Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Resubmissions

08/09/2023, 03:26

230908-dzpm2sgc54 10

01/08/2023, 11:42

230801-nvdp4agf6v 10

01/08/2023, 11:24

230801-nhn1asge81 10

Analysis

  • max time kernel
    134s
  • max time network
    132s
  • platform
    windows7_x64
  • resource
    win7-20230831-en
  • resource tags

    arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
  • submitted
    08/09/2023, 03:26

General

  • Target

    consentform.html

  • Size

    27KB

  • MD5

    7a2ed1a6df8839dd8936a86d9edccabe

  • SHA1

    7bc1af528444afca678905059cb1ba9fade65352

  • SHA256

    d02fbd55c1b5da3fa1f77c52f5633421395a3bf228457521512b37cdacd65f9c

  • SHA512

    ea0c3e512b37e340f4c0a49196344f1dd5aef38c469ba124605518e913be601a5b6a92a50f00e962bc90041bb80e51480254c7902032d894b7d24be5aec47097

  • SSDEEP

    768:wEh4FOT6bJdK0D7fkvaqF1b6cY4c5rC28c54NTc5Jt:th44GbJdKoncY4c5Wc5wc57

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\consentform.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2292
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2292 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:772

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    94a5dadbe205b47aa0209121e401305f

    SHA1

    9c80d59061d06485ff3788e73841266ecf2483d4

    SHA256

    a7b8226fbedaeabed4de15cffda0f40354d4e4f90a792025a001413acc6adda9

    SHA512

    1acf6be6d3a24fcac1471e8f4ab22beeb6241da968516ab24b1fed37416972ba032e4e822084ecdd842aef9fa7b7e0404e89cf0ee46b42e997138d3abe9fd438

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9aa8235a6f7a783a54cbc349b6f78a92

    SHA1

    89ed8f38db553bc4924bd5fd71b2f2c4aeebbdff

    SHA256

    0bf8ecaa2c04e440a6ed1fd2fafda581325a7dd79cb2d9d8fbf71127140724f3

    SHA512

    ac3d791a36d13f43221c671021cf4cf4ade0d09f32c8167b86b05c5d78ad6845df3fd7ebfbb6d1696636a940e63daf014eeeadd489a8880da87ee719245b8fef

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    256558645d3fd9ca7d540e51f23d0a89

    SHA1

    bfc3923962f9d01e630f418472bdc717b9218090

    SHA256

    ecb911ad5c845c1bb1965ba62bbc0d0d02b36e614ee3db4a9b4cfbcdbbe9c3e7

    SHA512

    344cf17ea2f991764710aae70fabf445a43cc69acb5043826449abb58ff9e1b5bc921c6740304ffdde55a0f0798c9ce733fdaaf38b68a83f0533ab33ba8aa7ea

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ce461323afb44b462451d5ff18e0417e

    SHA1

    6d66cfcf43fed6ba511fad3c45e84100633d1bb5

    SHA256

    5c9a02d27e6aa4e451b66f2ff466c42d401bb2ff3a086ec3e1fa57c8965123b4

    SHA512

    de602ec574e73ac068ca14f33ce92548acdc6af70d8ec123e3cfc14a065ea7ef825da256971224afdf2f707c22476528ba4521756ca9072f3da7b15ba1dfa440

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9b66717994231eee71a0c453a6cb6636

    SHA1

    5552430453ccce1aa2b55c3ab28191cae6d403e8

    SHA256

    b2360caad7910d3e68977cd9ffe77fd646579c7cf17f923e4f3fc878484f8940

    SHA512

    0d6f91573ebb757ed9dad9a6dea42e55766abf93bd708f8ad3945880e45c641430a5bda3026925226e30579d9f5fe6dd3a21de7536b5e18ea0e1cb7eebb5327d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    332d2e59c690d2d0476fd7da2121880e

    SHA1

    28edfa6d5ebc4645e743cfd7f4fd3ffeceac5cba

    SHA256

    c4814c3f60fdde6a2a4b5ecb5d84ad956a87abc570ce8e864e3a1a5ae433e787

    SHA512

    d7ea52d4a98fb38338611b44c1fc9befdddf7691f4ceddc62e0d6ebf2d467a0885b80b9a71c5282612b2257116223baadd23810660c16a3f1f73a803003a14a9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0c5d4103ffbbc0921c87ab5fc932c882

    SHA1

    483b3e97bd22af5803963f5292f3b3769ffff678

    SHA256

    ba91ae7b80e3ebbbf8661d337ab9c09bb52eae36f3f469e1b04f68b18bd86ba2

    SHA512

    2d30d91a4cc18e495c776ccdc24521110469a149e2e39a4f8e31355b5ad45e0cb8798f168bed2cfcc285a30deff92bec7ea23cd560aa337872b27fd3cb4c40cf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5bd5d036b37170ce305fc6319b001073

    SHA1

    5c27ce75bb11ff3e8d6fc65cf172c2fbd2309925

    SHA256

    dcfb20d39f1448686aff7b26a377a7a009eba48212eaae6a229638e2962fa190

    SHA512

    21033ee5f295b9b63d162b14783675a9ec3e8ef6a3a60afd710c4e801531289259d39fc9b0f982a3c81bc83072c839cbd757f4526508ef75809e878528c56a31

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    98ba4380d5cfa50919c7c87777a1dc73

    SHA1

    c8fa4a9970df14b1ce909802e80b6f24d7ed2a3a

    SHA256

    9ed39c42be34d982ef4eabd56a9235f8c5e30a4c2aeca5053a80874f606ef447

    SHA512

    ff7d716b6b09ba5fe09358cdbc48a36ee2588725057bff263f3eac5d6a9ff6b5d3b204ceefa8f952d4cae090ca434b644fa314ac13f343a20b74c184e82e6a0f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d460b728c2656bbeaeece49f6ba4180e

    SHA1

    0ac71831c906cafdc85abb6f8c5e8ef57f3c76db

    SHA256

    2c6a34d5986509e7d9d5ea701d6e957515ebf4b10b2c1e0e4fe0c68dead8f137

    SHA512

    2712eb86f652f5fbadb7b9705ea7003a7fadb1c301e8058c190dd20f69370d6307030991ab444e7f9f671b2070396cb37a3ceb5fe69db2bea70cdaec0abba44f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f82231eef74eadc4d5a9c2332520d92a

    SHA1

    244bb7066188120d26a8309f9ce6925012bf2515

    SHA256

    143c930e2b12b530cfacf249b5268ec4b5a0d0bfd2ca7ef2cf71bbbe8af2e3b7

    SHA512

    c3c6eff3758007b16876fd1ded582dd629785fe198d3d2741cc8fcc2a5a39af11a7d5b2b1bf7ac3e6eea4377a182193a5857cb1074d6462005e59a80879a23c9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1fd67302e42886671cde6375b18cd1e0

    SHA1

    6d8fde866a90c2919610dc8222993d84264c15f1

    SHA256

    bbc4cfba752c07c9c5e95d8d44c55cd255657b353d871109ddf4968d798adfe9

    SHA512

    edc08ea8ab138c9090512726679e993d2d3baec426779e22ec5ef809b43b2eaeb93624c3db446dc435d413e7fdf9f699abcab75214d194201bd24b14e0e5991a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2d2ba15365e0084430f94ccfda95ff98

    SHA1

    4e5159557121ef74512a027a2090f39493ca6a76

    SHA256

    f156fe1728b9f05578b084d3a824d01012a5d799dc5385500ea2de4071565612

    SHA512

    cccac3baef0488b3468914e1ed7d07785cca5e1a05295c168faa069696a0b66684520cf7e94da9b506211813ee8122d8270c6614b85a54b11aa63f9da3a88bd7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    46366de647d3072d91519fc7c550d439

    SHA1

    ec14695ca43bd9d09327d57f0000f1fc9b3f2123

    SHA256

    0aa14161170eec7cfe31ad6ba7b374c53ee9f3a500cd1986bd71fcf16c9c6633

    SHA512

    b4956d4d390e31424344322603400957aefdd75e5d7611eb6cf51764d257b43ac66d60905bdc6977c0377394795402a94a1089968ce35e18573a43f35902e99c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f1d74b13580c5ed136bbeef9a2a46dc6

    SHA1

    fa7997547d1836bf0c9c6a251b0dc5a97bcedd57

    SHA256

    7bfbbeb69437214a332e6673f2fc277ead9f985a0a1d312bae7fde5b272ab7df

    SHA512

    ba274f9a8ca6d673cdc73d998dad4f5ce1f6383e842d1081738485e831c8a6c48ae7e09bdea16cf2c718959c22216992efc792e684cf8890e4a0294eb390a3d0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    63c5f7267b05665672528aee83db94cb

    SHA1

    26884ad14ddfbed03f3d1b2eaeaac852e50b2c2a

    SHA256

    cf6b4b6944446fed5ca1764b0c9f9d005fff4beffc535959df12d6451b52435e

    SHA512

    91bcac551fc4f442057e801dbd716e5813ddc0a0a9bea9fbb648f9d083227bb15130d414a927884d93dff1835babb9356e86354713acf806cb1044c6c8c563da

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6a57201a709350c6cc45209887b07ba8

    SHA1

    0ecb1a027dea04260daf7239f69996d3d3f7c9da

    SHA256

    7391a6adc6f07db3c54b41238e47f40e310d5cbf2109edb8a6644fba5ff20bd4

    SHA512

    b50ce0fcef610c6af1f52d2e52151b0e1d33a4e822c5a9f07a6419012dd3faeec0ed7f14cc7e5c266dedd68a56564d6a4daa19baf00d86c23e3cc50b303b1d51

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    442543ea49bd2b34a65fc363e036eed5

    SHA1

    0f41bd4de44cf9e67f4278e81920e469d601ab83

    SHA256

    192ff4c9a776e8531804794ad1f260977928c4ac53631a8221fa7fe8770284d9

    SHA512

    82349e5af9c75c7cd95dac2a9f3427090726cbc80989997e27f3efe5cda9b65280422b29f2cce5938e509ba509ec6b5eddb9069fc5075058e83ffbdd589c8e71

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a13996b8297e77449212feb812c1c75c

    SHA1

    267a08567542bb8059cfafb215d5fbb8d8600b9c

    SHA256

    662fbb2202a6459b697f2f3b3863fb065916b071b8c354e08fcd6c2d883ae1fa

    SHA512

    253147e777817e944429d5572d38943aeacc73a7d9f7031bc6ab4af519af1ba3d641ceeba2d72169aac0e306a020d7a60dba857e22f57186f70785f1ae22b727

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e2995bb2bfb831ff2847c4a8cfc490f2

    SHA1

    1ada26ccfc9b7c60c52fab4f53babf74fc0af0b3

    SHA256

    cc4b0de278e3f70960526174a9bbd376ec9268e9b0881f5154e8dcfac9305647

    SHA512

    d3464c7c9c67361919a40e1b7e3a208ed39f24a33c04c1b31ed77deeb0ddc312417a31b5c10c491ac833cf7c3bf75d585314338c73ea32f0515664f1740c2e4e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    019635844bde89ff3f2afba14b32174a

    SHA1

    a2fc29c5e70fa97159f085cea4f984da49ab59d3

    SHA256

    f7c65a44d18a4fa204b43b03b0d13a53ff66eb42bdd27b023b2616651deae59c

    SHA512

    103edd2c60c984f5bd60f02ee6ffd1f3bd363e6af2bd9bf56edf9a6cf1052cb69c57a1f2b60eeeee4575f4cadab4074e2435404c0db81a6138efb773f0663cee

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cea7c532dc40bf520319ddb4d81e0340

    SHA1

    9cbd4a9d78920d3bce97b04fcfd87cfd3fc00963

    SHA256

    4e499cff3d6341269dbad3bcc913493179e9a514aad3cb015de2fa267e92ae9a

    SHA512

    ec39b1705b57fb97276bd0d3f390c63eaab99211aad81239b61ea076dd9729d65c618fcba01c983a4ac79af61f064a5936d0f9ef83e49ec733ab583b5c0dfe19

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    07cb34875b6ebecee79af6f25f3a5f1c

    SHA1

    40a2ddcaeec18a59b6d21d4641e3c017e79f78fd

    SHA256

    c72cef93caa8813b3a563b6f19bb7d7c579a15dc8b5d74f32eb1ab1a7bbf53a9

    SHA512

    a4fbfb5f7b5f7ee2d839793d0a37475f5ec798113b6ba9703f7d7c087fb71722ef56685b8d30c19c3424d138b94e3ac53b506e5a931264a44c91557524b74a95

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    babdd5189c0b619b6e58e6c9649c8c04

    SHA1

    028dee3617116046acfe54092fe720ca2f9d2816

    SHA256

    e46f18bc4388d001f6609ec751ec538ecd49098e8f7294754f46e98874eb29fb

    SHA512

    04f3e175a5f60bbc1c0c4326091798e5a650d69a210c83240c76ec1ad8231a198954734eddb929759d18b4df6537e3279f467cd6da3eb04fccc6db02e6c4fd83

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e4afe3b229a1b00c27876a6d1147a0c7

    SHA1

    8688779af7a9048899eaea0f60578fdb940fc28e

    SHA256

    687511a3e71197b90e18b960f73b4aac7b3bd3ebb0bf290c7f368273b8b90f87

    SHA512

    9ec433b28b42e542a4a869223c4942330f9ae8c71a3f06cdb1c18a6c871ff060367f26a6964b8f389a7f477c99959146e50ec2ff7e36c050a451b86ebaaf581e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2bab5195d8d9c55fe29e0f193a16e1a5

    SHA1

    465dd9d2802811fd858ded0f7ff1310bda6e0f20

    SHA256

    f5f6a0ab66cb9f20b439773dcb4c431c972fa92bac9240ea23f3505b9d4960ed

    SHA512

    ca70fcecfa8448e455dd61c74b4d137f13efbfa960f5502757fff6d3693285fd7c7a63d6e08ebdcf4c73ea4fbe5da6a541e64002dc9f5a2d4abd15c5cb6d9466

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    892b3cbc9c003f11dae0d339974ae172

    SHA1

    d24e02844c99c490d04456cf9e4eec23595159d6

    SHA256

    023656816e644f1f30cf7fb0a89bbd3635933c55421cb2abbc257c451bb1df07

    SHA512

    6b76ccda528f981c9e88c8f913d87208941bda0f9d01f373e485f90d156895327a2ec31a219bafd784d55526a5d5cd7b4f55225a7e9fa3cba4445ad883c25b4f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    73bd0c1d6ded16186832f467b20b1bf8

    SHA1

    f30f01688ba2b78cae2e615273062165c63886ff

    SHA256

    64f0e6847128bd85939e1e2af09e1e3188001e1664085fc569969ca1c1f09872

    SHA512

    a7571405dc4be162705e0dde3c75f80f77dac768ef29a959e6f3534b400a1bae542d92f17f48072774fac4bb81259a4bfaf47a8131179d877424480c322eb8b8

  • C:\Users\Admin\AppData\Local\Temp\Cab60E8.tmp

    Filesize

    61KB

    MD5

    f3441b8572aae8801c04f3060b550443

    SHA1

    4ef0a35436125d6821831ef36c28ffaf196cda15

    SHA256

    6720349e7d82ee0a8e73920d3c2b7cb2912d9fcf2edb6fd98f2f12820158b0bf

    SHA512

    5ba01ba421b50030e380ae6bbcd2f681f2a91947fe7fedb3c8e6b5f24dce9517abf57b1cf26cc6078d4bb53bde6fcfb2561591337c841f8f2cb121a3d71661b9

  • C:\Users\Admin\AppData\Local\Temp\Tar60E9.tmp

    Filesize

    163KB

    MD5

    9441737383d21192400eca82fda910ec

    SHA1

    725e0d606a4fc9ba44aa8ffde65bed15e65367e4

    SHA256

    bc3a6e84e41faeb57e7c21aa3b60c2a64777107009727c5b7c0ed8fe658909e5

    SHA512

    7608dd653a66cd364392a78d4711b48d1707768d36996e4d38871c6843b5714e1d7da4b4cc6db969e6000cfa182bcb74216ef6823d1063f036fc5c3413fb8dcf