Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    134s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240215-en
  • resource tags

    arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
  • submitted
    18/04/2024, 00:03

General

  • Target

    libasf_plugin.dll.html

  • Size

    7KB

  • MD5

    8440b2fa76acb95149cf6c4e680a6dbd

  • SHA1

    e0ea169b7790125fac11f423fca7fd6f73b240db

  • SHA256

    c2718c38f26479f18d548889d78d4733684e960ae1c5a564854fc27df35d9340

  • SHA512

    f2082fb0e0e94a5a68e8496f23fd8261ee1a78f70490562e2b4f0050d36122fb0471944103f82f92bd81c957662f8b3d057c09358ac9698f19a129d6538dc718

  • SSDEEP

    192:ZvBvTPMcMHyx1SBvJBv/7Bv/dZBv/CBvCgBv0mXHP5BxSTBv/5BvST/lo3fSBvvb:ZJPMcMHyx1yFdr5mXHP5BxSteT/2aqIN

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\libasf_plugin.dll.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2220
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2220 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2488

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f504811eff763376a05d6b6b7642e930

    SHA1

    224c60ff21df619d126a91fd2224969136a1b567

    SHA256

    fc0b46c7d885f27cf2df792dfbe14e54fbb1a0300941091588931b4e4e4df9cc

    SHA512

    7e9232411a82d5b9008fe482f46bc1154805533f92a0dba9315c89e2ae1df76729f6a69e3ea5ec6c29c3093d210725722bdf4b883886977190dc1d792d04ce20

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5e2aced6e5522f58d45499fd57d70849

    SHA1

    e0c2e042abf5535c425683f364786e3a3b15fa02

    SHA256

    f2756c467fcbc38fd4d6ef25aad937034aac88f67051c9f0d23cfd2e31bfce30

    SHA512

    7a4fbf4bd6e30a988d976751ef3f79d348d28d8b7f05e36fcdb3c759c3d7f4a11e064ea47500b5d2bcc7e7a5a2b7c2ffa263b782c840ddeea803670374c5a66e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6269a6dc0e71cba580083417fb6c935a

    SHA1

    744ab44c8d9ca257f3c00041ceb7329607ea646c

    SHA256

    1f78dffdfba867069f5d396cb41d8fb930c573f70954d8281fdeb88130fd1c92

    SHA512

    9679027c496c72c88a6950de6882953bcce2837eec0e4be6aa1d2ebdc25e1e02bcdbd2b296af2fe524570fb722de1837413785e5eb316975fb385687012f3608

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6fe9ce19ec6959f2529e2957f95484bd

    SHA1

    53a5dc85dfedab11e4ceaeea707e393307f025cc

    SHA256

    428e5989962d9352f0edd2f1a7364d7209a40aa3776bb1c104ebb7f81cffd0d1

    SHA512

    f8f49980f2b766eaaf26122f4ea40203af8f13e47ff833cb69f1db91f7211ec9ae251c0d78e9abb8e284883c1c779abc21e1009afac7b347bb574f52bf013057

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fd0abbcaa163a835936d57e1e8cbd4ce

    SHA1

    41c0252d83df906be7f6e0fd9875635b74dcd462

    SHA256

    b0083038f4427eee566f309ee532da8d4782766bb6afaa339c4cce5192956ade

    SHA512

    cf542d42d70caaa8bb9e0f1329d8797a05b173d878525b78386eb80124a574749221d432671b70f16f3da83deef0f8882540bddb67970dfa9079ee7ef38c9baa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9c63f21b3c6bf1e02f1b433a680c6346

    SHA1

    e3f8b7af2a52a0936721a1e331ffabb13d73dae3

    SHA256

    5e81cca4e538f920299dcab496d87c9be46e87c43fffd818df0ffdc65497ec8f

    SHA512

    bc16acfaedd72345dc5aea9ef35a3933df18a0a31a02cc28a2087156310d849b41df69326ed01ebde3f10018e5d0147c402ec00ea1e42780b12544afde8c11b4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    df85a4805c1a38b542488c77bd5d0c70

    SHA1

    a8b3983f251ca9c9bc945d4e7455be56c094a473

    SHA256

    45633a140c2f18dadd57184ea9c2b6c7a1c62e36afa37853773e85455028fc79

    SHA512

    5a769a72d85271eda8da1f6fccfbadbf5bc8846bb190f5f11983cf827e3a7ad40054fb0725f97ff5424c1c165fdf7f96f2db977879990d423a6ecf1a27eb78fa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bf66d0f9a6b02f5015137b2421f7c0c4

    SHA1

    c9c6bc98b0c8fbd85f7949ddd5c5d653d242f62f

    SHA256

    35e968bee0bbb3cd3cdf6b1b1ad62cb7ef4a81d1c551159c84f48740c2d20a39

    SHA512

    887ad62e364e7d31d2867235eda033564f9588f55dfef04bb592dc5e8aedc216c1f1f41f684b3f5b90c9ce2b35bf3c6b545bd1f25b7e0e982f47a5a858a11252

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8007d017c3e1f93003edef1f1f015baf

    SHA1

    139218b0ddb7349bba7903eee914d6c173110309

    SHA256

    5f69cc9ab363b877549fa6c9fa01e36af8ef8928a8e06d4e300e4c994c9944d0

    SHA512

    e1a9e8fd254f2d73d80830c67d924c4f1269b1ba611d8e00747121f39b65bd3ab2b9fb766b1f58bab6de54e564b00790b8f01a834007bb21c036fa63a57b22c7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1b924e47affb3d0cb189708690a3a986

    SHA1

    ed77e15d152aa6449e690b52d2ff9a32953dc9fa

    SHA256

    6a11def85dfd23525c77b1478abe1427501ad71ccdcf0ce759a26188cca30eba

    SHA512

    d3b519dddc3bee836fedbacbcdd71a3015cd7b71006b759897be67c409b273a215888773bcdd07305095cbd9baba98bd5c54a23aee2fa958e36e56f7e962a739

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fc0071d3b9096852e7758ccbc3924f24

    SHA1

    70c2b8867ae9299e6a3430901998c3db8c6b13bb

    SHA256

    2da8cbd1b4583df25fb08500e600aef11784a04dc33da62e63d02c30e477c40b

    SHA512

    78572baddce19a2dae4fed593cbc1a11603c016adf9fd5c2bdd5bab8b0b9ee652b8ac901e2d17df137e64b79ba763e0faf4d0d6aecef30f68cb07641fec72745

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6818d6fa2a98cddcc082890fef81ff07

    SHA1

    e8dfa34720ceb67f415a6dc895e3b4216291d9af

    SHA256

    1696e95a66d3c5dc9c23587b4cb99565ef1a88a3c021f8123606f975c2ad8623

    SHA512

    679b5c7bdee8a8f00de11dbfaaba268b8f1909b3a27dccbb821288c77796e7e098c6c0934b13eb51157246e4bad23b6ebdfa9b16a3879454ff83a71ea5c7a173

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9027d2ca6f683cf6353ab77c4cbc804f

    SHA1

    d363d39225f853952d97a8db9117c3f8d6e5f0f9

    SHA256

    d819771ab3fd3994e0927a121d34a0897fbc472715d72de4532946be15c09bd4

    SHA512

    8890ac387c83419adceb6e6665d2780b56819db5225de9edaaea1314ba894d0e4c7a245570fbd50610b25bc0907fb9dfeee07053a08d3c9eb79ecb74d3493846

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4631c47c384b82c86f98bd3ceab8f7e8

    SHA1

    08195655bdfe29516c4e0275a8da009e1359385e

    SHA256

    70b122cf363ced41b195780a5847357afa781037b442071c94fa38f5e802cb8c

    SHA512

    2c410db86aea64a2580d3795cb75a725b484ac4ea2f609a5c60867ecb1a043536a940498b86ca3e11564436898c49baee1a5bb8c86d318afb67058513acae40c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    df5638a8ebdf671cce727b8127e23fd5

    SHA1

    99c0250600261c25ae0b42018990b2e9a94f8afc

    SHA256

    8c5b442c2d2344ac744ef044945215514ab9a14a61fc50762e113cbad8544cb5

    SHA512

    bc6fc4343fd556ba08f1793c6968fba8c79e23e78bf5400600d9b010f7621ef6a68125244e1ff69c871dd4b24fbc71ba214a16a6e1c8383dd0464a3ef1bba8c7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    903fb43ca87d0b8c0d0ab862ad861c5c

    SHA1

    51ab2c4b796badb8c9b0edd73a9ad9faae78dda0

    SHA256

    843b279abf42fde4f55f1c5931399900c6aed90f33be7b2443ff80c3cd02331b

    SHA512

    d9fe5da48f1bfc6a747c21855718ee88ae096e95e84489af3cb3fba1464e069435b0fb2cdddd9cb16e6d9f76b282db4ce469f145805a688affab949dd61bff6c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2eeae34554ecfa661a3dbde6c8e7332f

    SHA1

    53fa3caf742bccfa93ea20fd70fd6294a050e4cd

    SHA256

    0979a125b8ccdddd3b6f87cc2c1950cc425d8a3edfcbe46105ec152d698f90a4

    SHA512

    7e6122675c9caa42fd40fd7b77658654348ea8f747971684d00ff7d4c1a310a0c5b4cf8566bdb7156e4775384c76a764a5062c7dd4fb961cecce0c8fadcf1b41

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    831add122acf5b915dac37f23a510b96

    SHA1

    e2fb998d351ecdd078bc4ca2d95c058255dea4f7

    SHA256

    d7c98612620989f1f5b96971d1968b5fc5240b1a8361e9d0e9b6c8fe391c6ca6

    SHA512

    ae12613968572574e886e5cac687cdaf065872ae878d444d281041ea16147341a1860cc3920aa414fcd4ef0b3efe347705dee820f9dfe9f0b3561b2f9e368ea6

  • C:\Users\Admin\AppData\Local\Temp\Cab22ED.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar23FF.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a