Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    133s
  • max time network
    131s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    19/01/2024, 01:02

General

  • Target

    https://xn--emiratesbd-q1b.com/?=s2eqkvHgWO

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 38 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" https://xn--emiratesbd-q1b.com/?=s2eqkvHgWO
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2880
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2880 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2964

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    968a6802b6f6060d1514b1b38cd6f4ad

    SHA1

    368f9b9ea0e189484714267f607bd4bea7686d84

    SHA256

    92be70c2718426322be896848aca63f8f272f8296a82115643f284b7700dc3ad

    SHA512

    d5a4c27b2e8b04b879dd53993be3ebcb0d4de3fe3479151d00da015f1c7c9c9f233b3ed6ca562fe2cf62aaeafa478023a9d0074536f24be15808f33b9b096982

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a9997b7f96d066ea22ba30d17c3d1678

    SHA1

    76f9645c352dbc29647148f40845d2727c5a4421

    SHA256

    8f86829e2a2a6cd94b59a817a92d21877e67ec4dda0ef02e0a9a3d1b3636a46c

    SHA512

    586d8242120945f82bce63aeca019f9cb201b3dad41e3f98270e4aa8c668a9290811869279f584084b1059b569c26fadddd89f33d8ef786b5f331e9360bfed7f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7612dec756c05249186978e58a311748

    SHA1

    0da2d3a43463c53ab5d6f6d9ddedfc98ecf4274d

    SHA256

    fb9040d6ccaab16504a9c019e8e1eeaa3caa4cff8684a4cd0bc180487c3d20a9

    SHA512

    e1bc846c7fe9c9c9c3798e2bc6af96ecf52642047e6767af50cda3e7480db8f65a37f8f83f4a83535e471bf4cadc38f0706f38279f711944d29080e8db249269

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8246c99c10750fb154fac8381d212246

    SHA1

    b6513aa9e6c2a972d99bc612b4db89d0d75909bc

    SHA256

    80b7f678fb7c724c9a32e4a9d192492a8cb1373a5a856edf45bc9ef08b479a8b

    SHA512

    2a6b95da9dd034db8a571061ed36577dc8e933b3ac23f66334fef81851734525ae08cec4946f72749971527fcc13360647b25fa9e137500af25ab84b1bbd0cde

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9ce1c5e2caf498f3c260efc08c0793d0

    SHA1

    98c799fcba4c5325e40ec0462cf83e9a4d8dd4bd

    SHA256

    7d8df0da6c13214c6d14fb4493a5d9466df37e311ef03ea1273279eabcbed304

    SHA512

    acfbd53fc1bd8083771f6ccb96193a9bb93e0758c602cbb3a904629301e6b161bc56e9d1c9d480ace9b05c7ccf8fa9dd056dbfc98e585accfd6c4a548bc09815

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    04c405a503ffae7cfa6b4bbf13c2351d

    SHA1

    feffc7d0e5915d6162bbb7a295f1628ee9b87fd0

    SHA256

    912e0a99799690b4f26c1e5e7b17b2181fc88a67320b85688230dd34c98850be

    SHA512

    74ff0428c6da931eaeff82e9e15a8228fffd7bc51124a8497f46347f8d1f1c3dbf03d1d454282643ebc3383f9be51e0a9852ece23b6243d2a8998d62f36bd272

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f5308816cc917152bf4e425b8aae730a

    SHA1

    ed0d66bd736f1c29947318ea31985ec83b974273

    SHA256

    1956ac0cf6bebf9019bd1c6f208f92d03269c7ff432a274fd9258c7e259a8137

    SHA512

    e26d2c364c27cc34f8fc8e9d076893dfb0a37d2eb17cb998678dbe784d19308f082becf3e4e73ffcd9c7b7e63e98dde7141dd2ed0bcde4befcb8a99bdb2a451e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6bf8dd8732e54bae48c7cef287ed73f9

    SHA1

    399f7baecaabedfb4f910ed2c3dfa9edc1843f64

    SHA256

    c75cff51a11215a49381539d9aeab37ba89b241b3a2e19f043438d6dd1ecdec6

    SHA512

    78d103ecf578b8533c4fc7b584ef0701da38352cf932ff2826bc1d01cefbb38a8af53eebb5648329c95bc4ea1543904ace9e0c1ed22b8659f1e3f756f38436f4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9b1ccbf407c20204ca3950cce85d2b57

    SHA1

    82f766b8c047e0ab452c16e92d3b1334c6c4ffec

    SHA256

    cf07af0a38f5a34199f070e7ab34eee93c2ccd0a17836fd204a361cbcab18a48

    SHA512

    db200ece781715cd41c40673b3b253d7ba74c311c235355cf0614643d0c0f1e83fa5e91c5522abd9d2c63a473301a7b992669517c9e3ff60269b409375e577ea

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    03c3949dc88e750f208b1b6ecec55e32

    SHA1

    b4a5a311988ea87e1d25603566cc4e8774e888d6

    SHA256

    e3650c51ad1a3cacb7d530e9354cacecded09a18a68d9b41d6275211c7002d71

    SHA512

    f9810adb7577d77851f137866aca1248ab4e906730e3a4ea9dfd131628fe05d0f25aa1693649244c1ae9a52ccf74c91a7a9754f1d6d26cafcb58a7c111b12281

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a7fc1aa59a981815b3127c3943704cb7

    SHA1

    74aadc4745efda631af1886cb84f375190895ca6

    SHA256

    cf48d827847c1ed81a69ce94a91da22905964fe1647dea9c4645cdc53e415b5b

    SHA512

    6c68cc223545d53b4fe5389744005da79b97c458eec33fe1d60896b0e53cb5097b0fcb0cd0095ecf5eaa093c93e2e64ad501f22a8c1235b62201c1b2d5805461

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b8a8e4540d18d4fc62cf5987b988d46b

    SHA1

    67e34898342fcdb3a454a6bb156e245aeb837abd

    SHA256

    857d97fae43bf9c2fd451c44da3e0ffd1ed59a97d01d7c892060435d8b5e5b1b

    SHA512

    e29347b5479636c5f7afa3eaec09e3cf663a307435888c60c3316054067a06f10c8041eb649c95ac437d8c416756944ac5608fc277b641be791706e504de1084

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    57694fd29fda60efadd01d4d9a196d3a

    SHA1

    6c2db31c28201d9a2d0660cee07457ccb0174e44

    SHA256

    d062820354c53a7cca216be8988e37d754cff4c7aa0d89830b84b7e3749c1fcf

    SHA512

    70af995361c07c59549b483c2fd49a25f23b267beba6952b62793867c926dc0d2f547bde7934683b125ef1610a866d76322c8d8c3dc4c4f06f482e8998bdfd8c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    aa74d0e742186f2f3b3984aca9b3d0f2

    SHA1

    ec9c5d354d97d4e20141b3ba20fa4da8639a0d34

    SHA256

    375c1980de2d4bf217881986a5fca0f107a2dfe9befa22bba612965d8dbcf8ac

    SHA512

    e97cd56b60b81175e0061a3aa8f2d48bc3ed94df560fd507cc9dbfd7f573bb270f986cecdd259fdef9a7ae364bd195eeb27fe7b73b6fb0f450f161c25a270e94

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7283765e8ab6046c766d9776ea942051

    SHA1

    84bd02407e94c3d5e4c752bdac3c0916086a1156

    SHA256

    850821807d5fb11ca74ed0ff28d471cb0e0fbfe6dfef1d3f95670c455986b33a

    SHA512

    d38787ed3b1cfe3a684d5e87222ca59b6817e5dc585e3c8f214598f603ea4bc0f87d62d18e04a7076940d085763bfe0ed6eebae8e8b3242004068d59474d1948

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    19c4ffd45bcc040ba2f88eabe6e11e08

    SHA1

    a0753a09014696d91e9c8f7c095f77b8c606efd9

    SHA256

    a98d49a2442cf4557635ec891a4e0b7de758735c4700e98bba4133d837d94457

    SHA512

    506705d065ff0b92a05ec9f151d864c0c44454ee2906bf4476fd1a15a6c55f1caafc82b18e81fc0d689f00e9af6c0db919a3c52572f136650497adb748b4203a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    46e6fa82eb569c14dfb93b43b80cd830

    SHA1

    d46abe88b5e52f4d99876dd783c52af6cd7fdba9

    SHA256

    5d53f2685f623a67b77f5709c330b0943c410b011818e65b8e495d040dd11f6a

    SHA512

    59382ab97346081b8a9e61c6058925ea23481e6bd5c28e0eea00795e268dcc4101b1372654bb06db5e622f9ad584713c21e888fe4f8af77f1251a5571fe5bc7c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a1f8dd2aa61a66e54f1a97e8a3f68962

    SHA1

    a8df19ad3b77583f07c518eeaec91994f85f6a8a

    SHA256

    778d553806a804b7b994dcb209f9fac404f8153dd621534a2d4b8861aec3d229

    SHA512

    62a21a5f577c84d6b6ceabd868555eb52e494f558614c887e2c24205f8d729efae9bbf37b979de7769ad416f659be225cacaa4c64b6ce88682f7398fcbabf52c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fcb69174423732b49bec7dea6ceb7616

    SHA1

    6a563a399229719b3ef2294d1c5cfe1061f614b4

    SHA256

    adfc250a0b32ca521ef293fac01db28b8ebf24c3627989b9b5d006edeaa27e0c

    SHA512

    338cbf8140ec9b1af1a66d447e69de001bdaa5b37534e19db4168e5bce9cacc2da4f2bdd997d3f01e2264439917c9710c485e56236556f8e1ac4eb31c073240f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8c002726c7321c9726aba7f1a1d4f68b

    SHA1

    17c6ec38203bcd4d6c16fb5eefa56bd79df40880

    SHA256

    b3283e1a43f293db84f7a8d04f1ef74d61805d36b0dc4650a232354a670d7954

    SHA512

    5bfd0311584b7bacca6d380402c53b5eed0dbecc9a9b41111c0610d5a26d2101f10098e090c73b00f10cd658961810eaf411e30842d50ebfdcc4f242d5eafa96

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6754c25ccbcd46a1eb16d5709059f445

    SHA1

    a80a5fbe36ff3715c4de3b00a2877281a4d4211b

    SHA256

    34885a14906ab9fe89f0132172ab3d3c856b2329d5c1277a668c02f066f1b6d3

    SHA512

    5266d2d8e519b96934a28b6dfa28a56a370b7a9be40be9df0f913a9be51857333f861bb9adde6ef570095f775d7e4cbafa9ccf815b7da2f89c5ee119e7385ee4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    8ebea2e07286206918d86c2af0816935

    SHA1

    4100a9be07e99a0c6610f8c65e0d767384f08574

    SHA256

    6bb096f927d0c2df2bfa4eed1e165a24d9d12c526c7890a49235cde92b69ee23

    SHA512

    9d678509786d0d26c2428932617fa889845334ca2a7df1633b5d7b2240f8e2c8c2dda66faeafe1b26680bc959f3841f8cdb8782643b21c657440042ed7fb5ddb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\Internet Explorer\Services\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico

    Filesize

    4KB

    MD5

    da597791be3b6e732f0bc8b20e38ee62

    SHA1

    1125c45d285c360542027d7554a5c442288974de

    SHA256

    5b2c34b3c4e8dd898b664dba6c3786e2ff9869eff55d673aa48361f11325ed07

    SHA512

    d8dc8358727590a1ed74dc70356aedc0499552c2dc0cd4f7a01853dd85ceb3aead5fbdc7c75d7da36db6af2448ce5abdff64cebdca3533ecad953c061a9b338e

  • C:\Users\Admin\AppData\Local\Temp\Cab1278.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar13D4.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06