Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    144s
  • max time network
    141s
  • platform
    windows7_x64
  • resource
    win7-20231020-en
  • resource tags

    arch:x64arch:x86image:win7-20231020-enlocale:en-usos:windows7-x64system
  • submitted
    07/11/2023, 14:05

General

  • Target

    DS4Windows/BezierCurveEditor/index.html

  • Size

    193B

  • MD5

    b7f3e0aec1e9905b2706285819ad8627

  • SHA1

    c86d0c917ef8b6e1ee25d034fad53b0b9f6ba5c4

  • SHA256

    fbd5e846237145aaa4b1d5275eaf95013a31d41e9cdaaad032d583245de54a7e

  • SHA512

    036375d1801c4b85c8454a874267cef9dc49bd7aa73a49e308584fca8cd188857ba625f1033149f0a9aa395c5ccb78d1f1abc73e2b85339a6c5895d46759a080

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\DS4Windows\BezierCurveEditor\index.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2308
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2308 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2460

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    60257fda8afa766c283bb49ecd8da3e6

    SHA1

    2cd903500877f686423373a9c85b6b34c8c61ae0

    SHA256

    4c06b385b7f0e2879573a8c17382a250e408d62bb74c48cf11031cb6dfc4fafe

    SHA512

    1cb87508263c6b211cef9cc4c867f9da1ea6d9ade76a24225370b9106f3d608859f6c43b4f4bee91c35aa85597329f9fdfed1946b50d324110fd478df3095c3e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bb2050b76cd5cefef3d6e7c5ff850e40

    SHA1

    accb9a5cd5b84a6c72f150bf96876f8837c1aa27

    SHA256

    1863662a3f018473afc8aab4c2f0be1e7d2016d9ac7c8476e9b8bda5c7a7dc73

    SHA512

    746c54cb4b8fcc3e64ac36ec308a7b7272014c94290b289aec557e5a4efcbf63808fdae3dadbe3f02d2f7234c34482a340f7b574d63476c31c416341bf5a392f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    aea9ad7404b57b893172f4bd60e60e3f

    SHA1

    e155fc2f0eb6005e29bc28b40de6ae13163c1958

    SHA256

    7d1ad125a75cb140293c0267825fa87d35137b9eb844154aa2cb10ba9036df31

    SHA512

    c76f24acd92dcea7b98fe0571f91c15ff6ce14af3c73544712f8be7cac4f124cc692c262e1c7b171d250d1e6a7e44737b4cb1a5e4b02f83b26d7c9374fba1843

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3c26446a2576c95d67634640b27d074f

    SHA1

    29905eda12a0be819cdb501da43ee4a04d41c306

    SHA256

    022d8b164626ab325f9b6ab5537c4c4ac54e17b0c933b349f3e1616a6ed91e43

    SHA512

    51991d9a22ee2b9d1eb4198e57b5d7ee0d16805dc302fff3a3b19def55038fd5fc1a100f665b0bf5897874d58288b9147ec968610ad82793d43dbdfab1b9ac5d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    08a005d4261bb23e4a38faa9e579ce3e

    SHA1

    28b0c430a2d3d34334f9d7cde9e86a3f5fe1b515

    SHA256

    6e148f6f8fc86609de55acba445476f42ae515965875728cd576a6cdfa1a7fec

    SHA512

    d0276a6f9f7aa8c437d6d96406924bc545f72fc90b32a21c00c9bc5f0466e9dd1ffcac9bb4d059d93489cd00debfaee40f8d4919a0d2455b5930e6e10f97e667

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    961c995ccccb1fc601bd46ba8a1f309d

    SHA1

    6eee62591806cb12e826b377d9fb29403b4d829d

    SHA256

    83bc92c0be0dffafdd78f056bdaffef8a3c17c1ddacccddd722ac153c852f8d6

    SHA512

    17ca1ef2dc40a8f4f768301d7dd6ba6a919b173e803c3ff7a54195fcb5fb7a4603a681b055e6c0433d39f8d9aea42e29646a5eaad2a4ca543d74bcd9f39a3a42

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9aa1d01a8f8f8bbc923223fcbea62bc7

    SHA1

    e83e74d76f917734caf5e1b9273fc46712758439

    SHA256

    e1791d825ae021f0e0c62997f850342bf69983fbd535297fc00dae1729a0dc9e

    SHA512

    e7c39ca8c0e21613e74298b4992256110f129d94fd051392a5039e0b0bf91c1f406bf7d6f37b211c45aa16a323a9d1e2ba893abfaeffe6673c5e76b834a9c618

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    112d1dd215cafdcdb17932b6160a6e91

    SHA1

    e0e85b9ff75bdd7942fdff3d6ea406dd5adf1a13

    SHA256

    121c15dbd2e4558841f4042bf3cac974650252fee357c202f7ae3997f8abf5e7

    SHA512

    1297baaff4eea1ad85be44c8125c2e508d51ea69820e62a45de198271f209dd32b4e0b8d69886a16bcbd30e8118e851e219ec79f95553aaf66202cf63d137404

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    655cb2627cb7ffd00b156a827160871b

    SHA1

    1924284bf576832c3cc2e5db47961e0042a198db

    SHA256

    afa29425e4ba366fe0f6c6317e7d5f614061c887d631cc3e4cded5f604cbec00

    SHA512

    39a4895a279407ab8bd2db8b05f6b90c95787fe2fbd7c6a86bc5c754fee578736935895ee2b695ed71b82fdef966dae5f8ac43fe7a6010020cd78886d86fff6a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7ae8b7b99fdd0819cdfef90bca7135de

    SHA1

    3aa5edc67a9a4aae8c8a8c99a5d4a3c33a094993

    SHA256

    4e010ccb501bab792f79b18a2717318387e015b81875aced675afbb878ebf961

    SHA512

    00cde3aad19ea3110a8c04b91702da875b1f2c94526090fa55e14e32e1f49e1fd2deb7d27877a81db78df1c10e72e5d3da8822ae9ee94cb24809b7329927c073

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    600d854d3510001ae1e311b83b02f17c

    SHA1

    9b21eb67b8c761309cd3ad8d8cc1c2d539e53b5d

    SHA256

    46e46337fd5c32abb759f29828ccf4672403feb056587cb307ab27c2d5a07626

    SHA512

    84a5d832cd51d7b5fcdd7984e139defaeeba4fc33af18c997d590f338a0026daa61c9294aba78ad7462d6480c41d81cb8f41610ff408c87d29e0e938fb9706da

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5d4817c3a54064dd3b3c8cbd63a32562

    SHA1

    1708cd0add6d3e595b96d07049231fa3cf71e478

    SHA256

    a45f13d8570befd0cfa6a0f2fa6c40a9c850c0b53deec41e1f3ed026a2af7369

    SHA512

    ec65ce42ae9f4407cf32c5387df4694c28681175668998e05d14444e296f9ad081a40f6b1372b4957779b0604b448080a0d7a3a666072a290dd3ce6e1f85c269

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    14bf436c12308a8a721d820cb0f63baa

    SHA1

    2c40f5d8d81dcd3e15ef426df8d60e55386902a8

    SHA256

    e230363931711321830bf122dd20fec9eaba95b0c95fb42d20c76fc7da4e4df7

    SHA512

    6fce0d84b2ab59d5d24068986656840f73024b30cae14b825c8357d1cde2e84a83968a881f2ee578cd2f74b555475473c0efb00ba538af2228f83f71f61b34d5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b2de0e80682b366c90f507fb98381631

    SHA1

    44ebbe767f97eb0e36c5ffa24b6973e148005657

    SHA256

    621737477b7adceeb25da86e06fe4666042a531b8d2f086e39ba80c5389f202d

    SHA512

    232d620d19c687a72478ca34d2c2af88a7e5314f826c770d4a463cbd022ebe880e44fcecd4a7f7c9267feb0d2007ae322e599f7d4736d8b6e5a200fe04363511

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2fc1f5021cafd7398f0ab9197143501b

    SHA1

    e935409fdfb297cfc1557462ce60e05eb70ac7bc

    SHA256

    558a3b5e7508ba447aacce904752141d94ef4938c05a0751792219dcd281dfff

    SHA512

    4689df83a30de6d9e8b2d203946c0d35aa3b99c1c6a9e8ba16647df77b75c7ae461c0ce33293de3a5eab65373affdb4db11228b0f124af4f78bff3c8ba2a9848

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8a33dd1781ce64d9e3fabbbbd6d435eb

    SHA1

    94b3f9150e52c7007a49cca244ee09a10e7f0fdf

    SHA256

    73bfae0ce0df79f47c64285883a45376b141052eed6e32118bff661e972d8b0a

    SHA512

    b3dc1df3841ac75f62cb1786acca80029cdebb417faf245153e9329c4946250a51230c9f80e564446d7714ec7d892a675ba0c704b89cbdc13e65758f1dd517d7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4d805972783e19d320fa4e171e6a1718

    SHA1

    ca91f7560969811cf86c777240c4db3c1ea54f5b

    SHA256

    1283993d9eee4c7b1f6e33aac8f937a88178777fd5e63dadf854ac537093898a

    SHA512

    f0921ce4a23ac19553c02800692d1fa41210112e9f9b8b1d6e387b3fb7f056c4617d590ebdd7ff544d599756a4c74d1bed6b2f8f33ae47b9a78d1180ce926d96

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e5bce6db943ce8fe58ddae537979bb05

    SHA1

    82202156a3a90b210f304704a69f8a6e620313fa

    SHA256

    2dcdced5876914e2521e3d5cfacbae515015310cb7d2c5d8f4bfa2e6648a7c81

    SHA512

    b5ca9d0c409eeb36295c0082a02ebeb5e8cac93a19aed35fa60024c3d032aa11f6f29ffd5bba641b8d81b317dba43c2df96c0917e2036f79e713a4e77021dc5f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a9917e31ff64c5beed34bc0ab084ebd9

    SHA1

    a37a550a09557e98584c356e058216a0216dbf87

    SHA256

    5a5f0cf6a209196c207bfce6bf96b8eb7865f319571d28e83fff48ea54f1104f

    SHA512

    46df54c8f525cb06a0f7537d5124a38b617c363650e0c1236ea754079946224d30bdd3a423af451d779f0a40fac156efd9e247f227a94cf979387c521932069f

  • C:\Users\Admin\AppData\Local\Temp\CabC0C2.tmp

    Filesize

    61KB

    MD5

    f3441b8572aae8801c04f3060b550443

    SHA1

    4ef0a35436125d6821831ef36c28ffaf196cda15

    SHA256

    6720349e7d82ee0a8e73920d3c2b7cb2912d9fcf2edb6fd98f2f12820158b0bf

    SHA512

    5ba01ba421b50030e380ae6bbcd2f681f2a91947fe7fedb3c8e6b5f24dce9517abf57b1cf26cc6078d4bb53bde6fcfb2561591337c841f8f2cb121a3d71661b9

  • C:\Users\Admin\AppData\Local\Temp\TarCC98.tmp

    Filesize

    163KB

    MD5

    9441737383d21192400eca82fda910ec

    SHA1

    725e0d606a4fc9ba44aa8ffde65bed15e65367e4

    SHA256

    bc3a6e84e41faeb57e7c21aa3b60c2a64777107009727c5b7c0ed8fe658909e5

    SHA512

    7608dd653a66cd364392a78d4711b48d1707768d36996e4d38871c6843b5714e1d7da4b4cc6db969e6000cfa182bcb74216ef6823d1063f036fc5c3413fb8dcf