Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    270s
  • max time network
    275s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    11/01/2024, 14:09

General

  • Target

    https://d1d4d04e-b929-43a7-9078-3a4ddd26b7f6-00-aprzcarhdxsh.janeway.replit.dev/

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 35 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" https://d1d4d04e-b929-43a7-9078-3a4ddd26b7f6-00-aprzcarhdxsh.janeway.replit.dev/
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2280
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2280 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:3048

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d4df864feb1c8ef51f7fb05e48e11a5e

    SHA1

    c4f788043210aa0edaf3f3188759d1b6ba5e5cad

    SHA256

    c180566cfefe0feaf63f879cf3a69aa2f7481e45a06210ee40f7a13f6267831b

    SHA512

    5d3d36e7df7864a0a329514142aad81963664f259e4502cf2955b9797947d80edb826b3b767a3ddc3bd993526c03fafc0ab79d4bcf830496f6cc0699fecf8f1f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    031e29d1940255f7bc483263038dccfe

    SHA1

    78531cf6e05da028742b86163b4755b01e3030a2

    SHA256

    d5e19a8b83c1f43b4cafd096cf9b086527009012cdfb6853635dbf9bc67fa294

    SHA512

    9d535a9cb4452e151af45acc59176c6096a1c115c053099c7ba93939e6507c66baeea1d4ad70eb3ad808bd5929741da748f0a8517672043cb1b2265c5cc1ed64

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d8a7b9be1f9c3a1b583051d3b9589464

    SHA1

    6522a6292eb07472247f9b42eca3b7d4a0d3acf2

    SHA256

    11e90ffd39088c0f52bba04441d04c6c0dabc9c3d0366bcdfe1729a5054abbbc

    SHA512

    74fdb9cbae1b7d93d21ec2f9c40bcbf736fcde19f2e42621d34d9dd21639bb06f4e3e8695a84095a7a1777d8d5581e3a826570ec15df433cbde02deba5c3b2c7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6793781b646da638747e25953dbd8e17

    SHA1

    3e1f608028215d4478d55ea7f9e39afe164ab7ce

    SHA256

    8a21824f4dd2482dd3dc0b1ae9b18f3f6b277f942b992914f700a1e43d83879c

    SHA512

    47992e88bfbb0a1ca191a79650acc426de17a088926ddb23392f9e506b1bd29da85d12507ef6d972d3a062fab440fd6943bb51d22f08c9b68de3ac6f03005ccd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    af67fced5b60036ca76a4c818fa96fe8

    SHA1

    56c8c5a25cd5996673810f6d45f5205a003b4db3

    SHA256

    21bdf538c0adf5ca399fb4f9167ab4845b19b7c55aab0b91a7fac52fc42e5a0e

    SHA512

    71d4126ef7311f3ccb338719224ed25507c7e5b5bab668b56772798174e1838e76a146b33932a63dc75abac3db30bf89cf2f1020533f65b72474d2928000193c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    db068a83b95fbbb26b583f2a6e188452

    SHA1

    123d23a75b38624ad3ee6d69597632a5c76a35a8

    SHA256

    6dbefd7088222162f4bb29755ba58ae9507a6a584d1954d0b53c6b44662bb020

    SHA512

    7c7e2f930b0a0a8d9f64c3b8479e9739ec1b7c9667355cba67c8cc0a4c5272193812c600559d76f53e62d51c02f0211516f6e5b457f99ab3e08cb4684818f6f5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    39ec4f71cc0fe76d1d74e2e099fbd2c2

    SHA1

    35517824ad32628f276a9db93614337dc6e2bfc4

    SHA256

    bb0118ed8f278bf368c8bf118f517962f775651aef40e12fcd49ee378316cf3f

    SHA512

    b8518c33a123f995f8b0c3bc26866d76db2110691701adfa901234554ee3c38294dec6de45b1ad946eb0d84a915dea11727af3fef48eb5683c85e4edd9f78924

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    94a983b3aa133fd66451433363b3c26f

    SHA1

    57178d7a3f6765f5dd9208151ed2cd205312465e

    SHA256

    6c260e214dde4f6c7dfd4f7544d83f620f228c2fe2b4b7cdd42dbf6cc66f010c

    SHA512

    2d87c394fa0b70f763c45e37eb3798f4971d81cbe8ee96fb89a1715e1aec5b87faa4f6c4028f5f61947099f2fd247bdeba3269305d43efbc33c24e3501ba3620

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a65f9831d33380f6b5678c119b2ede5d

    SHA1

    4a87a6759d2ac89ee696b9715a8dd75fcd9bcde7

    SHA256

    2849c90fbe31aad73982c8e73523ad260cbbdfdf408e90a8adbe41bd028a58a5

    SHA512

    462e74994d3d7497eb672950f275991c6e6d0f0d04a412c540e5d6de68939719c45b62178eaa48d77aab0b58323214c39830a46bce295e09211dcfe866838697

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    87d4226645929081618abf9355b918c8

    SHA1

    1aac3483f929a939ab4ffc44b651b18bf6d094e5

    SHA256

    18b9781b9281541f7e4ca49ff462386892f5ed79c459213d4232c142dcb35e86

    SHA512

    c7641cf42317a4f709870bd1c9c0b41f118a2e0b103188537454640c16d20bbf36e0b91f11d819c642c9a951225c08b4bca80a189635b5b3cde4fa87975fa51b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7d68ffe9ada70d195341e8cf67085a5f

    SHA1

    1a2f9c576c1ad0cb26b63a38f592c69c64dfa7a8

    SHA256

    092b5148ea2ec3243765a1d3ccc61cce88897128bdb02f8b7524ae7a62251699

    SHA512

    755708cc7a691a1d37d3ffa7b3b2815d18aa6f53df74ee29361db08b1ef54ce3ee0d958485b9c3426ca8caed02718e5f5479d81a2124700e09b43ddb9d90d057

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f799500c48c23f213022f4fe1b34dfba

    SHA1

    2fbfb425214363b9d7c8d5853b280c0b89a3c4c1

    SHA256

    6f79f7ab0aa1f6a2a4aef32483ed8ddc07993dfeb50289408d8407816478877a

    SHA512

    a78c69d796a6b2fa12dcf8d15c7eeac39973442db60bc9e36546bbe7a647671a8a06c122a84b7f390dd0267298e8022e50a458a5bcad75a1f988c4594fb62342

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    965a291613ededd1bf1f9414b4c9537c

    SHA1

    d87f4f34954c554c913b0d2bd03bcb7daddb19e0

    SHA256

    fdfccbe27a08116b130baa5b42e0c76a57b93e8899234415d5575f88915a7c97

    SHA512

    e6218443c3db22b1929ecb63daf1778e6f30a3137134662fe467edcb8a1dd52fe402c6b54b4f9556ae57e13320f7f8e0fa5565340a9accc66d95fc71d644aa32

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    04f8a7323b790453d2cc537d480a1ea9

    SHA1

    3cc20444c15877745ad5b3506fda0cbb06997286

    SHA256

    94efa305fe13907f48d169cb96c06dceff7fc6e382c057f1846c99db9814f506

    SHA512

    5e130f33978889736f5f76e6cd6208daf9afae75be43219de1a5ce95246d154c0a59a710041256d661c2cf386f7036a78f7046627138395fd3514e54d8e3f309

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b89c33b736c0879541a77a4deb0ad2fe

    SHA1

    486187ee4dca28aca45d75b1cbd14f7bef257e3d

    SHA256

    0d97e4745bd4b2177c5315ac97f797a5dfd564a9c0139784e86bfb2ee406eb31

    SHA512

    b453293a2385f6658e71a6c5aa4b1d1b53252d7f4bf68029df0552a1880f6648aa136afdcae2fb84f654c7035226fa08bcfcb053b5a57bcf99bb22f2378d3f07

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a17a9029a47d68af2f8ece0340bea8c2

    SHA1

    0013b6d99118415b4ee1517f4ba333b0e8865226

    SHA256

    d5bc6b40d26701b226f9d399734688688ba66f5aff609b378cfd8e78d4a9db83

    SHA512

    9b4d619702302b03f6da52a84f15bb6c43c6de95b86e10276213cab51eeb8b942bde13417f4b389d7df2cbf743e76df9b881b7f5f3dd7b5808be2cae8248a78b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e464b1796aac205adc22383cffb2f4f3

    SHA1

    02ac757849cf8615667ec094bfccb48acd615aa7

    SHA256

    80161fd190183d4a1fc4bb138e5e32dee4da063212c248ac48a8be2986b11890

    SHA512

    a147a6c3e11050e170e901bf225efdfe66bdc7613e17b4999e19c860b0e4bf727d45e5875621e0d2a09b1845d27e1f378725bb25f34841daae683744ac44d1bf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    18c0e18dcd997cf7bc35bde5bf15eade

    SHA1

    d212e1ec33174ec3ed8eed7a2734e1fdb7deaede

    SHA256

    36ca396467fc87b08cbfeb70699a56068374a9fa72b0cb371e8d328d37259963

    SHA512

    0cf6e81958fc4e2c1c59fdcbbea77d2eb6aa29092e17b4048a35d99cc4f8e6dd908c3bb75b72e749d4e5b5a7eb46a07c9ac17f213dcdf486f8da1c85e634ada4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9d12ce36c34d9ab9ff0d48392efe892e

    SHA1

    b967e5e960dbb35075cf295374e391a8c8900a9e

    SHA256

    1a6c16971f59254c70a67c18d9a5687e8821411083a7d8d5dc417c1ed55277a7

    SHA512

    cc3010894108a54478a22874da5ab5b60a22c17e3dc65245ce6ba67ccc11c66bedb9468b54ae174e2d49e460f39d74e6fff662ba0b17303c38fc0a40ad9f4596

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f738727f4bb3958b861b50e5c3953a04

    SHA1

    46f9a27e2827af33eae22eebf4bfdb59e4aa49df

    SHA256

    63d6a2ab14d1588b54693293a877736297c1c148c741903cfe42dba8795ebbee

    SHA512

    f30fbee36a2c468e72555b0289c718cbe208233ce468618e6e2e5e9e7c60f7a5d6a3d7afd6c554f1ae16154d641308fb30fca604870dae1f3b2745b4dd11892b

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\M2VO416U\zYXgKVElMYYaJe8bpLHnCwDKhdHeEw[1].woff

    Filesize

    23KB

    MD5

    c0caf3a69092fc5c08443b413ea38896

    SHA1

    86514d16db2e5697d548175bcfe3b54983b24132

    SHA256

    1df9c953053965fc56c34399bc55ac59f6ab462e6027ce3cb0643d8028319ab3

    SHA512

    7a7fb7c6e7bf47352a3663c49038b8b0a5bfbf777cd6a15cd19aa8cc6ece33d939bae3dd7dbea2bb2787905ce1165f632f9027e4dd271870b5e3b61ddae4a34c

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\W79VKSP8\css[1].css

    Filesize

    197B

    MD5

    7b58c88a2916253b9b546d153b6cdcb8

    SHA1

    1d90cc3526b42bac12087df6f8f6236e844321c2

    SHA256

    beba2d046497824b8eef5ea55775da133a76e652a69fa3ad81311c151e5e6c96

    SHA512

    d3cfa2cc6e00c7449c2ca53ff153e876c433050b8e0e9ef10909fa4d5d1e37bd686fdcac572be411edd93457774856f60dec1af56536f56b779e1cd58f188425

  • C:\Users\Admin\AppData\Local\Temp\Cab8AD4.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar8B92.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06