Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    145s
  • max time network
    154s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    02/01/2024, 10:48

General

  • Target

    https://soloneba.us16.list-manage.com/track/click?u=b99ee7bf52d0c1a227ad1037c&id=5196fb3fd4&e=0a28b75189

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 8 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" https://soloneba.us16.list-manage.com/track/click?u=b99ee7bf52d0c1a227ad1037c&id=5196fb3fd4&e=0a28b75189
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1536
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1536 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2256

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7b00bf8c0666a3d8f325deb1d54047ad

    SHA1

    270a9248653dd2f25ef6c704cdd02c88f02fec74

    SHA256

    92b2dc62689652c64b41d8cfc72fb27b761aa47999f8f2da71c38c6f649cf580

    SHA512

    d01316f0f2ef8dfbc6e4687ba69ab9fac1ec38704b7c3a3a3ae44e419b7ef7a05fdebb37e5d9c4dafeadb00ddec158404620bfd3be85b9d8d216a2d99c3abb32

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    322e62a4bafb34cbcde5186101b3b1f9

    SHA1

    bd5dc128d67ca36e1b4b360740371e62900a7d0c

    SHA256

    31ed9805df5d6af493b9194d23858938a9724d1d5ed38f34f13af70c0b7b2547

    SHA512

    7f62cba73f37de68b30bf27f03ac92eec25c81793ed37a08524694041ddb314d9197a835e5658d59432f26536ccc4d5d8f29b7b2cce04b7d9b750322847e8ac6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1c70d67c5d352815a7af1066cfb558f1

    SHA1

    c3bfdcb2cba54047b0d3cb6e054b239d2ac73161

    SHA256

    1b2d79ac74f5705a71c34534ac6716f1cf05844079be2f21b005d0ead70b4522

    SHA512

    28e0d6d81e951d1b72d9a8f8fb58700c53374e35da961f416cb8a336d2d5b9e2be899301861a2149957928c19e96382d98bb0097e4652b3a67bd0171f9927a1f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    249d7452e5fcaac4a519656ffe783a5b

    SHA1

    b4157e4eab7c3619a516f04974457801b6c64d91

    SHA256

    5b557928de4c67c71beab075069f05a84ef24f6dbc58ec2d490b535e8060bc07

    SHA512

    d70e83b77e8a5aec1d6cc50265606cde684cea8979f31f0feb825cdd57f8f93753b3036ea4ce22d5e956492759ae3faa1768496d6bb96e53dcfabe58ce0d2546

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    221a45632fa2c8ec74924f85aee197b8

    SHA1

    6ac123a3d1992f8207e1d35f4b7cef30e4c51bde

    SHA256

    f993811f73c13cd14f2e92a101faa09eb9e63e2ff74d13c7dc040b99788df8de

    SHA512

    d9b3da008ec401add1094c15a6540d4ffe5f19d77e395d2be29242a7cbb08d54543b08641502cf81b4ef64c718c5a1ae32e04dcee45f1ec190206a41919b1500

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    260870b3d42698862ed66115d998d721

    SHA1

    2b40e6bbb0e6b6b4bdc610290986b490934c4504

    SHA256

    0100604fe065d07de86079d2c5e23848f98f541474b8d1c3be1d7acb07824ff7

    SHA512

    7f6bebe4a9eeaa72dc99a45c025bc89dcc8e1e38fceb9ff74c0c12d0d47ec187a2b524ac6d9803711fab23762a7222e490a0761ee73984df77368cf8521bfa54

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    44e830a90e015ee87ab1da1b6739ace6

    SHA1

    e499cc14c5e56d4e8947b53d5166f017cfaff69d

    SHA256

    de67d9c5d7f06c8a30275678c883540d48ff3edc800966c3184ea25136e3986a

    SHA512

    18d22ed9943f7b52ddbb596f6754eae3c60246c4b3a552e0b7e33383ca522d3407d8d57898eff7905058b0178ca475303024dd629a1c9d3f09d52a9722bddd66

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    23cb5fac14314c0f98fb08bc138b7d6a

    SHA1

    a938ef479a21fb321a0bf29062e116753355564a

    SHA256

    5eca5861feb4344210f5703ba8e1c417105d7c79cf2aff2836db47083f711f42

    SHA512

    940729f9590e97628569372d4c379c11c3baf838b64aff380aa0319f0c068d2dfb271e5a6fc7e55de159de1f2e89c8a5a259ec255b783015f5474a7aae6924b4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7706b9c9a0a238ef9b598805fdc927d3

    SHA1

    290b460221577df2c3bf5f6d816316346c3aa70a

    SHA256

    9ae1c44131efd42860e78e40e17e44d60f8dd9672f47a4b716cecfa3f7ca4d43

    SHA512

    aeb21b373be94b0f41cc7b7bc0166fec5ec54eed3b5e719148585549b338ad6ae212e4d95d4e1151cbc267380e3ccb2af98ddeb32936fba5e73adf1c16b0a3af

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8f4d059002d899dcf8dd84037ad97d29

    SHA1

    34e8b30a3d7004f456348ec80c46f051e7d49036

    SHA256

    32fda277a771b099524ab173cd4e7ecd78c7c5b829dd51aa4c1e807e14a6feb9

    SHA512

    f9c3f73d4ffd21783c893e338e3d599961939f34289cc0b71df2e3b619a03453a1aa1b3d484298048fe2bb623b7f3961fae8ab18d02648a651e47d17183602b4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6df3bd914cb361b5c80a7e6e9607c1f4

    SHA1

    2fec8a29101e5dc97e9c9a70045450c5ed416d17

    SHA256

    72f800b25d621e42fcb592c55b2efa860dfac17f708fbf09e0c5564c89888065

    SHA512

    44c4ec75720e7b3d7f203cbf3075877e6c39cd5d47ac90e7e59e8c6ac75cb5953b5cf8a67ffc085ad517ac612bb23e498d46b795d2a25c7fac97174b8bf9b7f5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d8e0bb02769dfb1a750e0d978259b2a7

    SHA1

    4e0ce37b983a646386c44a0badaa57325dd7e576

    SHA256

    c7809bd6a9ceab5fd32074f50d2b1e0ff52e0dbe7df7f52b67aa9ea243dba46e

    SHA512

    adca05774ede75317a585d7d57b16895cb883a6830dce0ead50064992b2d0151a16a7fa2cd50e84e3f79b892ec33fe46c959edae16ca3ccc66501db3c1512434

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2e5dfdfdf647623be47dcda60734b6ad

    SHA1

    254733cff5e98871ce53207eb0e2d21831391f75

    SHA256

    112988f95c2c1e6e9dc14201467d55dd01ee15084f8aea63c4154ddd42751b4f

    SHA512

    795310696df15d3dfccfea12dbf779ed9c4dfaf531d1433c5af86295036d3c1eb41b037a4e4a83e57e7c2ea72051876a414cd896d6e394f0de0495ff742c33f5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    65c85437786d2cf7af6e07ba07938410

    SHA1

    6689ffe528edfe2b6d25e3f3cbb95957bcd89b2d

    SHA256

    feaac084a9074d06ff5e4d67e562033413e8b7a3a04c50bb18ee4b62f8f7e887

    SHA512

    70023aced8a014cc457abda143a42f70a99490e302eb49fde93f024a84877410b8b62c2b4189179fcaccb268ebf011b4c47272090c3e63049591930ead2fe7c4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f98ed09f8e0c62a986684ac43fe278ca

    SHA1

    d7f7c7a152b3767471b5e11faa0a1124a325e05a

    SHA256

    0b7745c0afef0c05ec6113f54c29ecc5b3b82bb05a9d2d9a546506e2ad5be204

    SHA512

    b2166e0e65d3df1023a40eb57dd6f071d12e6cd17b3071b3410568c0965881d84e7892f2e50bc934c4ed22c941133b55095567dd4a0c308fdd744c64ea2a91ac

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4d380b2e6f91e12d6c4a1eddb3262fcd

    SHA1

    bca3f788dbb99bbffe8b551c1495c5c594abe68b

    SHA256

    72a199bc915611c8ab6e3696a45a26d8333f52dd586e8ce9c0b5fdab80e97e86

    SHA512

    ab5c259028837d089f09dff139a4bb42796988bb0f0ff3664cfa61d5140e373bb24893a18038420c338a7fc15e50c8eb3ee615933406d76a9951ca5e254465f5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0cbbb7823455fbcd4a8acb3b41766f03

    SHA1

    32974ebafcc3d8a979a5b6196c37320ec8cb8554

    SHA256

    6e2f7b9cd88429af5c12d6e1278119b56876ef8a1911191da7c925ea648a2673

    SHA512

    1388713197d67c77fe04d7b9f785bff33b094e1d4468ed9efffacd5c59928250e3029867c0e0f072df3873312b65256056d40ec40fac5488e9ce66286be60df2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a7084f581ec6cf8bc661f52a4ab9ada3

    SHA1

    1ff93804898d3e38eb00d917d1d55cf301e601db

    SHA256

    05a4ce13b4ced853eaf4c829dde4b3cab31a47ccbf7b10e8e695d8c3926f18cb

    SHA512

    fe22900a524815cdfa2f49f053dab97d7293dc65cfaff19f792c299e362a30bb67bc1410621dbb4217230e1a5d0c7b7e4fa161a1dc193af562e40ba016ff9f8a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    20afc8fb13a0ebcb8ea4d0f95c0bbbbb

    SHA1

    4e3eb2f15eb36f4099b0bb6954741dd6fc5def61

    SHA256

    422f8195ab8e9b1f987ecf8d27ca9b358035467386e54c027d590866e2b3d778

    SHA512

    f464a8c413009e65db9eb0a1d56baa55376869dc63fa3ef3a25c9434877e87bb2b70827caf9c1d61de32aac0ee161501a26cae3d005aad7cbab1e861442ffd0b

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\imagestore\f9yyw0t\imagestore.dat

    Filesize

    1KB

    MD5

    b00dba98e0ec3c3aa40e972354c92fbe

    SHA1

    e05ff5c98f3ed16a5de45ddac5477f7ba5086a9b

    SHA256

    2d32ccc4cf7e6e1d9f4ab192d5de98c38891257fe97cf64894c0df39c05e6b0c

    SHA512

    af20bb5fde26e46ab6789f3ab200ac9d65ab267d5a039f9dd0436efbe2fad6bfcabb681ac835eaf829b366c5b2dd6ff8306d7c9c46a41e245ef7fea46fecf990

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\U1J1BPYJ\cropped-logo-center-512[1].png

    Filesize

    1KB

    MD5

    01d27db6dd9ae40d1ac76cacf0affb44

    SHA1

    69e1a41641d603397022a3d7d19ff422f7dcec16

    SHA256

    3e5c16a272a96c3e344967b32c8df70c060952f73ef06c0bcb7d43f986492d80

    SHA512

    b096d07697c47816ae733ee0650839b0cba4edf1d7e9aea2feac7d5b32e4ff94c7717cd879dec6adcc8a755c927aefc5c600db9ba807e02c734990929009a41e

  • C:\Users\Admin\AppData\Local\Temp\Cab6A69.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar6D87.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06