Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    140s
  • max time network
    131s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    04/02/2024, 09:58

General

  • Target

    8edc7171622780b07b6d69e2274f6a4d.exe

  • Size

    28KB

  • MD5

    8edc7171622780b07b6d69e2274f6a4d

  • SHA1

    3d127288ba6b08dbda26a2efb64f70dbd92d0242

  • SHA256

    98ccf4ba069b0493b172e2216726600e7829e91cc8ce8e6ebbc2528f56986a1a

  • SHA512

    d37b2c3f79c83aa48d85af65855cbee834c0192cfef8b483aeeb22654300b789aaeefb4e283d066b32ed4b199348806eb54dded5d88820db9ca9a3a3ec507f60

  • SSDEEP

    384:3pwfuVrsmttVPT6Mw4X796jxSnM0VgRIvH06o5OwAEXfCHM5FEkAPcCWW7AtPPMc:3caJtjPuycM+IvUpheM52lx335xGT

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Program crash 1 IoCs
  • Modifies Internet Explorer settings 1 TTPs 33 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs
  • Suspicious use of WriteProcessMemory 8 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" -Embedding
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2036
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2036 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2668
  • C:\Users\Admin\AppData\Local\Temp\8edc7171622780b07b6d69e2274f6a4d.exe
    "C:\Users\Admin\AppData\Local\Temp\8edc7171622780b07b6d69e2274f6a4d.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:2460
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -u -p 2460 -s 360
      2⤵
      • Program crash
      PID:2908

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    93f6635ad5ae7ed009e2cc02c5a701b6

    SHA1

    cc47ef58217208fd269b44437055d650f2750bfa

    SHA256

    810ee5395ae8f07d5fb044ac3268b1c074fccbf9d8d03df2043c210c64155cd3

    SHA512

    940ae81c6d3905a47420f41e6b799f65636b392418e67d4b65fef3429089e240ec415736d7f30ab7623c194ef62cd3ae0afd47e9ecf065d5e603471e273b110f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    45e334bbf2b5562a4244d8c8ea233428

    SHA1

    8ba14fec3fbae774405e0ea8a0b6c0b2eb5b97c7

    SHA256

    6fd9efd563083b12e9b75bf124acfa60a0c23d17e462c94567f7b3b20676dd93

    SHA512

    4475921bf3c0b340a61ad6de49cfe9d68b5c2f7b89081dd7642fe0e60a85d9b56638a0f4c868c40037e2749e4d7814e97f83f3326bc4ab3e190aa353274a02fe

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cb5c2e4cdc5e39b5350bb9c45b4f6268

    SHA1

    4b70d2f28305f4b72f651da4e5a9a9c68f77cb92

    SHA256

    1f74d218fef1e9ca3e289569628cb49037c3f1fa9f6098f105709861e8ae5f7b

    SHA512

    12f132201f1b58096860f5e364da718a9439f5b66e5a20f4a8569fbebac35dabd6d0a1615a94f2a90d8225e307203f09325de8c8a16dd88ee22cda27edd42898

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d46c8471773b966c2f61addb884d75c3

    SHA1

    be6be1a6e6003169413152e25ef787eb006cc661

    SHA256

    937021180f2a9d177f03d1d03d74918535e5ba24464773cbd0af1ed28d8f01c9

    SHA512

    6efce709c986d1f48cd3be2376992c8627479587077c4a28a2f856b939346fe74c45ba4f5a740c504cd98a191806b5096b8310fe683dc9570e24f6566f91d73c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    caef08628dbae7eab2260f799ebff9cf

    SHA1

    5c677f0e7c13db7c054d1b98f1fb6be909ca8d92

    SHA256

    16d59cb4bd1a3d2c578a9626ffb20b6b2b87448e9428d5ceb1b430f693b54ed0

    SHA512

    9f632b66c5c86475f0a93019f06d1ca2240a27e3a096e6785e28b7ca866b4632ade30f74dd6098d516787c546abe753a77b70613ea985a2da207328c616ff63a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cb29381e97f24439a59030530749d198

    SHA1

    b2d02aa0fc7941f3053fd82a3d67b4210666e448

    SHA256

    2da9f9bace2301b87b2e56417f33bf53bf0d7d2918dd57fb44e76b1528a0881a

    SHA512

    fd2bb0b5e7e4959583cdccbb735a161c7b580c560ae5af88595e6533a05c5a4749d8871104a13572ef6be295ece4f9bd3ba80f5441f5a807f96d969581d977e5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c25e472ba02329a3a7f34c6627fb61e0

    SHA1

    ac1cfb268699b15f6d9719ef5b82d1c4e096cfe3

    SHA256

    ed42a2036f69697c78d641579119d8637c887638e90bc89c68e3070676696753

    SHA512

    22052816f66ab1115d6431ab31ae0fab5b59dda1a20413903029166f17acee5583024e8f5e2a8f15bd3ea0b160cff768a8ae9950dda51c5ce2d8fcb71d4bca99

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e5a79af5b65681794852a982c8b01b0d

    SHA1

    5b1360490fdaf19bf651441ca379503d919a6f91

    SHA256

    a5fc4582ca3567648b9d1d1f065a35612830081315243989f071e96ed724669d

    SHA512

    bb1f3ac812f2ff27dcd6aa8782a696f4ba2cb324ef9498680dfea98c64492c65702e70e613501456dc32aa507c421767cae19e77f640f885b376b64fdd430f30

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    aac3538b22e483e40acf9d5bf5c6915e

    SHA1

    5e2cf6427b6f34a14b790c78e5e172159fc30fbe

    SHA256

    cc3b0c4bfaef2522b19d0d160251749d81a0439574c369ffd4a28114692f408f

    SHA512

    119c175bbdfe9c445d4cc2782523f6f37e9cbe059b25a0bcfc970c7d81652915b3441a753e6c8843bff1cbdbaa80d4ffdbce1172332efc3fa8ab1318facb2dc1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2678cfb29eed74fe31aae7a2aaead969

    SHA1

    943c2ca6b34d4e2f85f5f52d05293b8a263ee93e

    SHA256

    22484eea5ffeac88c05f19dafede242952581ad283356f00ece3cbf8c1ba15d9

    SHA512

    d34150c46caf081fbfe0a6ca5c0e9994fc8e0d424a8e738f1275a40c47cc332e6113dc3c7d594814474ad190a5abc740039d036eb16951bfcd0857316c43d996

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    55ea25d8601d30cea2facbd2194c5486

    SHA1

    25af9f0f94b39b7d9c40a76f51f2f01c5ae02c05

    SHA256

    f0754bece4c8ce840348fd4794ed0f1e4c386b95155e55344945035329815c55

    SHA512

    79f6b1208d29f3fafcb543045e36d00b5914cc87c5e1e2ff93a47f6ca13cd1804c8067f1c0f45926760116a3b55cc135f73272bb1c3c6d46413697105a22bba4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    51c19f31929611b7d5204a529c0fc242

    SHA1

    7be6d8e199a5773d65b7333ceebb9466bd8784e9

    SHA256

    01d6f345cdd17b164a4d69ecc91d55b7f7ae88ee4b0627f63c889de32c7a5cec

    SHA512

    dd4ba83ba0471c482e9d994edae919540353463d2bb8ab6d3c5807750ac22c1ba00c8508f92fcf9c7cac2b783881f78f1ae9acce07b346ca7c0284a492aedac7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a46a8117a160df66f5168b04c37f26ec

    SHA1

    9ce3ed091ea720fe4037f955cd360bf568f3ba1a

    SHA256

    f3df7ccb3f77f8e3527c6682ec9633a666741bbe82b75c5a13771acf16c051f4

    SHA512

    815440ce8f5e548498bcec47e26ce09ab6696bff6c97aeceaad76156aa2cfab1420258b8f2735d66a58a57df9b74148624ffb0ed722eb39ccd24b3a785aed825

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9e0bcee331b6df116676bbed7ed0d629

    SHA1

    b1b84c3b81064ae4f759ee71eb12ca60b20f34ba

    SHA256

    25619c8e6fdf61b08388a781e6db7a35d3bb5af0a710392385d52e5905e42e0f

    SHA512

    6fe68303adb86e1f512d5e7c671097a297038f9a61adb7969b0a5bdd10a5652a5778a09adbb4847ef193cd6236d20292b64961b1d18e8f638a04b8c2f3c30a8b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c773cf6c4caf86bb21e485444b193db3

    SHA1

    08433a8e832ad9dc3b1947703b654c91d98de252

    SHA256

    9f6ab76054fff82c10d6b7a5d5f5dc25555963733578b43d637fa40c02cb56cb

    SHA512

    864ff4de1057a1d01211123990069dbfcc1a058c2a75fe1c51669414e1c04c82a1a0a19eda0bb570a68f05bfc7ed54f80a4f8da54bfb1db82fcaa35603b9c253

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ff6fd2a546a1f838e67f2503ba60eef9

    SHA1

    cd40ea2d61dd4c7631ff6c3b1c9380de9132efe5

    SHA256

    3731f2afafe957b96b6109b87d2446b888c37ed888344fd746a9571e157fdbba

    SHA512

    02452c27eedef7a0cb43bff8c30b3a208716c0d835ad4052a20e83e95565c8469bd7be685f29d21c74a1ab0e591398a9c47f009cef4f2334653090b695db55e4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4989ff7b41dd1a52bc16b00e1484feac

    SHA1

    eff094bff19d1f2862511190c3b8dc7d508d862c

    SHA256

    d05d950045dcaf30bb976b7ea992eec1effe93ecb9551919d32480ef7bbb8228

    SHA512

    db0afe5d407b0ba73c90eb85f18e8d432c085483440b284157c86a6fa27bd04d4921d68f25b278146bbaf78267e210ab85cea0de75de6c639a5a4c181b84d2a9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    465c32a3fb15f8f9374a7628a237b18f

    SHA1

    48fb6a53703e2643f79220c992b751ec506cf1b3

    SHA256

    bf840c9321a39b159e634495fee31ca6b3de1cfb86f1ca147ae720dc45b7ed4c

    SHA512

    4a32cdafd9233fb6ad5956bb6e77f95389ad1364278a0a0a0c64c6528a1b4dc3bd4490dcfb0c134ad4db6b9f0fe9d652994d4bf6418c333e4253a0df9b7f2d1f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3dca2f76c243d617ac36e7f62ee5d8b9

    SHA1

    480f1a3a5aadb729323d46b8039fd7a8145640d2

    SHA256

    db11cecfde578107c9b840aeb83cde47184f64e00b3b6730ae3efa6c1dffc96e

    SHA512

    c902b135cb591b6dcc112ab56b242bc7540b5b3dd9526cbe6a78d097ca10124eb793573b34d066bed29db2464dcc92438805c64dea4a4c0c7ad95b2e4c2264b9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    49f3b5b951404e422051bee8be4a697c

    SHA1

    41b41939e861acdd7d7c46f60f1978d357ac4925

    SHA256

    36bca62a154ff5f73bf620b93eb32531e5202d4b966e40e19943281a1ca570e8

    SHA512

    f9d7348d3873e7eed3ec0acb5cb6ac1cc4d7b1fda652e580a5a6c9b0f4e9b1c04f450d63fde8b4c907075a4df2d7b2126e5edc8d57d35819befef2550e20a139

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    69e8c325447bcc95e517ecdb8a7a6a40

    SHA1

    896cfb3bcc49ed8d50178c70166cad13128e4a24

    SHA256

    87f43f4ba264990b5d27149d137042ba244d5c4f2410800aff2c03cfc8860a48

    SHA512

    6e763d4ed561183cee7bb1a56b23d78eab65ba604d90f8daca9d724e4441343e06a11ec41ddf5259f9a6197b78eaea7fd0460d7b805c06aac679acc0909b7d59

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    18ed738e8be51369361b4779ba5e2003

    SHA1

    3374c1edd5beec46d70df8f3ef7160b303de63c8

    SHA256

    c2cc2ce5f4bdffbb161c3aa68923c4dc24e38b19af1f0734fa714654e5a1d7b8

    SHA512

    7990078845e0f2275401715417b62bfb3ce9b348d36527cbe9a64a42e508f583df27e343fc5845b688f678a014ccfd6ac5e0f5979b42270befa4c03beb187cfa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e45e5f7b3c79acdadfcb1c050d535300

    SHA1

    22282c08309c9730d508246fe02ee11e11cc12d8

    SHA256

    9f6166e5eb7abf7fa66df97146120ffe6eac9b37a501f437d2c80fa1de3e086d

    SHA512

    31c8694bf3a329c4b082322b4c72cf75713d8b38d7b959a67f9f1ce98e8cd7210e445bbf2a9b6245a39e609da0370421722df6ef2cc5c0de5a66ae552a4dbaf5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    9d79a6c11377928fa700c9cd143eac1a

    SHA1

    0fa8d537410135919d194fee129236fd707dbdc0

    SHA256

    be04fe23338636cac7b4a8847a1b2403ec95633ce6c2048f4d6e15d41271423d

    SHA512

    b330f9313f9772021d6850a42fd5e244818ec8780decd7e7a49b3e7acd86746670bd0a33269078ee08dc182d8a81f340edcbc25e366b60a892a7164cdb9d7b58

  • C:\Users\Admin\AppData\Local\Temp\Cab3F80.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar405F.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06

  • memory/2460-0-0x0000000000400000-0x0000000000414000-memory.dmp

    Filesize

    80KB

  • memory/2460-548-0x0000000000400000-0x0000000000414000-memory.dmp

    Filesize

    80KB

  • memory/2460-1-0x00000000002C0000-0x00000000002C2000-memory.dmp

    Filesize

    8KB