Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Resubmissions

23/01/2024, 16:21

240123-ttwr6scfg2 6

23/01/2024, 15:37

240123-s2w78sbfdr 6

23/01/2024, 14:53

240123-r9g8lsbcgp 1

23/01/2024, 14:45

240123-r4wh2sbceq 1

23/01/2024, 14:42

240123-r3fffabcdl 1

Analysis

  • max time kernel
    68s
  • max time network
    71s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    23/01/2024, 14:42

General

  • Target

    Claim_3456.html

  • Size

    458KB

  • MD5

    9e310a76299c0c8cba40a0bba76bd934

  • SHA1

    7b1507b134ae06ca9182d23cbbd41cffe044473f

  • SHA256

    0d7c8f449cb7261716940fd57bbe6d583aa210cb08440c66038ee83207f9c34e

  • SHA512

    8eaffba06ed0aec2127dd47af3b5e1cc2467b4790f395b1ebf86779a46317dbb9a331d4dc7500cb8b8a50b7ba63ec79ff7aa2c68f8c5b18ff610c82cb1bb1c04

  • SSDEEP

    12288:9UYf1Nq4RLGZtQ9g4fRqAx1GVU8Nk1XEU:JGELSQ955q8j8LU

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\Claim_3456.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2252
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2252 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2876

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    ee4fbef40f7657cd5a995ccb033bc00d

    SHA1

    81426ab0b1a31d578f65f858d7f4abf3695163b0

    SHA256

    d04e27becc52d689f1d47a640db288dd3bb4ebbe0b9cd3dc295942c0a9420440

    SHA512

    78a1bcdaa2361b425293b3f3d1ed668131e3727c5bf7452cc059bd9d5d0489c1c325a7921ff9785f4a629b1a7a9c9bde113b9a11fa53e00a2b1d5f5b95844b78

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    22abf728600edb7e66b16733043a41e4

    SHA1

    03fc08760f6ad16a633a889a907b78ddfcf49f05

    SHA256

    49e5ecaf6c2a9d5abc0a479b4e6283ced847777aa77587db891d2bacf434482d

    SHA512

    68fd7724c339df43bf326da6293551ea775a466a8d092956c585bd758ba4019095b95c57ce6564135a938caf982e20a03eafe3b0a29f5f87ecae1c894be2b39f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a9889caad5b36ffdf57bf972ebe23d92

    SHA1

    f585fb39be428140556f250cdf1ac09de24ff984

    SHA256

    d0938548e9487050ef071e2068d3472b02ce0f9ab0c9d173aa1e31dacd770ce7

    SHA512

    53d116c874cacc5356572efa785f35755ee6711fc7392d60fa4eb8f302c3fc9fc644fc2f5f37a43f5eb001d3862a6441734b8cd5d94570d4b7c4b74efe5c947a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    084cf18629116ebc218db1498958986d

    SHA1

    5139ba2d8cbcc23148158b6366f546f74a757afa

    SHA256

    133c7a4f7110b47edc12246bd32de46de50ad12888e98da71dc832138296e642

    SHA512

    667de3c01085b43297a10e7db657a03da15fdba093ba47d683bc4d94e56edc5fce8b8f3ed08bad7bae7b70242e4c972eeed15406586913f46d01a1f663f679fe

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6e452a584e12a70399081884afb091e3

    SHA1

    3492360a14eaa2ccdeed36ef7a61908d0825c1c6

    SHA256

    5374053aaf34befda5ccd734b10dd42bac479f47fcb05a83a51f129ff37e3140

    SHA512

    a908890ba0982c101009d516e8ee4ddde3a35145e58755a2afc359c0072502493fb274b85d85b9c0a3521d6b1e8a265ce92da5fe73117f17f4a3f79f43588c00

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d733eb36094cdb409c56cafe43d85777

    SHA1

    2536b0241944420b3b3da81081d5982c7e9afe6e

    SHA256

    eb9560db4a0b3b810a365e030e1a67e40c3f8869f57750db79b7202d620e4e31

    SHA512

    16991de60c04b9e9c1c22b84aa8f3f355a9826d658482ded1413abdc555d5c6648458ce057e5e24bb2f55ae9d075c771f5c4f13408322796941f35bc1da7cb55

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    53382c355682bcb980645600e5a1dd34

    SHA1

    59b9324a537eb8a0224dd25a5b28551f8bc2cab7

    SHA256

    9759aa07f54c178afe8c880f25f70815408835d51615bcf45162cf5eaf5d4c78

    SHA512

    a3a9960a3ae5d8f2a495566fbd90cd33d1b27b342ad02b0865d17570f235265a571457d047a5bc5848b4bdd9c74b15fb59f219607fbdb2cecf476c82c1fc78ec

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    80c1cd15f4adbcf47bc81d5ca804e05f

    SHA1

    11072cff639bae5619e899734df3dce5c5889f2e

    SHA256

    4344ce660dddfdf25c9cac1e7f6c0bbae6ba1e5c66c11647ab9e4bb135da33b8

    SHA512

    bf39e28383800506ea886102325eac44274e61896558cb62cd8d57ee248cb6cc629d44e4e1eff7023469d94023ee2ee59e8edcf080dabe6071d773966b6fdf14

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    00ef9ccd4ca76cec6f366bea97c287f3

    SHA1

    e79f539569ded927f8a7a7cbf1bebbc792267c4d

    SHA256

    4e0ed6f44354377807d5b9e74d99468857ec8cd0eb0b5cb8746a87af745064bb

    SHA512

    8fceca9860ce587b244c28146610412b33d9a967d49a3f766ccb61edb6d2b116978742e2ee988c64dc91179a01762674e9503426e76022d2fa8c2f9b43b31173

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2f8223f7dd159d07e2e68bf12e061b3e

    SHA1

    7017159f29a9a98f176de14832d917de70e1af54

    SHA256

    98e46b567d5bf22c86efdbcff24be2ab2238df9fe709ceb459be4335a17d5f32

    SHA512

    b8bf1295db116d0ec57f322e470cae88fcd835a2cf89f551363c819b797d064a4b5a90ff09cf8030acc7a4104ae9d0cc6b9f074cbc2778ae1dd72abe282c65e2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    490bae46c73991f37474444fcc805103

    SHA1

    ec195020d6461abd39b762bffd3d1f7dbf6966ee

    SHA256

    c7a1c2f7bd1ba1beb48620f697c16695c29a856c4d4968bc1e8c374ec3753e38

    SHA512

    faf915bce084dd2f321d5aa613f628217b19efb2dc4056e78ce8c7b0f55c874a8a790927fbac384aceb40056259868f4829307a78f6ca77dd1faf77fe39c2dbb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    86972f9c7655f0ed9688e4053af871ff

    SHA1

    288a1aada13c999c69509df5a3f5c24db7281758

    SHA256

    b62d8a2792a05d63b996ba44cc6058278d120bf3f9ec75b5b070225644a4de58

    SHA512

    c5d6fa59f76d846d145f876a35ec6a644ed21b79fbc92b69eb2f9f3ff0bf2be1fd95ee403004cf7fbc319cf3993bb6b11f6770983d2b86426ac821ae15ab31e4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    79c034967c0a048b94252c5e77cca092

    SHA1

    9b70741377454a36681e08b2f16768725c620ef3

    SHA256

    bd5eb9f7f88936a7e813d4bf2b2eb3e942d3ac5873346be45df70a5807ef124a

    SHA512

    e8433db418e5a10d13f69938b670b8b468de9c1f72c4931f60e64fcc92370802ea8920a90e7228771d9c1a580daddcdbc840d1c3adaf2f814353f25b1f187601

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bcfdf6fe50681c5f3653019ae41945ef

    SHA1

    5eb4aa7ad325378d6b8999f64d29e9962da6bd92

    SHA256

    b6fffbd3542164459078a791a91123b21434b91511934bc28922778065192492

    SHA512

    36229767115fb6e09b591d7cf6fb06e4b57d9cbf47cfdc4fe9e2284db4e96b737c680804dc90c00d7b24c39576d4eccc2ea26a9b1c05aa7dc4a70efb88e5bc68

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c51f33e90deb00ef2d0704a18a22e42e

    SHA1

    564898f2982e0ebc991c0d1b21adf6a8acc31373

    SHA256

    99a9b897480636a5fdcbf38767d0a0cfa9d17be4821c835d0ad0f96604166031

    SHA512

    40c4ad66ef14153555eb0d07b1a7d409e8cb292a8621bce499a8e02e2cc50d026fd77d63ef92b25f7aee71af1901ef5a95d6f54cccbb16d69a533bb5942e3736

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c551ceea4f4098be907854a9a3ddc1f0

    SHA1

    2f74d96567d6dfc9ddc869d43e02546e0892669b

    SHA256

    b4492683c0b9f75aa3915e6b69515c53cfe21b497868bba5250f8464f80dc752

    SHA512

    48dec267e3ec4035ed88d30738056b282c2290046b85786b2b7885cb38bcc51ffaf024f47ac4e967816b021cf552f41aeb2e30caccaaa16a1590093400398361

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    16a3788117df57a31a787d4aa92bd746

    SHA1

    a9a9507af69065e7d55d6b5e754e3b7fad6f3a3b

    SHA256

    ab48a6f223b6ef97890fd42be2c5adcead18c221dde84c48c4de476137cbca51

    SHA512

    d017c7ce7f12975daf86f14f27853359b583109f9ccef79f0a8af8104c66dc507aa98b168a6d425451f6810da9bf7a39b0b1acfa615e96eb9796fe8991ebeef1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    04c9fc5152e98cc7c46671ad097ea7e0

    SHA1

    f39fa3b5641c51892aa2953d0fa10ce8a767281d

    SHA256

    ba42666fb5bb939a2e3f4268a8891f881c403cf1ac29d0708a4986dfb5fb706d

    SHA512

    37a40ec1dcac1e29c9b129ab24d14700e47960fce069113b8a61a608a184b00a16c9b80e5e957425ace1f24e4640b4aaca5c75c4c1559cbd2fe0f78ae59502df

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f22f2cb9bc1f64ec5c8c5fc37fd84053

    SHA1

    853cf5afc2eaf9ee7727101b23d99999b355a6a9

    SHA256

    f03fa94a6897d45ed072b9471ed119471b8338a39daf6ae2cca178a64563f189

    SHA512

    25245dc1a53f1f563db3370ad48f601a4c0901418108359a9f2efa434b4d4ffe36922efcf845fee3693f8ed36530724baa074f8dbafdb48b9320943797677bbc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b0ec1feb78daf6d3688c2c5380bedf0f

    SHA1

    2fb5e24bc787483a4a7929c2cb717287c0ca2bdc

    SHA256

    f425e69daef3ad426aba8146103769d36cfb4bbb5acec6871c4866427ebedf18

    SHA512

    d4ddc4ff96701129422dea0cfe0941ab6dea6c28e34f5723c1620694c87ea870d352000fddba1a639e467db43077589352a9a8a2370bd62bd32803117001296c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0ae7fd90b0079c50aec723830ecae8cc

    SHA1

    0c730c4e2bb3af35932656c506e3fcb6e9945ae4

    SHA256

    9ee83dbbd55743b70c9c073f4a504b3c7106da7aee3a506ed9cb531efaa35452

    SHA512

    04ca2cbb6e722ca56ad5db1ff314faad1a123e9c44b18dcebc3df54128059538043e5e6aef67ed7df7afd7a8656758827dcdf094ee69ab0979c5ea97e9dedadc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ae1eff157cbf8741e87f56d16e7b835a

    SHA1

    b3fca0b6f29a9742e479ddf2364e29c109bb4673

    SHA256

    be1049d023a94f7e4724e436a889282bce202e0397a2a951f6efa631364d2ff6

    SHA512

    b0fdb8b17679dc3f950aadd5e9c92a9dad16f3401d190c01f9c3127d86e84604a3744424582424373769a1344c99c421e24c7f631b03c86cf1f170e7adf8e619

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    9e33440afc90b126ae091b20ccde11e4

    SHA1

    56a9a11c26b4c263de2c1dee70fadfdfe5d60085

    SHA256

    9ce5659eff1de496ae2981decea3af2ec9e27f8a97c2e4187577ae780d76654f

    SHA512

    7185e4c1569eded7142e0139e7dfddd6df429116bb4eaea54ba6a77893d12c09ee77c6cdd1cbc1fc38267cdc8445cce1fc3c7284efad104e21b669775241ead5

  • C:\Users\Admin\AppData\Local\Temp\Cab6F1B.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar6F0A.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06