Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    151s
  • max time network
    184s
  • platform
    windows7_x64
  • resource
    win7-20231020-en
  • resource tags

    arch:x64arch:x86image:win7-20231020-enlocale:en-usos:windows7-x64system
  • submitted
    07/11/2023, 13:46

General

  • Target

    DPS_DIAGNOSTIC_TOOL_V2.0.EXE.1.exe

  • Size

    2.4MB

  • MD5

    953eba21fb394b5a16daf9e6a5a25926

  • SHA1

    61c8e59fcea52f3ad914ac542ca4f279a9864d32

  • SHA256

    26df630f6f8d84647563407dee4401eedc8e26bdd75b15ef1ad46942ac509c14

  • SHA512

    a04ef5c2b8992d40ddb2d33088b995301b671803fe2cb071afbc553c702a21264ff79772be4135f03c073fd9392117c884fe13e0463e973ecbf200d078b550ba

  • SSDEEP

    49152:s4LYIiLOrSN+vRCc+JJj7j89dis6wDmMzyoZaMQSXUX69bwL:s4liOQQCct9dcEmDM5XUqqL

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 34 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 8 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\DPS_DIAGNOSTIC_TOOL_V2.0.EXE.1.exe
    "C:\Users\Admin\AppData\Local\Temp\DPS_DIAGNOSTIC_TOOL_V2.0.EXE.1.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:2972
    • C:\Program Files\Internet Explorer\iexplore.exe
      "C:\Program Files\Internet Explorer\iexplore.exe" http://www.ni.com/rteFinder?dest=lvrte&version=15.0&platform=Win7_32&lang=en
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious behavior: GetForegroundWindowSpam
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of SetWindowsHookEx
      • Suspicious use of WriteProcessMemory
      PID:2568
      • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
        "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2568 CREDAT:275457 /prefetch:2
        3⤵
        • Modifies Internet Explorer settings
        • Suspicious use of SetWindowsHookEx
        PID:2696

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f8c033fe48940a634f481af58d704989

    SHA1

    580f0ecc8022e785165b73a928064beb76cb8d55

    SHA256

    c621be146275f49ddf7a5c15150193ad03bc535a9c100407faf06662a5b42482

    SHA512

    bf0eba20f8150ed9422bfca73ef80c392063c9cfd8b7408022e57d460a021be52f2ff0c866c60cc99b72f4a2bffd842a83809a7dd1b82a83b23bd9320c72dbbf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b314e6af6c17479d285f973461073f31

    SHA1

    1f4da4e55d850414b868d015242b9757d8a4befa

    SHA256

    b2957a1980df93ae9a932fdc72577e9f2304703c81179713a178f5acd531bab7

    SHA512

    d1c6304a38dc37bbb738bd7934ca162520afa672d6bedb17d8c3311167f1ebf87f781038ff887aa5705063ffafac626b3cf941e7ba8ed5e17a3becc3828bc8ad

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3fb81cb154d5c94b2971665110296751

    SHA1

    09082c66bc51cc7eabca4b483fd15dae3ce99250

    SHA256

    bab9970f85eb950d72e316ea2a8d09c93b25ca80b47b68bc0db8cfea33f205e3

    SHA512

    b4be60025de4619a3c24fa84818907261cbed64501d233c28e8db8f7de70bb2744b177115f5606c1b7e223e73ef9d12dfee55114b6540a34e80434cd85b9b4c0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f75de7e74ed9e1e924964bf92e4b7d4d

    SHA1

    3c11500a60a7011b885fda36f3882e32b3557604

    SHA256

    ac7724eca12f36cdfd1b0284d6082e30070c033fba0331a695a40e55661baf0b

    SHA512

    2253ca7dc8bdf2cb26eac533e86a9e9a0bc314de2fb4c1f3eb00db1152c72401aa25c9b9795421c37ca45680fde57f765d830d2c7043f3aa74bcc91f71c57f15

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f3e6b2f1e53d7c188584faf845e39021

    SHA1

    7333995b12a38fbd03063b22473fe376cd6f0364

    SHA256

    38b960287ab243946eed158b07a84e49f912bd2adc6e5a2a06b943c2614ca639

    SHA512

    211297f622e615d7b8a9af5dca5c5a4f86941a54e1effcfa9deaa1a057becf30e6a6ca0915048b20625428c56b4b3c711a4d7224b768d2c263a441b05b2e9bbe

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b50deafde40780a59ae2ea5cc6482338

    SHA1

    ad69f77389bea3505efe9c3eca18e1e1ada2661f

    SHA256

    282640f57dc59a422d3b5fa47536fb033bacd8357618c4e3f1bd62783c21993d

    SHA512

    5cfb0d3c806d2a5a367c70d2001f94f49ed63e2c4166d7a64f74f14dacbc7cf7c0067f9841d954f8a579a7ba439d90128dd14736ed26e057b0fba9cc6e7d94c6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c584e097745e105cac14c060627c8823

    SHA1

    20567b3fe0193b4479f85df8244cbcdb533b9ec2

    SHA256

    576b41c871a30c9253279953a1084d60108e1051d1bc0c8234c8c184d533122f

    SHA512

    198d2ff6ac590cbc964c460e0d1ae6e73773172efe354fce81e2e2b075152ff3430755679056134211afbaa2e5490761acab6e693f99bd7d5b75c0b37d25b49c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c584e097745e105cac14c060627c8823

    SHA1

    20567b3fe0193b4479f85df8244cbcdb533b9ec2

    SHA256

    576b41c871a30c9253279953a1084d60108e1051d1bc0c8234c8c184d533122f

    SHA512

    198d2ff6ac590cbc964c460e0d1ae6e73773172efe354fce81e2e2b075152ff3430755679056134211afbaa2e5490761acab6e693f99bd7d5b75c0b37d25b49c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5b48a065724c7107853b80ee398f5e85

    SHA1

    787d976d0e96c65647fd984fe02890c8efd35ddb

    SHA256

    6df9870a17d3f361a660f5e2e56cb7d77125d12d19ae22bc014cc7de5e510f1e

    SHA512

    f3c70eb2244022cf33a77f13b11040cf0366eba0411b724b03df9f8e5578afeaca1e52df95f6caf3052c5f43e0c55bc8593324f979a816e772dc90179a3136b7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6c0c89585b2313606e25f13174422111

    SHA1

    fd6c0fbef42e8f0e06700312ebf6999779558c6a

    SHA256

    40e3e5cac79be544e3a94d2ab03f79b815e690e27c5f0a87d48fd176252461be

    SHA512

    c0e90b5c705c5fdda757e58f5204219836780d9afd6ad30ce39307a849a7e6a28d13e4e683841c55b2b57862939eb00e3a0c87eeed134a3d43165acd8e57e8d4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    de60c566a5b6f8f143d4d0347e861bc9

    SHA1

    fb73c23a9cb1420eac1ddb6e683f34e109a9f244

    SHA256

    77897aab8dea1a060c5b06572b1901015fd2564c6f957ad88fffe8578da16d82

    SHA512

    f8dbcc23aeb52149e9f92ec5a4e5cd0563ab3d154e654a44dcb4bd3679fcd1feb0a8425de4340ec21830c79b8261e207d358fd4d5b01b917a0b19d3f3984a385

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    11f13cb9537dbe7a53de52c34b4d892a

    SHA1

    52ed98c96e04f295c7a092d5e558471798654ad9

    SHA256

    2c54e2cd5ac87b7b2236eeb0651896413fd9205a53977a4949f2f3c189eb6b39

    SHA512

    f663c4e034e685c4397e9db5515ef8c908e87cef3469e3d78c92a2f20efd75b8dd81bd571f64ab891ff2c7d489d6f620dd9f443a1df09ca8672c4e932fd8b53d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5b1c19256c8279d0a01a2a2e03865dfa

    SHA1

    fa6ef7356bf23e3bec726b821aec8eb38e9cba36

    SHA256

    44072c867e3e5b4d3b2d8c7dff6bec4884c128fd59ed936b9f4b8ff078488fbd

    SHA512

    c8a0ec44d5dc1b5baa6a462c425099235dad57e4a032d22084760eeea23f54005fcff2edc5fdf0948b2a2d264a058c6d57747331b9eea75254e09463305133e2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8abdec45b86fb97db46841f714622bf1

    SHA1

    77945e0685e3577938d24972d7dd0c8b0502d60e

    SHA256

    c3d9944d37040251a0aaa2fa8ed936b0af6271bc72edbdb9e36ac6ae47962bf7

    SHA512

    1a497a9bbc628f153d701101bf633cb54e30920ef509bf712414a253ab1c6a4908579090a7bb3e50a1b52a7e3b40b9badc97f762687401de5cbc35f6ed234f31

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    58c9a3c5071c2aff5a5a13731b10ceed

    SHA1

    101b536d143c4709c35dfab461bfcf0fcd9f9a04

    SHA256

    64016168145870b194e463adee91ac2cf8428ec4df14151b85251534c1e7f15a

    SHA512

    81fde625fc78662faa4667dee2492158b48e9cfa8468b3c4cb32a29ac0dc572f78451a684d20fe3534216f46149d6ad3b0d96551af170e7034b5a0b15fdc9c46

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b75b3f952f2fba6578626bf7267b9399

    SHA1

    f1e6b28975b07cb9a72936c765ebf5fea5346034

    SHA256

    9ab30a53d227bdafd5535c780880a9556d25354ff6344681988eed8ee56cf50b

    SHA512

    b960f85e7bfa609b19f4c4451759ccd35f9c310f1cec7d8f1f0b69ff12671e75ade188a5ffeb9f899aff2a9affa9c9715ad5702c37c090a2d3e0d12b8c4eeb49

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    64a12b70d80ec0913469aefff0fe551b

    SHA1

    516f37714623a60673708b30e948f718cd3ca5de

    SHA256

    aecc9b7458381ac7122dfbf740942e605bba86fc620ed880bae2b3699cac42d8

    SHA512

    d6a971ac1e4d098c83df31c23189936bdd998d9ccba4f54af8ea48d420e6f6200c5d7e3edfbd297aa5d772e27d3bf5e74dbc4d3becc6d4f3815d0b9187ad1598

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bdb48eede86a062568324d76dc6b5aaf

    SHA1

    99b5e7e4da328da0d9fb34623a82b6e18cc9e4e3

    SHA256

    eb63041a051993f5ca561680e51429c1ee41ac94a6a4d74e5496e76edff1fca4

    SHA512

    3644eee932d9e5affdcc07770f2ed8db7882dd5b20ed5213a4401efa17573235130a23e220990bad0a14de870e7ce1e1984ba6fe52fff91e71b9cc047443fb27

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9260fa5ecda5da53c4e394b835fa8d40

    SHA1

    fd9fa2988c343c06ffcc04402f2f0858d6637424

    SHA256

    5649e58fe741d6cfc191ca76d1e64e1d19c8dfbffcf6ad20e4caa0556eb5dba0

    SHA512

    443b754a32822eab19811f0c61a69ad9d4f2cb2d824c248165cb8819b861ab6fed268f7c3ebee162380cc3413ec308f0bc8475d08441cded27f1b811b8d8dee5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    247ec6ef1d87728257e0af73a4fab8f2

    SHA1

    21efe037974dc2f2b8a9c81508caba7325c4f03a

    SHA256

    83ba97b70ca727d514f13dc4d6635b7afe2690f58038d0a54ccd5d6bd4120b9c

    SHA512

    6ea0912cfc77ab7fde87b45f2b9dec18da0fdb86a6615b849696aff9c39d0e18776efa20a4274487971db82520ce3106c5270cd63798bec0b54fc915ac6762bc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    eab3e505645049c54d4848a8fa2a53a1

    SHA1

    ee366a38e6be2a4823a73275035d63c1f0d9694b

    SHA256

    7fe8c801ba56f0a868064e4f14509b9c6cd00ff23a22638409fc3ae377b7a63d

    SHA512

    9523499cf979beaf15dd08f3758a406a60bd50720dcf01fc567fcedd9e266d4d3769d55f30834310bfe0e179127b70efb7c67c82707cd4dea8b797f134b74598

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    031d736031a13fbe40f78c3b0c166afd

    SHA1

    1723c1aa5c3446e45fe8c394ff625e06e407d05c

    SHA256

    23277e1757bbcad883ca5b12b7fe4902a07c65c2f6f1beed3c9cb782a3ffd789

    SHA512

    09b36e7299cca4f47e61d494b8240990c9e3a7b294d6d1918d1dc86a647bf923271f4ef5a149964e1058d4463ff7f5791c1647c4c66bb9a2ba228517f7d7f2c7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d5f6de0a78154ec8aa0a5bae79835b1b

    SHA1

    3b6447dfc0973751f3ee2b609780be55859b70a8

    SHA256

    a0e7fb2fe13157de2b6b742e98e325a64af94b614a16b6e2cb43f2fc6d6f389e

    SHA512

    0873368f63a88a7d11010dd2ce24f541adac2095a678aabd16bc67573cfc8d34977997bee387535e7586d77e8f87c32b30fd75104be86760cb5754bce9e667df

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    afb08a72c8d19c60f0ec363aeb616255

    SHA1

    346e588414c006ae469f413d48e2fd0de7ae07e4

    SHA256

    8142fce8344011d7251db387e50006c787a41bb96bd4d3654785e3e8d6f2b5bc

    SHA512

    ecb7260d275fd7bc7929e45191cb48bb8d832b337cc8dec18c766d755573376a0a2b81c26ead83b60a26022aafe1e8a4826b4da849e01dbc5a0356a066cddc31

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6ae9a2f4ca1d317a6b448d36c6cfd8d7

    SHA1

    05a953695455f795daef023a0f3d75c9328fee59

    SHA256

    bd11855bfc86fa8049b3d434c18a97c41826f0d040524edda607ab213ebc07da

    SHA512

    cf61d4bcbe659b0fc08561ea73bcfaba13c5833523a2ba6a0de2ffbd4f557af42b4f68781364286e726f3e334186b4c3b158a177bcfc0f7b3056adce55adf36d

  • C:\Users\Admin\AppData\Local\Temp\CabFB71.tmp

    Filesize

    61KB

    MD5

    f3441b8572aae8801c04f3060b550443

    SHA1

    4ef0a35436125d6821831ef36c28ffaf196cda15

    SHA256

    6720349e7d82ee0a8e73920d3c2b7cb2912d9fcf2edb6fd98f2f12820158b0bf

    SHA512

    5ba01ba421b50030e380ae6bbcd2f681f2a91947fe7fedb3c8e6b5f24dce9517abf57b1cf26cc6078d4bb53bde6fcfb2561591337c841f8f2cb121a3d71661b9

  • C:\Users\Admin\AppData\Local\Temp\TarFBE1.tmp

    Filesize

    163KB

    MD5

    9441737383d21192400eca82fda910ec

    SHA1

    725e0d606a4fc9ba44aa8ffde65bed15e65367e4

    SHA256

    bc3a6e84e41faeb57e7c21aa3b60c2a64777107009727c5b7c0ed8fe658909e5

    SHA512

    7608dd653a66cd364392a78d4711b48d1707768d36996e4d38871c6843b5714e1d7da4b4cc6db969e6000cfa182bcb74216ef6823d1063f036fc5c3413fb8dcf