Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    139s
  • max time network
    160s
  • platform
    windows7_x64
  • resource
    win7-20230831-en
  • resource tags

    arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
  • submitted
    11/10/2023, 11:04

General

  • Target

    fyb_iframe_endcard_tmpl.html

  • Size

    520B

  • MD5

    7844cba73b7b4b439b587dd501e92d82

  • SHA1

    25a452bc6886d0e05d4a73da785021fd4c477a04

  • SHA256

    e042e304cecd19bb6816de0150d3895e2717e66dda91f7e189610687c049dae6

  • SHA512

    f54c2d7c0b265aa7c6feb18b8fb6740e01c9e3aeb19bf420d39832737fa59eed8fb959c8aa8a99c0efc87ca3399a244a918f0b4e90b0ee831a87e8afefdf2711

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\fyb_iframe_endcard_tmpl.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2820
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2820 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2648

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7af5910cfbbf29db8ab6a5c94c176696

    SHA1

    06151138c725abe63947cc7ef4b04fec65eb59c2

    SHA256

    4fc3da7c474c680e50531638e1f7e46cf061917dbfc626b3bc373441d36a33fe

    SHA512

    0b9736f4e8b139e921cd7b63aef939efe13aaf8547a048b5621ce9cbfce34ecf6bac6d67c35b8ad44993b76c3646576456d56e199c6982ed94493c4b3dc5610b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    dcd5d713b972c5fbd507baaefa812975

    SHA1

    bbc199f90507134a076a6f332e70099e9a3555cc

    SHA256

    5feea46b5644874322c30ac5e9da29bc6bdb119803fab1b863bc949ce4f893f7

    SHA512

    3743ef68dc13979e58867dda6a9c4e001384c26d588ec7fa68d19bf1af7da5abc43094497a317de145ac53c9d9ce2480626752b0de6bbc35fac7c356af259b0e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    85634edc8ef49dfb52eaa301bc232ffc

    SHA1

    c29148ec13670cba9b5a246ffd33f7e07721aea9

    SHA256

    110ff194bf5353e37126b4aa7f14d2cf3771c507b6c960a55da17237d0a064a7

    SHA512

    f0bd7ccdf793cc4c42dfdbb13435344336604b600457722c55ed02a1ee6730c99b9e33ab6f352f962dcf9e825e50a23a3ee623906e8dbb5aafe753d99cbaa2b3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    920ece03b418a916d179d8b6cf87b302

    SHA1

    8f80e0a893bd2965a2cd72202dd7ac141dbc8975

    SHA256

    16ab7bbad33855e9fe545f20cc6cacb1705e20b41ff046ef4bd8a593f3f301a2

    SHA512

    60e269c159de998037a4c3b38ecd6a48140fd5e6f916614726b007fa4a47080be4bb782e02bf0a72c04db78affefe65985091268d6bc98884938bcdcf5f6631a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7f15e5fe715a9a886e7c50943b22bc6c

    SHA1

    feb74e9ab5faaf5f33b01b89c83eafcfb5b5bf95

    SHA256

    6d3d32f419d87d807a1dbf2f6ffb3f616197d54b703f3b5e64aa7d17959dfbba

    SHA512

    115f9d7183c61ee6e1d6c30055f50c1c6c7fe58ff65109f1d8763800eb6b6a60baad93da2fb1eb14c2f5512584c17be2a1d3d884ece8574e1280bf88314fde0a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f53786144ccbdaff13acc7ada049f8a8

    SHA1

    ca7b0fe70dd7e29f5395df5b4f6c115df5df385a

    SHA256

    96dca2cdfa19039fbe30201c5c832b0dc7e79caff6f684da473fec1f39059c11

    SHA512

    d8d88583297059280908dc09a3821f947f89b821036003dd53c6649871426e84c38d36dbf620273262e0ab9e3f5a10ef276411c7bfe294bb8240fc5c8cd059bc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c66567044ef50c446d6e44eb51eebc17

    SHA1

    e464f26af507e7f6453f941a022aa96b4ec6a469

    SHA256

    4ed9325fd33f3fa0805d09b7e8b25a1534d0db55b9780226850c4eef5b3787fa

    SHA512

    cdaedc733e8c039427d0044004c133007c33fb81c5e270551a375f038f1cd586dde935548b4f8e862e304d703db2dde1b292804f7bf084bc4e24e83d5bd11049

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8583bd2e7e7f6487505c917615c9693c

    SHA1

    c521e101abbd0e81060c1ea403ffc6cf0e7fffd0

    SHA256

    9b335936c06b81efd6ebeff32746a49bbb81c6c5455c4abc6cf66b8b871f0b33

    SHA512

    3284537d34db066e7c98fb3bb94f0d53d11eb933b0da3186c94c233fe9567c28793ee74161ab0fecf960127ba7d3014cbd74becf99ffc6bbf98e9b39c0e476a0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    22037073da58dce37e54ccf95d2a273c

    SHA1

    de5a1807fd283af100f67712ca812fef41bd0465

    SHA256

    570e463b46f9079e000a9d3dd42f0ce9cca34097ba0e560b350bf5e60a47245c

    SHA512

    cc7a6e90a0121df2d624dae7c1af3f435590d6a98f565271c5c5249b7a33c8833013ef5ea0735ed6a1c935cb582c2389c251c23478105a752e2c339553a76d42

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    31f3d123a02af238333254ba9d21554a

    SHA1

    545eb6338420887e1dcfc5ebc40308723cc51644

    SHA256

    4fce683e6e83e0468d5224f96c6f1c46215015916e4a971581b6e0951375ed54

    SHA512

    1a3a907285613df719403b4b2e0fff004c4d1ab205b9ac517d1e8ca647b84e30523269f77532c5026a34874b683fd53486365a0aea1250907879821cb071d3ea

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    804125932ea92915d7e72e4025046091

    SHA1

    94c9586f64c08ad6cfab531595383dcd7ba6afbd

    SHA256

    29272a99318cdb4d65e787f106371d10cded4534260916775ff80245a53a6e71

    SHA512

    9b263f3b7323b2e2d33cc9c73c80f5ee9b477c73e6cddc4aaefe1e0a932fcb71b4cfa7e4a1fe2d0631c41f1ae54433c52096e5e6ac55cb9bf7980a9a2b0aff7a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    269af2cac3f7ec8e4852b9d6aaee32a6

    SHA1

    03c5e2d26a2e5b570978c0fe6c20de4c7859ab53

    SHA256

    b3afb5176892453158df0bdbd588d4699f7f38a9771e5e5ac82a2c8ded46eb44

    SHA512

    5abbe94decc095dfe18dc10b4fccc27612929d99381e859959719da6a355eb48261fb847ae2fede33971b1414f0d29b2122ceda4fde8074319cf3065f0c8808b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    70dd7555c71bf559fd39c7a4fe7f9d2a

    SHA1

    4e226bbde50347f31fe5e13ab6aed95ddf534896

    SHA256

    0d6ec46c2088e339a4bbd66df138d2e8a4ce41df3ef52f215db65f0d0da2af7f

    SHA512

    9ca33c66d3b96f144c2d30f6b195ee15a42ef9ffde9c8cfd74b6080d0c12fe80db4bbdceab6072c4c9cccc527795522fa1d495ee4fd13e962d47da7c00d8eb1d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    df1fb198ff644fd2778e560fd7dc1191

    SHA1

    f1d89f2521b6548b1e44d20ef00a1cc03bb86782

    SHA256

    7ad6bb660f66feeb506a2a59538a1de6f36d4a94bab4ae5cad5f43652d07af26

    SHA512

    52d843ad2a1efca5509817b0976c9922af2361c3866556f671f2d76f724d2ae01fe4fee0ed0c4227f608cdd45489156e2ea63cc5817806b2894bed4865f3c5a8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3ae114ae6313e93f87f2cfd664f87a07

    SHA1

    26359b198a054e99695ce9040e28ae11bc3e80c4

    SHA256

    d7a1b52c1005b3d25505fe5c790e7cea96bee9926290141e56586b70ba96a091

    SHA512

    e4cff0559090c4e906de72ac3856bd341c1fa1ae45ec9e31fce7beb5ab3600fba78403db08876ad2c4d6b3b5072c0d5239e182499606fb3d7745d61a109d16cc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a6e9ff66573364f2277da1ef850d91c8

    SHA1

    8bc6c7aaec0d89ad3eff1c24f76d62d85d0d571a

    SHA256

    48ab44083021694b7185da193811f991862519f843a53800a65fbd8bfd325757

    SHA512

    5317a35386293a224d14c0abb74ad3cd2fffb94a937d1c0f537c38e276046f30a75118a0309913c8d63b61cf6d03ac0a84727ab0601a98e9e45262a5ea42713a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8e91376af8caf8f1f53bc6e26fcceb00

    SHA1

    3480fceb5bdadd1f51cc578b87520dc29c97cdf0

    SHA256

    423f5c263299dd7500ea1ae640a55c1d7767ff759f7d4f83363e841d91898c91

    SHA512

    8dc091c13f3bec4e37f8d10c9a24f22fdb0bc9a91d930ba33c98798166f2d83ef4a681ef7e921ccfd2209c4bdbdf45f3607359352c79782ebfd3f97d8f8c4fdd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    11264ad0aed16cbd5d3b1cee00bc344b

    SHA1

    d1b258372e3559ceeb27e5eac122ef33f4733121

    SHA256

    ab8f7610b9d1678fc0d472ef48e724631e93de7a26897e7d0de12b02ef4630dc

    SHA512

    7d405bb10362e13f75076fbc5562bf7d93d3bedd8aa3d6df6ef572b318898e03ee54fca08d60df26392dc24224e119cb6f595635cc7a35fedcab857de7fcf1e7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d6f961250f43a21337294dda61a800e2

    SHA1

    1eb43e786b63b684b15bc5b660f04c7bb3d2b475

    SHA256

    128f057cf2d8efe91f2379d7533eea92906b9858713caecb71ec747761bc13e4

    SHA512

    8aef01115bd975138ada794db85886b142ca26ad3ab7787d9b50533082a5d05ee3af38215bccb6b58ba7cb4b0fd89c206daf9bfe041ab9472ba7ad944cf2923a

  • C:\Users\Admin\AppData\Local\Temp\Cab3CA.tmp

    Filesize

    61KB

    MD5

    f3441b8572aae8801c04f3060b550443

    SHA1

    4ef0a35436125d6821831ef36c28ffaf196cda15

    SHA256

    6720349e7d82ee0a8e73920d3c2b7cb2912d9fcf2edb6fd98f2f12820158b0bf

    SHA512

    5ba01ba421b50030e380ae6bbcd2f681f2a91947fe7fedb3c8e6b5f24dce9517abf57b1cf26cc6078d4bb53bde6fcfb2561591337c841f8f2cb121a3d71661b9

  • C:\Users\Admin\AppData\Local\Temp\Tar4E7.tmp

    Filesize

    163KB

    MD5

    9441737383d21192400eca82fda910ec

    SHA1

    725e0d606a4fc9ba44aa8ffde65bed15e65367e4

    SHA256

    bc3a6e84e41faeb57e7c21aa3b60c2a64777107009727c5b7c0ed8fe658909e5

    SHA512

    7608dd653a66cd364392a78d4711b48d1707768d36996e4d38871c6843b5714e1d7da4b4cc6db969e6000cfa182bcb74216ef6823d1063f036fc5c3413fb8dcf