Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    121s
  • max time network
    129s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    18/04/2024, 00:30

General

  • Target

    libmux_ps_plugin.dll.svn-base?id=8328c31dba7c71ee20ee32f1a735d639f9e43928.html

  • Size

    7KB

  • MD5

    ec832a9ab48a93e1bccd3f4dcc2be1f3

  • SHA1

    d787f656f03b0bbf053a37b2a4597125f011a24f

  • SHA256

    15df06713473c1ed6a151d316bceb021607d8caff7b4035f6eb7a999a244ef3e

  • SHA512

    9c2aab5fa810e0898b6f78c33a4054454ebc2e404a3bca1f9ca6bf8d335143bfcc3b98c448c25587679009955e8daff387ae7c55215c910457c36176dd3b2c0a

  • SSDEEP

    192:ZTpvTPMcMHyGpvdpvYpviNpvdpvCWpvMX8pv8pv5B/lo3LpvbpvypvvpvipvapvF:ZdPMcMHyykX9/TE8uI

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\libmux_ps_plugin.dll.svn-base_id=8328c31dba7c71ee20ee32f1a735d639f9e43928.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2236
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2236 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1984

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    71d6be7371de9a9bffe1e6591971002d

    SHA1

    eeb77929fd0e314154ad973f48426ccc4bfe9ca6

    SHA256

    66c9b4ceda730f02329b5209801368ec22ff495f3c88f533f0f432efdd0e08c9

    SHA512

    52910cee47cb75797973df70a18c7926867dcbf83b1db51d92fb46a289f03d864ad79631ce3f726f4988330a1d102cf3218bc59fecd9b9906934bfb3dec60a53

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    947a6d9a4000bfcdbe8f1d12864a4e54

    SHA1

    aa31addfa2413f8753e58cf13fd9019775897866

    SHA256

    ac8ca29cc3f6b57f321faf6677bb226f5fff8e2a199423f4e64d3c2c4a2c50d7

    SHA512

    6a5befa24191f589db26e496d159eeb40e4d9618976ebe6dfd82589cf517293b0cadfb3639f4b12048e56e3150206b7d387398e272201c396bfe29d34439fa25

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e9dba359f3ded5c4f1ef8264b95df8f7

    SHA1

    998a863ec4c62cbf0aa9b795dd94a1294546a7df

    SHA256

    c8c16a997f06bd1ce5f03f287787a25dfbbac2632ba739e94d75e16c3507bdcd

    SHA512

    f87f634b651feac1ea94e435fcd4ab6e203c8697ddd2a847d1d06d20a281aa04107201c1b59bdf714378bc43faa87a71f434f201293cc4a4e9e52743c00d6fd3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    44ea60aa0eac6b03a39d37ad481934c5

    SHA1

    a040ab06e81dbf35787192d6a74dfb8188ac5be2

    SHA256

    74879a84e5d9de2a30c2536d39db3b6f762742333fef6eaee5a711840fc521a7

    SHA512

    0cd481cd2c1b32c065412ffdb1eca7603fe77a812001ff251682f428512d104526eb13128f6d035730d291ffbd74b89ffcf18fdded8d37cc8cecadaa1936369f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8828c5fb5b74456d07cd9b91b8198d90

    SHA1

    6801f384772a69f3bb132384b4e5947f5b93aa06

    SHA256

    5ed4eeeb807df89aa824149f494cda12a154442de8a94c7ea6bb716d9b552e85

    SHA512

    8503137d4a5a4c889605900fb0ebcd65e239022a9a06f40ed3770b833b1f947b10b322283063a60037e94acb9a35fb60badbd07c02c90a2cb900c34647686c44

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    358ddb42d55bf5f81558c53ab5ad8cef

    SHA1

    dacb58ae6525db002931a16fd0de5c503c5f6f8f

    SHA256

    8e8f9d2a9fa8e4fa3d4660f0f57eeb940cd421748ad92fbeab115d276ee69bae

    SHA512

    3ec7307822599353d37f23f86a148eee289d29c3f0c5f33cb5e00340e540ae231f0bbbb42ab385d15e7030f0afbfe7ab30aeb428911ee72617bb05b39834cfd8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    216bc6b5defa2fa67a6f64543af6ead4

    SHA1

    c7d0160d868546dff542de22da6d3a5bd7c09ce2

    SHA256

    cb3a53fdbefca27a4d2fbca662b55d19df1e634e9dcddf02591317127cf88955

    SHA512

    a4a46053949001866ad5d97f723d751f6ac0c51da49f03182b99a89854672775dddddb94df520982c5cc8e346040eb01b110cd4244f497bf886ffb6688d42b48

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f137213a92c62bb7cc20c59a74fbc24d

    SHA1

    dfd4dd5dbf7cbcb04ac3235bd6017be58ce9fc11

    SHA256

    254bb6450d7c8de1dbee5d2d466c389139a66369f99b47c97515acb915d560cd

    SHA512

    c30e8bf367204fdd45e399bd828a0d4426b77edd4a3fd383721265d6c87c544e7dab9160522bbc8c2c9e378f89e7e17dd009231abb8d02c767fdde62c9dc2930

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ab7f28f4f4cddeac14e3a4aa56fc7163

    SHA1

    328320361b393b4c635a8e36d99d32c9af0540ae

    SHA256

    3902a723dd95026d7c32fcaea3735e8295dc0bd48f22f4e58270824eaf750378

    SHA512

    d0ec5385ae832d780ad7dccfad65236b4e7faaa69dff80f2cb0573d5fc56be5f2562ec5d76ec82d71df92012e51b75e8fac54813f9d9049b3479fb2f94c5564b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    be62f7c02128d22b2f1c2220c61954b5

    SHA1

    7972f6a394495d2a01b33fd1453099d1bfd42369

    SHA256

    d8c1e14646ad1ae197adccf670e78d42a53d99e56a1feab67ed5a5c33cce1614

    SHA512

    c354e2bca493b3ec98cbb5cf927b569bad78d1839ef2098b353d5ce6459e8e96372036da16f55b62bfb23b888ba86c394b2011d448fa1c0dee5f0e99896644a7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e06243de64e64235caf091e0a86abb1f

    SHA1

    672f22922db685905fdb8d630f913667b474b1a0

    SHA256

    8258438cfa514e06ff12ae6e62ce130faa183f6eedb7347365bb8188d6090b92

    SHA512

    b1d6ae8bcf62779f93210dc86290ea3ebf92b3e166f594b6ca740407b9063d8136f27eed71ec6d6886b521af1c2bfb5e5e18ba1fbcb6a732fcc5cf7ad6492cf2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    376622dee2f40129e3ee720922fe7f6f

    SHA1

    e460f94bb94dc63a9736a9c4a312b80ac4619c3a

    SHA256

    0da02fd4f6d5126e37499726c67a902617b77fbf0a2c4fdb8965fc8e9ec1e208

    SHA512

    d08497e4eae8a9787331d14618eac49caebe92d39c3d229d6d5a704236f96b01aef5fe7ebbe618ab52f6f16a702f3bf098cc2bf0aefe21eac11ecc23bb905b71

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3f044dc0200651d03dc2adc862096ca5

    SHA1

    47303783316fea6be86e775e19bb59abe2682260

    SHA256

    fcf7e4fbde0d56b1186e45f9ec463436f36f9e51568736a97d807bb5c1411a8c

    SHA512

    4d4c86bde63c94af8fd1aa39dcb56459dd0390f30cab00b8549ba4b56ad5226a58368204cbc7de4dcc68e29de4f7fbeecec9a0c0ff1f9ad74de4e7b7e3e4eeed

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c7d4cd20a606c3d743c71e472d150444

    SHA1

    3ccf6fe271219b034d472e8afd22b0fc6e694b78

    SHA256

    49e2fb6bd02374d7da5f89d44a795fa55a89455cc203ac95055313b194d69a77

    SHA512

    4174dc0f9b95cef57a6e768770abb65b990066a88b77b529a0bf0a606a1aa379abf00ab71197e0e8cca3c7cb2282ff6f53b198a03b40f2148ef2c7e919bee41a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ac4067d2f2b9f9d1a55911f8de652b75

    SHA1

    c14c995122a0d1aadc26c9b50d84dfe3acba93eb

    SHA256

    07d882cf4894f6c7c4ae22b0532fbc6476a5fb99c13fc1bba47242902017648e

    SHA512

    b7abc5adac4b9b1855211752f49916c30a8d3049d1c28403197a62f73cba73b2118a5f3282f144a66a9303043db3e695706993a1fe5966a1e960c26b158113e8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    90f1513f8668add2efbbe5b9c410e94c

    SHA1

    5059bcd3a6c70c3b3bf49c93c7e74f30604a135c

    SHA256

    d80497b18d60c5745134b1302cccda96712b0742b94b64f053518f3f7f9f2159

    SHA512

    bfb706ac68f95aedccd6795acd5aa163771a1a153d8e64241c5daed795a9de4ffdcc7f95a36d987eb275e0bfdc396910f2377206d5b4f60ec2a3f1ded25b940d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    457a16b0f4322ae3d59057aea2354c70

    SHA1

    bd50fbd21c70a083928dcb5398cc3655c45efc33

    SHA256

    b695a094ec8f4ae969d0c69f1dac7630daa5ba89bdd353b01f93399580cdb2a9

    SHA512

    39395e30183de02e25173501c58bd3845d526632a00380f1077f5647bbc68aa15e6c0188812cb137fc61d92be47375d807894ced3bbc31fa49f91de377a74c86

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    da4e6897bb208fdad2135bdbe2c26e40

    SHA1

    e80bc22a9aa85e0153e7ea2cfef1c293f1741dc9

    SHA256

    b0e27190af50144e4092ea285f77cc8e2eb9c063460029a2597541a2f67d6786

    SHA512

    3fb5c03bf52ec9f1a637b0d38c292cb54fbd08ac0b1e69a18a4c60855cb0a3f59264542db6127b460dbb3ec9b2dc392a6176af0a3f00d1aa89d59ee98b7fbe20

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cd4426b3ff3840010c491fc53343bb37

    SHA1

    f5d10594a36e4c61531feb8c67ff029ec1c65468

    SHA256

    938584b77c79ed3aed14f894859c77b43a6eff87f5ddc2782c2554b37a008008

    SHA512

    bd6fff6145dc37c97e17584e56991218f95fa5e6b62a6d115b6bbbbd23d0bb3d9fd3de64fa8405cf36044ce9ac1b9370d0f474ef096e426f07e90bdf87b189c3

  • C:\Users\Admin\AppData\Local\Temp\Cab45CA.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Cab46D5.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar46F9.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a