Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
134s -
max time network
128s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
18/04/2024, 00:24
Static task
static1
Behavioral task
behavioral1
Sample
liblibmpeg2_plugin.dll.html
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
liblibmpeg2_plugin.dll.html
Resource
win10v2004-20240226-en
General
-
Target
liblibmpeg2_plugin.dll.html
-
Size
15KB
-
MD5
2ea88e1a6ec880568e6e2a95edbd15bd
-
SHA1
44c004ad30e0c1fd09d4ff2e6510e1de7c8e06dc
-
SHA256
bc0f54ec4a1a937acf7fe9409e70cc287cddfd54ef3a9a0c517300544a5b015f
-
SHA512
d72e97b48963ce1752899d6be15571ca5033f4245b8abdcd97f38b8257035094ff0e776cdd0171a7ec334b24174c3d4d7f4bcc6f3c2a406e0ac65eebd2daca5a
-
SSDEEP
384:cJPMcMHyAca1W6RDcvXkvDZ3enTnLJzl+Cq124kbrBZFE8uI:6PMcMHyAca1W6RDcvUvDZ3enTnLtFE8B
Malware Config
Signatures
-
description ioc Process Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Main iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\GPU iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\IntelliForms iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{373FC071-FD1A-11EE-B826-EA483E0BCDAF} = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Main IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\DomainSuggestion iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "419561821" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\LowRegistry iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\InternetRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Zoom iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb0100000071c834f68b8ed044a0afda50fbc58a700000000002000000000010660000000100002000000049a225a18282dd80976c9a70f57da37b29bd2c2b352e13e5bf65d81c45082662000000000e80000000020000200000000881290b671b769e438fa3d2d04afb90bd4fb784cf8f3ee3d0d8ad57e653ce3620000000f391c13e347825c1bb2a649518023964bb0eb84e5c30f791ed3f61f274d06307400000001e51dc80bd3ef2b49759417999285f826a43d15f3a5e5dda4c8d8ea0a761a3587586f39cfb607504b62f2f12da354c07f2dc84d9164b018bc6876c384d344162 iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\IETld\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000 iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Toolbar iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "3" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = c02ae30b2791da01 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\PageSetup iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\SearchScopes iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing iexplore.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2876 iexplore.exe -
Suspicious use of SetWindowsHookEx 6 IoCs
pid Process 2876 iexplore.exe 2876 iexplore.exe 3044 IEXPLORE.EXE 3044 IEXPLORE.EXE 3044 IEXPLORE.EXE 3044 IEXPLORE.EXE -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 2876 wrote to memory of 3044 2876 iexplore.exe 28 PID 2876 wrote to memory of 3044 2876 iexplore.exe 28 PID 2876 wrote to memory of 3044 2876 iexplore.exe 28 PID 2876 wrote to memory of 3044 2876 iexplore.exe 28
Processes
-
C:\Program Files\Internet Explorer\iexplore.exe"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\liblibmpeg2_plugin.dll.html1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2876 -
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2876 CREDAT:275457 /prefetch:22⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:3044
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
68KB
MD529f65ba8e88c063813cc50a4ea544e93
SHA105a7040d5c127e68c25d81cc51271ffb8bef3568
SHA2561ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184
SHA512e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD57e8a3ac9b9c4689ef37a5862a664ee01
SHA18a1c0b444c8866ee1494214b98175d19a9f0e529
SHA256b2bae0ed55c6daf6b9565b94e8309f8e2fa9d963334337a2c41a473c66899d31
SHA5128fea462d04e7912cb0770d828c11d6663b8540b8445170aaef0dd72ab9aca3c6719197b3dafca8452b98d4ef88e83cd9872c712d7dea5b00251d81cc293d20bd
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD520086b451d1c5efb0db1ad1e688818c2
SHA1daf8f7320650dab4254639db0e0653df19335388
SHA256e1d0d95630886aaf8c15ee618a94a80a25d3ae3a5b3f60e7b3316a44d845074a
SHA5125c0f381a0fdc1bcc2b6170cf1f1de94352d2ff71c5df25d0eb7c89f3eceeb67e23204a54e41527e9d59e4c46b5687cb6409061970a0efcb437426ad416290a2e
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5822dec89f735f52598e5e88d00d4449d
SHA156e2643a9cc425e0b9f2788524a7005d1cd08749
SHA25665e49f936b6d6b5aedaa576ee60b8b3f42a1fbb5eec9eaa9f150f1ff71929dbc
SHA5124756028ecd57275cd4df902dcd797c345bacefd4ee3017e15bdc2bb2139608c7dcc97d67329c4b0ee130ab511d2cfcdf8af6310c67245d3f1189ca72d06a3ae2
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD548dffbc43a4ec2c1f814a4baa7963209
SHA164687fac7810fd0562ec94169be1b86ad1fe92b9
SHA2561d7a1c964989009ddb3a79b8fc36197ebe09205ec2bbd06d983e564af047d443
SHA512bf9662ac68e98516a69f5295545ab7af3f145569be94ffed8600f2e0b5fa73ff7512b772e878c0562cbd6773a36bc94d4e10775835f6c8053624dc62117310af
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD54a40182de175373ab6780dc1df31265c
SHA18e91ed2bd83e72b6329f3d32af1cf877af08f77d
SHA256f31752cff37aa143a3b85cb0912748f27aee5ac2a1ec717e3204cf1d6da2f3b7
SHA51200c17821cec804a08e13aae326ee7e265465c4e9c9e2b62e9dbb104924671fdd0630f272ef79335101f90900b8c1e82a151c2835e24071dde547464ea0018667
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5dc4b7f50aa79a31ba67e90977f1726e7
SHA1ec388deb5a3f900417982250c069bacff35e2d78
SHA2563fc388a67c56ae1cf7d2e395eaa63d31f1a191137d5e50124b74103600fa7707
SHA512abaec7f0e7152333d5fe5f4b23f0f80cc48904c3fd0ea15dcd66348167dc8fb2ab52182f8d2bf5345390a1f168c22f59887ef74df3d487aae08dc5189d9564e1
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD58e902cba81bd869841905d0aa5e89dfc
SHA1cca8ec7b677e7e9a731131b0857aa71216f8a03b
SHA2564d019e4a55ba0e5e538bfe10ff8a680f3f7dda6aa2a6331c328cc570769421ff
SHA512c2bd8c58205592a22b6ff220c269df17cc9bc682f3fc19f82f9ece3100c9ab1cdfc7dc194a7fb94378b415031ba125b11ac6886a0b58d3772256cd29a90232ed
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD522bc3dd14ff1d765887a4bc2cdbc5e8b
SHA1bef5cbf30f0c2a725053e950a57af0b2cf420343
SHA256016584c0dcc103600fa47fd0d0221479a95680bee3bdcc39e4b3635b295fef8e
SHA512aed75b765874eb18ad2df19504d92cced98ae513f93fcceb57bcf0519935b5a5550acc36e163727d1c008a564b15a04332001da2ea4965b5af60388807d1800e
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5bc9ce2885a27114d960c68a79a841790
SHA11825522c8607aecaef87c8d473d7ce74b6ec06e0
SHA2567f8c3fafa078e332feae33790431fdfd94f5702aebb223017e362e26c006dc26
SHA512dbdfab240e864b9ffb6c5188e261a58a770ed0300aaa7ed38eaf274f8361cb12d7ba1746bd7dd6aa9d0f16c74f117693faa0d594c0e58f6dc9e7f7a32bed7294
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5c6ef67837f698248c6ec6940d256de22
SHA1a2485b0a459a145e932510b41943d6b3918c9ee3
SHA25664036d32073fc5aa0259572f66ee0f9b52d2c7d4478c04e24c70ada9e9190113
SHA512abc62a1b2d7419a1173c62acfff31ebb9165b579dc28529d59b6439fe0dd321bdb81c915ac139b4c30f7264fb2549af6993988d83e8a7af779ec8a30c2249f70
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD57cefb1e8bd79e84ade06b8dfd201a130
SHA1a3d10564f89bde94ece4cf7ba58606c6538b3234
SHA25617a22eebc3da061a2f8236e82d96b8272cc59a87250e7b8375a8bb9ebbcbbad5
SHA512064c12e1ab8ee984aa354fd4f38e48716be2ebf97676367e48089459d5be858bdd84937fd898228ac6ddcec803f105f82ccf6e65d0b4c6c3e54e4668a9eb2b53
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD55d08413c624427cba38a4c4bca3e53bc
SHA1256a31f82fd5c2aca16c6fb5110c5044e82a1752
SHA25604077f3129c213174cf7ae8391029bf5231a79d4ddd59f8db453311bc44b6057
SHA512b56004b3bc32d7ea1891d5e961d2a3f1509aad19eb858e7591fe2b2c57a0e541eac8d313be72ce1a191e16c596c6b26bb891dc5325169399b02aa4413abf811a
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD52e469ca68223db64508d8676113d6664
SHA1bc12e67f2e37e176979d49cda3992d2ec79b4898
SHA2565c3c8ec374a0b9ff4ba394a58284751a19848b73f085b1d1bf274d02be32f730
SHA5121b8bf3530f5fe09ff675cb7bed35f814cf7e38bacebae091d320f715e10979c73e658a800821f944084c93d31f8cc96ca8d83e1dfab0696b5f31c8c8be0ef152
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD541ab8a2bfa262abe389e91c68d017949
SHA1be5cbbee96fbca8a13ddb90a020d63f0bfeb9a0a
SHA2564dd075236400d1e0206604546ab5fc5c41e699982e77e00c7666c276dcaf529a
SHA51221e368d07d5c3c6f363fd76c7b2a0ec046b7c7f15b3534e01bbf0603870810a5342bc3304f7535abb633b076cc4c022c58ce37bbf2507118949cbc232eb58808
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5dd00194ad13c72e0d206f2cbf5501b44
SHA13481a13bbe6bee679a2ce71acde25bf92b933d1e
SHA256df10e511a78783c448741b0fd5041094cb526056a4526c3102a813c710820eb0
SHA5127a1713e5d763656bab61158ec4e5ff61283a708f4c835727cf1dca598e15667399476294ae8b7b35a0daac7e7a4f4863ada005eaad06bf50f26030e7d7f1c800
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD50b14628224d9d7dca3b30890e44801c3
SHA15d434996deb3289b45e44f68aefdaf549a73cb62
SHA2563b4f6457e88ac37fa06c7699d2d88b022d9382939d45d1054eaad03d69f8f6fc
SHA51260486f55da62518f475c4982aa59c4b1d04c541fc7c2052ac9afb750de44cded562692d277f92557f372107a8ce8f6bf0e56c586827fc84ea2f9920e4b14023a
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5804fa528cc60fcb6439b81566dbd5ca7
SHA1418c37b061211d3e7656c7576497cdc0ae95ae01
SHA2561f253a7e2e2532a2d5983284f3bb4fe6fe9de2a7114ad8b8c61653c4f67f3d8f
SHA512324f4f1982a21b9e1bc98831486866ca80e942f543f3233ca7554bd099e5841f1e7de573593a04ce42c04063f715eaf7e027490ad7cf08079f4643bf20f6bca7
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD511c4cfd3f5f7c1630db79a412388b825
SHA18b227b587bb61787016096c0954f6f6e870a526b
SHA256e5544e94b053bd5817255a0bf57001824586579d1efa82b6383ef8206f2db50a
SHA512fc1d69b92f4efbb120e3d6f96924b55d324a191a740df9c183bb90030793ebf331adcfd63da45ac6bc2125d6cacf424331c4ece596d256d68d458fd44624c277
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD56f14ff1caae253fab09f226e6789932c
SHA1f40ef2f76ec906930feb85421215116fd708d98f
SHA2564c9d7d805bafbc7d06f6204a0bff28c2a8d9530da078350994a9a29bbe8bd1b7
SHA512955be81bbc2af4142b8b8dff07c2fd852e4f15d25297382f28296eec6f2c145a6437d4118ed13b5c9363cac47023a769082b5da1a714c7058f9c0974de952871
-
Filesize
65KB
MD5ac05d27423a85adc1622c714f2cb6184
SHA1b0fe2b1abddb97837ea0195be70ab2ff14d43198
SHA256c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d
SHA5126d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d
-
Filesize
177KB
MD5435a9ac180383f9fa094131b173a2f7b
SHA176944ea657a9db94f9a4bef38f88c46ed4166983
SHA25667dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34
SHA5121a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a