Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    277s
  • max time network
    135s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    23/01/2024, 14:19

General

  • Target

    https://vjlhg7.za.com/

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 34 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" https://vjlhg7.za.com/
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1692
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1692 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1476

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4caa1603d8a2281ac840470c43bd5a7f

    SHA1

    51925265a2dcecc19e89beee1789685e4cbdc8a6

    SHA256

    27f4430e45c3e07525082f514849e7f3425b12a61d01d578b3ff95d5542f5912

    SHA512

    e0220b5aa1bd4bbfe5de54ba55380898cc503110abb505e86e2c4d4b69894e0c3860d7e416bc93cbba7ac296e53921a6823d58fd26a3a149f1c25a743336c53d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a3c607025dfc4ba4b2c1ac152bca15a9

    SHA1

    795c5a66c0fa9ceeca98a66a048aee9c291e4070

    SHA256

    21fede8acf745ad0da6ee683bcae898bfcf9bec184e4c109f60e82fe1d921b2e

    SHA512

    632debb513059900fb692cb7843069df31da5a34dd8901aff1688a6f3b54a8efcd0d6f17d8216824a058de8eae4f7617007ff5d7a8b08b78d70df593d1ad0ce5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0d716517ee513247943572546936eb0f

    SHA1

    5c8872ea6df910cb8cecc7df2b8544f5a426d21b

    SHA256

    d652787f76ec7f5ba3ad1708c27521902150003b4ff4b8e5d64c06e72795e08b

    SHA512

    c5281d10eb0c89f6196835dbae16f3de745d85dd402b4a28575fbb3ced1972b293b3fa7835f72ebbbc711ab8631dfd08c3f16420141c8ecd9b16ec183d34de2c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fefbe1b547a932e737f4eb0091c59f3a

    SHA1

    8a1b91b1b6aa7dc77ad1d37d2dba5fb432a8cbf4

    SHA256

    fbf032cc5564197ae913699440bdfdf293786b11609f9ed0bb3342a1c304a5c6

    SHA512

    e07040bc29c6a867869176f1c323a2cf9b2dad64acb8bcffd04b79723ec42a038d95e806f00101daa9a55e3c401e141c7f951ef2e191fbc42c6bab646d2cfb72

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d14e029179a9d6a389bf63701d292c54

    SHA1

    dfbebaafc27eac8b82803726bac40b5d92e4ecba

    SHA256

    1725cff9b6924c3bfc5b1c4ef3f462e018fdee456a6737b8c137af8b9ef29bb8

    SHA512

    f9de274e9a2114e17163df076d28c1a8581a3d82d6f80007d9e2008456d9417c491a23fe939b35c5541336de36ad524346d1a52dd8d6988e0026e533c7e15342

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3d366558946a16ee77026cd055d26014

    SHA1

    c5cc2feffa6d2452cd2a15c8a28affa52e1b4c6e

    SHA256

    1dbdb02a14d1ea3b52dc10f78ec4443fa02546f7fcc6583a28b7727e6e0ef59c

    SHA512

    17392e4b76d2174a79b045f70231dd01cb95b9e2238d2f393df111167f6d4ce4503c33cfe09bcbfa29ba52dc2c96dcc161bb711c7826cb41d1d03ec77a1223d8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    08d6fed88bc1ac0701ddcc72f39eadb1

    SHA1

    dc92b7a1a59ca7dc772cf88a03454ff2c9b1ea7c

    SHA256

    b271e359644c93a357de8cb0b565f71884e611ad656d29e5aa608351239ac824

    SHA512

    8685b1739e3141e190e7019050b100ed6fbe9fb66687044c8947696c572acf64bedecde1529634e43422423273772fab37b014a0f6e3d807a69a60fc7806bbde

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b345273a0dd7b97a92d8839c7f95d535

    SHA1

    31153a5854eb5885e3f2cd5ae4c16da857cec6a2

    SHA256

    7a100d15b7974026bdf5bfe4a08543f2f0c8610580ab2b68f83df028e3054073

    SHA512

    891c82762bf3e9656085fcb7447f1f5dbaed0846f058f0c24d325709c451e89e54e2139faa7699c1bd8a35d6282700a81d9f9fe488a50f672e126929600ceab9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bf06e76294e812389bec44cb540c2d20

    SHA1

    0b9d7f865aeb2234ea2f3895cb3ac8d9cce86593

    SHA256

    14590f31b494bf7ddb0fdbd511b498366d07e3d8db7c06982827db6cfe277261

    SHA512

    519c729f58a5960a27722048100b93415fe535b6e554f202923bdce4fed3ae7adcecf77eab4935f94a9e0812a71c9f9c92e94c75eb93bce14fc1f58f8417a8b4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e2834e719b69c33c627beed78a3367c5

    SHA1

    dbac7b64970cdec15852b015a28a87128853a33a

    SHA256

    7efa17b21538868dbde1a63623ecadda98ddf40d3df9e614b7471a2c3e3c2564

    SHA512

    8ec0851eee985a9e481b0ee0e7741056fb32cc274a7e20a363904be91d8dd0cad83f31e4eed592bf3f0f98e0e97741f965a6667fca0e401c4cbfdf59482d9c49

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7b1a9082e263eeb7a79033bf4efcdab5

    SHA1

    285369ef048bd64dbd2da7fa1024a9d00d60d269

    SHA256

    c5e68bd851862f915b393a0c9e5b40a381ce37aeae33c8118d6f3682bad6c59b

    SHA512

    2e70e3677b816a7ae0438d0365ff5639d86a0ec5d5ce00600fca84d0f63ba828fb2d3487749c2949431f2ce617e13ff097d2828b1d0961979cc1c3c2ed118f80

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    59d085428cd7845d39e1fb23a200f30b

    SHA1

    90e915d5665fae06934ab62bed91d5e9a2d6d817

    SHA256

    f421fa681c22cc7436d175f6ed17d4fea88ad375ab344b2e08e0c0f8507cc5b6

    SHA512

    c9c771ada762b3a6de183d56e7c5ba3fbb241355ce2de85e96ee3030d91597b688db589396c7ec2aa47e7e33b8ac3f7221dae89bfed582d6dce8c1c51e09952c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b3711c04c4021a469e32bf83de89728f

    SHA1

    887e77f4e91cd2c4061e69489f141f9e605c1c8d

    SHA256

    54c5ba8e829401d9ac35d4b893d778dd5a10ac7e3a4444ef28f8b42217bc9ec6

    SHA512

    bad5c9ba00a6573af3155313a00690a291dcd422603d64cd75dd537d57215aae6098c9877a23bd331955228ae90df1e66fa799c96d7ab7b0daa2526018c618f8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0ae4add76fead12ec51e00a5ce67a4e2

    SHA1

    7b63ad3658ed626ee59eba1bee0efed0461c6c62

    SHA256

    54f9d1eff4082bc6016012e29ba3a92fcdc1d61c70607b92367f23e00021f527

    SHA512

    02bd307f4d35d1c2bc153e6bbf868644ec10bf7fc44ed67ad0746cd02c747b7421cb0e5e1a5da2c23eaad1d6d18a02feeb9a938b568ff1c7d540cef7cdf7fc5c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c0f178ec963ac59702fb69b4dcbd2e30

    SHA1

    0bc618a68deecef2f0003349e09ca1854c055669

    SHA256

    01523b1aebd5455c003dd692c5c30dba84d3b15d81d6010268e2882b5460a982

    SHA512

    325b7602075a52e13fb3721207095e4845c886793422f6f69978915146165086ca4980af67bd6e448c7b416ded1beb2f3183943330baab2600b8c3d3d81ef890

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8f680764d679fdbf3f528e4347f4e2c3

    SHA1

    7b40ba51d30d38ea0a9617a5b08d2cff6eb5b65a

    SHA256

    ba086c09fc2a304117b5654a3ef314179a677575d480acc5faf1e38f6ee29b6e

    SHA512

    59642acb7da17f3d9b17bfc0b9f50fc5d061f0cc4293fa31b281ddd5147ef72a6b22eb7e11ef7cac77efdddf00ecf58dee29d15fbd40108443410d74bf88c179

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6463c16da2c7859d3214c3956cd00753

    SHA1

    98cbb4248ae260d03a6477fd59058ccee946285a

    SHA256

    244f5ac76fdcd803f4ecc4e8ec776e688d18ebb59dcb997a4418247304471e01

    SHA512

    fa51878d4ed403237aed577ed8d95b57063dbbd20b487ca557f227bdc7ce20df3d25706c065457ee30da5c572a84f40b854fb7771101d519bda3b42d666eef25

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3a906cb3d60778612b77174cacbf5c22

    SHA1

    c05ea8b664eddb0ededfabaa6d91e0d90961871a

    SHA256

    0f18a459b58cd58ae98ba5c72c4cf3e37ec4ee101d4e0aff6ed8cc003df2cde0

    SHA512

    791397dae71b218ac034af198f6cb57cc7781e9584cf1f93aec0bff4dd3e99377870c9587d3221713ee4e041e030287c6dd08cc962726964c0e51383bb6d3fa6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0cd1c1709db7e72797db63058cabaa47

    SHA1

    d54783ec904028aed3ddab8a6d0dd8683c3059b3

    SHA256

    09d6d07e973de1fefd09970f1325b41fa0614c0f21a1aad53be9998bb7c3d929

    SHA512

    b9bdd7110f73e1edfe9b86ca22fcc947ae51ad934bb16560ebefc785599160120a7fd75ea861d23144a5ea35c19f10c708ac12272d0e23e8252fdf731db841a5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    661f79d2279bc5caedff0c746c8cbb5a

    SHA1

    f67f24785ed581569f359460a1cc6f12a5de1265

    SHA256

    6946f390caf62ff1bbbe041e7f7dd2d2efa14f56a6d9249beb301768451c1789

    SHA512

    09e5ad7e9e862f2c062799152eba75757817d97754608bb8401165b3ad5106c6a03be51710e4f0873516eddc60a1019adf7d4993e6754b4cd55e211c31586f85

  • C:\Users\Admin\AppData\Local\Temp\Cab2B1.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar361.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06