Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Resubmissions

18/07/2023, 20:01

230718-yrv53sdd99 1

18/07/2023, 20:00

230718-yq5ywsdd97 1

18/07/2023, 19:28

230718-x66ppadd25 1

Analysis

  • max time kernel
    33s
  • max time network
    18s
  • platform
    windows7_x64
  • resource
    win7-20230712-en
  • resource tags

    arch:x64arch:x86image:win7-20230712-enlocale:en-usos:windows7-x64system
  • submitted
    18/07/2023, 20:00

General

  • Target

    Untitled attachment 00011.htm

  • Size

    86KB

  • MD5

    e5b0d9a102e5452fac56cc86d3d3756f

  • SHA1

    66a023efa3d16fbb94fe2a15318a0ceb004316e2

  • SHA256

    2b6408ba93af92f01978e09a01631b71bd3221330270def8044168d3c0b629af

  • SHA512

    e479d7c099069804eda957571ae3c611ba16b3b0b7a47a99ee627cd5bec64556dd635537ce0c25c22e8274c7804ac26e4005ed9aa159d630c7f3ad876585c955

  • SSDEEP

    1536:eDuRpGBMgws2EAYiMfhWFl1n97McThNyQKxq9FhDwgL22VS7cPcEJ89:ggBEApMpWZlhNlM19

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 34 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" "C:\Users\Admin\AppData\Local\Temp\Untitled attachment 00011.htm"
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:3008
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:3008 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2404

Network

MITRE ATT&CK Enterprise v6

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2877f992e2e9630d8dc751e794ed758c

    SHA1

    3c5f08ab4a93309dd9703cea8f40d960494e2a5e

    SHA256

    f4980c2644c4b5a5d17a71226a4e59c6a296e7967b4745751fe33b7477abae72

    SHA512

    530e37b63d7be5403f0b32696053e24e8184543bc56a925d435a3c62a5e700798f9b7412c086ba304722d5e913ba53b2dc4980c4d0e0c1e8c8fbd8c03f58c3d5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1835b577a9bed983813cd47653879ecb

    SHA1

    661508621e7b40116138811e58ff66119a86aeec

    SHA256

    b8ad0e59513605be1cb2f8c3216405ec85212da4e10c17e03313fa05c5766c23

    SHA512

    437a389ee6dc6c86cf2c4831c3e006cec565f462216e2f6f5cf689534bf8340ec8242461f61fb51ea6072855dae8a82a78c334d66f0f4560cd032ba3c2eed775

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2298e4aceab074c1bc3834f093ce265f

    SHA1

    d94c273c1d55ef0397eb4fd7296036be1b5c91b6

    SHA256

    bf5eec655fe6d78a38a0514b7546200e1e91821b0bc8d02b53024409e6cba26f

    SHA512

    5b1473db968eacdc1aecdb799eb05621eca3f7b27448e3f9fa8ea5b589b9f42358ecc068052384d2ba20e9ca898e033e79a931c173f67838496ab04aa7d41288

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    27d7a743494aa64fd5ff2300a732b854

    SHA1

    83862b6d331325d43000b59a2412498de6cf797e

    SHA256

    3a7ddaae55ab773463d3254bb508973c9154b70e2509f133b7738907267be64e

    SHA512

    3de886cc7f487832c1d1eed0d666a073fed21dcd8c14a2707da097f323ed0fb2b968950335098b0d45dcde6582630cb9c24c994d9b0399e763cf61e93e56db91

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    32f6aec447bad97a8ce5c923c7130ee8

    SHA1

    f2f8259249febd82ec05a6e50e6bffa5fb9e41c5

    SHA256

    3aaba136d51d0012d91f48da1ccb04cbd9d0a6818509e31467596561d0c0c926

    SHA512

    d949864f305d5b76b5d3b83188f3ae5744fabd620c0598f17f9c59c9e670539e70978dd50395a2035b7a4e84b5e9357dcbfe4915f3a207f848ce2a26a9d4308b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    936a26e6b1330ecd12c0ccf974799423

    SHA1

    4f95933cbcd37d0bbab192408d0e0cb9d7168047

    SHA256

    370016ba7c94d9f3f3c51b15fd3f31508f8b886a792bf04294ad0a7ca6171db1

    SHA512

    d3f3859a7791b19a86ed0f4ad0a57923812296e82479b194c8c1e9409ebd677b8dcf9da858ba9d88da93e29b550af29c2c48408a37fdf978834908ae7cacb163

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a501a1102a3cf057a3c6c49370dad820

    SHA1

    525c09ce10c33dc8b5c3e74c0591b4f81b3273c3

    SHA256

    49d88c961f78e6be868d54da641c2e1ff4b35712795c6c6ebe61d6bb146625e4

    SHA512

    ffac00306cdf5dfbcbf2143326af161224bf007c407b4098ba8ee95666dd50aa2c26854b2df603afff93f6684cebd9091c03ae269c17a25a8359150875660a20

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    524b6e0015a009373e50e653abc45031

    SHA1

    e997e7568eab34350680d58c48aa1e6b8438f7df

    SHA256

    40c24e39002c3e7528e484595bd3deeeed417e0376612f83936f3df10eaeb570

    SHA512

    7bf9fba21fac7f45afb134202f233dbd2acef17d83e08d68b68b213084974973bcf0fe659bd24baca08bd34e3a6e58bf9564b3f03f9a7950898047da541b3f1f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    db679e0b46c15bc167ecf52184b3d1be

    SHA1

    a3f6d735987cc30656783854664ad84b5da632f2

    SHA256

    4bebc8aeb9626b8b09d25e9cc888a2ae628862c24168d5a8c1c58e3e5beaccd5

    SHA512

    33583a8a3e12bdce54e626a103eb187644955357de1a2c7df48c3703fa88e867e2c5e9a77b6cc8cabae426c1cf5a3f5fbb161cf3c685e540a83638666ea81910

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0c09fdce6aa78386bcc9e4370de198e6

    SHA1

    8a081520e246247eb6f85610bd023e60c098f986

    SHA256

    b4c8908428b5ffd0ed3ad1f3a00f67e1aea61d7bab06523a2d22f1a1a9b9c3e2

    SHA512

    a14667d863160fb9ac9681dd7108f06ebb2cb98e4858c289b82e4ec9abbf6c07ee5a0c6a54e0c37419c7695765d7b0903a039a3a19f8fcd86f08deaa6df49ba7

  • C:\Users\Admin\AppData\Local\Temp\Cab9FD9.tmp

    Filesize

    62KB

    MD5

    3ac860860707baaf32469fa7cc7c0192

    SHA1

    c33c2acdaba0e6fa41fd2f00f186804722477639

    SHA256

    d015145d551ecd14916270efad773bbc9fd57fad2228d2c24559f696c961d904

    SHA512

    d62ad2408c969a95550fb87efda50f988770ba5e39972041bf85924275baf156b8bec309ecc6409e5acdd37ec175dea40eff921ab58933b5b5b5d35a6147567c

  • C:\Users\Admin\AppData\Local\Temp\TarA2BC.tmp

    Filesize

    164KB

    MD5

    4ff65ad929cd9a367680e0e5b1c08166

    SHA1

    c0af0d4396bd1f15c45f39d3b849ba444233b3a2

    SHA256

    c8733c93cc5aaf5ca206d06af22ee8dbdec764fb5085019a6a9181feb9dfdee6

    SHA512

    f530dc0d024a5a3b8903ffaaa41b608a5ccdd6da4ba1949f2c2e55a9fca475fec5c8d2119b5763cabe7ef1c3788fb9dcac621869db51d65b1d83cfe404fb4c27