Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    153s
  • max time network
    159s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    13/03/2024, 18:10

General

  • Target

    loadmov.html

  • Size

    822B

  • MD5

    6f2fb6af185f4be57444b63db9c3307e

  • SHA1

    0df9ca1ea9ded26b90aa0533ffa7e4f24af988e2

  • SHA256

    84bcd28bb32ae35fc537bd0fa62c9a50ef6322e8b2dba50db4efb75e4228011f

  • SHA512

    94e6ad4aa8a755e3b2344bdc464d7178adca4dc2173714008c914b4a3828fd40bc6602dba7f13871b9bce35f19a023f873f7bfe1257fbe26b9a73c12473ae157

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\loadmov.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2780
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2780 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2668

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ed6d9e355be9807aebbdc9db9899295d

    SHA1

    f002ca312ccca4fb823bd2e5477fa17b8b9a5161

    SHA256

    18bb1fc28d32b993d22546624c5e0248525bda04b100cd3c3ff943832d9a95c9

    SHA512

    bf7e8a51ec4802f7d4793f6b66b233c4ef835e4921711017bf2ce599387823838a0a96b479dab94848dd2ac6cf53e105a659951944909e0549c3764ba46a21cd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e140f2c445dbf27e2c5ac68cb0e60bd6

    SHA1

    fd26551d5c4fccdeb5a6debb6dd34cbddca361cc

    SHA256

    54000f84bdeb3746e6a013fda876b694108fb2d8a8db8843bfa9173dcfbc13db

    SHA512

    ae68cef1b1591420829ba17458c6e69207bc74a53c95d469e79cfdab9ba62245de7aca0316d8e785d9fbbd4aa33e5e6a3bc48ef651ddcc90f8a90aa7886069e9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    391e1d083043052efe3f3cdca5878295

    SHA1

    80f1c1972ae99851acd167f93420550011bb5289

    SHA256

    46c3f3c8291ecbde60eb6be0414b961ff83b1b4e629662cd1d74892ee58fdee4

    SHA512

    6cbf29c2adad4b99c26972aea8f6f02ae981b377e8c44f0238fcf23ad1212a4dcb6934aff8d636b015de7cbd1c5d7ee92ad901f4e14ed16a535cee3e162fc771

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d080a9d86aa5ef58cbb21c64125f6938

    SHA1

    c3df17f9334cee954ffa3103e31d08eaa5cbba62

    SHA256

    7f93658199c6fd410baaba7138301fc0ac508d66b4f016cae9bdf2ac4f3b8d75

    SHA512

    a8e1dabc7c5cb85c105331756d0042487100883a9c91069811a0f75844e209526b14c0963362a2fc3e82b18fb5a228af1066f2da7732a4d93697ded3e9cf4d0c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    28dd860d97228e6fe60a7f369991eb12

    SHA1

    fdac9dfe12343ef5d9644017f872d1071db28ece

    SHA256

    f0ad2ccde4a52edc347cea26b8c59963990b911b2c3c8a0f7c164ede1015042d

    SHA512

    52fddda857a63b911ce5bac7d33889fb3278ea67acccbba3b3f10cadd8f951d7a1bc23d38af6889ff49d558494a366ba30edef76f3dc3f787b18623a3d9f236b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    395bba373d79f65a6ab0b623c28010f1

    SHA1

    a3ebe1ed4c8b729fe94c665c9786b37df786c436

    SHA256

    9a971dcfd203839ca7609cc237ba9b518a09fdb5e08abe04c4157cd5c35a2f9a

    SHA512

    03039ccb28441eb15d6195e2fce0b7280be3b769b0521fed4f590d008a7b4c5d35b0ea01ca45ccef661ade99f7153b25454ebc68dc6d33bbbe783f56ddbae71b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8102c2688743050bed5138cdba07a0b9

    SHA1

    9e888b32559f0b5b29a7e17bce2673952bada230

    SHA256

    367022db415868a8d874c7dc91a3b8cc03b8c434239e81fdd750ec76d56ccda0

    SHA512

    e216367596177a2c3908c7a6c93a0ee37e66047d30b4ae58b4c0275ad0668b1bd4b196d2cd7214bc10d4ae39fc6c4b496b11e968c696259530ed4e2607b9942b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    62e9e364642f67564ba21384eee590aa

    SHA1

    c570bb509371dad1e97be37d999cd28dafa68a9b

    SHA256

    63bc7aa9ee7f8c24b6abed831e20bb4e7247939deef996ea06794aceaa88e768

    SHA512

    fee76d410799eb57f2892cf9984dbd4e528bec106a52700f2d9086ab6bc688f2cba149d1496a2a271a1e7c84930c92c4fad725b71dd1015274da040d1d501ab9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f6b89987d442b433b7a244790ade45cf

    SHA1

    5a739ee344c662bef247079af5dcb2945c9a6f9a

    SHA256

    cf3024ddb99f31bf714ad8aea410d9b7135947a019a78cdbed4cac6f9840ca5b

    SHA512

    be5f3190a0501e26ea1f6ffb2a32ed0d2f998de03480f3c6258bd1c8d689f531cb7fe4955603adf65327722350ad57c2d02c1799724ca9c8fd6f8dfee2005c7b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    17a53b78f41a9ef7b9aaee7f69723f98

    SHA1

    8e97870db9dad9c527b99274adb93c323094274b

    SHA256

    acde2a38584a21eed79524a5666b9ae306029539f05e157d1b2171afe024df6e

    SHA512

    c33111f1c09298ebf30816ece4240d2bf39fa145d8b030b993383d29e94f6aaa281892cc7c6e39d8d39cac30a8ebf0a674354659c4240ce2ab55016499e82399

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c4cab726760aa6eaff8bbdbd1e924114

    SHA1

    7a13f9796b64297a105bf5b42daea666863658bf

    SHA256

    89fc415b9e2faac5ca8505da6800a63710d7563b17b608110b7d8f280ae1b43f

    SHA512

    4b0567d6ea7c7d4ce88b5c910a5c80f5c0b31e9fb9792d28fe6bfd0c676f7567f28be35de002bb119c3e78d5864179a4c21a89ce2bdc87ccf7fd8e4b27a0528e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    af11f09559985d5ea2594026cb0bcaef

    SHA1

    000fe2486e2ba39a2b8943bbbac1e34dea8f310d

    SHA256

    f5d018e29c610e5015d0d60c8f4924e60fd5deb6cd26155ec6320aab7ae4cae9

    SHA512

    5e474d2b06cbcbbbbb14ce2e74bf5372d304793ea678e1f4ff64c63dd3cc36c08d3d939da27426306ea49be6309751cb9e46e2fff1efde3dbaf0c655f4f8660a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    809e6ae1a1c45725c81f4c61d78d2d68

    SHA1

    b2097911f4b0aaf09b85fd50ef63d6673b147e65

    SHA256

    0bad1af172ddc8847b238c2969075b9d8ef7b75b3e0e1367ebcdae987b7b7a78

    SHA512

    f01a46057df8c55cf5931e4dc371e7937d1159d69515bcbd11524e0dd267d5c8c2fed41438747f9111d62d1e2678b552799b52555324f64faa227986aa0dc278

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a41a17841c9ee3cfe62ca4535e935e13

    SHA1

    2d487da2cac9112523bd40d12c73181c27619fa2

    SHA256

    0a264cba4cc2758c4f7ae1e00e572c268f1d944066798e14106a10b5a272a35b

    SHA512

    ab496b52bdcf53f606f95f1ee51287e0c33cbfc17a838042c3c62ad841d6c19bd682440ad83a7a290040cf58f07dc0de8b025e7a6b6e142890433986db70b5a6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    eb356d9595616ccb910b1b78b8acf8f0

    SHA1

    fce5cfc3cc19df2918fc6c7920443227795035bb

    SHA256

    0514db8a733f60b494e093b4c5e4f2591c1bb1ec8bc43137bc829f22696dc060

    SHA512

    a4bb636ffdc6772b1fdd3e1a2ff1c70dd52fcf1922ec312d59a227c40cf62b5ca632b71e376dfaee65fada5ceb18b4b9be1786427157509aab46f57c811ceea2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e9df7456c73d42096a25e8808202d746

    SHA1

    07f3ffd50a36398f647eb0f09ffe432dc4e9fdbb

    SHA256

    c0b90a39af2cf18b2c44cf3407088fabec8ad0a2811ad8d7d80351893580d6ca

    SHA512

    be62114cf4cf48c1357d56e572e462b1caf8f720146d39fadf87ccf02b12db42de2e982d7e529e2f747b6faf6b7e61314ca0808e5dd4399c8b83e31f4405fc6b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4726e335e4595a4be86a70e737ac1021

    SHA1

    53832fae81c21fbd2035b22dfe4e7fb877666429

    SHA256

    069065fb65997ee885a84d0b6921059691071548c11a4a41481357d019914596

    SHA512

    1167964fca8f386c83998d7d7dec877dc443b051834c164f804dc0ba263d60ce774284ea85cf19f339ccf111ee9ce40334daae87bec5a70d35eae8430510000e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8fffb4f24014fec368975a7264bd938d

    SHA1

    f88c9d53c949060304c4f8a1ed079850ce2bace8

    SHA256

    f3b601768c40b9071444d9cb796de4d8a68e66a5d0a38d35f0db888971dee34c

    SHA512

    d2c3fdd5c4cc71a6e8369d21d2459deefa7793bcd83ad266cbd3e0cb8195f80cda5fc1c30691ff7514dcdf51237292223ee1ea00f6d6e7d2f28605de17c7e6c3

  • C:\Users\Admin\AppData\Local\Temp\CabBADA.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\CabBD2C.tmp

    Filesize

    67KB

    MD5

    753df6889fd7410a2e9fe333da83a429

    SHA1

    3c425f16e8267186061dd48ac1c77c122962456e

    SHA256

    b42dc237e44cbc9a43400e7d3f9cbd406dbdefd62bfe87328f8663897d69df78

    SHA512

    9d56f79410ad0cf852c74c3ef9454e7ae86e80bdd6ff67773994b48ccac71142bcf5c90635da6a056e1406e81e64674db9584928e867c55b77b59e2851cf6444

  • C:\Users\Admin\AppData\Local\Temp\TarBD41.tmp

    Filesize

    175KB

    MD5

    dd73cead4b93366cf3465c8cd32e2796

    SHA1

    74546226dfe9ceb8184651e920d1dbfb432b314e

    SHA256

    a6752b7851b591550e4625b832a393aabcc428de18d83e8593cd540f7d7cae22

    SHA512

    ce1bdd595065c94fa528badf4a6a8777893807d6789267612755df818ba6ffe55e4df429710aea29526ee4aa8ef20e25f2f05341da53992157d21ae032c0fb63