Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    134s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    04/02/2024, 11:47

General

  • Target

    friendibro1/logologologin.html

  • Size

    104KB

  • MD5

    97d5f8777637e9c1aa2cf6ad7d262498

  • SHA1

    abcccb1c21dd49ae2c7815a30e2a1e4d4894646c

  • SHA256

    d17e8cec7f026f7585a7d5ced5e8a13f279821f8787ce75ef6994e3386f40130

  • SHA512

    42a6339eec4b50f47579c5d4a9dab7e0264d537d6acdded1fa4d96c768c67f6c84188769eb70a2ed7f6d2585e3d67936c0c044fcdb510e681950e1c50b0a17ec

  • SSDEEP

    3072:Kn5FWExX8pWIkY4pBjH5cOYXfL5V2jCmeL:2WExMpTB4pkXfbACmeL

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 38 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\friendibro1\logologologin.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2360
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2360 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2624

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    791d5186f6b0087e69486e5696ff095a

    SHA1

    f9a19b0035314647af29b2c6a36f1f2bf009aaf1

    SHA256

    287917b2a444612dfbabf71c1d5a8437ace8ae52fc891862e7ea4049452622fb

    SHA512

    17e3b524210c467fcf0d0421ac8805db0491e371c359a4e45fadd411e043a97404c85893435e2ed640aab8afcbcc01ec4c8ed8bc029a0462f723581c9103e2ff

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    921e6ac0b59066c3f91c595b50030dcf

    SHA1

    06de07f414bfa5289a1a8e7e103e04a59425b773

    SHA256

    5acbb9b7d2bc7f7d373e6cda8ca3a3186218f24990afa8a7acbaaa6c2e3587f5

    SHA512

    39ba2ec1e38134f041894c23fa21a97b224c9335234787055d5f1f67a039f06092e5bdedc98d30e1b25edafbeae41b3ff92107b81b99c89c92f666bb6fb9b297

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    116aafd72ab9f8007fe1dec323b71cb7

    SHA1

    09be6e26bbf76f8fe1f7054cc434c642d969f274

    SHA256

    ba5fb0075503a2f3c09f36265cb2df25086cfa280440dfd88ef2beaee9486dfd

    SHA512

    057b2fa68a1e1d3ebb1425645a35b5b3c6cb01c8ed62b9e6a5abe56e3b15be56edfbb0e8105d7a7563e9ee2839179e7f5b8a1d955e048ca8dc8a9e4666a09162

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9967380a442529b6d6ec43fcf48b88e3

    SHA1

    5673d7f3289a3c45cb7855e6bc1e90eedc4fc574

    SHA256

    0ed1d2ba341f2cb28987fada0e66bae81fddb51898c203814ed12ba71e4c0202

    SHA512

    eaafed80da0c71f6239122c658e5ebda78e297ba6ec2c181cbadefba430451fafc38acffbd1280b90212508be6d0845182314566a8a3e5721f230fd3af5b852b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4d894daa7a9e9d16b202f026279940e9

    SHA1

    71360e460def016687ae40cfbabdb2196b383977

    SHA256

    ff44ffb8c4425a27405169643e50aded1ffd778f236e87ca4409f93d0e590694

    SHA512

    b98bbb55daadd13c36452896998051bd0804afd63ba8bebec909fd239100d96259503f15739e92c38d11cddbcc119ddf16573f7198d85c8bc83b9f0ac973ffc1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ed9cf019df25aa503f6368274a85dfe9

    SHA1

    4373985377d81ce0962b7c73a40f6a630bb521e6

    SHA256

    3f75a723119a5a65b1606ef136e218057a8d2766d386ef399f6c3c68a1ca0ec2

    SHA512

    06940e1938eb8d450e9cfbaa0214e9c34d3300dd955119e18bd9a374794c89bdda32821bd364d06c0df0d7fa1d36ab9befb3f9a0144e51941be04e9d632420f2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    617e87c7d845c6782b0f2324be59b10c

    SHA1

    3f0c41c2c8c9e89d3a81c72046dbbf9421ec105f

    SHA256

    4f33f3ac72410c2ab4c07f50428e16d28c38b19c44836e473e70df75f42ab34f

    SHA512

    d6f512beb75d81ddf58b06350fc360ad527a5c52c39edf2dbd4deacd03d28e207bd01e21f1347431f30d5f60ecb822968b7cb2a989577a6e9fdc7b5983bf46d4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3900555c5cac2f2d6f43648c2ddb832c

    SHA1

    77e2fd5ffd96e049e49a9ec00727e664f661744f

    SHA256

    b79628ffbfd79f58794ad2a1b33fc3ecc9e98705ef4d958f1c66937aa4f6faf6

    SHA512

    7c6c5f890db14c6f98d590ef32c5b9a26c1f3f3ea476e7404a3c7057c3b58bee480117485043b5de087267585295fb8aa1ef7508e345ff90eba262c28927c33a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4ca47cba890a91596fad3ed4f3e420d0

    SHA1

    164abbf794934abeb7f0ca197b86ca100ae94620

    SHA256

    8a2aa420e65ab5c13e3fcda288b26bd3d7b8041740ff6ca9de047443593a3a96

    SHA512

    85f8be7cceb6d330a663c7694ba8cb8a2f1f1d28e8673f87b5f66bd5c507c0b9190e1d8d3175e86d4171c4f9202b4ace0a24cb86cb0da27fec8ebee298496119

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    55bd715002f774dc763a160aa7db3bff

    SHA1

    3234f57833ddbd5c8b669042aee5eb96bf1dbc1e

    SHA256

    1b0fe6d7ab650948a088f70b999ecb5eb6a651e2592536ef3d9ed041d23607af

    SHA512

    f94cf453d78524eb8c11d2fe04d03709601088377ecd89da57d0ea55b9f9eb1bb29a844adb2d35b851e67461b85d3bb57b8001c97a129a26dbb2ca344eeb48fd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ac3fb02779503a6e7600e5cd4dfeedf1

    SHA1

    31c395c1d225614a1be9b8a50d787ef7821b5d12

    SHA256

    158bc125d821435748b5d2ae90b1273af78ea42def7d73361bef8e3963edbde1

    SHA512

    cb68917f675958e82a8fd254169016b8e713038bb1a73fd7ab729a81c29ad92078909c2370b0dfd044e39cdd51dc5fc9c052e5a6a01872367a5e947455c9f177

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bcaf11135b4c66ebc23cc1308645ef31

    SHA1

    cda24c06a7c22c8fdfa9926cdd1add30b996e007

    SHA256

    e9753b71f4781de9408d8f8383a9193745143de32b4401e703489ae1fd8b0f65

    SHA512

    43d00f05299adb5b8e4602463ab15065f7c257be003b2170b0e6c8be3af380443812fa6f9ff380a2e607767093c417d1f86fae0e938b78af5fb0e537d6bacb4f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a736daf318a5b33c8bcf59eb53d10fda

    SHA1

    0b9398498804627f6b438eaaebf87df09de274ac

    SHA256

    7d45b013aa497c5d6a976a84b19ad615da71f4571c67ae0664496d22d4906079

    SHA512

    bb10e950c06a84177336622ae2a3821210665285e7048007e0b790f06e71e7f831ba75240c4f3c7cdb9e15fd575ec1c938d8e0c7c8477d063aea971b68142e1d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1ace5b51b4ec344b95c3f5f09fcd9e0f

    SHA1

    b19f5913deb7d4953b9209ea8a3b2fdc589b0666

    SHA256

    c6af30538f3f1e1c4534afbf479f7d6c1e7f58807f9d858feb4036a25bdcc8e8

    SHA512

    d017b470137720c0c44f02198f1577f2f60f902632c914b7129b2a869b170842ff9541f65f10b74a336781a8d5bbaf6f7dbbd4398819f9f63ba59250c8ea95f6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6dd9914025f79e0f91e076307508c6e3

    SHA1

    f0f264d63552e30866d12e64e84eaf25ce3511e8

    SHA256

    383a90691e7fcf2c9594afaf26d6814f99e74d55622123645fe0615cd2b2609c

    SHA512

    962569fe584f2ed77f31ca8c72f686a205f1537f39f23e263af8b47bf470c96b07081324fe9c429a52c6f99c53f853db138e8ad53fffb383114d8da7bbd05424

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3b8c2939a3d1c783443bdb86c7a30bf2

    SHA1

    15a33edda26a416370e7da4e51d3b1248f650fa6

    SHA256

    8e03bca86f8eb996f0750e6e9e6be4cdce8f25fe99a0b03a19491e7eb22b62fd

    SHA512

    6c078badd8ae5591f53c8724ebd5ca1ac39bee0b2475eb9417496bb7888d15cf6f59806d96ecdce830d4ec134b20c795b535f86d94e640d025d83e371f23de9b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8ae4b1f96032c8ff5eeab076b4216b84

    SHA1

    54a55611fefc3e2635a63a1bd487df6c66be5582

    SHA256

    a680b481a354b72a0b16da162b4999899016b8825f5abc1bf87cd988a211b8e1

    SHA512

    a1b72b2b2eebd8be2a14fe83dc1d434532a30b5c13d6126ad80d89ebf23ecb97cc214a3948fd3cd5ea4df555d20b4f3915025a12c3dcbe4d9ec36c952fb1aec4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f7035e3790c419bdba65518b45518904

    SHA1

    5c095f786452a971769e2fdc3936cc7400e54e9d

    SHA256

    bbdad99d6a4c9c17ac894f3e5a9b49b2796ab6f983e1164b95209c1c6d8e07e7

    SHA512

    02d422472426112a5b27f579c15587ed1d4230f18488287ebd5830a489ba7f8e40d2fed881fd5f74e2d1dda4265406c6239c627e3f2725bc5a1a0d433f1e3bae

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    13f12183a99b1f4904cfd4f9d4f9b7dd

    SHA1

    da0fcdfd3526ae65038835b6c461ad45d7475d76

    SHA256

    722129b86228f4642813053d19017dcffdcbc7a649312b298fdc9965b6c21d25

    SHA512

    527bf5d973e4f6d68bbfb9706f44e77d78513be5542383f685cee6f18832d8ec10425f5d6125af541a437b7b1739f21a1e54fdbde2863501e26e5a6f8d3e7c1c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0aea95a99ce1cc242e2d266702d0faea

    SHA1

    35f13dc7abce582d0f419e31d9a6fe67fac0654e

    SHA256

    2e372acd72b3587ce3eeafc47ca6532bd426107d37775bd6825d1ad3bba29c7d

    SHA512

    0e2a1f893198d8c04f450d902347fd05f0f6afd80eaa707edd2b01bf89b11f275ce042e42290c55e83114c700e3d8f59c2c0829d5111af5db11dfacd22467509

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    f0a64320ff164f4147d73a6e28db9697

    SHA1

    0e3c52394e220e873b446f123f7ec4ac1b7261cd

    SHA256

    eaafbd3716c27a45eb17a046bbb587055b3388e543e4782e79a8ef174d649128

    SHA512

    132aa92990f05ce1019555dc91bb7412c766250a367612a12e5c8f22af4c7514279f67ef69223e3326ed01a98c95a580d20afc3f16fafd4fd4f050cc2d5f1d9d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\Internet Explorer\Services\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico

    Filesize

    4KB

    MD5

    da597791be3b6e732f0bc8b20e38ee62

    SHA1

    1125c45d285c360542027d7554a5c442288974de

    SHA256

    5b2c34b3c4e8dd898b664dba6c3786e2ff9869eff55d673aa48361f11325ed07

    SHA512

    d8dc8358727590a1ed74dc70356aedc0499552c2dc0cd4f7a01853dd85ceb3aead5fbdc7c75d7da36db6af2448ce5abdff64cebdca3533ecad953c061a9b338e

  • C:\Users\Admin\AppData\Local\Temp\Cab3229.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar3356.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06