Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    120s
  • max time network
    131s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    29/01/2024, 09:36

General

  • Target

    https://www.maguro-pro-shop.com/product/abu-garcia-fly-fishing-travel-combo-diplomat-fly

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 61 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 8 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" https://www.maguro-pro-shop.com/product/abu-garcia-fly-fishing-travel-combo-diplomat-fly
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2212
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2212 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:800

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    d6ffb4862c04f22cdb9775d425f5b072

    SHA1

    4915965128da5e5f91f8db216f16af2fcbd87422

    SHA256

    5fad0055721e64773029b145722e76909660881c7140f1a52f38d5d95b0869ac

    SHA512

    ee8d7fd431fa2b48ddc135a36b0e824a7dec2a01619c48f262c2773b2a10f99afd0e095f4bcd53d357834ff6028026906299a2dd3ddfe186bf9e0163d245749c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b585347a5d98c089192f652c71026c54

    SHA1

    b1302198fac35b5cec8e2c6d3a7bdbf7ff740915

    SHA256

    ac4ab953d2700023018cc2a87c7915c69025f2b3190413c86f2e01c7b06bd18c

    SHA512

    85db91261646683f762023488d836d483806db08a4c60e673facc8ef6a37387dcad9c201d279c17600658946cbb43c35197a0d2662a01ebcfcfe2631ad50df6b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f48b566c3441a2932d6f8455f252ab5d

    SHA1

    03dea1ef883483bed8fb2c7e4b6aa7c3a0270653

    SHA256

    01765425d24c302e3649f7d25dbeb319eb27e8d6832c2370bcfc5175ec604b80

    SHA512

    a4e7bd8cc9a5e567dc4f4e7ac8e2bfd57c8ef0d8c5a51330aa20fba661d82fe65d8628b27db23009256b59cb70b4349cf205cf2305249c7ea395e1949effc097

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9c9a4249546c68ff8200d83482ed7c74

    SHA1

    d0717daa2dfb86968e14412307127889e03dc397

    SHA256

    31b30b055304e9173004299a010ee9f82389ac932341264108f6a1e21dd8d7bb

    SHA512

    4fe31319149555639296f467bf6e19afafb7edfbfd4d4cf81f35668fc23c8755b6277815cb8f826c857908ba941f0b66fc5104fa650976a5077526bc6ff1c242

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c0149b33a51f942707b7366bf3c2d843

    SHA1

    f8908e9c4720a73958b21e167467c550a27b52f0

    SHA256

    bfa56dfd0b28e82597365b3929c221cc86e8823a92fce1ba82efdbae7d2d4716

    SHA512

    bbcbff45b9af815cad5e5a73f74d2c16990642ad359b7bb82a32c1f5e336d4575ad62fd9d84ba23d9fbcac83e4416642bae59491d1814798183ce9aa28216115

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    255a79d5d8580ffdf3ef6b38b137392b

    SHA1

    9cf4aa4b7d336b5e56bd5604602ab74ec838e646

    SHA256

    aa81ab9f6838767c7aa168fa66ff04ba1748231d15d750cc560cf7d04f5ec1c4

    SHA512

    a7ac1af7918889ce3989d29bc86851a53c346f85bfc31e93a927a640a78393f1c9a44e14c5d9d2bc3f6fa54f5c8184c64e92cd8f61b271164bea0883fb834ce3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9839361d0b6c06fec949a2d29d46af41

    SHA1

    abd713940b25a574e24fb5570c35070e381c1178

    SHA256

    46d232d821c43f58a9d2aacda8823ca193db7c49216c0752714511fe1bb4d655

    SHA512

    dfcc0871322dcfa61d252e3872e19a2226136f2c67cb166e0c70f92ea3d7c90816f6b70e6150d9fb6827b06c034bd27d094c23af37a18510d34a4b35a388ad01

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1a01a6339f14d38ae661b73da5c35a3f

    SHA1

    c9b39d5367d6256ae775fe27baf71792a1b9748e

    SHA256

    ec2d6bef7ff9e85077debbcec11c80369d5ffa4cb4820d2c9f79c5ea187cd26b

    SHA512

    d9e93bb47d8e796fc7c5917f977ea2267d89f8266b43c2f5f9a6beca9b6daeccfeb5170b395ea86d3183b06e88d8c9899d37a122d255fae03db2256e3cdc2c65

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a22475b974427275ce35363dcbe86cdb

    SHA1

    9eda37241e4cb2e086525c6eff6b5c521388e87e

    SHA256

    bb7daecfca5a13d152901586814119c942db011be5cdf7c5e9b70243f50b8df3

    SHA512

    179d179b962bcbf37342f95c923abf8cf2cf6138e1a9566a6afebd580907459b0bd9c779e402886a0624af23c357ba3b93baaa7ea2bbf03bdeaf58da9f695cdb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fd436db872d4e9e98e899d02c4fd469b

    SHA1

    e59840d54e95f7f054979b48459173dab329a926

    SHA256

    3b5648faacdc6a7e2229f0766a001d6a4ea6af72db3b830290c369fa9cc5771f

    SHA512

    c47e24bb3c1256cb023615b2c9627320708769d2ac13c3400c4766e8b146b9e69b3baeb45c2bb397c1aef26182f9ab49863fc29503a2768d5c6cd310acf19d2a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0a6c0841f494867274d76346af6f3f90

    SHA1

    eafc5082c8883cead896b45220de1367efb996e9

    SHA256

    8839e291243966b5c222b616eba9af8f133ee3eb4c4c3c50f989c393b9efba7c

    SHA512

    7dd40d6377d59bf258251b278c6f885c17409245ac26440d375b1e2a22d36e71e2da7aa643db7d8e826b05065b962d6e143a1e34036d77b1af13b70c3de7ff23

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b9a5d01ff8c816e4836818b9d62c5a6a

    SHA1

    44b5f562f2b0aba73c4a6a745f3d9ccc5d12104e

    SHA256

    5659b1923ce51acf93b2cad3f9a387af0c5396e188a6caa3fd8e4d3946f2a311

    SHA512

    1af869d25f1107fe1c66d0a6d897b46171ed32930d3aec7fd845fb4bdbc72239b6cf5c9442bf0e2cd4b3597bccf01d6626bc2a30ac773fd4f63f51d80495bd0e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    86ed79789dd582b7ae15506f4731b94c

    SHA1

    7adf84773b5c771b92efc44d5e1412536338de53

    SHA256

    3c28b11e149363c62f7218a260ef624d2c52e72f93ba2b6d1eee2dea7335c864

    SHA512

    ccabe935de8c56e2fdd4a07152529f79f071c0882a16850cb2e135718e928422ca4524fe40c19e5f494294710efcaf0dfdbfad491e96be8458d2d94080321ef3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3fa9857e0e97cfb3040e77e3f6bdead3

    SHA1

    a55422350376866e5956aa3fc13abcf567bacd12

    SHA256

    0ccd57d1ef9687f947dfe63fb90f3716aacf1e181d112dfab556456c7a7263ee

    SHA512

    999da44439a4cddbbaefa5d5fc2260d9203e31f81efb27c2199a2f2377b11b51bccd9ba6229b87dfe688884f103e984af53fb3a6d3b860c5fd079623e2d125b9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cb2830b2b8602ca104fcf3cbcb33bf45

    SHA1

    178deed2bcb28a567879197f3bb75b55d0c52d4e

    SHA256

    c2e8189db20e1548808ef667ec5aec6886b9aa0ef6970e798b18168141da7567

    SHA512

    dfb635ffadc10c6ad84cc0673c833c548fc9845392dec7f6c625cd4799034cdac3e5e1dcb7274e8e65e447812cd52067cdd53f3ffd993e5c958625a155c7cf9c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    56bf37fec0f22522aaebfa1353bbe6cb

    SHA1

    bef3e62d6646102406b593d605438160c97b9e37

    SHA256

    ff2fb6df0cc41022085d7b779936aacd905bd83198c99257d21d933a86fdf0a0

    SHA512

    d75a7ac9233a0d2bd10c3b2eb423ea361a6e979c6a3054849c493f069f9d85bcbacaccea94d6d7e81319055946aab38193a6fdf9e8045644ff0b151543a14a90

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e3b6143fa92d3fcd0da32128232824d4

    SHA1

    fb20333366f4559cab0a4ce75ec7848eb48f3441

    SHA256

    f3d2681f3918763865395c0a5355f86389105bab3911474495a9093dd973134b

    SHA512

    42f01d6b3b63c7e6c6a33c940b8e19739d4e5e74297e6952ddce8f51058bd75ce3f8c12cd7ae12436e692888bdcab31f7ce666e447e649d8c119df53b5f1ce43

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d1203dbde3fbe4192e347015b37c8da7

    SHA1

    a28d5598849b270a4d699b68ef761266c41e99f6

    SHA256

    c4429b232e575dc7a10b821c5ccdd59383d9d5845b3f4fd428b7bdec2e87eb83

    SHA512

    2f89649625bb0e5b484132f743450d8c895a313a5fd774e0aa32059ed62344ee371708a34fff0674d489f518b9dd5cf73ae28cdf208eaab1317a7d2de8925bfc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6066883a59e22a2b247c02bfc289d155

    SHA1

    eb39cb17633e1366650415a67d6668ac40a36a1e

    SHA256

    2426f306d0c01478f553dca6344b1180ed53fe9f211a545328b332cde4ffbca3

    SHA512

    61f997bb6a85dad5402b94cbaf210159eb284e47f4fc1446185da9daed548fc08b05b9064afea4289d6d38dab60cc838a623ac96350e1989e3a09e052873870a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    763e98e0e374ba3aca1473a86ed6449b

    SHA1

    0e979278d9abd5a74dcde7a95fc93c2b5d574ea4

    SHA256

    deae3751a369be641b258b973242eff04f548395873b40f4b58412ad87a34fb0

    SHA512

    55b699e15bf6115d899281f6680e5030dc498f434881af8d2123fc943cbdd47c3f12a26da85f8d8c67ae8aef4fbef064e5a50c60d656c76846a65a344fb32849

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    31423d84afb520aff9a617a63c0aefe5

    SHA1

    4f5b4d8e19763746aaec8e697687b9d8a37ca230

    SHA256

    1373aea965ebb5a2b7279e8f68e3f3cbbd095ef36bd197998980ac3fc2384638

    SHA512

    5491da2c4a40ea15eac7b74ec9a8aee077ffa333659b72fa2bdd1ad14f946a5dbf0d608309c46deb20dd6c0de4a810db48fb59ac91f308fa809dc17abb48fe03

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    f51b2a883f5a3320fdde4701f0c2c222

    SHA1

    d9eec87081c833ad4ae11b4b7a97c0b1c286e25f

    SHA256

    0f72ac11a4b71dbba42590cee7e14ef362777e6f6215a0e478ecd64e2c3cc52c

    SHA512

    994f2190df9c6d8df070b2c3e085cc02d995f4155ffe3215a9fef7c705bdf95071a0455bb9b6163fb8c9e745bde429f686b6af1982d3672ec5a29f84bbfa007b

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\1YVWL6AI\qsml[1].xml

    Filesize

    280B

    MD5

    fecd4793f196edd96a343206414401a9

    SHA1

    cc232a5476bafe13d3fa1427e9ac3c9c0624a582

    SHA256

    b6e0ed2303b5f1ff469bdef1bdd7d33c02da77ad96f9ecc0fdcb783e3f924e87

    SHA512

    d4f97f9b8deb27b4e43bb3a75d7ca8e1002c6aaf2107c2653ee0e70ca8eef2cde322299d04816efdbd0e616216aa35e4316d64e8a2a0dcd268add772976f8075

  • C:\Users\Admin\AppData\Local\Temp\Cab5977.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar5B8C.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06