Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    138s
  • max time network
    142s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    15/04/2024, 08:41

General

  • Target

    LICENSES.chromium.html

  • Size

    5.2MB

  • MD5

    df37c89638c65db9a4518b88e79350be

  • SHA1

    6b9ba9fba54fb3aa1b938de218f549078924ac50

  • SHA256

    dbd18fe7c6e72eeb81680fabef9b6c0262d1d2d1aa679b3b221d9d9ced509463

  • SHA512

    93dd6df08fc0bfaf3e6a690943c090aefe66c5e9995392bebd510c5b6260533b1522dc529b8328dfe862192e1357e9e98d1cdd95117c08c76be3ab565c6eea67

  • SSDEEP

    12288:/7etnqnVnMnBnunQ9RBvjYJEi400/Q599b769B9UOE6MwMGucMEbHDuX0YnpWQZb:sPM95FCWStQj6ERs/mfMl6H0skDpS

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\LICENSES.chromium.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1972
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1972 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1140

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    366adc59269a1a43ca52efaa47e0d5c5

    SHA1

    6e1bfceeb51c9ae20fc78e21656f6ad0932d61ba

    SHA256

    edc4116217dd166811854f1fed16718336f303909fee985231e3053f4474eda6

    SHA512

    33d6d938c6fc5ed4734966d6bda4c7369f00f875794551ae0079f1dfde3694ac4091a1871af3dc4b9d00c15409b502075593310b5d3ed9f9d4c62ded10252991

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d100b95594cdb44c2193c1455126f9b5

    SHA1

    7ff75b044ce7b7ebbbdd6a06b7b50d4a88729e49

    SHA256

    22463201f37ef06b38d82ef032f53dacd6317f70b58bbd4dd2722fc9d6ad8f98

    SHA512

    4204135ef5921397cd67299758c2876f559f47be2fa34bd15953ff57d8f15671f7dbb48bdc5f7007c2decf3940d1d1e58b67fda17938444c714ab67df35c9734

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    30ef0e4dab639a57420b57200cc2572b

    SHA1

    0120aac9d5b497d3570c131b2e2ee70a76f8c9ea

    SHA256

    2f205ab1aca404606cde856fd14c0567e3ee29b6bc231125075c44b74d9e5e6e

    SHA512

    5e9ea2e85f498eff258468d426972cbd64023808254d6eb11a0efe2e5294b9b122c59c40922ceb3498b0a8741585dd8c4ff1a10b82c9346427ca3a7700cc4f27

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    422e13e21b519b76ff14a1b594133544

    SHA1

    8a5c304f0711af7c467e6a05476d984940b3b85f

    SHA256

    04a4c085d1164f771dbc96467cd6eff31efa77ca5620e91e6f43f9c2dd2cf6fc

    SHA512

    663c35e211237a93a8661315d9fde298d3ca43da7224224e6384728f3da77b202127c7ad0d0e808ec77d1d93fd46cad3ef85580949ff2df3935d861a430ae018

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f9020e5b30027462448f77bfea1db503

    SHA1

    778e7ec5a54cc8b5112e7ab443b084dd64d8df0d

    SHA256

    de75526e432ec6a555a708d982833caf99f080b56c946cb4aef0c72451560bce

    SHA512

    aeb3dd7a9d400c56cafe01242ead76dddb93c5d32fe55f47171f77af418a9f169d6a476af7aa3c73bc57faabd4fc642a9217a0baddb46a631b4b1d5c24b9f367

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3ceb7b1760a1f0bd99b1e0f8f8ca2a08

    SHA1

    84aba28c6b8f90e372fcf7ed63399ca62b4ce04c

    SHA256

    e4b1cdbfb9a5844357ccc0cdfe9c9ef14df91b9808d459cdf7aaf99693bcbf10

    SHA512

    b2c83503e3ac70539da5d9a91bf06c979449a7c5f38d455ad6c62e8d43299a6a25bbc9a48327a30d513e0e1bd7c48cc509202195772075906eb4660b8e91d222

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d1446f8f35984848b4e9e278615834da

    SHA1

    0a445e6d0437e3ac009177d86c6b161cff3f9d85

    SHA256

    585915dab64e67e1c5823aaa83f3c8d450444a29916af98b9c53c880e72fed20

    SHA512

    9b4840220a4a93811f7b3f2c52f58e6fcbe3e21570edd5bcb1a42340bc02902437dd70248bf56e5bdc5a25fb26f6ba2300512c6ebd5bced4344145123105be1d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    504e3313cf13b658d2ba696327ac0001

    SHA1

    ac4cd6160d52ef61a8dfceebc543aa521b292a50

    SHA256

    f47c1e26281444ad79f714d77ee9365df812bcb6a6f782a64ff030f34a79557a

    SHA512

    f26bd1ed14ee3e485bc1a420dae07e432771bc77cf262c6892a7a2bcd636447356b907cadd197efd02b3c933ea48ae334006534b7ddab9325cfb37a077daa5dc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a08697f0fe38acac2de9a73fbc72524f

    SHA1

    54d719924bac483a5e118c920dfbf1b6ba740158

    SHA256

    65df314f22aa6e489d907ecf91b5e4318f6b2304b25796121d30f13641953728

    SHA512

    f2c6b03d40478a84223d3964ca5516a610a2994bfc3f8136d539c8e92d012fda7f5906c5c0375230a3dde91a66b284b2dc6571fb6daff918ddca92999d98bf7d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    54e0fa30f53ea62b9e408bb3af195245

    SHA1

    8999f9599ed980869f3d4346188ada1fdbd6ee63

    SHA256

    5c448c3adaaff4373c150a134fbf7600b6e3fc77d074d6e9478318b1dd8633b2

    SHA512

    3f4f9ae7005db0a0fd9c718e3cd508624074772d07fa39ed930ffecedc7a8be04552e540d1fc0cbafbf0ea0678723fe0d321f027c2805170b65453d10ff40c47

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5e43cc8ab8ff72b587569d5df130ff2d

    SHA1

    9542c93c858c7e5f3900328e6c6787f119bd0d5a

    SHA256

    287395e4f1cde85b0d881f7d3f5a7a1cdb7b0668133e001e618436d991c727c3

    SHA512

    aa42a8f35fa8b03d16fcebb8ed7a8ef19effc8408ae50a45165379211a54cc71b16a2239ab5053874428bd1fb57ed192ce68bcc364340e47303417980f01bd00

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    544448868e413c619ad85beae1cb29a6

    SHA1

    a9d223df7e0cded34b41a5131f5b5ef6c91546d4

    SHA256

    7888c8fb00ebd2a1db3c68f1ce814afcc891e9e1c3cd8e44684719ebea812fe0

    SHA512

    c3604bf86ff89c296615e081e88e089bf2f838b20907736cef9816d5469fe42dd30f1df5911ebeff6116f7ca85c7cbfe365854f04739d2b7e7f7cbfe28cb13d2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bb7dc7ac90d7f6cf8f0b006ad73ec60f

    SHA1

    987b99add88bff8723ed7ae10bbd4221ad50d80c

    SHA256

    810d01cf369d2b7082aa8a1e7ce5ff4b5d914c417aa9245b45b4762c9475b87f

    SHA512

    25c5059f81355aa2ddc4f4fe9a4f9600a9ec8431573e82bb58a6e03fdc7f5cd3778f6d1145ab77893a806326c8fa895b73007c571de2e6e37b3dedfa6bffb8d9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bb61e786d3d36383b3d4053dabc531d7

    SHA1

    919d2128af31b6657b304b2cfb6d765d3a722b7f

    SHA256

    a8a779e6d657bb0321c655077cedf815d6d720e8dc42e2c2782425afcdbfbcdb

    SHA512

    06f24928eeba2166309d9cda9a2b20860fc3c0838853e46af047235d6e3cae81797e96d3e02c460770cc059d3c599f844f2e81f0bd4e755ed29445a033375b82

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    924d696120690dd79aa3efb4c22d39f2

    SHA1

    7556f5d7f1d5990495ecc6b68bcdcc94cbe06eaf

    SHA256

    64488d56f012a4a94da9d82c1cc8b05fa2ce97775e06f0d938cb4d07d38bffb7

    SHA512

    f60f5b37c7ebe5408e831579a819db9afd7c1bafd7f2a29a8e56c87e49a0f7d39268c33c2b09129e137ea590f1a981601b22693796264d7dd85a10dfb18287dc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    52d31bd0c27ee2fe05b05fb02dc3c8af

    SHA1

    f2c992f0eaa8492be576aa4dd28825683d39c6d1

    SHA256

    6246e7c48d9290612f1c893b232a9c91e7c5aa8f577b26483298a35febde0fab

    SHA512

    c3bf496d0714eda188935d57d13ea2b0d88d1c2658e0047385f6f07e8b836450e58c0f4c404e6b892ba4abe23b27cb4fc6a673271eb98b1428f7e895cc26d8c8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c07c03aca6764b7a801ffad5b95f6dc8

    SHA1

    11911c90a44d3affe6ad509e7088b0db97b69e0c

    SHA256

    c2ed6037ba8df16c3c5cd85c11dc18d9fbb8b102fa4f154f65311eaea4054496

    SHA512

    516a87467ca97e05f1c5f193788058ea71d49a2ffdb4b1b4fc4bb20270f73d398fcd283d787df730f6d36662790e0d1792707a2c383c35d9244b3cd37614e24a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4e66f8e387689b5cc48253fd3c56155c

    SHA1

    23f69f0eb29943efd1bf6ca577745ab01cc40940

    SHA256

    da706a89b04115914b73b9c937b491510999371b789898743f845ff7a33feee9

    SHA512

    e08325066e05c5ab151a6488919a434fe8a26d3ef8eaa819fd31b1582a3d7d4853b4f5b6b49f007b3ad3b9ff3ad15ec8e4ec80ef838a247e9ac9eb648d3fd860

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    318af77cb57ca1514f893009171cb6e3

    SHA1

    95917a71744db97b225b2bc3afe80a621208a06c

    SHA256

    62c730d1a524f2f84e3d79c052ac989239b48aa250fe6d62214515c69a2a1700

    SHA512

    6ec44523a82a3179a8fa7fa82d5f60e435e41b3c5be89dd8942dad370c25496b1cc440f2ea7144efa8778102391bf9a16aaf304f59115c8071c37b532c6fc258

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8de40fd3cd1292106838d4a2ffa29f84

    SHA1

    3e937a861fcc15d63146fd0c914e3caf59503bbf

    SHA256

    b9bf293dfb862823cfbdb65ae141416bcff60e7ac78c0189cb457bd3bf51043c

    SHA512

    7d7a064f68687894198983d07337c0f05dc73ff40a71d2be196eeb39e8d3d1b96a2f532aca9dfead5b3ab1d25ac19d2aac7c4337baabb5d29dde431272a7d73e

  • C:\Users\Admin\AppData\Local\Temp\Cab896C.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar8F6E.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a