Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    121s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    15/03/2024, 23:16

General

  • Target

    cc814dbc72d0f001ebc0ae86399359fe.exe

  • Size

    1.2MB

  • MD5

    cc814dbc72d0f001ebc0ae86399359fe

  • SHA1

    2faed5c104f4476fc450be0def8fc90d0eeccfb0

  • SHA256

    5cc24db41f999acdac5e646ff3e68b3bb52bc7d4bf57b6a85302ea2972b83f64

  • SHA512

    d093f12ddd8631db2e51d9e44c7913d2c163fd720a2c6eb3aa71d457d59210044c3ab762c39644897daab9ac39d6964f62874cf1da516a7f8959da7391522dfe

  • SSDEEP

    24576:xuppnxO5dTbuc8D6ubfk5fRv3I/9sH2hO9wq8oDPBIzF1TqaDOMkuGU8L1Qr:xIxuicVWfkTvXHv60PBIzFB7uVL1Q

Score
8/10

Malware Config

Signatures

  • Drops file in Drivers directory 1 IoCs
  • VMProtect packed file 3 IoCs

    Detects executables packed with VMProtect commercial packer.

  • Modifies Internet Explorer settings 1 TTPs 1 IoCs
  • Modifies system certificate store 2 TTPs 4 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\cc814dbc72d0f001ebc0ae86399359fe.exe
    "C:\Users\Admin\AppData\Local\Temp\cc814dbc72d0f001ebc0ae86399359fe.exe"
    1⤵
    • Drops file in Drivers directory
    • Modifies Internet Explorer settings
    • Modifies system certificate store
    • Suspicious use of SetWindowsHookEx
    PID:2208

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    67KB

    MD5

    753df6889fd7410a2e9fe333da83a429

    SHA1

    3c425f16e8267186061dd48ac1c77c122962456e

    SHA256

    b42dc237e44cbc9a43400e7d3f9cbd406dbdefd62bfe87328f8663897d69df78

    SHA512

    9d56f79410ad0cf852c74c3ef9454e7ae86e80bdd6ff67773994b48ccac71142bcf5c90635da6a056e1406e81e64674db9584928e867c55b77b59e2851cf6444

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F59A01A8B782D93EA6991BC172CEFFB1

    Filesize

    867B

    MD5

    c5dfb849ca051355ee2dba1ac33eb028

    SHA1

    d69b561148f01c77c54578c10926df5b856976ad

    SHA256

    cbb522d7b7f127ad6a0113865bdf1cd4102e7d0759af635a7cf4720dc963c53b

    SHA512

    88289cdd2c2dd1f5f4c13ab2cf9bc601fc634b5945309bedf9fc5b96bf21697b4cd6da2f383497825e02272816befbac4f44955282ffbbd4dd0ddc52281082da

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9132c3fd7ae57f8849f584edb973341e

    SHA1

    72d9ce99cf2d65361ce76c3f7bfdcd719aa57f3b

    SHA256

    bcbb33f35545e0af9e45afd1b0e0e240b599cb6556f503fd396f518a08ccf34c

    SHA512

    d50dd37b812703aa0327e778074f16c1b509aedfee709198ddc2c6d36220227f12aa758dc427602b6dc1bc4c19dadb70393a6361ad6b9bd4bfec65de48227bc8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9be08f7b6ca4072ce3760ef2f8c1f673

    SHA1

    ff68c270bf18a0fd1e540f062bfd9ebe38ceb894

    SHA256

    b84db179bbb0ed53f740beb50ec40b7c05b62c4334af07929401c725d55fc80c

    SHA512

    d032aba7990131db9bfc6b4e76a6cb4db1f35e79f5f554bb7e76fa71409d524301126fbd365e09a154c64988e54c47625150113271b57323d88b95d9f760c48d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f5b10c21704ee8c3570db53b3403b355

    SHA1

    b3e9e03452e8a3f587f18633ca59a489c77f81ba

    SHA256

    c8a5fe7c82411cc4f9e7c67b24f8c0a8e47166000984b7a4e59a9fed8531ff0f

    SHA512

    9dd1fc78a9c7b6a7127600c8273ceb4c22a3c14c57c0b94d7aae3fa41050451e5389f9518066d0733cd1fd2dd9e2748125b3bb15e9ed61e69b51b3c8d6042394

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0ea76f1b52fa57633509b85cd38ab0b4

    SHA1

    d5ee3474cf5d7a3f9259a7b1a293b36d1838333b

    SHA256

    fc493eb8580e7856813eab492dd817ae589eb2d9e119cae9c027c396423936f8

    SHA512

    d05e5ce3d2a16c88d7794cb7e8d330714a61581de4708b0cb6c87d0381245374692f2ff1037727b04f074a5eb1fba241bc69c5ab3d63b300d6e62cc52681473d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    aff3547acf309b9ec174831b5591d452

    SHA1

    67fe3105e052d8ce59fb2de375466122d6f1ba52

    SHA256

    eecb04521ceebbc2c41ce8252ac2a320d1ff22cabba4b3d11e3010f3bfae583e

    SHA512

    a978181267b126386b3c50b653d145bac4a9b2c23646c9dbf10beac5cd43012b2c916e5ba9a98022b7588ad9b9acaf5c83c889264053fdea8ed04fa5b30a3b55

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a21c67e31cc4f47e03bd7a1ed7e7392c

    SHA1

    ef1dc719efbedc8e23455c5f9c4810f477a5f08d

    SHA256

    1ae3280c6a5f3f255c24dd8163ccf5598782fcd17f4379407fc37f2a724ab790

    SHA512

    d2d193818ceacafc15b0fc1e9b5fbcde49c33f1bcd3885984cda00e154d6d756ebc495a3e711122685a2214c6075c5df8f95be87e4b89ce9a510c7a58eb21c35

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    17ee37f7dbb82e1b210c9138436b9982

    SHA1

    beaeb27a0b47ff09bf33f8e0cde92f69f27434e0

    SHA256

    9edea4a5ebfbb770d89039dd8530b06fdd4780051eec969d4fd39406ab96eab7

    SHA512

    bcc5bf9a79493b1522d42fc48817f544869871a1b77e3af0755cbc940cabbd470313ce95aa974ad8c43eea20742a3711f6ada720bbc2549e58e57dabf760e3ee

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    381ec9102787f4795f9f1d7cb245e79a

    SHA1

    ef5037fd37acfe5c5e44a08819af55532018c09c

    SHA256

    e641ef5dc1e40cc8716e55449f3189e18e00e3897db6a78ed54635667bbcbde9

    SHA512

    18df536de4c337cd3448c8179a41f3c63f8a499ff34f66c031b6512874f9b0dd838270a3cf7db4cc1ca50ec064af8a8a69576e2f6219aa152d2dd2498295d69c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4921068ac36f737722c24eae07df9482

    SHA1

    6f06fc5eeee89551a56cf41cbd36867ebae49a3c

    SHA256

    f6e86e5baf0efe229eb160bfe98394ce135896462a631ff5d3ef222d57c3f5df

    SHA512

    9322ca25f850c5c213d6722c5e71f91a73a9c967c23bf966b8a6befff98673d26e1eb3190628be7a27c20a5b35524e594570628d7631d17958473b0566d64942

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F59A01A8B782D93EA6991BC172CEFFB1

    Filesize

    242B

    MD5

    cdaaacf7ac4b568c815a247c511bb0ee

    SHA1

    c503e1df74ff95ba3445b78de1bf802467c84f1a

    SHA256

    91c7e8884979ced0c2779f8a2bbb2ca9dd6e3dc4c0f21d9b6ba306b6b5e87e52

    SHA512

    55ccc12fe496941826d44124b9b12a2e5a3899439babc58fd62721a09c1360997cb0d6d5394ca6ddfcc558f1342d88b83211e04d6a49c233a5d0c7cbca8cc4a3

  • C:\Users\Admin\AppData\Local\Temp\Tar6F9C.tmp

    Filesize

    175KB

    MD5

    dd73cead4b93366cf3465c8cd32e2796

    SHA1

    74546226dfe9ceb8184651e920d1dbfb432b314e

    SHA256

    a6752b7851b591550e4625b832a393aabcc428de18d83e8593cd540f7d7cae22

    SHA512

    ce1bdd595065c94fa528badf4a6a8777893807d6789267612755df818ba6ffe55e4df429710aea29526ee4aa8ef20e25f2f05341da53992157d21ae032c0fb63

  • memory/2208-0-0x0000000000400000-0x0000000000713000-memory.dmp

    Filesize

    3.1MB

  • memory/2208-1-0x0000000000400000-0x0000000000713000-memory.dmp

    Filesize

    3.1MB

  • memory/2208-724-0x0000000000400000-0x0000000000713000-memory.dmp

    Filesize

    3.1MB