Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    136s
  • max time network
    130s
  • platform
    windows7_x64
  • resource
    win7-20240215-en
  • resource tags

    arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
  • submitted
    13/03/2024, 18:10

General

  • Target

    loadtv.html

  • Size

    766B

  • MD5

    34f6af8ec566877c3d5c147f4855c04b

  • SHA1

    33091ca684b7bd47aed0e2f4a46eb42c9eb93449

  • SHA256

    e82c61d58efac4a44a0bc22cd1f94303f6f71ebefa685d45bc9345cc9c40d890

  • SHA512

    383992e3b1121aef27c65fbbb19dcf9458d861d0b19b9a31d8334a70ece8cf94b0f6a43342716432662a872ce12f37e2d24a69abbc46680a53f8ed2d51af50c4

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\loadtv.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2972
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2972 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2552

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d1238871c0bafaf92ed1d6e354365786

    SHA1

    850a90bb535f86e3d7d5aa08b7273245414a807a

    SHA256

    0aa3998c9f98864b618be0a82f9937ba67ece5fecbf5cbc53863bc5fedf3250f

    SHA512

    1fbf0ccfefeab12dadd8292d5190c9b3c3807c6376b370de7d90a5689a014e42683c0218f033a1a7ef5b6c03390a09609bd4d3bcede52613e11c799bf8650b55

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    679551ac216eb6c6ba4e9584baecb181

    SHA1

    00819bd196b641a07ffcad51dd551c40ddbdd6bf

    SHA256

    36de3ad50419452a312e022719efda76e4e3e4c3666e454f086b82e0c7053d6e

    SHA512

    811773f0195d69e858075f8f7586bd12a7f88c455b6108539ccb135b1d273c0e774a396fca298fe035af00a6256841f1c72dfa8be09ea35cedbb9b7a44a083fe

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5f045ede8d6e800fd2737c7953c2941a

    SHA1

    ee8f15ef62d3de3dae0914fb6c01e4f13a016669

    SHA256

    c1aedea529bc429c6562c12c411da9c4ac3e98eb85b5c0f2c1aa8e5620375c6c

    SHA512

    1f7d79859109860f8f538fcb0ce6a125917e6f20da48a145c19d193f17b2f6975675fcf94c1fe195faaa7b38f69ba972d2de91be9fa631b74ff9ad50956bb10d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1f595c19edcdd743bc8d914d42847a8e

    SHA1

    9906dd75855b1afd4349ef746188bc07c21d7fdb

    SHA256

    de3c5cb5b73808517bee0d05dda271f482be698a66f86bb278455857dd124a57

    SHA512

    4d658061edd153099b255346be5ba3c72d78ee0df8c9562b2fa12580af6925654a9cfbf6b142001f91d02dd946a32483023ffca699baa31ce9b0c2320c3229ac

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8aee0ad9714822ffd4293eb44909d55b

    SHA1

    5a67f237bcb507dff10812e917b97fae2f732734

    SHA256

    0299c315db69085e2b42671caecd33b06e47b47895490f574eaf21db029dc883

    SHA512

    5f9e84cdfed64c7e0bc9ce06f413b7bcf358da5258dbfd032153c4990e4797346aeff9d274a1ed0b020feb3a4997727975c60b043605eb21490575924f9b82be

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8a280e9cde197c560e332b5d9a6c2ec3

    SHA1

    308603391f4fb83cddf02892dad49158aae828a7

    SHA256

    bbe823183c86570aab275f4b8c3f570997d6136b1b1587b2fecf702bf00669b3

    SHA512

    70fb0b22a819cc2be9c94cb14ae3f29214bee625434474ee38795caed94211bab350d42026cceb7bb0bd601b08633e3cadb9fcff1e8125ae57ae2d11792a3d84

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    53182fefabb8c9a409748f39c460bc8e

    SHA1

    0377bc78b824a48dcb70b6c01361f534d0410e42

    SHA256

    d1dfe2c62751a6ed287ac19866687bb90b8a5979f90171167be217d984688d68

    SHA512

    4c1f6a85b57ce41b3d8e25f0c372ee798ff7a4c3e2bbe8bf15b3722e4db238c8f163f49216ccaaf5e5592c19fbed7a1bcca8a166b3f2b163655d0b96f32108cc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    08984ad7ad12706ce6afae127c5bb78e

    SHA1

    3d622d11af87e1c2168f6860b740b38904b77eda

    SHA256

    40850f0bf7cd87e953ae7298a02359f1fef9fd8e12554e267db19f9ee210c8f4

    SHA512

    d0e7a1e5becbeeb4bd283aa948fdbe35f458927f93313473f42c5928a40a6035c89c16ee78dfc31941e43e88b72c168be02b9bfedc09c09653d3f97b312a9149

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1271357688d93b4bd9b433b6bddb44cb

    SHA1

    9a5e6f09cf4c3ccba3815a0978c61fb661fa9fee

    SHA256

    234c1f5167002fce452fa07b29712032861c02844bfe2763007d4017875d8d0c

    SHA512

    2e366c4696c7b83123f282cb6c2aee19f11f7197e589ce70b83fc501829bd83f7a40708c942d7512bc910b1e92216ca938cbed32e8edb137b305c1fc00a5a854

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5548a30425bf42cd90417a025d337e3b

    SHA1

    f2a060e71298f1f67bd386834deb9ab04cef33a9

    SHA256

    7b09e7a2239efa41f54cec055b1f214ffde72c91a2d09d6c73071d478328eee6

    SHA512

    d880206dcd46c5085e23f0096b43b6fed8fc9a1eac0ef888c6dc43aa1053c16b320d8b8c072bb00e42b9d0f0df1d210fd974b58c2a6420eef2d47fc3b75ac8c4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8b915ef21b17963240eb23d1826b4a5e

    SHA1

    7a26deec2c4499eebddae04c4cfad1a00107cf95

    SHA256

    64b260839542e133d8e387510f6213672327b32396e8dcc2e4d9e0e9f1ce3113

    SHA512

    40681d3609582e4e4668c9149ae016b737f449d776eca3b76b25dceaceda6796ebdb7a1e2f542083f249ee2b86b2380782f05965c4eb122408414017e7ebeb62

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    80e2e2c1cbb69eecdefb6d0d5fb6294a

    SHA1

    debe9c9e09dca529c19667d19e45eb16026b8be0

    SHA256

    c16c89c0de4a232bce3b305d6af0ce53c740679f9676e12c9508aee0931c7b24

    SHA512

    f607c96fbadb5555c5e0bb2e481177c41ffb9072c4ff00ecc37d948e40a999b8a06ef16b5ea53db858339bb27ecae2f2e263c6484d3abbdfed3997ab702230b1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e133a4f72a8ac6ce18c409086282ecfe

    SHA1

    c917fea5070bc75432de97f662382a190ea2451f

    SHA256

    20269103f919b98b2aad3f11a8e6d65bd519b9c1a53cdb4b3a369836863163ad

    SHA512

    5d46e02a1678ffe8d574b46edf050964dd517f5efbf0568ba0ce82e491465115836af0fb580622662fd6614571d1c699b59c10ea86aa84eaeb1b868929afc8ca

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c2c031126facfc454d6b33a7d0cbd7f0

    SHA1

    cc8cffc238ca99b1042112c8c3ada95d90e50fcf

    SHA256

    4cbf2775b4d0fe6e99b451cd46284e50528c8bbf70b2b847cdf4398aeb2cb1b7

    SHA512

    bc568c1c55f409957b80801b9c91afb01bcf0435cfe53be9d6aa1f8615687f70e749360e4166c73245f6300f1c409d0a309091377253e54c56b22960d3f93c21

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    87946dfd44cc4dfdd69f1791bf366191

    SHA1

    1fa1789f7818f0f777d9ff1cd4c1e1cd101983c6

    SHA256

    c9332aa313ee92ca3a9d857a318767407496cba6ea345cdbcd39821b8d9892ff

    SHA512

    41a2f5971a5762f40cb0efe689018fa3cdaf8cd15e5c5df2b81cecc8854240f6411ef5d06f4cc7694ccde9e11874f7c58a31b333e3a3039b875524c895278da1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a83bfa76f7611c414510e75d17821367

    SHA1

    4a4aa654a95d76b75544fa6ca7c9e2237cd585a6

    SHA256

    8cfdaade56a750e9b20c5fbf7a118e83ea036123ea2095b791cda59bf5fb91d4

    SHA512

    d1b5d985b89215e2d1d79fae69e89dc33696886a7603e43d75a39cabb8f3412dccb770355fb6bbafe445801fa3021713343b1521f6c1d8399ef04044113f7ff7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0a9c42dcd2338f70980080ca4d17a4e8

    SHA1

    2a4b253a905acf3370464d2b69d38a52b8d5ef17

    SHA256

    0d7cdb1f422815f3c263894c75465bee006082aefa7a9ec348d9454fe5d16d73

    SHA512

    6830baf9dff6cb2c15a4f1e3ac11203d5a2cc2e9b3699a75e933cc6ff65b9951efb9427e7ea6a569835314806f93a1abd7c60f03ba8ee3f8fe6c37ccc65f7f83

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    51aa5f9aecdf5ab680067684418fdef9

    SHA1

    c524072920d670d0641a726485582de201096afc

    SHA256

    9bf2da60afd58203e12a5f5d37699069320efaae2593fea321673e7d16ab26a8

    SHA512

    19dbcf9400f3438e9245516aca3b0b8dbc1987a2eefa77ac96d227f07c4d45711fdcfeb312a10cd83ee4998e56784e575c7e97fe1bbd13f339af82d9443c7c28

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4c6cc4dc02a8f430a63b83994e27b830

    SHA1

    2a0c6ccabcd7a0f7abd4065c863b6c79b89e5f2c

    SHA256

    9b79542717bfd3aafa2e69c8171124e3cd5620443c52197d9b5a5c61736131ad

    SHA512

    b36e08a285afe599a8812f5b50fd8f3ad7682cd0428f977777c192cfe63590d65afd8bf34df7577d1ff6fc91dabc47e54654c7ebdda02c873e9d06072d62a232

  • C:\Users\Admin\AppData\Local\Temp\Cab30F1.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Cab3319.tmp

    Filesize

    67KB

    MD5

    753df6889fd7410a2e9fe333da83a429

    SHA1

    3c425f16e8267186061dd48ac1c77c122962456e

    SHA256

    b42dc237e44cbc9a43400e7d3f9cbd406dbdefd62bfe87328f8663897d69df78

    SHA512

    9d56f79410ad0cf852c74c3ef9454e7ae86e80bdd6ff67773994b48ccac71142bcf5c90635da6a056e1406e81e64674db9584928e867c55b77b59e2851cf6444

  • C:\Users\Admin\AppData\Local\Temp\Tar334A.tmp

    Filesize

    175KB

    MD5

    dd73cead4b93366cf3465c8cd32e2796

    SHA1

    74546226dfe9ceb8184651e920d1dbfb432b314e

    SHA256

    a6752b7851b591550e4625b832a393aabcc428de18d83e8593cd540f7d7cae22

    SHA512

    ce1bdd595065c94fa528badf4a6a8777893807d6789267612755df818ba6ffe55e4df429710aea29526ee4aa8ef20e25f2f05341da53992157d21ae032c0fb63