Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    134s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    18/04/2024, 00:24

General

  • Target

    liblibmpeg2_plugin.dll.html

  • Size

    15KB

  • MD5

    2ea88e1a6ec880568e6e2a95edbd15bd

  • SHA1

    44c004ad30e0c1fd09d4ff2e6510e1de7c8e06dc

  • SHA256

    bc0f54ec4a1a937acf7fe9409e70cc287cddfd54ef3a9a0c517300544a5b015f

  • SHA512

    d72e97b48963ce1752899d6be15571ca5033f4245b8abdcd97f38b8257035094ff0e776cdd0171a7ec334b24174c3d4d7f4bcc6f3c2a406e0ac65eebd2daca5a

  • SSDEEP

    384:cJPMcMHyAca1W6RDcvXkvDZ3enTnLJzl+Cq124kbrBZFE8uI:6PMcMHyAca1W6RDcvUvDZ3enTnLtFE8B

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\liblibmpeg2_plugin.dll.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2876
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2876 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:3044

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7e8a3ac9b9c4689ef37a5862a664ee01

    SHA1

    8a1c0b444c8866ee1494214b98175d19a9f0e529

    SHA256

    b2bae0ed55c6daf6b9565b94e8309f8e2fa9d963334337a2c41a473c66899d31

    SHA512

    8fea462d04e7912cb0770d828c11d6663b8540b8445170aaef0dd72ab9aca3c6719197b3dafca8452b98d4ef88e83cd9872c712d7dea5b00251d81cc293d20bd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    20086b451d1c5efb0db1ad1e688818c2

    SHA1

    daf8f7320650dab4254639db0e0653df19335388

    SHA256

    e1d0d95630886aaf8c15ee618a94a80a25d3ae3a5b3f60e7b3316a44d845074a

    SHA512

    5c0f381a0fdc1bcc2b6170cf1f1de94352d2ff71c5df25d0eb7c89f3eceeb67e23204a54e41527e9d59e4c46b5687cb6409061970a0efcb437426ad416290a2e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    822dec89f735f52598e5e88d00d4449d

    SHA1

    56e2643a9cc425e0b9f2788524a7005d1cd08749

    SHA256

    65e49f936b6d6b5aedaa576ee60b8b3f42a1fbb5eec9eaa9f150f1ff71929dbc

    SHA512

    4756028ecd57275cd4df902dcd797c345bacefd4ee3017e15bdc2bb2139608c7dcc97d67329c4b0ee130ab511d2cfcdf8af6310c67245d3f1189ca72d06a3ae2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    48dffbc43a4ec2c1f814a4baa7963209

    SHA1

    64687fac7810fd0562ec94169be1b86ad1fe92b9

    SHA256

    1d7a1c964989009ddb3a79b8fc36197ebe09205ec2bbd06d983e564af047d443

    SHA512

    bf9662ac68e98516a69f5295545ab7af3f145569be94ffed8600f2e0b5fa73ff7512b772e878c0562cbd6773a36bc94d4e10775835f6c8053624dc62117310af

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4a40182de175373ab6780dc1df31265c

    SHA1

    8e91ed2bd83e72b6329f3d32af1cf877af08f77d

    SHA256

    f31752cff37aa143a3b85cb0912748f27aee5ac2a1ec717e3204cf1d6da2f3b7

    SHA512

    00c17821cec804a08e13aae326ee7e265465c4e9c9e2b62e9dbb104924671fdd0630f272ef79335101f90900b8c1e82a151c2835e24071dde547464ea0018667

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    dc4b7f50aa79a31ba67e90977f1726e7

    SHA1

    ec388deb5a3f900417982250c069bacff35e2d78

    SHA256

    3fc388a67c56ae1cf7d2e395eaa63d31f1a191137d5e50124b74103600fa7707

    SHA512

    abaec7f0e7152333d5fe5f4b23f0f80cc48904c3fd0ea15dcd66348167dc8fb2ab52182f8d2bf5345390a1f168c22f59887ef74df3d487aae08dc5189d9564e1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8e902cba81bd869841905d0aa5e89dfc

    SHA1

    cca8ec7b677e7e9a731131b0857aa71216f8a03b

    SHA256

    4d019e4a55ba0e5e538bfe10ff8a680f3f7dda6aa2a6331c328cc570769421ff

    SHA512

    c2bd8c58205592a22b6ff220c269df17cc9bc682f3fc19f82f9ece3100c9ab1cdfc7dc194a7fb94378b415031ba125b11ac6886a0b58d3772256cd29a90232ed

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    22bc3dd14ff1d765887a4bc2cdbc5e8b

    SHA1

    bef5cbf30f0c2a725053e950a57af0b2cf420343

    SHA256

    016584c0dcc103600fa47fd0d0221479a95680bee3bdcc39e4b3635b295fef8e

    SHA512

    aed75b765874eb18ad2df19504d92cced98ae513f93fcceb57bcf0519935b5a5550acc36e163727d1c008a564b15a04332001da2ea4965b5af60388807d1800e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bc9ce2885a27114d960c68a79a841790

    SHA1

    1825522c8607aecaef87c8d473d7ce74b6ec06e0

    SHA256

    7f8c3fafa078e332feae33790431fdfd94f5702aebb223017e362e26c006dc26

    SHA512

    dbdfab240e864b9ffb6c5188e261a58a770ed0300aaa7ed38eaf274f8361cb12d7ba1746bd7dd6aa9d0f16c74f117693faa0d594c0e58f6dc9e7f7a32bed7294

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c6ef67837f698248c6ec6940d256de22

    SHA1

    a2485b0a459a145e932510b41943d6b3918c9ee3

    SHA256

    64036d32073fc5aa0259572f66ee0f9b52d2c7d4478c04e24c70ada9e9190113

    SHA512

    abc62a1b2d7419a1173c62acfff31ebb9165b579dc28529d59b6439fe0dd321bdb81c915ac139b4c30f7264fb2549af6993988d83e8a7af779ec8a30c2249f70

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7cefb1e8bd79e84ade06b8dfd201a130

    SHA1

    a3d10564f89bde94ece4cf7ba58606c6538b3234

    SHA256

    17a22eebc3da061a2f8236e82d96b8272cc59a87250e7b8375a8bb9ebbcbbad5

    SHA512

    064c12e1ab8ee984aa354fd4f38e48716be2ebf97676367e48089459d5be858bdd84937fd898228ac6ddcec803f105f82ccf6e65d0b4c6c3e54e4668a9eb2b53

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5d08413c624427cba38a4c4bca3e53bc

    SHA1

    256a31f82fd5c2aca16c6fb5110c5044e82a1752

    SHA256

    04077f3129c213174cf7ae8391029bf5231a79d4ddd59f8db453311bc44b6057

    SHA512

    b56004b3bc32d7ea1891d5e961d2a3f1509aad19eb858e7591fe2b2c57a0e541eac8d313be72ce1a191e16c596c6b26bb891dc5325169399b02aa4413abf811a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2e469ca68223db64508d8676113d6664

    SHA1

    bc12e67f2e37e176979d49cda3992d2ec79b4898

    SHA256

    5c3c8ec374a0b9ff4ba394a58284751a19848b73f085b1d1bf274d02be32f730

    SHA512

    1b8bf3530f5fe09ff675cb7bed35f814cf7e38bacebae091d320f715e10979c73e658a800821f944084c93d31f8cc96ca8d83e1dfab0696b5f31c8c8be0ef152

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    41ab8a2bfa262abe389e91c68d017949

    SHA1

    be5cbbee96fbca8a13ddb90a020d63f0bfeb9a0a

    SHA256

    4dd075236400d1e0206604546ab5fc5c41e699982e77e00c7666c276dcaf529a

    SHA512

    21e368d07d5c3c6f363fd76c7b2a0ec046b7c7f15b3534e01bbf0603870810a5342bc3304f7535abb633b076cc4c022c58ce37bbf2507118949cbc232eb58808

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    dd00194ad13c72e0d206f2cbf5501b44

    SHA1

    3481a13bbe6bee679a2ce71acde25bf92b933d1e

    SHA256

    df10e511a78783c448741b0fd5041094cb526056a4526c3102a813c710820eb0

    SHA512

    7a1713e5d763656bab61158ec4e5ff61283a708f4c835727cf1dca598e15667399476294ae8b7b35a0daac7e7a4f4863ada005eaad06bf50f26030e7d7f1c800

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0b14628224d9d7dca3b30890e44801c3

    SHA1

    5d434996deb3289b45e44f68aefdaf549a73cb62

    SHA256

    3b4f6457e88ac37fa06c7699d2d88b022d9382939d45d1054eaad03d69f8f6fc

    SHA512

    60486f55da62518f475c4982aa59c4b1d04c541fc7c2052ac9afb750de44cded562692d277f92557f372107a8ce8f6bf0e56c586827fc84ea2f9920e4b14023a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    804fa528cc60fcb6439b81566dbd5ca7

    SHA1

    418c37b061211d3e7656c7576497cdc0ae95ae01

    SHA256

    1f253a7e2e2532a2d5983284f3bb4fe6fe9de2a7114ad8b8c61653c4f67f3d8f

    SHA512

    324f4f1982a21b9e1bc98831486866ca80e942f543f3233ca7554bd099e5841f1e7de573593a04ce42c04063f715eaf7e027490ad7cf08079f4643bf20f6bca7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    11c4cfd3f5f7c1630db79a412388b825

    SHA1

    8b227b587bb61787016096c0954f6f6e870a526b

    SHA256

    e5544e94b053bd5817255a0bf57001824586579d1efa82b6383ef8206f2db50a

    SHA512

    fc1d69b92f4efbb120e3d6f96924b55d324a191a740df9c183bb90030793ebf331adcfd63da45ac6bc2125d6cacf424331c4ece596d256d68d458fd44624c277

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6f14ff1caae253fab09f226e6789932c

    SHA1

    f40ef2f76ec906930feb85421215116fd708d98f

    SHA256

    4c9d7d805bafbc7d06f6204a0bff28c2a8d9530da078350994a9a29bbe8bd1b7

    SHA512

    955be81bbc2af4142b8b8dff07c2fd852e4f15d25297382f28296eec6f2c145a6437d4118ed13b5c9363cac47023a769082b5da1a714c7058f9c0974de952871

  • C:\Users\Admin\AppData\Local\Temp\Cab371A.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar382A.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a