Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    56s
  • max time network
    37s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    18/01/2024, 05:34

General

  • Target

    http://1dq.r0u85j2.ru

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 34 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 8 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" http://1dq.r0u85j2.ru
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2988
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2988 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2724

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F59A01A8B782D93EA6991BC172CEFFB1

    Filesize

    867B

    MD5

    c5dfb849ca051355ee2dba1ac33eb028

    SHA1

    d69b561148f01c77c54578c10926df5b856976ad

    SHA256

    cbb522d7b7f127ad6a0113865bdf1cd4102e7d0759af635a7cf4720dc963c53b

    SHA512

    88289cdd2c2dd1f5f4c13ab2cf9bc601fc634b5945309bedf9fc5b96bf21697b4cd6da2f383497825e02272816befbac4f44955282ffbbd4dd0ddc52281082da

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8f8b4f83f05cc2e4a0fbc7cc7eb15385

    SHA1

    a24e10265d2c361660397ec843f714a337cff1b1

    SHA256

    a8a3e32b3909acb5236f14f115dcc365a47e176388ca04c2db0e849aec189cf3

    SHA512

    96344889cf352ee98d07058c4f05e4ee976c1661a2c8e386d2401439ce26e433cae83c8aec4a425efd71cb931f1919f14a1923e7598d35890d41de60008a7011

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9760eb9ac73821bdcbcdd7367170b9fd

    SHA1

    97c980a5a05b72610d4ee7519eca10f17e7b90b7

    SHA256

    1e83c258179a55c7158322fe5130571a227297dbdd96efac424436d65670fc83

    SHA512

    b884788af666e1750a18eb5ea56c3f753550175f3326cf67adce2e78c4b7246458dd7b0680596eb553deb44f5265fcb116e8f8c7dce494a0ccaa9da1512e129f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ae9aa8c99bf72f164d78bcedfb28a7b1

    SHA1

    e6b2ebb7c914195639ccecac1c680591392302cd

    SHA256

    0e7f0c4056a305bc78411103c55589fc4957f7b4542a21d0860069ed335158ad

    SHA512

    143e150f5d6acbdcfb0133c1b945c3cf5a4dcbb27cb150b95e9baf295ea0dd0a63fe5dc5de6cefe419d559e4dbd5d4a3c721f18ba90b72f39c3425ce5b545c73

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a1ee87a3b01c1ce3daf6ab2af3fd41d4

    SHA1

    2236f94cbc2a5a1b5747ada9dbe5565cf14f0612

    SHA256

    8be8b88b6d59e073ebd7be9ae42c2145b5586c7520d17d45d34fd8340250098a

    SHA512

    38d55718d61662007d09e3f3fe6bcbca5e2453ff15ee59a73d25da4e18cb535c59f74edf47779bd1e96b1922f5943a085d2206390ef86d239dd14abffa2bdb69

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f83f6b52abe2866f00a48ad279d1f710

    SHA1

    458025d22de63f4e03f2d3cbd4ed16f62ac1bc16

    SHA256

    9c5fa147c7a6e7d6f17e90b2ccf11eef0ae12751074b3b2999be03807ec07f42

    SHA512

    468571901a5a7bf827d61079ce562217125354703d446e8988da8121eac37e45f36852a66a28f5abd01563bebe4acd0ed2133bdc69982f666e1c97ad68ba24a3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2ccb392183db35d175b0379a55c0295a

    SHA1

    3e07804de70e163178ec4c3b66caa081b628fe10

    SHA256

    987216ed6749c1b413c5cf911a3f89bb663f196e5b5cb20012a37db01e884a51

    SHA512

    15636acb163c15b84768b6c7bde61e07f2f692f0cdf9a86569fbe1f2e99d4b0eb9ac50bc191d397337a0f05e69f0621d591acf2e1081e8cbd862417dcd792482

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ff6ddee411b7b9581a5a92243da647d8

    SHA1

    16f03c560b8daa7d8d9e9800a4b758d7d6fe947f

    SHA256

    10f587118d478528de52f28edf8e0db8bef3e5951b113b52f9fc50cbf6c4391b

    SHA512

    760e0a3e0a24b8abbfd28051263eb0a170d3d9cab066e6388b3226ea9d45ab029fbe439fd2dc5f18790460fb298319ea2a85407c9c935f5ce1d5d5df6963ff2a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8805cb0d7114ea73c7a335206f5d71a3

    SHA1

    b4ccac3a366b1ce60887b42e47635829411a7384

    SHA256

    6172fb7fa973c53bcd5a983d8245771482fce44aa432222fc9f1d12e8acb6a0f

    SHA512

    da6400ef65956cfc144cd2d4f25927a2b76fd873e2adef7cb5db4e8a4d5f731b75765432912933f3b4a14a1b95002fbefc7351294a548c0fbfaa67987806c7db

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    70d862baf02c6ee3972ff8e2f3c6e7d0

    SHA1

    488f090db79efc2d5f89195c993ec467138b15cd

    SHA256

    afa301ba70cee281a75fe8365f82f8e3ea6a3899dd186f4a7856e68460421832

    SHA512

    1ae84b5390cada22eabea60d39f4dfb11400a6897ae521778749b9074f1e5d4ed3ce646a7d1540c8b0cc87caacee9a75b1764bd26364f6c693b2870bd0072823

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3bcf0f1fabb8878990229eb04e971682

    SHA1

    819563f4c2f1b7a99875be75cbbdbd6e5b568719

    SHA256

    146f06d2e5c3b81ef1fb4eb44a0b2cc1b9085d4b595b6e8672a8e176913c3c2f

    SHA512

    d82354fc0909a534b989ba9264c248dcdbc223bfd7999e7f406b949994ffa1cfd7bb8f120c15ffa4a53f03adf66c2bcb24047db638e097757728f557e15827af

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7645578de7feaa49bd5579af680ccc69

    SHA1

    6cefac01e088a7c5d5ceb6988b6303a81716d5ca

    SHA256

    4a5958e3847c4dd2cb7274f8ea88efecab972e8c7739f80fcca66cc801882f81

    SHA512

    e44ef6262c6aa046ae6e0eaffd04dc169e9b8e9848bf033c160a1424262f8f8c18a39cbf697510f93a880666a4d3ed56b639900e7f726b9417972950b6b772b4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e3c432b7e017766cf2261bf665f69485

    SHA1

    856b904772e100befeed932e752b0c257e92ee62

    SHA256

    744524a8cda6dd43318f9269e1b43db6117b0b205b6fd94aef7f5bf786641b98

    SHA512

    cac3cbb7e68447c02d68747b8f3ec35cdef8788054e16d592ff47bd1468912370119a49928343d31067506aaab863c417454de271108062d66c22cdb871f2b87

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    af17fb955d27b02f813efa92626f9378

    SHA1

    3a1edcb56c4e7d5f911cb574276cd1b34c339790

    SHA256

    b470b12835695c02b0fc5cbb1d4354300e91aacc42b50ed2d80ed51f770e33d3

    SHA512

    46f980f6272430320964498f5541f601613c0890bd97260993a13ef58265223d8466f90bb596acd914846fc724fc9349f4e70fd8b0557405e49bd57bae0351f5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    864e24a83f320c0a54671398b24fdc0c

    SHA1

    c6d09d2d5c2557953be36557103aa9f576749b50

    SHA256

    642aaa37743b6c89f141dd38a4779aec35083d827c0fb566fc73390e5a66c9bc

    SHA512

    919da16ca450efbc180076cb474d5692371b9ce6eaff0a2c7e5a47094caf6f2a034ebc6229db9482536bb114151394bc633badfd593c58d7c21bdcd50aed68dd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e3310c3c43500eabf5b6e42170c5281c

    SHA1

    58c050238bb717297359105bb76b071c0b27fe5b

    SHA256

    458858d1bea18ef29e47f685a0e5ea9ea42d84ec6813a4ddf7de4463d80496e7

    SHA512

    8eaf6d1c9feb4980d026106fd216418d51d922d40f66ae3d1c7e28e036400e60c7dcfdf52fefa8fa434f5c10a0f59df9cdc7ef76b075128f85c34605bbec9e15

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2b31134c2367b464dff78f51faaa2af5

    SHA1

    b4c8542c39b00025b854dab627505a2b6f952d93

    SHA256

    a49912fdc6199a790374ad33850dadb56a1c6336efcb3e98a9277f8d8ece71d2

    SHA512

    a2a13231e00b6bddbcb3f7654dfa0f28226e7dd1a19ebb02fd37c89002c4e972c9d75be685c9f521560b754fe2301e057a18f7f18c1e6039777db73a546f92e6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    345a486870be0a23b647a2eb86a50af3

    SHA1

    4a13eb57300676a119a87e5cc31606882fc45697

    SHA256

    5d217d7fc6a90d2de8d8a61ac8a18b627e8974f836668dd71ffb57481ca2d456

    SHA512

    405cb8b2869bdf8053807eea146e83e85af151493deaa0766d06450375e3af640c91c97a3cc16cea9521fc12a28d6d06bd63501e63f48def65fc88464148d06b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    25f8f34080219f8340c58b2bdacc0184

    SHA1

    ec96330486aa0d0926112c8ce21dd38e7cfbf33c

    SHA256

    0af9ed5b8333402f9cdfdaf306b0c5155d2e1f3555da24f4033d529275be396b

    SHA512

    2575a5f7ba0df1d54e52e1c57f1d4d36135ba40ed5d9223b546e976cd0fc2de146e2f698b32290f681389082a88d00d35a3dd8cb4c2af61d95037f7b4fc18dc4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3b12fad8dcba503042def3fc4d4bafe8

    SHA1

    44e09ee4752d9bba589813a3f683f039595df84a

    SHA256

    718b1ba99aec7955ce6d28146345e21e7c69e13bf01e255d78c7ccfccc142674

    SHA512

    2eff9e51621b16514aa3e4872901202b255791c4551d6668c06bd6b347bde7b565f9477c32116687f30b11dac0b783430b82b493e2126346e850ecd1fe5974fd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    706bc274439665b4ad4e472f41711a29

    SHA1

    c342b97350f8578375d246d7377110c3bea52976

    SHA256

    7664a91f0c962abbdb8e28440742899c45a6cc0cc37015a1bfd68ddb3f21ca09

    SHA512

    8989f8f6de037b325ca786f52bc877c9414bbec8bbbce25f4a49720a8581c9fafd241f19d3a44983db5630015b9dc69ef804449e181b316fd5c55d54e951bf96

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F59A01A8B782D93EA6991BC172CEFFB1

    Filesize

    242B

    MD5

    8809cddabb4162cc90607ae2c6120186

    SHA1

    349a19e6b0f85c785181e2d9b9a537f5405b4dab

    SHA256

    acc899eab1543752fc266c07eddadd4b4db9de66a4cb45b405893ef69150ba12

    SHA512

    7f09b5f180fe7696b8b81b4689afb74bb0e4cc6002da3bf536f8774eb767e05492145bec7f9347d04b238a8096f16f256730dc6d44801ad932b9862a617eeccf

  • C:\Users\Admin\AppData\Local\Temp\Cab4441.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar4511.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06