Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    185s
  • max time network
    205s
  • platform
    windows7_x64
  • resource
    win7-20230831-en
  • resource tags

    arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
  • submitted
    06/10/2023, 13:56

General

  • Target

    licenses.html

  • Size

    1.7MB

  • MD5

    19c8a87991033fb33fc299a48482a20c

  • SHA1

    57dcbbb761718e21ff6f462dc12753f50bfbf30f

  • SHA256

    ff0afcb2a25f48f9cd12758cb0d4c0fae9c24420cc5448b51ff5f0bd81f25380

  • SHA512

    f0288466ff69da8fd589348085a2124af62774e900a142a1a5aa013d8ecb46baf31329e1b6c77ce07786cd6c53954aa9fef3a4c56ddf195f83b2ef933cda7891

  • SSDEEP

    12288:V03V34k3P3D3A353/3q3w2w2FDS303w3e3w3a343H3S32323+3n393C38303J3l/:Mxp

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\licenses.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2648
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2648 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2036

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d1ac55ef04e0ba4178c10ee9eff131e4

    SHA1

    1f2cf1eeea2badd6e681158f1fedcba7de3af4ed

    SHA256

    b19aba5ba73318d969ee952596baaa36cb4e1c5b665db78a4a5cc90b5269bd80

    SHA512

    e0f3ebf5fde64da6f920ec148bd1fda13bfce2f60ed7b8df7a0a2c6c6a3660099ed80c91fc4cc020944c025c4b165b867f3e36a605022805b60454e234accdfa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    07de19d053e152cd12a272abf45697bc

    SHA1

    bcdc9985ce8cb79325287d089814b0d069ce3ace

    SHA256

    ee3c16c69624aacf429f0af2d651ff7e473c95a635f848667e03607481b935f9

    SHA512

    5ebc3ad173ca2ba509f1c05ecfd04ba60a22b424983ddc01f34508faa073c30cae5c7b3f68c104c6be11678929a5687c154f111022607626806d792dcf41d1d9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6bf83bae063bb92e669beee3285c2a49

    SHA1

    3d9a66ab99c28885e0f6d77aac30d7e2c53714cf

    SHA256

    02edf3e3098b508c0681f212f14a51347a8259da4c70fa5b7b53945283130922

    SHA512

    99fbb03ca4451ea232b49cd0248264099b29952a69da194d900feb7477b3f2c28997c974e663fc245b0e22b48d8f64418c416644adddc66c899d6d4e42edb213

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    29fe2ca101f3e0539f039bec8df15e03

    SHA1

    bf8658707edc91558d359c2c22f3b28c5495cb38

    SHA256

    99e1fba5092e51e51be28f6787f6ee2536b6524b66fad7cbae943e5979e83a84

    SHA512

    a32f3bb17cb2eda8d318848ba97b02a16d6827b8ead81f1e3301f392b10a31766f5eafff51b349361067d8e4b4aec58b95bb2f6525686b73d5bb388d2359a67b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b3d3d905a020d4b1a4dc83a91cd8d639

    SHA1

    17ba1d24cd586046aab997ca265a2ca726e43803

    SHA256

    a36fa154baf08c9d81b9af412cb64fc4eb38b6444378f400f4d6035d06eb2eed

    SHA512

    25c70e0b575b8aa0164f510858b4977a664dcfa0016ce9f6abfde95a5db1da32412aae61217969ee9a8b0d0ff780ad11fe59327b745c2b40fac2f2736ae39a85

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    29d2178d22399073d34e3ab24b06c3a3

    SHA1

    5946a6fa7acd69f03fcfc70caf98a5686d411a02

    SHA256

    15651842b0f901cfac3f32aab99043e595a8e7274a79e6a3a47b4d6ff08baa26

    SHA512

    691046759249505c351616795825d4e819b7b9f91774cdea270a57a6960449f0c10bf4d85d1157da6160494c4a9e27c57331f769613a0c4a6c1f58462465731a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    135b9cd94915f838b944be928f29b018

    SHA1

    822bd7ee8b07bc83ddc55d03549bd697f6f8a248

    SHA256

    b1eeac64d9b0ae77253390221058c955058b02176e706e05c6a080a137fc0db2

    SHA512

    b9e80c3caf86f4963fb2b3183263749d4190c8b3839c3f7a5267dafdc199d5a109cbe0830473f43b6c39844d75fb406844a6b0495b4064c4f76da5b4a28b3223

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    81c8e29a1206a539716151cc35c9b088

    SHA1

    0154042edb7f70e2d52108fa07ce7da6ab423d3c

    SHA256

    c658b4e6a058bbea19c2da50efe7f44391b5099680b1f8a3c5170d29a5b9eb23

    SHA512

    66c2e020afa95b729f4abc6b42309b047f69800077a7b728ccbdc0dacb50585f4293ff2e82fae19c99742eca28e386bf40ab6d47a0ce30b4b43dd8a4000f907b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d0e2c6e5f2b01a86fae9bbbc0273014b

    SHA1

    c393e0c5ce00eae0366733d2a8cc637920aa1e32

    SHA256

    0236496c1ffc2e8daf9a39af8e832d13c7a504a9f13fe3ef2826accee4511105

    SHA512

    1f06e2f6e1b50de7a603c4f0c35ef15c84d4e22a02f160e3ff704b8c859b5556a1bb44c1ea687815d178b81f7a690b63125b785ddb7e34a28921d73a5112401e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    72544c2f9332fb7ad99654f446e06435

    SHA1

    0380c04f0337dfcdd2b3a08ec094c7188cb61159

    SHA256

    6899b8753e37a70f6f609553ded55332f7c0335188d3c62e137b71a99f8c62b9

    SHA512

    58d71425d9e58ee1bf2bbebc79862e25bb6405e4e21d1acfbe138be24a6e96c3f960b2c13037b68da36d3abfcc9f0baafc3f0beae3104009c610658db5ad0223

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4a0c3d3db6ef896704218fa25a9ccaf7

    SHA1

    b017041d0ef095032d2da30a1353c596d8ce648f

    SHA256

    54398bdb7c22fe687550067f43de5b1a91261470e2d63d2da7e4da105b0950ad

    SHA512

    cd766e6a3420993787e7fced8debb3a147892b81a3c34b7ccf93112d1d03c80d96e84f47c48f3415fe05a4567e34faf15625e554bb191db9f5f36396aefd5fca

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fc8eccf5dc09bf97ddbf94e467b36901

    SHA1

    35a6f31e9c40725be0dcbe828a168493c30fc535

    SHA256

    b727d69d7be73626525e11ac8dd0e59e096a6dd89b91a23b76472a6976a8043d

    SHA512

    1f62951f2d77980a85b8e1bdd05b59a2190ad2724f9d1cb699f789adbb2edd3ed463633f653a0e97e3dcc693c4bb1b45f19d4cb7e5011be0853b6d54e1e1ccca

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fd35edb996b2e9413045431e3b3aacd4

    SHA1

    913c5671919712420f51358bc84da046916f8cb4

    SHA256

    c8a7ef006c14b4826c2dfe2ff9ded23fa3addaa6314d49b0dc17819219e4d496

    SHA512

    ad613a873c36258423c645a498acd7b5e4546e30a04e89601faab3b0cafced169d6eebcd2109a2a6f4eb4ccdd55221470f0b04fb90cd39af9d205064baea1a27

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    de867faa23383b2f9449544b9254538d

    SHA1

    5c0cdb2cbd953574bab6b3fe63f5aeb607b3577d

    SHA256

    a545ae8470e1a7538fec070bb49675bb0802872db46fc678ef1ea286366d5eda

    SHA512

    d9ceb844b5181cdaccf0f952be38a44ada26e3d9dd6ce959744000f83f553b7e1e03b89b716a07202acf6f7d0a385aa3d2497d653ddd2525e668e316d6679fd5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b93e8666069a5ca5f583c6986ddfdcd5

    SHA1

    b19afd5bf020eb859a3941ad09d6327265ee571d

    SHA256

    4a6e13d6e56f7cc7104a865f8f6f4a90afc1d1c01222f07ac7e07ab0c4b8d479

    SHA512

    bee3d013d7b618fbfe78fbb360f42717fcc131c31046133c2327f30ce96629385a11c8bd2ec9a0a1f0b834729d4b20d349444cada9f47099e0ffab958812b2e0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c1b0ee9e0d8e95d0b222c5cd2b3cd92d

    SHA1

    eb0798b0996a1a65f4116b9cc3ab39ebe30e9717

    SHA256

    820d4a4d620d5c20f9e019119e367d9c6ddb9d81c354edc20443dd9f01a8f108

    SHA512

    e2ea42de8229e3322842af7a33978c0706d494be7178f1aa47da61fa8ae8470f5e5d0a0ef77c6c4862a104ceb16489de9a5fa460b2b6ab9f39d9498db3a27770

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    64e0caa4a4a420fdf20445ca085e6bf4

    SHA1

    fde9d663e13a44fa4be7b515662977102f692e5b

    SHA256

    71eebb484c175542c154f9a684e7b4fde98713f5b3d02a418fa3f014f1b81f52

    SHA512

    7eb53893aee1fab475c0b5417932241ae4b6eb8856bd4afe10149b9761479ef0900778b17c57b4c4cb3acdd6070ce013531e53eb12efb56109d6b87fbee28ea5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ce4b5bd695a63a65bdf7e6841aabf02a

    SHA1

    efd5d3b207f6101c1114997c0be5e71aa0fc7614

    SHA256

    756ed5f7f423c25dae4c50eaa6afcf6f129f7676f569645b432e1f1e4549e0f1

    SHA512

    5c1cf3714f37d9fcbcb2531214d7b4918dc3eaa11a108fb6a694192b7d74a9a81e5d36b19725709d8bcd0c6780de109657b90e024610ff5623fe8cba0ff49d65

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c596ea7450ae74881d9d62a4fb3a0b97

    SHA1

    6db6f33a373fd39b0077becd3a5b7a73fcd141e6

    SHA256

    adf5990a993580c347e75ae420eb8913f49cce357da3e3a48dfdf09ff87f3860

    SHA512

    f1fdef08cc7745dff30ac81badd0dc9ea8629ace2ea941906a60c58c2bcf273f0f5cf4eaf1c1a564f9122456ee2e69759f2a6e0ad4ce65fe6a173c64ba13f3af

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a13ab0146f3f700077d71700745c2a4d

    SHA1

    f55ffc6c6098df3ba547e3acb37cb9b3f2e3425c

    SHA256

    9df29211a7d2e893ebd8fcb9aed65ddfde2cd457eebdd8768ad0fa0a969615a1

    SHA512

    301eb7bfb083c49f4fdd045e7d06f71d10a9508f3856e594a5a346642898b6a64f8841ad2e97b38899cfb3de6156ca0dc3af52c309944e1a726ae403ee1dd423

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e026ffe8c9694aaab5595f55a3945794

    SHA1

    775e3cc5ac653096bf4083ef9d2d569661b36eea

    SHA256

    7d870ca76d1c94ebb30233a4c601959c266b23f2f2ca78b79572d8763ef1425e

    SHA512

    a763372a7e24da21b7002272584cd95904020647707aacba37a24057501308f356d0e5ad2a5a04d42412027babdc93d5dbfc09874f31854b17284a65abb57255

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3609a298b1e2dec17b666e49c1ef06cc

    SHA1

    35464505f7a061f2f661689906354845e10a979c

    SHA256

    c69a69c7eac329240a28ec4974ea4db8d7c615dd64ec96b2a47743245614499a

    SHA512

    789b06b338157fad33176407309f046a13a0112c9a0fd77e525981230551c46c9233ad9cd32f5896e65c9f82686cb3dfc596d4a443575a615481e7936ae3130f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f31307bbd1cff99399d7927b2316047d

    SHA1

    4ccdeac288c724656990413698db78500d3a1be5

    SHA256

    b9ad4dbf15165be5c46d4df69efff491037a073397ba5d88cced37ff446cb79b

    SHA512

    9d95b3b2d32686a4db07761b2c0844edc6ba029300ffb31d9e26b5dd8377a6a1b1bc11f2672345cac3056d3887b2c6a3801727a2a5470d13f0c26eb9b73f5842

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6a2efd0325ceaf01d7e2974a6d0cb2d9

    SHA1

    0f65af61d9f8543d1a5e32abbfffc30c248444a5

    SHA256

    3f1da6f20222de26e417bc51e9b9ada00d7e0d025d3416602bbb060718ca57ff

    SHA512

    5a62ac0144fdc1582d1fcacff0918dcb6bf687801cd9697ef774c5de43a9e0f8b2b73e8e1cd09b009a7d1e08f724d117dc532e057a61ce5fbd881c98ed522355

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c0c6fb08d2c0f70cb007b1a17db9d5ea

    SHA1

    39a7a317a5d39a03018d39f545523b4057cd8a37

    SHA256

    0554a60e99f5f3cf3b042e5a991704e3aefadc21bd3e9f1f79d7aa2db433d463

    SHA512

    c7e80df4deaa422738fede0cfc20c35466f18d76a5197aef4f6b045b3d525f3775459b4fb287fcaa8e080687dd5d4e483f7cdd5ea0fcc53b33546be1015b4aa6

  • C:\Users\Admin\AppData\Local\Temp\Cab6569.tmp

    Filesize

    61KB

    MD5

    f3441b8572aae8801c04f3060b550443

    SHA1

    4ef0a35436125d6821831ef36c28ffaf196cda15

    SHA256

    6720349e7d82ee0a8e73920d3c2b7cb2912d9fcf2edb6fd98f2f12820158b0bf

    SHA512

    5ba01ba421b50030e380ae6bbcd2f681f2a91947fe7fedb3c8e6b5f24dce9517abf57b1cf26cc6078d4bb53bde6fcfb2561591337c841f8f2cb121a3d71661b9

  • C:\Users\Admin\AppData\Local\Temp\Tar6667.tmp

    Filesize

    163KB

    MD5

    9441737383d21192400eca82fda910ec

    SHA1

    725e0d606a4fc9ba44aa8ffde65bed15e65367e4

    SHA256

    bc3a6e84e41faeb57e7c21aa3b60c2a64777107009727c5b7c0ed8fe658909e5

    SHA512

    7608dd653a66cd364392a78d4711b48d1707768d36996e4d38871c6843b5714e1d7da4b4cc6db969e6000cfa182bcb74216ef6823d1063f036fc5c3413fb8dcf