Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    174s
  • max time network
    214s
  • platform
    windows7_x64
  • resource
    win7-20230831-en
  • resource tags

    arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
  • submitted
    11/10/2023, 11:04

General

  • Target

    fyb_static_endcard_tmpl.html

  • Size

    3KB

  • MD5

    d18fb1787ce0e84567496b8564e452aa

  • SHA1

    007033d0824685600611af6992060577e127dd23

  • SHA256

    2ae5e0576febb1a1cd63b10bf71644f99fcfd0fe7fb1f2d19525594165294e51

  • SHA512

    ba5225a80941e3ee4ff18401b910968a6cab47634914ecb68213599b96fd4b39c8722e82bf2883faf355d9416a6f2acaa36151a5d8969079cfcd4c6795f6003b

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\fyb_static_endcard_tmpl.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2668
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2668 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2684

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e7272841ea16788c88b05764473e222c

    SHA1

    bd6c5cdbae5d8b392372fdfbfdea41bd8ca07610

    SHA256

    26c3d5aad3731722015b5d8100d27359ab93f030c841ebee8bdd77158c675233

    SHA512

    a5fa4a8ac48c4ce9fd762874185973e83ecdf1dc412a9b20a32c6f5b19f6c5d93a84b647b25b4175acf935cdf14c03758fbc5e05f63beaf0de874fc6bbd53d13

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    effe9e90b28cce21b7319441382b5142

    SHA1

    5154c5341dd7886bd8971c5ff7edcf5c92f8d78d

    SHA256

    e8c54dfdcf3a0898dd7b4b74cc888b55747f23026985bdf9efac0b2a25299f2f

    SHA512

    d8688bd30c87cf6eee92b5034c929acf7c5af7a0f72048c11c1c30859ce54a9ea6cbdf53741820601ea1cd5a411331fc05e99b488234bd388c624264607d59dd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    10c7ba17b6a6e4b5915b2a664e49b6dc

    SHA1

    9538ae6753f06eb01ce1ed213bd8147592d40399

    SHA256

    9d792f26270f1ddb20f39076cb4d9aab7ce397f74706128cc9cd4d69bdf53080

    SHA512

    b77e485c712586a4b9c6a7c7b2ad221c66e06dd8dd3a72a27fc32a59892e0a7482e4b7117e0f7788df484f4228a5a78c19fa3d7f4212d081421c91c631b28d81

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    16fff17eb736d8210a0b6dfbe8b3bc65

    SHA1

    74fc8c46dcc312f1488dad32a441496476d1a74c

    SHA256

    0cff061d979070bf4b8bfc13bebfc42e9789be81b9d88bb69da38edb734d5870

    SHA512

    4fe549c7d79524e9d9d7e9d04fe7761fbef7871b01520eb0d25373b8909653a25a0455a4060d261bf28ed4164de2b0b6f5da02114f3793e89946c43f511d1b86

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9749e0b12b27af9f03787b1a4fb06514

    SHA1

    101fc6852d982b1e302ceb2b306ed4f2b16d19cc

    SHA256

    897039ac4928cb710add08a07ddf3712c1f43ab6495dd3f060ffff7bbdc2571b

    SHA512

    e4f2690197ba866b9b09899b064ed7dd0e2ae5c3ec505e4a201e3f4e26d01821594b0696ad1bd5b3ab31fdb5f6c32708fb16804c6cfa7a37aa30b21d52da5a8e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    639e7ab6a6ebecd34da5b089e485069e

    SHA1

    cb416562de21dd92c0960c273dfb0e17dd3a90ae

    SHA256

    05225befbf5afd4e7b57b7df0b4c2ea56b918cd6cf4cf4efbd13c357320a9a4f

    SHA512

    fa8e1231f15ff41fcc0b8e37b11e43f4446d6df9d283864a31d874768b1e446a4dafe7138cd5c8d05a8649f78b104fdb30a24763e13d95e27f57a42b39682c7e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    377aa4787285c1ce4b21f6d42fb1b7be

    SHA1

    e8312fd99fd0454c01845cf501f60ff626b35a48

    SHA256

    ff6cd114e03f663a30b539363f227cc12c3648703275144bf32f9fb1febbe8c1

    SHA512

    834ed6197da77bed994487cd0fcc8a41aa234b1c5a9acd407e2b467d8b0bf81b05465ca7273a15af5ead25d28611c1c872b60104b245c707b4b304a3c30e53eb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2d1e676ef8d44a4ef8c6b092c92f471e

    SHA1

    4d9cfa32e2fd2a717ee25768be68c0c4fac9150c

    SHA256

    991dd5cc1e98a41c7575d84faa42a5403ef7f8c2f8f2c9733267e739fcebde24

    SHA512

    3e05669e657ac27a7aef9afd577a4feaea2629599fd084bbd2b3f4f8bc6ae9386723bba969ffa3f7dc59edef2d950b920f01e4e75e5297cf3aa9f9495b7cf03d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    786fd1baefe0cee3e56f35f409abbcd1

    SHA1

    8b48a175c075b1322446b6e86336b4f939b6bf7d

    SHA256

    b906a8319578fe5028d27caf5f9ec86168ce25a8d629904d20ef753ef4ff338a

    SHA512

    e3d8a51a8e6f53d41b9dc42de20543c3e63f046d9c299ea860156298a5ab848e2303a498644ec771809697e07f75d255a68d9cb3da077809ae37752c89b08dd5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    419f13c84688872097d17f1a29f777b5

    SHA1

    b3404b8fee946758398b5d7aaa4fd3215b800188

    SHA256

    9fecc62932f624a4d3ee9148819797c9875854a3c535b69f2c3b958eea10d234

    SHA512

    db6608029d2e8a94d7064fe7342e9a05f7154bce003021ff1e823822c6fa585ee08287333fc195cb7d2573739cd7ec6cbe74467820c07c02e0d9722e3c8d5f34

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f4e32c372f9434faf342fab085cafda5

    SHA1

    f5be95fc3826a170a16afef251549a86b2e430af

    SHA256

    12fdf72f8fb1e1be6f80975d20dee3e5215cdbe547e1e49720e7d3012c9afa95

    SHA512

    4e27816650c8cb8052d15fcc4d673cb9fea7fd469d57cde7a60d9137bb1a917fc4032e084f1373c86f8cead6e8f0d1d12a231914574ed322c64dc0e308ce7166

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cebba8a40699439186717109e733092f

    SHA1

    1ed08e9121d59e8a9730082cdd570f2e9467b7f0

    SHA256

    e62be207da95dc3b4e8318aa038d5b8601478290d0f5e6bef092c1f48e18ec91

    SHA512

    2f13af6425a4fb67375aebf89595abe388c998a740aa3fa1dafe8090a1d67fb7b7ba1deacbfb70bc9f723df0bfe5970d17dda6f84b74bfbe70fbc5adb5ebc0c3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    17ddb12688aadba63b7448367247fa40

    SHA1

    968aaf6325dc72e024914ec0c1dcfe7480141d1c

    SHA256

    ae1f14c7a4338a38fdd7a6ffcbb82b9e40b7795a41f3acba829c3dc54bf276e1

    SHA512

    8092ca2764d24991ee8edc13196a032dbd80b2ebe9eb2f9325f7cbf3ea0c55ebf09d95b2d07a5ccb023b8a88d11c29267f606e191679216ab22355c5466b2475

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e339bcface7d01a9a90668bb374b076b

    SHA1

    16100bd6ca8482ab62158a0c98e0724ec4d03afc

    SHA256

    318a76aa167b572819c0bd88d53dea6343dc0e8e86cad5fba27b40b957214ba9

    SHA512

    564f31f10e717735c3290de7a427ea2140f774891a119000d701107262decb5254c1b231264bb4f42029f95ed13263274bd163b11158993822f84c500d603097

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    802744c161f7bdbd026756c86a0effd9

    SHA1

    396b94675f9f3c3caed50bc7acc703870e8fe013

    SHA256

    a1457c6d97f6fd013754b69dce32b9b8f967bba9b00c1fe28392935ace84ddba

    SHA512

    362fed35c6423bca3c28060329b78ef610297751de73a44424dad5ef3907bf86117b92a114f6b1ddd9782ff79168db4595fdcaa37181bb78528cde7c5ba884af

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    83ba968b2a97b4bcc165bec8ccc38253

    SHA1

    ee42a359c1026048365692ad278f1a3474842016

    SHA256

    2ca02a82a80f7d06543e36b569023d2d883d6f4f0d32f0b53d46205c6644ecad

    SHA512

    99d515b848c199be0767f6b2164e1de30086d1d0dc9365e6a146d018382cd7cd6fabd24671974933179c7f55122c0c65fbca03d812a1adbfb2dd01ea2253224b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2feb0e31c1fc311e3606ffc4872d5430

    SHA1

    4652eb5dbd8e06ada184dc74ef2c79c474c44530

    SHA256

    6e28405657c94b67f1eb3d706d1b75d3bc455f50893f6c5a69cb83f71a0b2d46

    SHA512

    73841771b55146f79282e75ca87e442a2968462e7e40abb37b476ab1dcaa1cc5667d891af7d21aa5818bc3c5603134489ed954e32c4bda33aac557562078f8c7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    34e8c95f87f35abe4cafea503d03bfe9

    SHA1

    1acc958fb14ff34ec0fe460ce40b1837170543bb

    SHA256

    c60956f9a3eb9656a655f0955ade88965290dc9240fff1f0a69012a73934abdf

    SHA512

    e14efde87c18da77de3670dea5a2eec7ab14cd6328544d11037572a3d3090dfeb9ac841e06ef1588dfa64688c599ef93a118c9bf7b4ceb54867fc96b389a0e94

  • C:\Users\Admin\AppData\Local\Temp\CabA7E.tmp

    Filesize

    61KB

    MD5

    f3441b8572aae8801c04f3060b550443

    SHA1

    4ef0a35436125d6821831ef36c28ffaf196cda15

    SHA256

    6720349e7d82ee0a8e73920d3c2b7cb2912d9fcf2edb6fd98f2f12820158b0bf

    SHA512

    5ba01ba421b50030e380ae6bbcd2f681f2a91947fe7fedb3c8e6b5f24dce9517abf57b1cf26cc6078d4bb53bde6fcfb2561591337c841f8f2cb121a3d71661b9

  • C:\Users\Admin\AppData\Local\Temp\Tar2CC1.tmp

    Filesize

    163KB

    MD5

    9441737383d21192400eca82fda910ec

    SHA1

    725e0d606a4fc9ba44aa8ffde65bed15e65367e4

    SHA256

    bc3a6e84e41faeb57e7c21aa3b60c2a64777107009727c5b7c0ed8fe658909e5

    SHA512

    7608dd653a66cd364392a78d4711b48d1707768d36996e4d38871c6843b5714e1d7da4b4cc6db969e6000cfa182bcb74216ef6823d1063f036fc5c3413fb8dcf