Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Resubmissions

08/09/2023, 03:26

230908-dzpm2sgc54 10

01/08/2023, 11:42

230801-nvdp4agf6v 10

01/08/2023, 11:24

230801-nhn1asge81 10

Analysis

  • max time kernel
    134s
  • max time network
    132s
  • platform
    windows7_x64
  • resource
    win7-20230831-en
  • resource tags

    arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
  • submitted
    08/09/2023, 03:26

General

  • Target

    webvideo.html

  • Size

    8KB

  • MD5

    4ba03c614e0ea16cdef91527150a6c5c

  • SHA1

    7296413150216d1b3953967de9639c06da9bae2d

  • SHA256

    ba92c3762d1b6c9fd6a96005eae28b75879730df37d4457c84a6c161a8893e2e

  • SHA512

    ab9a4fef3e5340d9966d11fb4a26958f2c8b1bd6c689ed89cc120ff62c6ef0cb6551c3c446d9a8490fc447e9f5e8a4bea985977039f61a5e53a42b875e811ea2

  • SSDEEP

    192:QBM99sHZgRn18un0yIui8juWVJ3o374BMCi01Ku10z3y041HGvqUlLI5eqOBhOB3:6M4tBui8juWnY7CiwdTL

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 64 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\webvideo.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2224
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2224 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2172

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1a818747793917c0e0616105863f2755

    SHA1

    9fd4d7e6c8b090b2fb352397a624296778f37175

    SHA256

    92ce56b4096ad808c6c93bfd809ebb27b30c0acac401ce7c4d8b97d166fb7d3d

    SHA512

    3f1d077a7b60581b77f56d098b17aec32d1d7d528433c28062d06276505ba1df4e94937d429e4978d3552564310d4b0c997b1acf3afe4de5f99d937300d46c06

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c9830ea239344726250fc3fa909a8b3b

    SHA1

    129eda06af2d91dddd4eb157c01a4f10ba100471

    SHA256

    6dca011a07fd95e0615e0587d73f6dc3759b8a6dcd04c0a8a73b503bd0e2336b

    SHA512

    eb4aef7769be11b618dee54302de74c7743d363b5f8100caee655619cab28d3e9cc4b200f534880ba219c0fba4ab65425e2148b6ff644b4e6721a1cb4f0236ac

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    849107781f99dc34da1687c615d1a2cc

    SHA1

    9630182464215339b238d8e5345bf5470876b15f

    SHA256

    7055dc5b7d0c85c33b0fbee6f7129d3a1877571b6de2e094c9d3d01665e9270d

    SHA512

    a4f554deef3217732121b9fe84b00bc4668fbafe58dae9e277952a906b94d69e2a174367c8b4475a06e4f0219419ac9529509a925ae7eaaee8da6296c843e70f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9ed8f4e7cc0fe82ec0233346fa3f8ec9

    SHA1

    66870d4c6b15f22e18abd06859349d3cab8df36e

    SHA256

    7673be896066f1bc8af29d8d700f8f822b7bbf5b0a32ac738554f45fae3ff16f

    SHA512

    5488c6b0d6fe9c3052bbfcfdfe5ff72390c979afcf6d1079f237354340ba763353bb2dd3d2cb5bc298e79278a54dbafa9e8a20edb7434ea1075aa88b297090ac

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    28ac3d046e14e40445c36bb692adafcc

    SHA1

    e78a35a36c5bf0ca3c20b8e9baceb7ac491df41a

    SHA256

    acb362e90dfee1529878c46031bd67539cf8981bd3dbf5753f35c73e7ea4acb3

    SHA512

    d170fb2c464a862c2567ce4f34f435ca3dceb5085b0bd31f50f321379c78a9182caa0f8ce54bacfb80849afc507c753240ed7feb281de9e379564e991f6afc56

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    86eb7254d98af0ecc5f2ac012396fb58

    SHA1

    14ff710134602f5c11a029d0c81b9e704f447378

    SHA256

    95a848f52304d152f1223a8fadb6f25cdf665f00835a1fa8e48bd2a6788c3fa3

    SHA512

    6f89a97b08ffa494883fdad27d2a0ec0711d4b01a799c44d35a31ae529bcab6e56f1eadea49185ddda0d86ae4888af3b0f9d190dae29439c05e6556784f3d4b0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    45b2c9f45a512ef37dc2ea1b4a45bbed

    SHA1

    8b701ff8896768fbef4114d7634cd2fa3698aa52

    SHA256

    b87be2e0d0dfd332ec607e4ddc3beb297483583d07d1c4fbcd2b895cb4ac0d73

    SHA512

    0f216e867c8c1f209ab9f53fd5403de47570535f2c8939768b64c539c3c5cec35385b14a501850df4afe085a50a6603049cacb4ce1ab1d74df056988ad53a1fb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    811ca1a357f10c5cd1a7eaf8021d0f26

    SHA1

    e67ac64fd150f49e471b0ebad48e3bcd36ca40f8

    SHA256

    d28f04c6a6bdf21a2f3b2b6a7cf426a7129b4d953620173e838115e89a09ba52

    SHA512

    c751a87b6b2402b3faf1f3e21c34bb04ecfda54606600ff6b00577d730dca14be603d304b81e0259f1f4f069e0950ca2025d3bd220e6472b8ce9985d87e5e675

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    859f63c0fb65b9c66e0bd0c1051e2106

    SHA1

    e69b6326bf02c95873eb11ca1fcabf4c359bf1f7

    SHA256

    10e5958e8520ed0e17c2d49bbe7b91ad8fd9cb515781522b597fb7c22d4fc141

    SHA512

    ee8fbe330396d23aded02efb7ae13c2667ed035d5efb797044c5ea21386728ed2eaccb3f2cad02d6af7e45ab4389d37b4c754b11028a8966e669b6af4514c0a6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1773fe5300d0d27e78ada82e64405657

    SHA1

    10ba951d1febb6c60748c99b367cf9d700a2bffa

    SHA256

    143a4e49b087a9e20d9aa10eb158b6e7ae753c6046f842d2f0862ffb12cf91ed

    SHA512

    180ef9304b8ed89d28bac92e7ff4e36a4f914e9997f8e02926e3ebf4b27dbbfcde18b12660656eceb5741f706891f7db72d39c86a07460f46d7d4a190e59bff2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e93e28847e447c036b2c7097eb96e369

    SHA1

    9d3a69f1e06bcf9ed642a125b3d36cdc69b54f2b

    SHA256

    9a43e13419c4fca1d7aae974bac0e659ff8584f96a2c7bb3c26b59f332ba7e3a

    SHA512

    9ff28c105e4c3574e503a06de0a17c088e629788403ba7cd2a6076396262a9e273a25e919ec840fe333d6643acaed77ee1d13884c8faf22f43323cf787a7c3b5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3041b9ee19d0bb3db01d1d73c5659f1f

    SHA1

    e660470bf39d9406ad0268647e277b8b5a858aeb

    SHA256

    499727ca85021e4249ee129b5a3c433173599e01dbf6134839823b742e7c6a2e

    SHA512

    a3329f35013d542d34c7e24db495ee0f1f6c0d0ff9e7e911e59f448af26ac66dbf7f766fa396b91e1e33b0ba29da78d703cfeccaa78b891956454e2e744e06f4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8e276d87e4423fd6e0b46ef10197895b

    SHA1

    34ce25c8e90ff004cc4fb01982817ac9afa32b3f

    SHA256

    338ad789d83261f00d839e3c0bc580e6654b9a786484560d1c90af7c379972fd

    SHA512

    ab329b650c17c19e5ffa2e5bb3a5ad77b3aef5f2e962f4f4535b461b0cf5a185b1961f12d07f7ead21af91679fdeacc702a008153cef4d1a63cd7154e808ad90

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    91fbf5c44f07702ae8e236c32575b54e

    SHA1

    77b1a3eb67cbbe99710429eefdf93a13c068289b

    SHA256

    6bdc1ba1e9e520f99c483d2ab9d2d68551a32cb374b24643a221214979c005af

    SHA512

    44bf2634eecdd270d2d76667e544aa5e8f2246593ebd22392618509dfbb341576be328384d5a631bd6e2ff19edbd53c36f63bc7de37443ea1e29ac205500026e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    442010a48cc3b6a1109336d13cd53046

    SHA1

    8b51a50233d2307ae236dfd83fd6dfadcb0c7e2c

    SHA256

    64086b0c9abdb2b46e600b3f12bbaea150c7355cf043fb8c347441535d0802fc

    SHA512

    9a6d1a127af5f3e8c04aefc6499a4fed8a6d8719b89dccf7bfa0d9721c8cbfda3bacea66d95f6ad7348f582f02b651850fa953d8a1a7762bcf74ec24e4dee946

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7de749c03b2fc05284748bae95f98721

    SHA1

    eb85d753105f28e4a098047aaa4ca67b1372508e

    SHA256

    2e21e1d587fdfa0dde69ef41197ed058d52acf12fa89d8d25d4562efd4861d17

    SHA512

    1c6748fb8a2f203c6158536d7e98f5080f3e8ba2209fcc3c213fbeb9569c61626225da073e3b1b690b5f7cc6900c55551452fa4bbb6b3571a899388c4dfd6e3a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8f8506431da0e8e03dd8ddf82310f7e8

    SHA1

    1e30e48b5133d5fef45f671c853c65ed2d271578

    SHA256

    8b05c696b3c91b4cbeca3cf2d8bfe98a132cd42c6f7501eada61337c33d4b4c5

    SHA512

    1049833494bd8587b106d7ffb8a9cb9383c4b7fb545a1411915e0acbb2aefacc8a4df1f626b1ba77ba9758cbecd6d73dc1ecaeabd4304d010df5022221c682f7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3e421fd6fac74b3083d500d65ac2aba0

    SHA1

    0c8690e5e76779bd1b1f50b44f48313c2662b8d7

    SHA256

    0a243b050be6c6a882a304352f1d6f9042bad5adf8359f1b2ab4e05c7a174302

    SHA512

    0d14dbf1edacf27b377be4753484be3282dcf3b613dfd22e3cda49482c9732910b90681edb8da64d96a79b5c49def09d7abac10762f5b901959fb9acd7849082

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    dffccf8da2ba8710eb812bfddeacd222

    SHA1

    77691d7f73bcb0f985dc2ce49fe73c0785fddb51

    SHA256

    3ffa2be75f9c0d67c0d83eb719b528c167e2bef50445494d95909052abe72aa1

    SHA512

    93d4e43f64bb0f9bf13b88810591d1784dd8c88639a3b5bb5c61b89e0d68f50f4ef3d26b199a9843f75f9648be5cdb5ba11826414cc58a250d27467315109cc2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    89fea9255470df096787ab5b92c0dd7c

    SHA1

    9f0f6a0419933a328ad87b94cbf9ae69112c3ad1

    SHA256

    c3f32407e62bc9420c2bca832d939f08b61dc8428987e61d92706d5cbf04afd2

    SHA512

    64214e085857e76e430f93ab8fdc963eaaa8ec06d1819717d128085c1216e9f005981195da458e1aff7a21a019ce81e57914b2a2c48fff0b47e8f7ed9522f59f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    97ed5e984dcd6115c420b021e6f38111

    SHA1

    22aa63048912aaae8ce425ceba608f477da33b05

    SHA256

    a4eb1c93306f5443af8d6c97d2759af834be7f36b396c5820b5b8b78edf5b4ca

    SHA512

    9e6e1318d15ca82a227ad32675880adb151db3d185120b43389f420bd7c6487d9e0930fdcabf21328145d57ac8839fbd23908ec28c0bc94850c9fdf810f49690

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    22d1165c37df9a60dbe5db7ffea45d33

    SHA1

    cf1660a3f393247dd8d46d52b0a594a1199a5433

    SHA256

    7b710da5c4dcabc7d01abac279c532a34ff52077c150f5d027a300941108bfe9

    SHA512

    20092f12fed47464b59816590432f577f5bcc39eab980b0cba55f87a5e9281c2a08f4a9f8f87caa349814c5f8f978050d590dc577b8c69b4d2f104b8a1921cc0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0d6a261e43a2a688a910b9a362260564

    SHA1

    3cb79919574a3be704b59d1282cb4c39114bcac7

    SHA256

    97e2790053418ebc25cfc5a089968a334ba8a1e945bbaae42df30e8807e33dbb

    SHA512

    86bcd4c3a9b2593bf9ac10e201a845243140e99e0d4b6b3e5c18a6f62813a42e150893f8ca97c8b47ae875e0096d12ad7cd433c523123a3ec390b00071518dba

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\A6D4ART6\www.youtube[1].xml

    Filesize

    13B

    MD5

    c1ddea3ef6bbef3e7060a1a9ad89e4c5

    SHA1

    35e3224fcbd3e1af306f2b6a2c6bbea9b0867966

    SHA256

    b71e4d17274636b97179ba2d97c742735b6510eb54f22893d3a2daff2ceb28db

    SHA512

    6be8cec7c862afae5b37aa32dc5bb45912881a3276606da41bf808a4ef92c318b355e616bf45a257b995520d72b7c08752c0be445dceade5cf79f73480910fed

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\A6D4ART6\www.youtube[1].xml

    Filesize

    23KB

    MD5

    1a12d5f18ae0418dc9af19ede80d72f7

    SHA1

    4adb7c46bfe25e3760a5187a8b8568b0e34dd7e2

    SHA256

    f633dcce5f2bb0abe4bf5b05a98457d15c004f8421749c2e6c2d5a4ac73910b1

    SHA512

    54531df03ba1031bd8b637ad724ed02e175639c12f496399c0d0581047f20801369375c221744bdd1c960906cd535bac33b30cbf059585614f4c89db013e840e

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\A6D4ART6\www.youtube[1].xml

    Filesize

    990B

    MD5

    d2765765023a68b58d09b2f15382d841

    SHA1

    d78a427e0e718f2e1a656a079d433728fe31aa67

    SHA256

    74eb02d55cc2abdace8fffff9304681d19ca0e8c6ef529e03816bb0214086539

    SHA512

    076596a3bde8bbd2ea7e62d3589899cb921685327be7c693ced105f5b58efe6b872011ac22b07a70c92d9c4b8c90f431b6f0868b6e2a593771d0724cddf44e78

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\A6D4ART6\www.youtube[1].xml

    Filesize

    990B

    MD5

    35f57d1f0f1bc19849be30e43b2bce29

    SHA1

    df365ee3809d038497d136011ae28bcf8ea2aff3

    SHA256

    f3bf1b6dc6daf952371ebc720641e6b5c4221f81e03f404894f206998258f73d

    SHA512

    8eb4c0cf70b0948fc143762c8535b58bf02a416d7831d330d90f0e4e437365afff0979aa643542411a03ba1b51990e32401b8d4199eb8c2b35f38177fec556e6

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\A6D4ART6\www.youtube[1].xml

    Filesize

    990B

    MD5

    5693e7c8238fe8c77c77c7da285482ac

    SHA1

    b57b751717e70d64bec86709e33f312b194121ae

    SHA256

    be4e7795e97bc569bf1a86de579c19a66b655723a34b917073a94658f31b4432

    SHA512

    1388fac2e954c60e68d0b3a8957480ba8c43a95cb3802e8336be8001219d29795cc08a5ef33fc95596b05e4c69cd41c2eb0249e959e120412055ee1c2e50bc84

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\NO1NR40C\cb=gapi[1].js

    Filesize

    133KB

    MD5

    6ad382fa50a2250514d6142072a647f4

    SHA1

    316d68172c63ff03f82bb644b5a1ef54149ae818

    SHA256

    6c34aa6863dc470b805525b8db49e29a2946b73cc81c1ab6b558efd49a5b2efe

    SHA512

    0fc179c172c7a1256045dee5b4283651932017086b1e846388c855a8ec72b9dc0046d4ce4feee3073bb1e099ff19e3abc30654a962a3f871c9b8efb272fd91bf

  • C:\Users\Admin\AppData\Local\Temp\Cab6358.tmp

    Filesize

    61KB

    MD5

    f3441b8572aae8801c04f3060b550443

    SHA1

    4ef0a35436125d6821831ef36c28ffaf196cda15

    SHA256

    6720349e7d82ee0a8e73920d3c2b7cb2912d9fcf2edb6fd98f2f12820158b0bf

    SHA512

    5ba01ba421b50030e380ae6bbcd2f681f2a91947fe7fedb3c8e6b5f24dce9517abf57b1cf26cc6078d4bb53bde6fcfb2561591337c841f8f2cb121a3d71661b9

  • C:\Users\Admin\AppData\Local\Temp\Tar6359.tmp

    Filesize

    163KB

    MD5

    9441737383d21192400eca82fda910ec

    SHA1

    725e0d606a4fc9ba44aa8ffde65bed15e65367e4

    SHA256

    bc3a6e84e41faeb57e7c21aa3b60c2a64777107009727c5b7c0ed8fe658909e5

    SHA512

    7608dd653a66cd364392a78d4711b48d1707768d36996e4d38871c6843b5714e1d7da4b4cc6db969e6000cfa182bcb74216ef6823d1063f036fc5c3413fb8dcf