Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    120s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    04/02/2024, 02:10

General

  • Target

    cowbelly.gif

  • Size

    4.2MB

  • MD5

    db10649bef5c9b27da9ba84bbfd7b4f9

  • SHA1

    823e0317957ef323a0a5500f8f1b29b74f63bf4f

  • SHA256

    6fb2f5b0c86a42f0b346681e9bf099478c911e4695be5024eb1fe811c0b2f9c5

  • SHA512

    099866912207cd57c4223751be2ac05a13fd16826a974d208a3ce6d508d58f2f27fe713897258cd8d6fe06d6f6941631052257b33882b5c8f2821ef924786d4f

  • SSDEEP

    98304:wsuKcSAgvCkBBkrCs08igwJEiBHJYtsu2Vwrs6C2WsM:/Lvvsi1hJ2su2VwlbWF

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 38 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\cowbelly.gif
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:804
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:804 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:3024

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    0c272aa527220598e961a9ee68f90c1e

    SHA1

    515c72dac140279a7deebd32c3be3012e98a914c

    SHA256

    5c8003712db2e15c5074396b6b08b6430e0cd3df32f20f678ffda3a30a0e118a

    SHA512

    806a5ccd30214aa3a84b3afc5c60b95d529fe2d2e8bebe823a1d700a83c9fcfd88cd22263c7fd6a8bc50b8960e59bdc450d7a8c3db70a768ac279dd14b737240

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1c7f553c91672a620ce45bb9895f2ed8

    SHA1

    9eb54b1d65f76389b409c493a09e6673b6e8e388

    SHA256

    9c04939da67742d7d9b77acdda5d51d56ae33597d75676f353770173b141e12a

    SHA512

    b9553e8d02b0a092798c74352bb0f43b72f8296ddc6c413808d6dba0ffbff7e32674b031f702b87e608ab94247c4aceaa167ad7dd2ead7bc0eb8d8e5d96b087f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    346daa184c8d2ec37bd867adf8a3b1aa

    SHA1

    f4334d26ff2199cb3ab800663cd8beca865c2dce

    SHA256

    d9452026783269837e629a3787a1f3815b61687cad9d8a6901b45dcf220cdd4f

    SHA512

    87c194b4cb686cd6419f9d0f7d0a71300af61d6c12748273e6de77a62e979eb9e70f65e686603884aaa4ab22e90609ffe054f4b9f42a3d37f31fb8ffe32acbb3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e3e532719f3cfd041de1f9439f3797e3

    SHA1

    de27b4ff3e13a30858aa6f70f1b7c92059899b5a

    SHA256

    dbb74fd3bdbc8200dda65603543c06a290dd5508f28a75cd294be85716d924b5

    SHA512

    6eb7fc333e5c7fbde18b507e7b81e19404ec1527b9f53324601212b419ac07f6cd72a72e6f56e4f0ddf531f32c8cf0e8a08ece05c9cbbfde727baba6b7b9ffd8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    14e9d74f0752699a45877d72298d8828

    SHA1

    1e409fe4be83d46c6715417de13d092efe237d68

    SHA256

    f6a5287dc8a6900c245510c2d207d3c88802e7a55d859d3cbfe6c893cdef062f

    SHA512

    ad2f5b93c0ae24bd0c21d13dc5670a5a21904cbab8f9f7c945af4ca268ffafe0f1eaa0762abf3d2d872d6cd865beacd46225d89bfbc43d26791179ede1d83be4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    521875373686696557cb85e336200377

    SHA1

    d5e35c315b1244cd116c5b8b88b67b2e0781beb2

    SHA256

    2dde8bf8b57b251fda67e74ed3bc771f145490e5cc080ea36be761433c71d6b5

    SHA512

    d749f0af95c5f5757001204997f60d9b7011347e85c1df267cfec5eff62f1f238b436eb281b82cb2e7750b07262368a01bbb26893272bce845b644b8282892cc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8f81cdf119a6ed7fb24669521e67a509

    SHA1

    749360f81b2cbf07dd3c7c769586398e6edcbece

    SHA256

    41b5a8b11304a9c8dad8331f591b17d6dc0b551dddbc4791f4b3db6afb355d58

    SHA512

    55076e3d4aeded32f527da05eb9cff6cd5c613807d34554f0516d5c310abfb9c3c790b192b98bf790e1494b5ccf5104821fbc478d19ac1c1b4326b2dea223454

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d77b77730bf0f60d6629ea7f35a98397

    SHA1

    2c8c97a86eada2a7f1a5e689da9f97a16170d82b

    SHA256

    5369cff2401da32a7ccafde457f708f12b0304dc7ee29def7900d7d621da510c

    SHA512

    5a541c6a549d94103e6a865da84771234a599552b8b16f76a4c4969b1ab85f928c75d6bfb4d91f91a977ab78e357ef53d78a00faed3404dff681c5000ac5af75

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8e4543f187983a32cdb51a81e1bfb05a

    SHA1

    1402eef6ac548fc0107f47efa253155496832c55

    SHA256

    68fe0ba54bbbc59a87ef63508ca58c6135b5ab6e872bea2ec416ee9e5af3d64c

    SHA512

    821635ac6cf8167bc4964037e81434cf47b0acde5b63e882aa206eef4ee9d4276308a109ad17031e08559e2c5921ee1b001e4c56652c60ad4f7a11f2d2fe3821

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    44bc2f4ad8454de861f263b5d12f8687

    SHA1

    0a1e34aad7dd45178aa31bdf0c796f0dd49aa26a

    SHA256

    877946093bd0ba8b7d06e0ffe6c6b4f575abde1dc075c98333cfe404bd1509fa

    SHA512

    5c155118f5a8d0f154a55520bbeca797b925df5d40c099a18027598a365fa75daaf0965564a42a87482eb9eaa127dbb4f31767d037c816d58f0b96aeaeb843e1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c6bafdaab1890836d52eaa97ecbe0774

    SHA1

    900d2860b1bebefdf2fb4876520ac4bb13989439

    SHA256

    6211c4ba4981f0904b2dcc9660db7a4992836fdbc2d18fc94d5987c585a1b3c2

    SHA512

    7e868838aa3902c5472034b94850fb8dd60dbb10b038f2c14cce37a74b35a7470a11e033ea12c65b4eb83f1f7774f1ffa51b23a27e5c6b8d79946d69675b0cda

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    95d0b9f0856ff6922828532ee2fad457

    SHA1

    4cbb89a94feeb95c19e44fc5ce187ec6b095a16f

    SHA256

    93db20ea8e62a55f32dfd18d326353187bb72cbaa7618da5ae7441bf6b050c31

    SHA512

    a3fdac074305732851b32ff831a503cc34af2127256af72877048841661dc7e725d673c904cc368040b1164fa5fb040c32b85aeabd55e4936702f13638445331

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c8eab624674f73641475532c77971b42

    SHA1

    84bfdcdd4aed87f4a39617fc6db2953d9c4a51f2

    SHA256

    f3da254da99d62b89d8112f0dd2eae378136302b8e3db3a859bd9bf131b7f8d5

    SHA512

    54492bc0461e3b484bd78d0add0492879c3ac776cb86b87e2773cf64b6b1d5f168fb1f8737eb97834cc9e6f923916b91b87e8d870190a2fb484833eb6594fcfa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3d354309ff4c29c1c3cb08c343f8cea2

    SHA1

    b251d4ca8bdafe4a73558189c02c9ad62c555e67

    SHA256

    c7979a85d491a4d8d19c9d884ca7e6d79704ee737d6c4ff9af1669a565e09379

    SHA512

    3064558983fa48cc95c02a1573a43c60594a1af1f8fe04752a9b58051e3565cf0bc7e75b729084aa503548b85e66d603101acf9132afad3f33a403d1d45a3512

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0a57ec6ddca3c0315f12e5b66599972b

    SHA1

    c6c06e72d970bcfc3f085a38ab1a31a1caf69a85

    SHA256

    3b896738f45f8545284f99ccda72f21215d103386cdc3ea69a3c655d76b8a342

    SHA512

    7378a3858f8db097afeb6d3eb0cedcbb124e58fbd91cb424e7e2c9491c03005cb53ddf747830ac4e91b074db3132d14de6ee3ab8e178697911e8466e49229360

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1d29891bf4128f544812459c29a945e7

    SHA1

    bf42824199862f8973e6d993db20aca40190bcd9

    SHA256

    94a0e2e30715d61cb71956d4b4a9d60756fe2d237bef262118ae9381f1b6a178

    SHA512

    d23e66581ce27fe01270cd35d554140b6c1e106237958d7a997f2f3a5445308373cbfdb41f4b55bd11f95dee12cc69f9b9e651bc1466d8b557a71e0bb611111e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f32c00bdcb3645a300ca5149379ca548

    SHA1

    d0e70bb8bf31e9dcf4249e286b55c4ea004f42ce

    SHA256

    6359233dfdb6d9ba2aadcdc7d3766241229158ec90db343436debac1471c0a3f

    SHA512

    f50dac4bc1932861f3b53ebe5d15510f4b310f362d4cf1b8d8ea8c05bd09bf1b72efea334171653d60471365bcb77ace8f55950db609f4b8fa3dcc31b2a37bf3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bc03427f371a1e35635dfdaa0c4136ba

    SHA1

    a76c2ac579fd9b877507ac8505f327bfd5bd8a7b

    SHA256

    02d5649682e630c925df450c8bf907e2ebeb328ea5ff1715801e870e0cfb1e3a

    SHA512

    ff6d8a54504fb842e43a701728a690d44ec7e29071a04d4d818dba5b0b1d2fd8b8bf3901229957bdd843d84f52c5e246874a7466f3a5c7f22eb549b4f7100e58

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b8cd69e59311dd8419f4b6f66b808329

    SHA1

    842e917646edd9e565881b7a8c4ce8548c993886

    SHA256

    64921c09e265340af20a1f66ec76afc2043f77aa81341b3e864c082a0232a0e8

    SHA512

    4c91d0fab74cbc8e74c5f3e529b74a802cb422dbbc1bd3fa4615f8c19822eed5102dbb1519eeca90ef865ad9f4d1dd9b33e96c64a98a6b5d17be225224b48417

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3616aae7e41c9ce02015f429351b72ac

    SHA1

    43a230bc0c65c5e0f1fd2ec8b9e775dd013d0d5b

    SHA256

    ce31f62c54e31fb211df6fe3d3ed4af6beef66692a8764ab289c67679364bcc1

    SHA512

    28b6457617f5d07f29c03be4648a877e8381563a834463f7b067e236ed1596c6805169054f5b11df7a890383979274f38c1ac64562e22e11ef6170e3746a9479

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    2ada2a3883e1ca8122806d3a363899c6

    SHA1

    9e73b3b4299f3d18f9652c0f12b5ed5d5eb647a8

    SHA256

    b17c35a02eb6150cd20826202faf50d065a554b16716508d8dc4fa3e783769ee

    SHA512

    cb922b6139e37c487b54b6274fe9aa9ed6c900dd39c59e86d5606ecb35c8ad5ea4c68ebbf52d157b53e0da2d7d13d0c992aaa78cac864303c48da39501e74784

  • C:\Users\Admin\AppData\LocalLow\Microsoft\Internet Explorer\Services\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico

    Filesize

    4KB

    MD5

    da597791be3b6e732f0bc8b20e38ee62

    SHA1

    1125c45d285c360542027d7554a5c442288974de

    SHA256

    5b2c34b3c4e8dd898b664dba6c3786e2ff9869eff55d673aa48361f11325ed07

    SHA512

    d8dc8358727590a1ed74dc70356aedc0499552c2dc0cd4f7a01853dd85ceb3aead5fbdc7c75d7da36db6af2448ce5abdff64cebdca3533ecad953c061a9b338e

  • C:\Users\Admin\AppData\Local\Temp\Tar2217.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06