Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    132s
  • max time network
    191s
  • platform
    windows7_x64
  • resource
    win7-20231020-en
  • resource tags

    arch:x64arch:x86image:win7-20231020-enlocale:en-usos:windows7-x64system
  • submitted
    07/11/2023, 14:43

General

  • Target

    Bv9ARM.ch10.html

  • Size

    4KB

  • MD5

    036e705ea37e0668e0e3696f480c08d8

  • SHA1

    fdcbdcf6f50237604e46614f157858119cae1616

  • SHA256

    13dd70a1b9c5f13ebf48d603443a8f8eefb8cfc5d6a0456a69fae7a306dccf8c

  • SHA512

    2e7f0b1b8841950b97f40893cff2ec823526dfa737f0a023d85ccf5644388e28aaf2573058bcda725de981cc2063ba7483360b08ef59fe4a6f7b34fda8ec595e

  • SSDEEP

    96:yBAvOHe5n50VV2yNaLgAAKyfdytKQJ21JUC/bV+qmWzNawAiaTvilgBfHU:yyvOH1OyNS28tB21fD5Ty0

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\Bv9ARM.ch10.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2688
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2688 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2776

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7a8f70d2eb9276b12df4317e2624d71f

    SHA1

    4e09dc5e5062ec5209db2a98e26ec95f1b51f569

    SHA256

    53fc4ed46ee3488c830121a05c6e8c0e5f209f5ef28993cb5e40860b257cdc3f

    SHA512

    c709589f1ef93f958b8b361d87536b67f2ba939ae2d29cd441ab76ba38cc2d590004511403322b963c67d0aba8227e12b25cb9709058eaad14db78a373499457

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0b8d69c80dcbca594f163df75d4e25fb

    SHA1

    d2cb94f8433562ab903b0773ddca22d27e358411

    SHA256

    dcadb57fc6d197988f6022564fffc38914f26d11b0eb5d98afc8e0debbaa8ede

    SHA512

    ceae1f71b14077b0ae42e8e5202012b1d3678fa52cb04aee0ac8fdd4562801a27abfdd8c84224d8fc66957e58291a385eb85964da4a6b4bca1858bd909975f3b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2575738f943c37d8486f4ddc2073fd6d

    SHA1

    f4ce72dbd1d70226deed84a3cade23bd6c8f959d

    SHA256

    50290036aecf7988159f4bff5e97d2e988ee989e41c7f96696efab6dcb28993d

    SHA512

    559dde9b648fd61a2975f54c6d7ba0186ef1d74c1e8d958a247305df5785d17178aca64aef9fb4675d050e90e29f5b913f1c2aaa61bf4de97197b1e82c035760

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7ef66b2ef48d5c811fdd642ca97bae5c

    SHA1

    32a3ea93a1fc05946dcea122d734ef1b95402271

    SHA256

    eceeae74e00228d3a5b5896f25e89078ecc15b3dcf8b403912799af5260ad632

    SHA512

    5c19758d9aafa2a2cec7c31ee0840ae42e4a3cffc6022f55138534d8e22ee0037ecb036ddb2c28aaf6ddcbdaa1750db558b16455d51c3e6c1ea82955eb2abb04

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    719ff7fe88a1b63b5760d9302722a687

    SHA1

    950d1cef706b49d8e4e45bcc4e51c305f9a364b8

    SHA256

    1ac2ba432a07d28dfa11efa26fbe485c42118fe77f03b2417dad093114591de8

    SHA512

    a8346c65a5772a1da1f0ea9cb3344d96bae98416be2e8ebb1f2e81d3f88902e705f0d3cd8714998f8c5c540795435cdbb221778a49ad754cddd64d1978b910e7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d6d268f583f54e99c5fe26f3299c683f

    SHA1

    4a354b382de60e5fb08ac84cc3897fa90670edca

    SHA256

    d42b07423ce4304edd1d6e1b2eb43eb89f4469146bfdc04ded8b08ef77ea7074

    SHA512

    d580359e3802c741ca51c21c1d9b5bc1019adf2a70cd8a87d9e012d2ad5818af5ff05ad1689ecedd93d1371f519e0c0be6a20ed30ab0e45f94517f3f2f6e0768

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    930dc583e28928701fd1d772ae89f1c1

    SHA1

    81cb5338484272dacdd0debc8940fa22539f172b

    SHA256

    438e35b907389a375455438918ff06e1686d100984a3d58874e0ba09bb69321c

    SHA512

    467bb1ba3522a1d03269ad3dd7ca30fff71ef1438ffb76f9a5ad10ac79c556b8af170623bbdccc9406ab4e293ff7fe44b85c929a09f26a20550b9979a5755ce6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7be482252052c630db9009cd957720a3

    SHA1

    30c32459f5f54ef08400126ba477d571900bde62

    SHA256

    89be8f6fb2c27d9fd9b010f3bd389ceb26aeb183e3a156b877e3ab54fc571b83

    SHA512

    7f8cb9a1ce7b3b17c4732631d4da86ba11b68c29ed645f7d4e81f3465346f7c026fa145deebbefd440fe8151e05a6915afc3b7e1f1b38b78a6351359ac0860ad

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b7f123db8ec4445c376bba11f1372b1b

    SHA1

    a8812dd61718321772f52d8616ac299085be2c79

    SHA256

    1aca99cde97da2611f42f7637d45c261aabe0fa92346e83bfd5564b149b3fb21

    SHA512

    4ade67224001661f5d177298977adf9b62da5ff7a4308e3d77e045afeea291273bda5514dcfdd0b5c7a6f5e2e5a961ace4168374d348ebb0cdf8b278ac14c575

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    adaaa205f9f0442b794287d5e095833e

    SHA1

    fdf63683e1d0e7d1399b912977595c08e9a38e06

    SHA256

    4d060e1b852c3c8a77dce13680bb25f377dc1134466e025a861e7d0435222c87

    SHA512

    4440a54c2610ede9fe5523b0cd38a76c71873dc8db91777e4157b836866360ad757796871a950b0f1121f2d4b958d27a5da8ce18c2505bdf61233d19cfc4ac42

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f116bc775cd0cf7521f06e8b5c744363

    SHA1

    3dc3c128733a4c92ee73734ef5d72e220d641c66

    SHA256

    195f32e9702dbaf62894c2c1452fc34d7dcac2642896570b3cde8c8ff9da6bf8

    SHA512

    6c651f8921cd3cf889d7aa61e2a5b264eb1969339e3d238cda4a4b6c60449e597c45b88df88158e68421193df522826f7540b2b70bb9838be1dad8681d4f5d60

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a9f77b5a6cf2e3bfeb7136259db77eb1

    SHA1

    952d7bcdfef51a70c0f7e2dd2b275965ffee0024

    SHA256

    af80c3c740eb167736c7cf7691a6f125684a874eae036ba26d474398bbc2ae60

    SHA512

    f93c8783c072352426da9adedcc7850008b510b8d840d98ac5fb4355f8f18b7b7619663c977ecb38e2d616e0200e6cc72d6522aaa229a22e923c4d67692cc8d7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d653c266d66717ce8a81905e900bad68

    SHA1

    8d116d99d092e2eec4f5e7031d5d88b14aa943fe

    SHA256

    76b44bc6cb6cbf0eb0aabc965c990e942e04f8c16c9b070c06735a9d992444f0

    SHA512

    0fa0c0fe6d835f11e23bbb11e87114748c8eaf02a46f2e9c2deb6c438b9def88b251723ae6c12fa873e4b61630953a6b395c2029df31687dcaf0b0e2b134a049

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    158fd332490b9516864d8e52d52e338d

    SHA1

    be204bf6ecf641a400080c49267196587b78f41c

    SHA256

    de630758d04eb9400e1e703977af59be247acfa534bebe72dfcb2faa9c991b69

    SHA512

    de7dfe37db235a4f7345c2bf90c1c144fb54137850085bd99d95f7e11a77fb7de0773d1cc8ceabfe5137533ed637ad188a29ec0ecbfa42f3497c204aec9aef26

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    623f77fe0ccbc9b884cee757fa95f830

    SHA1

    16e2bfa0d23f78ffe56d8d225c6e7bab936b9b49

    SHA256

    2fef9d2088bcee0b4156125967a00f46d9984909f688ea30162cd051d748aad3

    SHA512

    e948e13fc68271f6761dbae96d4f69b6901301a1b6b98063695349343a1330753668e7c38480eaff276e7f6fb331d750bd4a1003fd8c5a521ae5deae48bbe9ae

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    520a770d4ca06caf7f9ae6835b505ac7

    SHA1

    615768e926d587bf94d2a7df8d73bedefd24061f

    SHA256

    e5adbf879b81822e4d45fbc3d662d016ed98b6adf77ca93f83977ac90149f2a4

    SHA512

    aebedac163865d324d7e5fd629a59ed5ed5938ad29a324b074f0b2b72b9ce8d2e6591b36cf1d435b5823eed826f807e564386c6f4bf335e260f5fd4146b63fab

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7af88ff75f193a1b34b1be199db50aab

    SHA1

    5207e9d5fd014e03206aa9cbd1cffd5b77017f1f

    SHA256

    443278ff87b5b8a26e0c8447dedc1383e150387f8bc04c7ba3d3fbe7eb1a5734

    SHA512

    d887ae12f20eb22a08599773bcb3b9d6ea4f1b98593813c3f9a5c62d9e8cbc94ebccda860d2501c9611fce4efc84920d038330b606e6261a1e7c97c3c09585eb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    45ac137b52932e1f3ceb5f1ddb453618

    SHA1

    13b4ef8fddbe04e2559de417813808aaf1678b6b

    SHA256

    0703e3983a440fa2ceadce15a86e781eba5c78758c4d502d2345861f8453aa3a

    SHA512

    af8601163fef9337e567b3b7ae1f670bd2ab7faea628534b02e1773661d4fa56e300e1b6e9e6ba5ed79b67aed11b469be525481657a9f26aa87179ecb39b71bc

  • C:\Users\Admin\AppData\Local\Temp\Cab5747.tmp

    Filesize

    61KB

    MD5

    f3441b8572aae8801c04f3060b550443

    SHA1

    4ef0a35436125d6821831ef36c28ffaf196cda15

    SHA256

    6720349e7d82ee0a8e73920d3c2b7cb2912d9fcf2edb6fd98f2f12820158b0bf

    SHA512

    5ba01ba421b50030e380ae6bbcd2f681f2a91947fe7fedb3c8e6b5f24dce9517abf57b1cf26cc6078d4bb53bde6fcfb2561591337c841f8f2cb121a3d71661b9

  • C:\Users\Admin\AppData\Local\Temp\Tar65EA.tmp

    Filesize

    163KB

    MD5

    9441737383d21192400eca82fda910ec

    SHA1

    725e0d606a4fc9ba44aa8ffde65bed15e65367e4

    SHA256

    bc3a6e84e41faeb57e7c21aa3b60c2a64777107009727c5b7c0ed8fe658909e5

    SHA512

    7608dd653a66cd364392a78d4711b48d1707768d36996e4d38871c6843b5714e1d7da4b4cc6db969e6000cfa182bcb74216ef6823d1063f036fc5c3413fb8dcf