Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Resubmissions

14/01/2024, 05:14

240114-fw642adfc6 1

Analysis

  • max time kernel
    119s
  • max time network
    146s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    14/01/2024, 05:14

General

  • Target

    https://netcdn.xyz/app/406889139/100-free-spins-coin-master-game-hack

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 34 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" https://netcdn.xyz/app/406889139/100-free-spins-coin-master-game-hack
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2436
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2436 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1540

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4a5f93f78f0add87c04e98f1e36663b7

    SHA1

    a8861667c3fea6fb5d252c87562a25752a899603

    SHA256

    d3dae3f35ae711aa779283896ecf509ae6c48ef94088f820e98fef121f1907e8

    SHA512

    ef00ddc31e07f7a38f2ac1e4f799b3383df2bb42677784bba9e8fa1a101959c91fafdb953dc3d4f7ecd9e842aafbdd687ef95d0e5612646631c59f1c7a94acc8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    550b744d13867b90f412cba19090ff0c

    SHA1

    f250d6cd410a586a752d553ba743ac91fee41ab6

    SHA256

    ae0eb5808a5038df03763acbcb661c7e5ad9fa3e3450da4708a498a8507f5b17

    SHA512

    882ee12bf168bda4e56dbce13f708ca167777ab74eb2e37c907424cb076e4b97f82065bf2c44e9fa27f446573cbaa0d483db9bbd414ff3c1c961f1f7fa1ba5a6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e425dee53d29d8ab17fa604cb8e07868

    SHA1

    ad0158edf5103d834398a6a6739e2efd359b1b5b

    SHA256

    d68be2bab79424f8e4b78cc63716a75f8856f11c5ec54409782332c1602ac774

    SHA512

    cd4287495f8d98f74ee123ebed0d4484440838fef01455f3376f2126e8a20f76a1aaa75b90f464144bf582f496d8d60beba8c99bbf9697d29d061a19533221d1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e68dfeddf0466695adabaf3e4d031e13

    SHA1

    810cad5706e57e887106a83b3165be839429fddb

    SHA256

    d34098d7081e1f9dd57d03053db3efdcc1979e54b03d9442e6de4c74865da5ac

    SHA512

    6d01ed244a5f1a4bf4435af2b15b81eb5c5282850c989ca915c22eda43e36a6eef4d036e27bc743bb48ec13e7239170ce7eabaf2014d1df4987f036dad1a544a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2b5698ff529e158304e14d656daece5f

    SHA1

    9bccee399ca72fa44da3c97d854406b5f8d51808

    SHA256

    8f258536982f75225b91fc564e9300381853592f70d65c0e238bdfc1e1f593fd

    SHA512

    ed5cbe61fdde31e2307fc18335fcbda1b0b396475c482fcd897c9b50791badceaf4d4ced137177c71a8ee8ecc0bf2d2a42ab16516c917bd4685b8b4f8f909f0d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    97536fd3f19afccc0058f87c0edb4de2

    SHA1

    f47f379ced6cd4f8811e409c74c86d43c928e214

    SHA256

    9028a6be7424cd3780ea815af32a548f105866eec46a3b35fe355760fce3516c

    SHA512

    a6b1e88f31740e370802284bda204aa95f455297d074d70b667266cc121dc3a0d74a308aba8257b23e7afd7dbf7823bd90c719fc3bc279a5e5b1289af5944ba9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1aff925efc23dbdc4e421b476ef1d7e4

    SHA1

    cd6a69d1c58a0db2cf40aef141438f04e366bdde

    SHA256

    60af45f1a9faa8f9818c9768b5d3db9d9b64e19e48681342a671cb5d5ee8cb3a

    SHA512

    24d36814443c87b69133da310066bda33963dd60efb5a86dc39cf055f79764dd0a58608c873c4a35488ba4120a782cba65843c9ea872ec6103156c8db139c409

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e8440a48eb67d1ec4c13e5833b1bb657

    SHA1

    4392c72468065cc0df994a0c428c153c0e81e4a8

    SHA256

    72b4f5f6cb62a360f765b9a3e352cbb1e8cdee38b0cedafc2c31df5f862e6f86

    SHA512

    4d17a12cac6ca040019a3268a42579956cee91cee3fe87df4ac1644865433fa10393b2a1f1aaf28e230b107ad8a66a2ce41318ab64894ce64b90a7cbf56e78f5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e83ebbb20cb7251746a9dd2a9d36155e

    SHA1

    3e3452f0aee95f8e6429a369d156802d0d7d0829

    SHA256

    6d93221a26adf49250db3f2e7d26ae243ed7f370ab7a25260a2b88af4cef8d6a

    SHA512

    c057d8304bd5b86ce56c831c21a3f23f9a9d922b298e8d72f7470446ff7fd04d89fdb8f95d497ab07071c36b42753f2e43dba6225745a1d998712367085ac2e4

  • C:\Users\Admin\AppData\Local\Temp\Cab8FB5.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar9044.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06