Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Resubmissions

18/09/2023, 14:01

230918-rbwncahg21 1

18/09/2023, 13:57

230918-q9hnpsca62 1

18/09/2023, 13:19

230918-qkrkbahe4s 1

Analysis

  • max time kernel
    135s
  • max time network
    130s
  • platform
    windows7_x64
  • resource
    win7-20230831-en
  • resource tags

    arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
  • submitted
    18/09/2023, 14:01

General

  • Target

    ACH_Reference_01100088000798A8B6A6-86D6-4F36-A1D9-8EC249732580.htm

  • Size

    309B

  • MD5

    5954cc8c520e4cb085ddd9d5b839c369

  • SHA1

    bec9e8d1fdc2a1a26da44931da11077fb47def3c

  • SHA256

    a1c0bffb5f60dabf4468218a4ffd7fe4611a72b9eea88ac74aefab3ff270cae2

  • SHA512

    db537fdfffb8ce3ba759bb0e6d167e08b982695ba506fbec3d9df683310f83cc4353de873ad7ac027db3ec7c64a77bd16131a05dc82b44dbb91b4c5160e81fd4

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\ACH_Reference_01100088000798A8B6A6-86D6-4F36-A1D9-8EC249732580.htm
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2168
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2168 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2328

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1045b6a4d4c98ae6e11626740f9379bf

    SHA1

    7c07091065c32ccc1acef5c334a84ec144d0d839

    SHA256

    142377d30810080c415968c9829c693d9223c3be8cdd95514c342a1e3b5cb054

    SHA512

    38173a8b5db1eab65fd7ea464faf0957b8073c11de1cbaa39ae391ec5ab7cb0b327df3a9151b83f1d96bfcc88c81282d7dd9ed4444c01561800aca865ccccf45

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    54d6ab15fb0c10a3ac4f7bbcad2838a0

    SHA1

    5fe96a0c8e2123864bfbe28ae167e0cac2fe8ca6

    SHA256

    8b9da4eb2878179136c1ed91c32805d435f738a4d3a3e4f86411a91e3fae2685

    SHA512

    5bdbc78732570cca069f5663698fd7ed7dab3a5b52030c815296c69871bc773eba6449594d0bc429f097b55bc90bfd030da59e2ea506b625c728b9bbe408eb10

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d5b7f7af7b37405c9f45426e210661ae

    SHA1

    33d64b5cc2a9528b429fdbd000e4ba094f4dfcc8

    SHA256

    d3bc379cf7a8f96f320051450aa2b152b353e3f2cad1070d0e557905ee260129

    SHA512

    8b25495cc5b3b8f814dad96d27e3c87adc615bcac1eacdeb353c11c18c5ad0b01aa6b7cede959f9fdcd8c8d8bc44bc6f64440555fb2058985f3bb8db40fd273d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8654c23024a0a58bd029941931cbb4ce

    SHA1

    0f488a9a04135d9d188d69694df52543a9e936fe

    SHA256

    cbb594caaa1db32b1298f2d533443c7b3a26be1311a5171b784e5f5bbf59d4e5

    SHA512

    0e9050d6df272365a211cacc18bf2de0d4460a7e225b5b478b95511fb341973af177828711044dbb7d2cd03d962c62d9ab748be4e9cbab2b244e160ee0e15952

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a3854ec22fd6af709947200914f64991

    SHA1

    bd82d352a762d8f7045f261108ffea5da5252875

    SHA256

    703a29d962138a29d94e965cbcacf6be8abfb9f2d5588491ef2dac9cb795b95b

    SHA512

    9e218ea0310312f4d2d37678e2e9f153f9fc379ab50994e4c6ddad5e966cb620d26551453a136cebad1e1d8605bfe05507951066693eaad21115c7ee4a9139c3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7858fbaeb74594536aedbf6109d9ce06

    SHA1

    a9c1b555b38599af83e89793c23e65eec6f02412

    SHA256

    29df75f8ca86eafc0e44ad829deec2d9a76a50a56e626326a117ec71bc7fca2f

    SHA512

    c263268aad8e6efcbf07f4fb75902fb372284ef1a4f6b3988686c1b996c719417856ada9d746fde49bc3dd568b902064a41915a0069cf910ff74d0138f9d210a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8fdb4260ee61c391cd7c8a22c7bf426f

    SHA1

    39ff8076aac90a03d9795a9e66518df010d8af01

    SHA256

    f42b949dcbf660f4d79b3914df9d5de4f717e3e0467939e4bdb4d4480a14c7d2

    SHA512

    d3ceea6088b61fbd753fa03eb2ffcc4f04de0a9dd66c4f6dd4ea26668073eb8159a4acf52d68926039941afb3d790131f2aae026a432ee72cf18642835491ad0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5e012b96914cceabc5393aa4702e0770

    SHA1

    0ab90c57fc2e8e4ecee82ad023cabf490a6e9d4b

    SHA256

    cedd8fd117f88038cfabe3abeff80992400563f26744afe2f3958963c33929ba

    SHA512

    2ba27793fb6d8a3f85dc30e0e750f2b9b8f6e20fbe114ed9c5243baa178d977a885ef7c4cc841a5f8142b0bb82894e8b2fdd65c06a604dddfb1818358658123c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    02506d540891e803f0c502d8ab184797

    SHA1

    7b0783226643e0a8a2f7c9e13c1ed6a24a11e90c

    SHA256

    b38b834040c0cd205e0e89796d472e936efdd20ab90f75aac4d3f8420c0f276f

    SHA512

    9f3524c275ad62d47730a9b39321979ba7984eb2fee1c956b05e6c2bca4727e0644e80f2d20a95d1c1017b5a71b2c93b5a60c2f3f2348f78983ff3daf6953bbd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    881853f0ca5811f961649d08d555143e

    SHA1

    cc16f7266791a66146a80decd66479ae2974cf3e

    SHA256

    e3a88cf2eb6dfa6a46b0f62c21a59418fa69f63664d5666acef98facb2859448

    SHA512

    6ca6df9d8eea00b348880d89ad4a157a108321ec635bb594d0ccb89f5b987c46f18131cba8e3fe1899cac064dd597b82ff5b0d0fac6021b94c261dfcfea22524

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2c87e7642be248be393e256014e2672f

    SHA1

    ad68b8211960fdcebe99e9766024ec0a5b1e1e17

    SHA256

    5c879f9880e5906fb61b520e2e883f32b9dccddbdb0211e800bc173a9e0f64ed

    SHA512

    ec420110d57d2338f3c8cff71f869e84abae42eca628346647fe14adfe52dbcaa5cc8ee0ffaa4e2452e685f195e1cdd07dbd436ac03763560f4a9fed227dc2c1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    54a282a186b110b07ed83332ff4a5232

    SHA1

    09c1aa8aba71c0af6f4055f4ce7ecf7692521a30

    SHA256

    79c0e49f6d74911d108e3608520fd687232dd4e68dfcd04d0658af98c2e2572d

    SHA512

    56665d0f876aa21ed8acfbe5deb16296bac0afa4124084afabf101a8edd897b784575d8dabc4ed7f1e452ca68cd90f7a35cb74d90a6ff2a48c04750ca23839f9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3ea39eeec7230a0e6def783397de3478

    SHA1

    c4874c89b0e9ebbddfc3f4adb4e2ba3f9b782d8b

    SHA256

    05fe73b40ec000cbdc33a7570fcd76444bf461dd51ee14b6eb2b9c97a2c280f2

    SHA512

    adc432b2904b6d9ac9b16e65d73ff1c401826dfb56588d738c0acb91b87cf446e60f683d7a9f0aa2ce5bdc5c2d51fe286404f27b6d21772882fbded64c22a55f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fd784ce220669605ebdd38f1a461ccf1

    SHA1

    1d6a432f4da4fdd6519013527bb63ca482ac6e37

    SHA256

    8511a45a70c996c5155f93958bb5378013b9f884e1c3217602045ae0a34bd8f7

    SHA512

    f5fb801ed7f2b05bc90d85eccf90c701bf65ab1dba032b7204e30bb96b369668b56f3c51b6146865c9fa8dcf496b1c1e7b891c68ee6549f749608c8ff6239e00

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e753170ed308e69794d5cb7e9b90ee9d

    SHA1

    68a9ed8c7bedd5dfff78c3e1e6445ac736f77cbc

    SHA256

    d672973e7eb632296a7f1410d409f576e4cac57a962dbd7ccfff659a150df8e0

    SHA512

    50f85ec236d15292faf158ceefda0768e032b959790a5e315dab7ab3eba4874677765de2268e5ad1fd3935fa5d1d458ced6d5d231884571d412a00c66d741be2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d40bce6ff618b1461b9edecce200685e

    SHA1

    5ccd21b7e5edf3707c1127a67d56da8af0bf3e14

    SHA256

    5c2eccfa472e181a38fbc31c54cf78ad864a161f2328ef8f54829bffd3df1386

    SHA512

    c0e10b2d2b88ce8b68c95a256f1faf919fb14894ba1e0a23235a81fcdcefb1100c428fe5fdd4e7f9b920a55357db1c73416c3420adf8322c399f062591aa631d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fe3aa85c3b0b54e0d64e860935e37ed1

    SHA1

    c45df1941d66d14631958debdfc135b9a9fb4f7a

    SHA256

    d59d9e04b7e9e482e06fb1e595bf9b6b7ce66ae6c36aedadba02a134a1e82e30

    SHA512

    65743ad83ed1e8a80d13e3c00b3e32aac10d7adc8287238a8ebd30d57a44bad3d37e514e81e293aba8057080191a45404abd2fa1b4215f8e42ea4bfa599e915f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3f1836ef306d688d4c4f251d6ab414a1

    SHA1

    25aa3d740f2c5a28d9db26306ccf6676831dd310

    SHA256

    1ee72e10e63fddf4ed7173227c87586a98a44b6d88e1290464b6dbdd2480c184

    SHA512

    b675099c41762620106671ca886a51a13df7eddf1289708db852d29c2bde652df2e4c57311551d85c5e65c2a142344cfe545c540f60f9855d324c9340005bb01

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7c60d88e19c4ab2ea4fac14c4e3ca05a

    SHA1

    346eafcabcea5ad591f9fb5032542525f1d1fe79

    SHA256

    4ea5fa2315018fbccdf978185966e98e8d982c8834a4615599906894a508c33b

    SHA512

    0487c56327305d73d979451e48c41367c4669844cc6b9931220ea2fed99912fbc379cea4fbba8fd5c3cc336473cabdf6fa2fd50bdd288eea7d0de7e64a74a28f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    904cc0fa64efee9637eb440feaea0059

    SHA1

    852a273dfa9f1e1ab736d67a79b86aeabacb72f8

    SHA256

    1dfe9456ac2b0af60b958e9b4f3289b3d063c0e4372403a7c5e68146858e0bad

    SHA512

    1014667ef5c4cde14d1b4239b03db575ad1f8a0292bb44a24bf662aa6c7d61b7a0902d713f4b8fa8bae6aa11ec1f7ba4d8daa8fb1a774c98908591644e34fdc6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cee6704e2534d784f22d1777a2c2d090

    SHA1

    b07289e377e620a5a86ff0c1210ef2f77b11cf8d

    SHA256

    641385d2e4d0f755b8019397fc8df1a0ebfc24265ae78eb8bff29a04301d4a9d

    SHA512

    3ad5739a9410e63cbdae06414f2381bf9aa96f87bae86ae431793400f17c5ca15050b5446555aa174f951192c5eaac84fa0956ec9bea2eee07ec1254acf8739d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f64cb850826c1c3d50627ba2166891d5

    SHA1

    19ae649d13358d6834417bd8904d76ebbad48616

    SHA256

    4d23c7346758ba875808f12e4f0398b86cad245aa380db20157b02352bf89049

    SHA512

    cae65ff0a16dd0f15476bd580c4992a8af40327d278139bb886fcfac58ae4542308a1147d4a7205e223a5e1893a6f447c35b9193d4628bc30502a8a6ba4991e1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bb6920926b178315ab5b109d4af08f2c

    SHA1

    1a5c7bde4ea8534e1fed94612291e66b36df23e2

    SHA256

    b7e2f5aeb49d6021693cdea53ef1ca65cf8d8087be8260920dcf60dd18c04d80

    SHA512

    bac11655eca0086de2ab072612d16b90bc7bd2c44fb4fc553890a9cedd619856ad5885e7a1f980d70b913f0c7c487ddd204216330aabdd2de66b9cc9fd95717e

  • C:\Users\Admin\AppData\Local\Temp\Cab4DF3.tmp

    Filesize

    61KB

    MD5

    f3441b8572aae8801c04f3060b550443

    SHA1

    4ef0a35436125d6821831ef36c28ffaf196cda15

    SHA256

    6720349e7d82ee0a8e73920d3c2b7cb2912d9fcf2edb6fd98f2f12820158b0bf

    SHA512

    5ba01ba421b50030e380ae6bbcd2f681f2a91947fe7fedb3c8e6b5f24dce9517abf57b1cf26cc6078d4bb53bde6fcfb2561591337c841f8f2cb121a3d71661b9

  • C:\Users\Admin\AppData\Local\Temp\Tar4E93.tmp

    Filesize

    163KB

    MD5

    9441737383d21192400eca82fda910ec

    SHA1

    725e0d606a4fc9ba44aa8ffde65bed15e65367e4

    SHA256

    bc3a6e84e41faeb57e7c21aa3b60c2a64777107009727c5b7c0ed8fe658909e5

    SHA512

    7608dd653a66cd364392a78d4711b48d1707768d36996e4d38871c6843b5714e1d7da4b4cc6db969e6000cfa182bcb74216ef6823d1063f036fc5c3413fb8dcf