Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    120s
  • max time network
    134s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    09/03/2024, 21:06

General

  • Target

    bccecd8904a1b5987abc6c65248b5938.exe

  • Size

    1.3MB

  • MD5

    bccecd8904a1b5987abc6c65248b5938

  • SHA1

    a9ac8771408a387d73ae161cc2efe986056113f9

  • SHA256

    7c13c5c0c581aaa1213c42ba7868b89142660bf64dd94c49c133b599634059d3

  • SHA512

    f54c3480f08b3e58da059498c406fe61eec1701226afcd868771fc6f5cb0ba673b93921c835183587736ea483ac4f25bef373e5ce8d34fdad6aa887cee32893d

  • SSDEEP

    24576:cejDKKiDkY2+AhEcy1BirYZqXMrDjUm84QeP3Cqkkkkkkkb:ceUDeyLZqcn3Ct

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 34 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs
  • Suspicious use of WriteProcessMemory 8 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\bccecd8904a1b5987abc6c65248b5938.exe
    "C:\Users\Admin\AppData\Local\Temp\bccecd8904a1b5987abc6c65248b5938.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:1696
    • C:\Program Files\Internet Explorer\iexplore.exe
      "C:\Program Files\Internet Explorer\iexplore.exe" http://makeasymoneyx.com/redir102.html
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of SetWindowsHookEx
      • Suspicious use of WriteProcessMemory
      PID:1084
      • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
        "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1084 CREDAT:275457 /prefetch:2
        3⤵
        • Modifies Internet Explorer settings
        • Suspicious use of SetWindowsHookEx
        PID:2112

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    67KB

    MD5

    753df6889fd7410a2e9fe333da83a429

    SHA1

    3c425f16e8267186061dd48ac1c77c122962456e

    SHA256

    b42dc237e44cbc9a43400e7d3f9cbd406dbdefd62bfe87328f8663897d69df78

    SHA512

    9d56f79410ad0cf852c74c3ef9454e7ae86e80bdd6ff67773994b48ccac71142bcf5c90635da6a056e1406e81e64674db9584928e867c55b77b59e2851cf6444

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4e1671aecc9036a76a7fd842e487e249

    SHA1

    61f9221c5fff66c9857ea8a427c4bea6faafa2f6

    SHA256

    10d451ec9613339e49a1d2cdb82b64aac748ddb8342099f82ec18e983c5f3f49

    SHA512

    28863177d173a5e7486a9c7fe5b4dbc68a5cce3b9275400723a9c0c159be55944dfee62cb744732b1a973f0b4fd8268e330258c0cb56d5811ad387f0d6935e28

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    487ad8468eed2896f2a5fdc441c74282

    SHA1

    f5b406056e993468b26d790c47c0527b63e31da0

    SHA256

    71d60cf1aab0697c57c50be161c48eb3a42c2746ccf04110452fab7489e1a6d1

    SHA512

    0f9204543574253a862d92e5304a2a9d807d067fd4f432ddbbde088c6c8c10582b1111834e80a9fea2a4c4c987c0106386a55341d1889502ee8cb4af873d0762

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5cd046b2d78082fd3cf9c7b28e150ec6

    SHA1

    79e74c1d81ae609ebb5913219fb18a31efcd18d7

    SHA256

    dfcadfd5facebf7776f8105baee015dd180a94323d8c4d965e76380e94653a4b

    SHA512

    433c5c017d8f4990ca5fefa904c23e8c9731efb8cf18d2548c9f2392f2b40082dc80307b638341eae33e986d3086fc3cdc56e6b81641ba9992a8f11e771f941a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5649004112b61cf087b0565b025df6c4

    SHA1

    62bd4460de61cdae676256668f27b9f7e592b61d

    SHA256

    8a9bee11a1b8123b00f7b96cfee986adb465a0977f97c7e8a601482980322b1b

    SHA512

    8ad0a73b853ed708064fa1c3ccbb57f316c2e46c095722c0eed4eeaaac96ff3846e97bc9991f26c108172cedaba52b231f1554f56fd55ccfbb5fd8ce8795dbaf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0040037e39c5fbd16cdd7ba91ecf289c

    SHA1

    6fa24a41be48f4dc78d49085c297d3d2e290c944

    SHA256

    1f633f381b03a2655284ef0196c16fe4fae2838242a6730ddf594ef76266b9b8

    SHA512

    bf49eb69d674f0cd894145473e43cf13feafd9e6dcf84f0243587c4f9709a227c5781092121e7c3ccacb56bbc62d06d307bd6124f3714ffedc55573656f6b97a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4faf863bfe4edb78219186c5aad71491

    SHA1

    d73f2b83fcc2c00511219cb048bef0a4a7f0127c

    SHA256

    1fb96724773f97917c95ee38cd815479ce81722d7b18a261f7d2a1f49a1bc499

    SHA512

    4a418cf44c5ae536265501a5bdc855fb64e7052225b0e3c4dd4862a2408eee17c1e53adc642cedf524660c46fad344d8153a77dfb4ce164b4f5e8f50694d2f75

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8ed2237b5a18491e771471cdc04027de

    SHA1

    b073cd053400b7d45d2151f3ca3479b65041874b

    SHA256

    fafd12345ffa7a7b1baa7f1699c6ec488e605529ce8ff8ccf5792bb5b453c1ce

    SHA512

    4851f93b06014eaa4fcf9a5018ab47fc90c697e69b7174600cf797da1e37f91f7644c89c04714d6362e3788abee31d6129cdb367b0d7bb16a1338b10d5b66740

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8a4a579ca4c331876e3a9929f47c46a7

    SHA1

    de86b717c2d6a01c124bf260cd0c5c5e2d6cad8a

    SHA256

    7355be49e4a09e49e6e71141b30797c487449f9dde4d18ffa843533d6cbe331e

    SHA512

    95038037a1c568547cf6d82adf4d79c325add0819d551562d2d3f82bc057dcea5913090a7a467caaa3d48774dd98926bca8184c8087d4a03ea9a460cb456995d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    53687d1051291ed6b6a37713e796ba35

    SHA1

    20d2038be8cb47e7d57ae3bb0250dd7a20a4f869

    SHA256

    d7ac5404f297f71dce6fa1ddc7685aec84c55c5095e21a2223b4a8dda1137047

    SHA512

    92870fa0db8bbf4d5fca1a23d4aed552b6d7d73060314774ff60c5bb7b956e9f56cf0c2ea0047258da1e6e7fd0557e91038275c93857ed1ee82ffa21dbfd8952

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    654b2d88b704bc2780a2ea7dcbf1d50d

    SHA1

    09155f734409b35a94296b3c1794a29a3066525e

    SHA256

    e4f2c52976f6fc987a0524e72a882c32a37819b05a7dd8bd62aa672cbedb3ea8

    SHA512

    e750cd08f75b6763156e6c8de632ae3f830846ce99605ad18facfa1378bf61455fa0bf7515754d62f319ed0abb359038e6275630aad00a085c90e9853b6ef115

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fb6f621a941658db3348dde8b1e8443b

    SHA1

    dbd5ec673ea80521b40907e4f59b06c7f643266b

    SHA256

    0f47d3a31124d2fc6bc0312d328343e9a65a27027f68c8f3a76b528082eb8f0b

    SHA512

    77d55be238c6d5026148e5afb00557fac0593a8095f0eb390feef12db01789bd8566baf7cb416efd79eab274fe1c4002015080926e11c8703115911789640768

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    88a6f6bd097297ed2f276dcd357e9d1e

    SHA1

    beebc75593a8eb0e70852f90383446d0ccce905c

    SHA256

    5d7b8973c4cd3ad9af7b3cdde0d9b7eace7f1a172a6ef0446297eafa8d4baf3b

    SHA512

    27536611cdf40e116280782effa2fc9ed6ea75227878083ed7048d3118fb63c39dec42a40bd79ae7b672b3160143501625d59b92734d1ede0702190e18fccd0b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cf3148aeb70bedc1bc24b6f2d46e8b5e

    SHA1

    bafed07ccbcc7a8cf74775a7e4ae5ee89962c992

    SHA256

    464dec570e7d57eff3683379fa3bcaca78b6d22943ebd2bfb81ee9e820eca7e1

    SHA512

    2980abe92092f2777297bfea4a1198a3f05095aeec87c319e6fafabca1e8ae8c73a5cc52d3e7c21991045a8e8854647b737fee51a7acaddccff8a9cbe81b1a93

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    03e5ec6f4067c25f26580c901239209a

    SHA1

    1581ea738dda3a69950eb190d82740487e8a870c

    SHA256

    0a6de64aee448e2716e1fde2afe69e1d24072fc57710564bc7590170568b1187

    SHA512

    43ec53a36e89d62b6be57dc860b07cda6faf31d51804ce0ac62e24f39f9f9a750c7396d78eb00264a529089a7f5776ddca9a7ec591f8f072f6b03e190db85b69

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    710dbd4a9fef6d59a94a721964371e80

    SHA1

    dbc6689d165e377526b895bd368bfa43867fed97

    SHA256

    44518d6dafbf056f4394327e31eb40f25f73c2dd3cc00cf42b186460a407b6d5

    SHA512

    d2b601cbdfa708e7fab0bb1eac9ac531f91914d652c95ae378b23d854ef0fbeadc10d2d848ee9c79555726b2c825a047ddad67b93687ec1379b82929cd03823c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8cd0569e32cfa798163112363fad7572

    SHA1

    394d0b572265a7f01a939a6b8ca1fb4e0985c41b

    SHA256

    e6517191dd786ae3e6c3aea5fb2d5dae1fc6c7d96c979ae86f3a61bf286350ee

    SHA512

    98325312c597cb648fb90ed166c35bb24cbd9520dcc452d73c195026f68837e0285e036f8112654c5ccdbe0a2e5a10bbe7a91dbb2f1298060ccc363e694865e8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    415a236aeb36f841db0d606b15552f6e

    SHA1

    cf28747d6feed43cb1609e6cd08997872a01d2b0

    SHA256

    72cc280a8d5ca9d0969e83d1c414e9d0e0d8475eba3a75122cfdbaaf5d4024ba

    SHA512

    d8bb12e1b4d5a102149cbb26a1a08a2c3035b36fbde73a3a1c1d7fd5a8cac06bdcc326a92a4444dff74cc4cb4fe6fd76fdc4855f5aa3d3ca2d6b673f8a36375e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    992618b18a47b02a03fbb3b17f0bada8

    SHA1

    737cb9bb9de1a112647bc54d8d2f459dc537bad9

    SHA256

    7d138054d604fc0da81998e319cef8f8f3ff5b5b3447fd7784480457afdeef46

    SHA512

    d57791ba63dcfc9e39ab30bb8e3c04e914c5b37ba8181adbc853a84a72e6d1be78444d470e4b7d2daa92577385a6fd37fe95a8899d5d7fa71590c106cec6bfc1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b37544530ae6c10cbdb86b74e5a43942

    SHA1

    0ce70ea47af20ad888ef41885300fa49035efb6b

    SHA256

    39d0b76052ed17b91ed044f0a9bb9d1934339b0f0e11028fc7c70e9b9c1728e1

    SHA512

    68a9cd805de11975ac9153374b79e8a86f7d9581c75450846afc1c8772b63c1c01c64942102b19f81594b6bf4d79e7b4d333945c0e4e39a203f51ea437de4277

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    97cdc20a1d1f2e010b70a3db5871834a

    SHA1

    325ebb2d393e13ed3acb145f50fb2b39be91e371

    SHA256

    8c39bf53f933f6b51dea240987d9728aa010d0ee50d186e3b90faf7c7a1846e3

    SHA512

    0b0cb3d0df4182bca5507db0cf9e521cd3e02c5d9725dbb6677a3937f693ac2541499199910112be8ad5aec0f39083ab9a90ac8715ef423a1b1324c40c3cf601

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ba0e0aa8272ed2cbd04c2494254ac022

    SHA1

    bbbe2140cf230f5caed04b561aaeff4a128dbaa2

    SHA256

    c63cc0af277ef272d568a610fad3d04600b8a230a9696bdcbe3e70037e862e68

    SHA512

    c84ce7380e862fbe18ee6e071f5b2b9fa40b72bff0c46a01ff8dcb4a677c3f3cc1430da0243037c6669f4de8098c580ee7ba71f3a45e2a491d694cbee74a4981

  • C:\Users\Admin\AppData\Local\Temp\Cab5DFA.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar6BE6.tmp

    Filesize

    175KB

    MD5

    dd73cead4b93366cf3465c8cd32e2796

    SHA1

    74546226dfe9ceb8184651e920d1dbfb432b314e

    SHA256

    a6752b7851b591550e4625b832a393aabcc428de18d83e8593cd540f7d7cae22

    SHA512

    ce1bdd595065c94fa528badf4a6a8777893807d6789267612755df818ba6ffe55e4df429710aea29526ee4aa8ef20e25f2f05341da53992157d21ae032c0fb63