Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    220s
  • max time network
    261s
  • platform
    windows7_x64
  • resource
    win7-20231020-en
  • resource tags

    arch:x64arch:x86image:win7-20231020-enlocale:en-usos:windows7-x64system
  • submitted
    07/11/2023, 14:04

General

  • Target

    mediawiki-1.39.1/docs/uidesign/design.html

  • Size

    1KB

  • MD5

    3eade35d9598853263ddd1d52deab2e8

  • SHA1

    b4f8bcee80c95a7b335603efb5974588a9d545a0

  • SHA256

    34ca28eb91d599415246a25a289ff84513764106a60904334b8129e2c88ace17

  • SHA512

    22e254ffcf97dfcbcf86f3cd172e9fcfdbb760ec1261e51655b3a4b6edc6eb3e77490493ff832f46ca18a226d731d2406163606f41a0827f9da860905ebbe865

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\mediawiki-1.39.1\docs\uidesign\design.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2828
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2828 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2740

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    308f7fe067dfa4eec0d9d890e5271cc5

    SHA1

    b97a3942bb29306029f96d03e5124384ad04a8fb

    SHA256

    59329a901b190f27f64aa022f8207351363073ebcf8c90eee198cdd0fc87b3d4

    SHA512

    4bfc5d9fdda9e2aad69ae87c30181c1dbb8f2ce8761c3262ccc6ce3c976485e317c5c7f2e6ea8815f286f8095a555535273abefa069d32390dce933b47578b49

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e5a47369a90d83283e2f41ec0aa28c43

    SHA1

    94ab2723075838876f3d5262b8e556a9feb9fbb2

    SHA256

    4819086c72cfccd4b1243153b53c1a20df2c2ab9565aad40b1ae0431bce83727

    SHA512

    c6661100ec9aee14095dd9430f826836adb49765352fc3d8f01064e9f73746aa2f6f01329e9507e561cbfeb932d10b9febd8be0f665f5266cd75b389fc8d110c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1b230e07ec859892231e3c1cff9b6ba2

    SHA1

    6a49f444f7e02f23e37855b485371b7c1f801c68

    SHA256

    85001ea49c7b939633e8f1d7f0774657c98be04503eccf5ef51502c5f9eeb421

    SHA512

    ae491b4dd3a8723638d03a05f90072d1a019ee709b67371bba2baa41efbd8e1baffc3defac5a05bc0cee49610914fa49310f742470c53cd260eb5ca3345f7f37

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e3b63af97b87458ea9d9451f5369471f

    SHA1

    295a2843aa43f216bee00abd7fa05c1e8851dbb3

    SHA256

    bb5b8eaf7e962c7f879d5095f445d49f60020b85356d98c78263909b094b72ec

    SHA512

    747e9980f63ebbc79b29314df739acf034fa136fec6babf154c7165608b4449d4ffb6c3388f7e881350887a97894350d097ba7597c1ac2f6e15bb5e274c7b103

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bc0d7bac3ae8c34cb5a910fdbc6e71ea

    SHA1

    90fc44837c9613d20113a65f95d860de8650bd5a

    SHA256

    4f48a3a8d436c46560d94d621c8d340f966be7de243e2f7c686f94a6411c65d0

    SHA512

    6350f2e4c2bd51e759c563b2125d995a3b0aea1e0e38e86d8e33a7d08754ced62030a50677941a5961a80f26e1f2efe277508ee7e0d1f7992c0b88ddc5684611

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    71f7ae8e8293f2b5303c9db2e8929cf9

    SHA1

    33942effe5bc7c4ee06a9b11c1b758c3851578e6

    SHA256

    621396288000d119f2014a3adacee9b7a599a7402f26a29ea25d9f0cadfe77a2

    SHA512

    d321196540911cfc3528c90e1a8c8ea129403361f7d6b0863886f3b6fae56f95712463cc428f0f176a6d122ff7f728b743890b78d7b51c460fdbac74ea4ee0b2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    103ce934d122a9a00c4b27735a440b9b

    SHA1

    024eee39498e1f71f1ed9082c72cad2e05cb4cb0

    SHA256

    180714bc816f57d70bfb5e2bde29b1befbed1bb6762426cc52b156d813a1ae44

    SHA512

    56a39fc9237b074308c9a704c042c3ed1b1398d0a1487a74ba146777396cb02e392e5bfe659c378816d4dd5294268d97990f74d5985f4faabcdb265f49681eab

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b39e65fa89a343a9e3a42c56e93cc149

    SHA1

    25c4270910b03d226ecfd456ee644938abf7ea47

    SHA256

    6dac668536fe3fcafb6ab8e7c8d29dcd27638adf00481e0823fdebf1005c68a4

    SHA512

    e815484cc61f71fee78f77408cc93e3585cb8899fd563e8934e201f46d9e9a019024c2d9aa1f4d00779daca62ba52e537e2c521f78cb6aa2656efaa4cb617657

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7a8239ba840e15a40ca48665b3499c9a

    SHA1

    eda0829a38832eb8b346c28c2099fb63a6526d5a

    SHA256

    c872fe7325d9cdfb45d93927edd9683cee0be3e692546aa1774cdc3b4015f895

    SHA512

    393f1e75a1da7370f04723a4fb2fe557ad43a5d73db28e63779dd87f86e9d2cb1c76937924059a99713a59bf719ae88a489f1d7ce0f4aaa2bd427c53ecf81d70

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    214aa3d17a2d0b9f4551b5b266b582b8

    SHA1

    73bab4654f736b21e925a6839c23a8dbc28bee8c

    SHA256

    87b60d6a28eb160645b8ee803d8ab1e567590f11ef9bffdc42378219535c6938

    SHA512

    5a5abf291492a2da3195f0bad75ac1d847f5c3de9c6098d6bef320014b75d51a7da12ca01d146beb48699adfa15e68ec77957d666e10e1e7b4f3099682924ed1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cdbfe6a4bf0c8b4ac4b717820e88d225

    SHA1

    e82cd02c20e82de27f218e2fa06a163d6406a0c6

    SHA256

    ca38472864ab340609ae15cbe0cbcf3907276d8fda65cf1ce9deeee866da906d

    SHA512

    b8f458a8eb68c1d8a570a42f7bbc41080b530b4e5f157cd2808598aab3bb1afda94a3cb0e939f66eaaf3efd6f48783c8705590010c61bfd908cea84027bee9a8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6b6f0d178cd73af8932738949869017d

    SHA1

    98ac12a36811c79c8527924b1766883808fec590

    SHA256

    5ecc8b1176deba16a113a5a126bb370fe50973420b56dea2e5975f77e574dc7d

    SHA512

    60b7d45787c0fc305dfa14516457b1cd4d1fe147596214488b6b76013448a7d9d16cb46fcce76d996d35109b7b015b9d94996904d14a291456436ad47699470c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8a8c5a61dcc1cd4815426bdb330f23f4

    SHA1

    64f640cfba9f8bd32bacd0cda87fc4cd5125760e

    SHA256

    7d8a955fbd599148a28763ce5ab920d41a013de9994a65a3459941f13f7dd091

    SHA512

    db4669863a8fdd36e5ce2e7b653785f530abe33046858a933b2d62c00a0d8070565d83bafa3fc79c55c36dcae6de3e8a0543de76ea9e27c28932de378966356c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0331edd3500041b0cc1c27ec00b69f63

    SHA1

    59ec01ac715f1dca992b231a83227b229211ff6a

    SHA256

    79357473c4bd34bdda3195fb08945f9497d059696c713e7591f2cb637d0f3982

    SHA512

    ed417a0cad453c1ed53e3034ec97be77d770fa6bcb45399a664cd9fae59d489e531f18f3a893b251b83ebc314a7febcbabab20fc3e0e8a89296b221ef4af0766

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    83af72526876ec7b868a1e013f62cd7c

    SHA1

    38335fa5db41cf99f53aeb16ee1fcad1ea480fe0

    SHA256

    a9dd621212ad4b849667032f185364a8de0a5a07f543a122126a224e741f12ff

    SHA512

    218df00e85b788704c1271ee6698d3fee9cb7320adb349a74675831942a09f3a8d8793245837869462bc8631a24f9be4c447191f3fa7820b17a4dcf76bf8716b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f1e6911a6559a85078d99315e83b0c1b

    SHA1

    91e239f51045d3f6c7448757693168ef6b961eeb

    SHA256

    fb19374976e7546bf090223b208da1cf6c43c9e8cbd9924c576414668977413e

    SHA512

    14f19251aef15b60d9ed14f50b8573406e9af0acad03d76a43807b9a791145d1da6dac823b5ab932ad2ec8dc8fb8ec2b72d0565641e8080d9c48dc44d775bd2b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    986c2be4e6638131a25e06f371d47e60

    SHA1

    0fde0ee5985980f6c085d78e1bfd74b05f1c31e9

    SHA256

    ab7fd6352595c2da70d27fbf5206cf1d985c23c455da6eb3633c8b1de8b4a871

    SHA512

    2959dbc14e094e635d8551815b5497228ef7a7874f1740e7cd37fd1f879acf4635d9159600bcd503263fa5f6cd3d69e355c6731117a1cad240e3575ffb6de0c9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    737027871e39b5e926ac14cce0bdc8f8

    SHA1

    a9404870e567a783acd8b6462d9b39048d75b4c6

    SHA256

    62c91ba1a5939a94a1f345ae524070b3c6ad2617cb1324d5fb565d33e7300629

    SHA512

    d683e78ca6cbb7d22cf01acc8198dd943ad55c8542662b37d13807e08dea12ac002277720fe1ac041138bc9da3d2181ab3c2f37344ae9669dfa84d944084fff9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4b08c8f93e2bf34c0df22df4a5c0387e

    SHA1

    7ee8f9f37ccd1d88379671d24401ac703b2b28db

    SHA256

    36b33aca6d0054b324c452fedf23ea9367c1311ac305c16ecd9664703651f5aa

    SHA512

    41b35d087d5967d4f78b686c3f179350d34813c35037875a7b96e3fc1470eff766ed4d885da24dcb796f701171d1fc1ef3f99c1f0fde8408383941b3d571e64f

  • C:\Users\Admin\AppData\Local\Temp\Cab7ACC.tmp

    Filesize

    61KB

    MD5

    f3441b8572aae8801c04f3060b550443

    SHA1

    4ef0a35436125d6821831ef36c28ffaf196cda15

    SHA256

    6720349e7d82ee0a8e73920d3c2b7cb2912d9fcf2edb6fd98f2f12820158b0bf

    SHA512

    5ba01ba421b50030e380ae6bbcd2f681f2a91947fe7fedb3c8e6b5f24dce9517abf57b1cf26cc6078d4bb53bde6fcfb2561591337c841f8f2cb121a3d71661b9

  • C:\Users\Admin\AppData\Local\Temp\Tar7B7D.tmp

    Filesize

    163KB

    MD5

    9441737383d21192400eca82fda910ec

    SHA1

    725e0d606a4fc9ba44aa8ffde65bed15e65367e4

    SHA256

    bc3a6e84e41faeb57e7c21aa3b60c2a64777107009727c5b7c0ed8fe658909e5

    SHA512

    7608dd653a66cd364392a78d4711b48d1707768d36996e4d38871c6843b5714e1d7da4b4cc6db969e6000cfa182bcb74216ef6823d1063f036fc5c3413fb8dcf