Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    121s
  • max time network
    153s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    18/04/2024, 00:05

General

  • Target

    libavcodec_plugin.dll?id=8328c31dba7c71ee20ee32f1a735d639f9e43928.html

  • Size

    31.8MB

  • MD5

    e96a76514ddad12caf7fa9b06caaabbb

  • SHA1

    f25f2314f111b1b865308ce71b7590a5e56a6e80

  • SHA256

    a0f52a03b32960427430585a9fbdf653c21f5a0219cfd97c62c7377f31fe88c9

  • SHA512

    e4b3c4a6c300bcf756937ce17dea06af861db5714dd76a329db323e53bc61f5bdc55be208575f256afcbe3e8e1426bc07f918cb7c5319739186f289d867e0e23

  • SSDEEP

    196608:xbPsbJso1CoRRZA6m2hMHkOJpxIgdNE1qyG4UB6MTTbhhTDctwnFNAi1qkBvwGaY:lsdEZFeyIOkAv5GXLTS

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\libavcodec_plugin.dll_id=8328c31dba7c71ee20ee32f1a735d639f9e43928.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2060
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2060 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2252

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    698221588f15e5508bb775eeca77d1c5

    SHA1

    ef396ce5a6cbf3dfb5b9cfe6fe2649f76207393a

    SHA256

    e227328f1a88a24ec147fc09ba84da238b718804cd6901985f02869d11fa47cd

    SHA512

    97b61b5c1315d145842cf4eebd21d8177e22b82d890c6a76240591f8114d2d066f52c61d1f04648ff269143ef281e774019cc2ef92989c0ab18cd2b5321b8073

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d8901e327bebf7d05a9ce9d84a9a320f

    SHA1

    d925b4b0e962a434fb852a3e5ea9aa720dd27e48

    SHA256

    ff34df5fe583b22f30ddf23db5d6e63f9b45f1d89340f7e085512e22dc79d3d3

    SHA512

    b5f79d592e06fec535b1f31544d8a4e4e5243ad51064098944212f942bc72ab1eb05bfb852d3fedbbf685cd806f708daa777ea29534c4b3f74ff82942759b4c5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d76b742c25c4095aaf8d57d7fa66dbe6

    SHA1

    621e8b2ba1a0573bb72baf35b33c6835a369bafc

    SHA256

    16006c8275ebc587b0cafbd2ac2f2cb9dbe698bb15d2cbfbde1817d631ff7411

    SHA512

    57aa7ec124671d39f077ed926fd8bf7fd9336c5d10f7ff99ead7499f1442be496857495132f7805a4fb501f5975aa5075932e8bd27dc6714069868113d7e429d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fd5ce8a2bc55965ada211db078491ba5

    SHA1

    20bc52671b061f129b45fed4761d0baf4dbb7e00

    SHA256

    41df1ee0a915bd3192ae48b047ddf0203e3302c21f48424925de7ddfcf763a26

    SHA512

    b0a0be22f2957d8de91ad0215032e732cc05182d0e00c9d676282eed29f592dc9754e4f1fa87ceb42fc86915d3aa77867ef9fb3ffab0f5c954c1d5a0f2d06739

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a8ad32c41ece22af549d8965e8450e0d

    SHA1

    7c94c66c1ddb777b0e9301af50df41d4cfbeab29

    SHA256

    77f5e463ba8275cebe4a163bcb923104cf6506ba0d2c90fd396394d277be880e

    SHA512

    40688d9e8fedb922bceaca504fe04c25945e66b08d39363a651f6172610baab241a3495a57cd8824aa23958eb5c7dafd773ded26d433a8a2d72378200350bcb9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6abdb384f5125ad0c8b56b22cc30c0b9

    SHA1

    2d538daee3ed2bfa39f4c543052cf63d3dd8cbc2

    SHA256

    1b4b6ae95a36969f7f081a41d07cf279a9c7ff0b721767610377b694e9af4357

    SHA512

    77a639c8b2009b3054b0012e9d87b2c95dfa16240552600a2ad3d7c82eb1f3322385d330d9e131a74e2d41f7a7e8d9023811eedeb236a8de1ff021e5aa355eae

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5797667338b5da5608267cdfe5808c91

    SHA1

    985206e66608bac4c8a24ae42b3a0b3d232fd2c6

    SHA256

    5843bee2cf701f5cd6eed2db1d42a82c0bbe1cb359c29ea35e828d461a4f5053

    SHA512

    b67b9f00ebb476204282b066d2ba696ed707536d4e137f937efe6a427322e7febd407a08ffa45c45c16a644f9d5a6058982f1d02b29270faa647092ebd1af792

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f6892fba7f4ecdf44b5b71cc42de0293

    SHA1

    fd1423778948aca402c89d41fa293d2082295cde

    SHA256

    24f87435234ea69707758a26eb1459aeedb8242ef73aeffa98c490c344e9345e

    SHA512

    633f43b10b0feddb9f016e22c4e0d9b4e83a44f41d9ff189f6b6b80dad87647b699b5a6abfa36eb26b5d014d2119dd3481568d046235a151e39a294fe14effb8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b0b20f920b51e61155dcc43ac7402c1b

    SHA1

    3c523cda8d7eca467ba7f2080b173d00e0d976b3

    SHA256

    a6b0cb23de86f7d18819738e3abe3b62f55013cca7abc7dbda4d5d5135da7822

    SHA512

    6ce99cb6b9d0f46e4175cb035e4d14d72f6370a59a2eb26da08cb740335d060be4a6947ab8ff731b8fc8ecf6d012f6ccc9c28f52ce423bdc2fa09877b1850b75

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    98a34bfa208600da329df5bce89aa815

    SHA1

    02b9b720b0a3ad3232c8665a375cb56c04daae36

    SHA256

    a84e5156f23a24a2be6d527fb5e791f128fd2bf6d3a5a12af0cec9bfcafc2151

    SHA512

    8b3e13d331d9c664beb3371d27f782636ca306a302df7ae351eff24f11ba45be29061e96a965d3a9ee4a81ac61af88c7985b358ba66c47ba62449bb6993373a0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2f5c80285b08503321bd52c135a86d8a

    SHA1

    b7d11bb3337099006c157b0434dc664e75871698

    SHA256

    ddacda48968a2103f4b859e56117895760088fb7bd56215d1502cbe4440d6753

    SHA512

    e653e8550bba2076c931b16296a71df11bd5d7222347697a80f6a600a72fcba9175b825d4c4e4e26aef6c046cfc7a397bb38ba44c4a5513ae404bddd9eba71ed

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    103831a2e6eea5fc11e2de55a2c66e08

    SHA1

    e6a0b2a1bb20849d796798cacde9b11f7cf46cc8

    SHA256

    2733d50de1c315a7f87a880a55c729837db6392fb234d3a9f338e5561bd6eb3e

    SHA512

    d7b7351f72961b3721e1da6866ea7fa7f90f982d895cb494379b0be4ade84ac57d195f2c8e1c9d58ba8e87c97f17e94d236182a100720928fb642b4887fd504d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1110433b9ec526d1260062d3467105dd

    SHA1

    0bcf983ad6c3be1ea812ea8780847ecc04a357eb

    SHA256

    f259cca52360c0b5af98c7752f44e586e632ce13b229930e3628bbe5cf61823d

    SHA512

    c72c8db966e0d9388b5f7844523650258a991226d89262a6aa734feb5990c8e21d1075346ce222386d75fd78c0f3282213bf2a3f1d9d37b6ff1837763d7b1596

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    34f1ac7d918f905aa043530ea0355e2a

    SHA1

    98450ae14f355f98aae837a5a4894044ddc640e4

    SHA256

    4ed1bcfa18e268c95c2fc45061d5ba3af4b99445896713777260c5112e7a8e93

    SHA512

    f970b1f21522a7da715dc9a2b5891349c4a753822ed8e2e838b8a7cf4f166062852201507a1685d6ededab1c56b10b19c13f52d749da34aea95b827dab73dc96

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    027b75165b766cae13cfd140fa1a25f1

    SHA1

    0690740873ad836a413467aa708c356102bc5f5a

    SHA256

    47101a86e9347e5d685e0275666426e6b6442460da87ae59531d2a4fb55859d9

    SHA512

    4b8c7d0a7ccf053ba28a657feca089fbc8d538f19783cf00eaf4c9101fc37286d4decf4bc4f509344aae95f8d16816c880bf554943a44260cbe2b0e7b5ee3561

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6434c60ac1a6883ddfce40bf217be4ac

    SHA1

    37074440dc61a66972557b93e82797fc93c671a9

    SHA256

    763c1875942718f0169f7ff3feb633d030ce4f31349d8bcf6bd00c2086369082

    SHA512

    d22c2e46f127aac2ebf473751302d4a40bc2718c5ead518866264d2896bdc02a53f10dce1c86abf2d84e511b7a631423f01564853d1f8f48979abd11609d4b86

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    83700b0f85134052bd4729a8d3664362

    SHA1

    e52810fb4a37eef761c3c385040a078dde728e0f

    SHA256

    49dec1dd02891bf8f98066f6ba0bb3f139101d45ab7878d9896d77fee44ee20f

    SHA512

    a86a9b7bda9fd836d47ff706618fd4a7a2266baffd5f047773233815fecc96cf96546a4cdbc9f587f076d6ff9994c53f5195497642254442cef52a62b3a313d4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    673b75947c8b9efab3552b7a0bb0dee9

    SHA1

    205cc95e35fff885c385b35b11d3e62ef3afb05a

    SHA256

    5c77422dee8a3820c2fa759ff51d6bf8f54500f504b48b8434029945d6ca1ea3

    SHA512

    27f9b93d8f514e0ae6b80158603ced8832490b3cfdf3ff40fa8b77f2a7dcbdee87d7726a2f021bc74fc9a3370f122b68bd9af7b5aa8bf79229cef279ea1c27d8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b85b415c46f4ac7c0ef990a41ef2ce78

    SHA1

    bee96bacffb19ff029f0fd28ff47769f2eda1ee7

    SHA256

    9050764a964158d7d76cb951e19454ecaeabcf4d05b3e5803caed216c9d7831d

    SHA512

    ba454b4a6d0169fc627139b870c85ebcb623ef3b9eac08246b198e5b0fb4359474343032a84b5a04cf5e84cf17cad3da97c288e23e45e0b46e0a0a4f63a97e0e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    496b94d84c3e25255a116ca80bd394db

    SHA1

    cfd7fa928b18cb92c91b3fb82bffbdb7c2cc99d2

    SHA256

    54134b3b4a434794fac41a8dea12f323c6738acc4a29a344932541b8a6a361b5

    SHA512

    778694ae6d9d0019771a77603620fdd7a6eee6424771f38adddb03bdd6fa38641ff898ccfaf91bcd22dce3d25db0523c7e5d81ed6d3607d544704d1c92be586c

  • C:\Users\Admin\AppData\Local\Temp\CabE0DF.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\CabE18E.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\TarE1D2.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a