Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    122s
  • max time network
    150s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    06/04/2024, 20:54

General

  • Target

    www/backend/public/injects/html/banks/ae.almasraf.mobileapp.html

  • Size

    2.2MB

  • MD5

    4a56819f139acc3b8551bbc0304c5dcd

  • SHA1

    3a97e9c2533bce581b34a8c2dfd94464eaa9d726

  • SHA256

    0d55403d465680ec632563385465d22ecf3a651f4b97ae6b180b4558b7a1b521

  • SHA512

    5bed514dc2ca5fefec891a25b035dc42e67dd9c118af04c9858528a20381de1ecc61681ea8295b5c6c8f3ad1c1a36ac3d0ed1c66168a826b68fcbdb41251180f

  • SSDEEP

    24576:5Gr21i4hngoST1xRHMupV4Oe50SeLKq/ajZkrcowPOGr21i4hngoST1xRHMupV44:5viZhTOTmkmviZhTOTmB

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\www\backend\public\injects\html\banks\ae.almasraf.mobileapp.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2524
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2524 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2188

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    94fbcaad899929e920430e9086312ddb

    SHA1

    20c907269f2a008ec8a3789e98da3d97bd6095b1

    SHA256

    d7e5ec916bddafcb00e4760242414109395977d99dd55104092b0edfd3140f10

    SHA512

    0b86c4dcc3c8266fb4b9746f36a12c003c6791d880f5a4f5bbaabff515f1024eb6a3c43efd2b5f06e1cf09f2a34c79c2226cf04deef5a960be90cfcb09e12ddd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a935c08b456548c9f7a3223ddd9dd746

    SHA1

    13a148a4a58299c6fbc1beb734c77118ed5b47bd

    SHA256

    19f0c2bd4775de58d63fe3b68b22dea02438eba23cfcea88aab84cab83ebdb59

    SHA512

    5e0ae121c9a06b2f6c196fd959d74506d6e6dce86b07b49e6ce5cbac0da32b3404d1ee0c82be3c721a33a7b8ed007037d8f3eb59d91cd38c858634cdad19cdea

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    edf32d70d866a15c2b18c1661444247d

    SHA1

    b9fb4b2a2bdd7290c6bb5c0f3893baa19df93428

    SHA256

    e6b190ac2311d2161e066c0a3592c1522b1f1b800eba1c52e49ee902a247a444

    SHA512

    28249c8f3abffe224fb100fd8f8bf0f9928777feda2e32dcdb9489f047a3f807821f00b1f23ca5678000c1685b78bd567205495a74241fb1365f13b3b1649f7e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5f8101fe13a84824a466e42d8774c7bc

    SHA1

    f74b0bd76489d47695b702e66bdcd44c6a010d03

    SHA256

    fc8c8e2dc29c96f6b8a0f2fa7787e006dd02ab8d4e8a4b11ef45d46e5ed172ce

    SHA512

    49dd84eca4d26b62b292f5bd3d764c567d62a1a234e0910da0c622eab3b683ff7aa19589dbdf4b820621e65e6777a0fb4cdfc453df369eead3fb99f42872ad08

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5333a76fde1a7661d44c8e42a1a15c7b

    SHA1

    19768ad5b63d79c668f996aaa3d70cf67a8bd9d1

    SHA256

    aa91f5c4164dd4056492db9852ff6613222d8fa2628d6b6d50eb65f9585f827d

    SHA512

    0c02e5c339e9c5ecc76bfe206cbe86d7c36eb4d665c2b5473e91e4166cef61a8f16354edcbc2fd000f0e5cadc680a4b78961d8715817be79f35e0451365d56a8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9736a7b55340c9ac674898d5db4f49c4

    SHA1

    0aef927bab429edf6646b12a0c2288a4be868111

    SHA256

    bacc896f9cfb109895c76d0a83e94801f4e01458f1bb88c68b32558dd3578be0

    SHA512

    87c91ff0390a4069191946ee29d683c861b1c66d8602071df9d5468bf2bb87f2db4f41ae15963ebcce5628dcda5728d90d59b0f5c40b89895eb51e160f4d331a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f0ad70559335da18908b3db097b6bd83

    SHA1

    dbfb0f684f1dc9e0cb8c67621dafb01ec8724fe4

    SHA256

    12071fe24f5074431e0a8a148a7a7cc072a2b04bd6df49ffd04d8bb2e0f3a937

    SHA512

    2530f9cbc9887eef0d17edb598c01dc270dd901a90e527d14f88c24f204c4642464f3e16bb3c37b74eaebd02c9c6f6616c6db8d67ebaab9f3ce5b94d34842761

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    53fa725c52a0073dc222210b45ff9c85

    SHA1

    ef7bf861f29da600c075e924e2119e7d9cf3b128

    SHA256

    7e2ffac318515781687fa5a2850cb2cec6692c9066a6d7fb62739bdb52107695

    SHA512

    cfb2aa7c33f829b635bef750af2aedf673ea2644a07acae98ccd8c66069f40fd6e1b9d81ad1509ffafb9aaa71e9d143cb51e094ab4ed759327394a6128b46691

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b487ed31c695f6341d36a1b903686d5d

    SHA1

    a54493833578392c1c4e2dc233c9c43d23642ff3

    SHA256

    15069d0dcb9320e5b924d30f6f13130d83ae2ec4ec81b018fc6d4f744dcf26e0

    SHA512

    c36e9f5f758582c164ab5360323802e554a76656d563013f4eae44a1ed0c167331ce0db7eac842499bc1e1e9470ae1e7d4194b1f6f77d6c7814705223c2d4b23

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    38cf7d89404a8e3ddbf5a6a24eda1c08

    SHA1

    e705be0486b72fd651cbd724c7f2a627e46a0f5e

    SHA256

    0ffda4cc2bc754d71b62546082984264db5bc817f1a666f1acef0aadba4a136d

    SHA512

    5f751250db29168eff393b9ccd65e63b47c66b1e287a961ea243ffeed970deb842362117f00eb1262634e88403638d42765fbce392659d9aec4ef9bc72db3340

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9076a96ce6b9a5f08bb6555dc89a1987

    SHA1

    45e711baea5bc62faa0aa16faf22bef822704175

    SHA256

    15903d8a2044e6fe4c051efb2a44f8bcb4ab8fd8299b0f23f15dc47dc7d4be7a

    SHA512

    f186e246a12aa7d175f6616facdf988318cbef320e7a916a001fc2a4ecbc8f1057a08293b433156488b8bbd4c2c3db2acd18a284291ea75f6d273afbb09d6614

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2b80e04efea9bc3dc6415a2fd7d7fe02

    SHA1

    cf1bec33108ba890c82af2a058335cf3db8a5664

    SHA256

    c5b3f9a9efe28a84b4afbf4354f45624b7537806a75b02d6c49c7548484962ed

    SHA512

    2dcda531a38f3737a4d4b4e7c5f096d84213e7d17aab95f311758eb9e9065b704e5062d9c4e69f97c001ba664bb95206714d72ca1f44943ba8e4bca29512762a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0b77962509523092462db6ce27c13cc9

    SHA1

    9ecb4a0c60e07f9d16a8a2333653aefde74d94c3

    SHA256

    19f903e67e7992da9c4b27aa308abb9d754119dc46a234efa600b6e2320dea90

    SHA512

    e0c12ceafa0ad38012e2c6d239f4eefef67d205cb4dead398cc0006bb9f658ad6342ea4617b647d1a0c6fe761e78fe401dfb83335b44e333ebb86ae5c026bc13

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d1f88a0b6cb514f3e6b804bf02792d07

    SHA1

    a972aefcc933e6989d997f713c819e9e08d07b3c

    SHA256

    7ac09cf270823f69b75adb40c2599909c17b588d96b40583ece6ea5571f94107

    SHA512

    fa948b1300b404f6e59c60c904d4088a2062ea31c92a32cb246c685127de505043247696afe4c395e29ce7f84ac491872f9e2e68b77bffacb7a6a65b6fa5e7b6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    dc2e6e8cc0a6f55997a244083da02a1c

    SHA1

    b7275d4af4ea3fc70fa94f7bae1df68ac3302c40

    SHA256

    4ff26f7514636b48bb98814f2c77f8d92de611afd1fe78593d76fd2fbb9af2b6

    SHA512

    221743f927128c02bed4f43dd2d1e1bf7dc69004e792bf0f9eb615655c0cf7f51f71d30dbc786d4f80d7a85a881cb1fdb307e3c42c2e40d63173296d20fe875c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    60144969c516aeb42f8f0fe2379f4e8e

    SHA1

    82d0fb871eb0c9afaf3a913ec41ffdb82e5c2ec7

    SHA256

    6b8b7fe7e80d296104b9fc2f3eecbd1d26dad39d1cd2be1037cfb626f1972240

    SHA512

    92163a3778c03f81520e1cbc1f972962e6c50fa7528730d62e6672259156220d83814227284880a85c3f1ec2f68444fba3fcf0a4d8d7950572ea7b75bdb54a30

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    09051e800371df783fff56d5a75af0b3

    SHA1

    2246de1ee59a8a3a4dd02600eef28a0469fcc690

    SHA256

    ced6ee7853d0392370664edc1d8f8e7a28531edf29570dd2c5649736b4eee717

    SHA512

    57df4836d43c9a800926290a6c3ff1c50114832bb26eb51b6e27eccff99f997be588aedf9315707b36ea7d2abddb2834fedf870838effcb46e32678100bc2bc8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e47fc11b6b266d0a88797dc73a94d528

    SHA1

    741c732bef988961d6e5a4c8ad37181784526843

    SHA256

    da2b617ada6b85e2fa147710d17033dc19ad0edaa86758d5f9e0aecfe3a83a62

    SHA512

    c3c5c5598e448df9455db149567a3960e64d46f2a783bb6dad4d2e0c5062c62d44e319ac28d8892475723338d7e5991c377f6b519c5b4330afbaa7fb3c9b0aba

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    069f72e4898a78df560e671ecdd51634

    SHA1

    c4a6fa86103b7b87e217128a27758641972920fe

    SHA256

    a2a24bf12ff9f8fece5628bef3d3333a20549b1458a7ef042ff7b1c4e3e115a0

    SHA512

    7ffb20250e40cb6d42edc8f8550f55ec4c494cf9f096402aff3d6476fe8f48f4939ae492c464b47995fbbe6d969150fd3862e2cc09d21fb1aed4f1631757e258

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fa0f6171510dc55e78c70bcd43fd3c32

    SHA1

    f324f4f056d0f84d7491d74582bce70c32a93beb

    SHA256

    af404153edf9c21aee258b5ea224c40b6ccb0027995739616aea92e16b49f888

    SHA512

    98968af9ee08d86396a37d8ea02351642dbfe47b2f91b7e52ea0b1702cadaf3107840c5fdbbb53e18c5f18c8107b16f34ddd8082e63bce49a2c2e7f52fb1566c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    923758e4b8e4046cd163fff235a94c7c

    SHA1

    e5b8709403b1e8692b3cb80c3981f3febf216dd5

    SHA256

    eab63a4cf7188346f01bd86c7d2bef056bb7212381c59323cf80b98f35f9e4a5

    SHA512

    7e5618c6f3aeb3e661f288adbebe67ed26da9f071be3e89decd31f9b17ac034b26064a1c9ccb351638e66656887eb45a90c1a526fc32000f10d6bde0db0e2827

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4c49951fc2be14098b83fd00b4525df3

    SHA1

    79506db8189e445949dac74526ca8f4e774d7074

    SHA256

    bda7cbeb9d8be203287a8aef705e505e9b43508a19929c2d9ca50fd6acd7b23a

    SHA512

    44aa723588a00cf34a371541d36f5c6113efbf852a9371572fd0502b3c2b4fc88096a79b4711bdcea00f6cfe2e580d0065a240271145163c9332085563c39bc8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0100c3e9a6ae6d6fe214d63acdab46c5

    SHA1

    219071de70ba03c49a5ce0e9509da80b15b26858

    SHA256

    6b2d1b467874d4f4ed01084c38ef662c4b239219f6c8dc4c0dc0020732dd75ff

    SHA512

    da580dcda11a95ebe291b8df8d68914c4fbd84b06c707a42fa8a307ef2a0193ce0fcf15cd75f873f6c02834281e19182d8080d48ad39f532396ce524b30cfaaf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    fdfcff0c82f7cb799bf47a7f2c2c4d70

    SHA1

    ffcad0802bcd2a987fd7ebc6d3ea2b1c62dc9732

    SHA256

    6d4d0163430b5aa3cea4bf0f43efb9f6daa50953406cff4448539e30ef7cf982

    SHA512

    acd98f8f6b4bf323947f1ea65b4e8b2ad9d6bf179992a667468c50eeb485a53a112cb29cad9d82ce30172ba4b32e3c1fba60c1cda8816af3b712a1783860e6f9

  • C:\Users\Admin\AppData\Local\Temp\Cab7B88.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar7D06.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a