Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    134s
  • max time network
    136s
  • platform
    windows7_x64
  • resource
    win7-20231020-en
  • resource tags

    arch:x64arch:x86image:win7-20231020-enlocale:en-usos:windows7-x64system
  • submitted
    01/11/2023, 14:30

General

  • Target

    licenses.html

  • Size

    1.7MB

  • MD5

    19c8a87991033fb33fc299a48482a20c

  • SHA1

    57dcbbb761718e21ff6f462dc12753f50bfbf30f

  • SHA256

    ff0afcb2a25f48f9cd12758cb0d4c0fae9c24420cc5448b51ff5f0bd81f25380

  • SHA512

    f0288466ff69da8fd589348085a2124af62774e900a142a1a5aa013d8ecb46baf31329e1b6c77ce07786cd6c53954aa9fef3a4c56ddf195f83b2ef933cda7891

  • SSDEEP

    12288:V03V34k3P3D3A353/3q3w2w2FDS303w3e3w3a343H3S32323+3n393C38303J3l/:Mxp

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\licenses.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2516
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2516 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2716

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    64761b06a2717c7d4c1f21ae033ce445

    SHA1

    54674c4784271e4bc20fb5e047a123eed6998de5

    SHA256

    811055ca7fd59e242716291a38bf39a14916b0f9eb901f19d6fd0825f37f54c0

    SHA512

    a0786af7193059b271f8a102661afa5b573479d5473a553cdc5deb228f14cb99250fa627909f47a85ab99b1fd4ccf7f07246da241bb0ddcd98e97233fbb6718e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5e1a1e37af369bb5b35b631c4fd162c9

    SHA1

    405c5dc7203a7c07719078c70ef364f50104e0e3

    SHA256

    5232a96d390e85748c3f4fbad6a8ac962fbeda6d2e8c24fa9ce16b08726a5742

    SHA512

    191b488edcf6953bbd22b5accfda72b7c199383cbb4937983f564de4235f8c4c363473487208a7748a441faa2d3ef0818c1b7a53a789091ac65999d30143b5bb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f55b90ae367b22aab4af4a7b683a9781

    SHA1

    97a4b0d332293fd20ea06ee34028b8277b7885db

    SHA256

    b39bc2882cdc653c548c27540555d2d0c023cf0f8c187033b62ccfbc3ed51107

    SHA512

    3a2fb661646964997c93129ccf3f7ed59064f51dd1c37c71328a6eaeff6ac76134633732e83cd51a72ced89db53ebfce9c03325c26b12720350559ba19dc3ab1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    44f12c026c1510f9fd8176315635c7fb

    SHA1

    af5b7b11004e48b01949cea0749479ad8e38eae2

    SHA256

    62615272e504143f4864ada0b0b80e48911593f0e59a2b023ee9b03c530fd3ee

    SHA512

    9a00f44dc4f946aa33392f80269f01b3d8f8eb7483f8616cd4a4ba86cdecf7db6dcb7afd12b2bae00cbe00ae01ab17706f31a57b666984cde8073c6e50d6f68e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c02d7165075e037a207b6511efc8acc0

    SHA1

    948247a5549d93d0c8a15ebd318673002323053e

    SHA256

    134d687b3531ca1db5b47d535b8ab55cc37639deecd8148d4e0aae7457e3e2e8

    SHA512

    e358f59134ddd0933519de497f2c8d6a3ba42a83ce328b5ddf3ec6e901bf355440e2696fa803cb44fbd2cbf5a668417aa00ded74808344c170e7fda109925318

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7867925fe29bfbf546be9cfa43adb9d3

    SHA1

    e7b9f071da8a1b8bd6340b475e600e35f4961574

    SHA256

    b0788c1ceb0f6c59a9a589a1849f0669b63dab3c86c16ee9359a27012f34dc2a

    SHA512

    6846fa8cf9ddff768389a0882869a722a411e7aaaa5ac1f05e41e35ce43fcc80f9ad3adfa82b7f36a099e3cb17c92e1f677880038f6a12839f43b782ecee9007

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    827428a28a60c4c545a99447ab267e15

    SHA1

    6dc3383519e480ccb873d93eadff48c57ae2e36c

    SHA256

    1b9042228aaa9d1cd0940b53a5520f38b8de4f2597ca3c49c3497fce8c6c0d04

    SHA512

    04d33c08da0a681d390507d77897d856aa8ab1bf236144a6f45f4de3cf3772d6dacc26ba2788e6f7ce02f1c43019bb695afb5c63bf4c3399409f4d5904917003

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b6ea408e2c0b63d21bf4259bb34f650f

    SHA1

    32d931fe565d4d9c621ab42aa06a082626cf2b75

    SHA256

    ed7c28152085ff0b13b85240b0a9f9d2d622c324561e8ddae9df0a6a7939dea4

    SHA512

    b9df9ed932a7eddd9e972c70de2222eb4dc2faf3d92a21b1a209fb10dbd8f7b4d05a296a332373fe6c98203b85cb956bbf7440c4f52b6a29f24f3d51af09d903

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2663d4af6976fb4b2b320c58d1819c4b

    SHA1

    2e8e149dea9bc4b6442ed485c5f780f26bd1f0d3

    SHA256

    d56d542a21e2c899690e6fd4ad4be3ac797d9a7688a4c06ae94a276b6ffbc960

    SHA512

    51961e12abbe99bf8de20c89bb65f6421dc763d6668d3c3257724b76890487402e7e08a98e0c334e15a453755be2a3868821db874277ee3f1062e0711664bda1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fc8239385b3448c8e24ad81ed1f0bd2c

    SHA1

    9ed089ec2e547b9c0c6b4c167caa01f4cf17d429

    SHA256

    1369f3df101fad44c8f9527e2baa71a4b494230c9dbe2ab565fc956146770706

    SHA512

    dbed12a33cbb9b5def99c89d6377e94ca578d2364d973dd8c79c071b9701f85675e69784377f7907970d315ef9ccb8c4690fd54ed97c9faf563ed891315e14ef

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f161283d416ad12fafbdfa18653f4a71

    SHA1

    03ddc4ad9ff08927651cc25f2d5137ad7e0be37e

    SHA256

    6714a3ab89d705ffde23e73ad49c980dcef1924b0fd54bc1ce25eac0d7932f84

    SHA512

    6ffaccbec8c9dd9bf0a6ed7ffb5038bf40780cf2bd1456be1d0f364f7c771bc2e6648dc3da9d08282788bc5616e57342758b58e1b7c4aac07cec54f5116b016f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    02d599e44b11d72a817d5430828693bc

    SHA1

    825e1be17cdf3efa8b78adcfb010e4c1fcc77388

    SHA256

    6ddab1c323479dd461989a083a758cec62dc3a4c753e51af4413c7e13b6aa3ac

    SHA512

    0064ec378ce6931e75572ad540bac5bc148da1be3add6a7a59b098e4888f2876c450ce7f2fb4ccd716f390ba3a65e84e754116b58744b76544b0c755f3e64293

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    010d47866c549d671b30806331d6ab2d

    SHA1

    dbdc5b576ca1663a718096568aef7d4281c72502

    SHA256

    233bac8af6719ace0d615d0bf3bbc3f8312ef284b807c11a13476332cdb86cb4

    SHA512

    0da38b24a6590df5c06cf65065b5673547df8287659799381323fc0c0d3a24d74c592ea6d9c72f86870267221af493b9b032c354b196306efc7a59529d3738cd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e65a43074cd59035c338618bda9218f5

    SHA1

    1b254b595c791bca4a353600a8978b37028e3686

    SHA256

    5b02e9d8649eb671c8c8216e70319215fef2df291df5a1b21dd0b9b98406e0cc

    SHA512

    3b4c2e52b7acdd50e22cc99b3088a3c861b04b0480166b65ca2ef7433556e5ea0b5add0873322dcc6c29b83cd50b6c049d0add71cb46bfbce649c4b868aa4b00

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fd763b7e678c30af635ddcf12f844587

    SHA1

    3acb6e5fd3f27c33778b8bdb5147a45c38b5c6cf

    SHA256

    d79b03939bfcccee1227ab101dcf2d8b92e8fadbe8c77bfd973024eae5b6a2f3

    SHA512

    bcb33e38b4360f3b016bfd94b174f1640bd7ba3ce157956f44d25227f26d572c2e67ada38490d61976fe6f09919ffdbb267d1c964bfc396c28478975307896c5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fe9c1b3f3062a4b65f561f997e98acd2

    SHA1

    6fff00111ed80f13b34f8f564b0858b0429fbc29

    SHA256

    9f2064d39676fedd3cc3dae7cf6ca09292a1e0994aae2de774240f5d74e0b824

    SHA512

    f062314899f6b41866ae80602c1abab117d1d8829026505d16d8285f890e9c504986132827d16626025708183316fffc8017dc88da41c2509a4717b014f4c173

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fa384b864df623a71f55f12527637a01

    SHA1

    3b0350aaadb96ca9d5631f75ff264e0d365e8db2

    SHA256

    73231d230cc0b1a7c11654790888ba58435185c09d592727953171ad59d312af

    SHA512

    5367ebe45941008990069f97823e76f3137cb37333d8107c04e440d404807883c3cb817f047a51ac4dce6cf116af06f520fa96e32f7d95b797fc8b70ff91b751

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    354a4a510a2fb19423744127beac3f0e

    SHA1

    5a7c21658e5098df6afb4a813534af8828c45287

    SHA256

    0f615d1757826d1afbad70b986541910a0aaaa704dbb51217d92b88d9d04b725

    SHA512

    17554d64392dcc89b9d176ca5bcf2aa6b0a527c3e81fcebaca250057993111c4e133e28e43deb3a7e4d8483e05c52ae5fece8d761dbedbe3092a2a0e8a0f7311

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e6182926c6e348ca63d8b58538829728

    SHA1

    8f2e2f0d846f272683cdcf2f75995237b4f4ca19

    SHA256

    b1f0745c7c9b2e98cd8a0b8599332b06d84843143a508b1abbb8574ef8704373

    SHA512

    19dca49c05a99b14cfda62219a1551abd3f0310a6829870b91abca90bec8b09e73d24406b2483d6b9aaec7c84a0bebf2fc423cd8c288a01c4ba6f65eba4aff33

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6639ebd4f3436357d6f8ffeb48f306bd

    SHA1

    dd0376f14dee09c77043ec24d2fce2e88a29b9c7

    SHA256

    4b597afa1990c000093f1d6201ae3c42819ae5156f7b2ebaf9441bed33b9fb7c

    SHA512

    bc57b144054f80938bc8498f2f53e141f70779428b4cafc3e48fe023b2b49a7d58634269c49f32a4c5fb920e9cc4f556f6e0c9f088e367c9b38901e83a0526a7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8660ed2812a3eb380a2f126222cb5e0d

    SHA1

    50b4b9b05aac590cee5eb9d97c522eea422e565d

    SHA256

    2997b78158c91ecf2a4a4c9b8cfc05c83c9ed9113844dbdb38904f6378e2f8fe

    SHA512

    ffe38d17fe86e84200c834aa91fa68659c88d7c0cca2bff979b4cf919d38842cfed9ce2743fcb5ff3568d1ab091f5552ec5794e59e932c772199bfe7e8989c5a

  • C:\Users\Admin\AppData\Local\Temp\Cab8D34.tmp

    Filesize

    61KB

    MD5

    f3441b8572aae8801c04f3060b550443

    SHA1

    4ef0a35436125d6821831ef36c28ffaf196cda15

    SHA256

    6720349e7d82ee0a8e73920d3c2b7cb2912d9fcf2edb6fd98f2f12820158b0bf

    SHA512

    5ba01ba421b50030e380ae6bbcd2f681f2a91947fe7fedb3c8e6b5f24dce9517abf57b1cf26cc6078d4bb53bde6fcfb2561591337c841f8f2cb121a3d71661b9

  • C:\Users\Admin\AppData\Local\Temp\Tar8DD4.tmp

    Filesize

    163KB

    MD5

    9441737383d21192400eca82fda910ec

    SHA1

    725e0d606a4fc9ba44aa8ffde65bed15e65367e4

    SHA256

    bc3a6e84e41faeb57e7c21aa3b60c2a64777107009727c5b7c0ed8fe658909e5

    SHA512

    7608dd653a66cd364392a78d4711b48d1707768d36996e4d38871c6843b5714e1d7da4b4cc6db969e6000cfa182bcb74216ef6823d1063f036fc5c3413fb8dcf