c543b

    SHA256

    9954bfa6b84da340a3d5098830c44f5e9d966c5e4f5836e7d3d4e62a52e94c11

    SHA512

    385c4f492e2c307a771535e0b0da1c386f7f83fc101921c8011cb9d603dd8dc65222c566d7ee45aca71b8ba009804b8fce24ec667babd002d574aefe107e89e0

  • memory/2364-54-0x0000000000400000-0x000000000041C000-memory.dmp

    Filesize

    112KB