Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    118s
  • max time network
    129s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    18/04/2024, 00:56

General

  • Target

    libvisual_plugin.dll.svn-base?id=8328c31dba7c71ee20ee32f1a735d639f9e43928.html

  • Size

    7KB

  • MD5

    b0b8fddbd0cb039d4e9ffd5895df1e98

  • SHA1

    d382b43b23815420b0d19ab3e89fb0f69c06fd7f

  • SHA256

    1fd12cf6293e01dfdfc9590502bfeb9126412655e64197894a015e64f6094c42

  • SHA512

    7ab807dddb4f121859a503e423e86f95fae87521d1779468d8a9f394e1c608fdc5c39eca4dcb19dc8a6cdede2e0fc5582d9946cd9eef29d83368f41f24f4f451

  • SSDEEP

    192:Z7vTPMcMHysvJvyviZvJvCcvMXmvmv5B/lo3TvDv4vt+vIvsv4vYUQE8uI:Z3PMcMHyAWXt/BME8uI

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\libvisual_plugin.dll.svn-base_id=8328c31dba7c71ee20ee32f1a735d639f9e43928.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2008
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2008 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2444

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a5e352f321b65eef3f2e6dabbb91e5c3

    SHA1

    97e78ebeb34cc4ebd55437a20412f418a8bfa5e7

    SHA256

    16dc2ef80d88b157c40904373838f5246dc8b5ed83848b73ab59ad58debf29bc

    SHA512

    4ad73bfbe655217021751b8c496404c82adbe763e27c69daa51f1158644c8c3c07e861cae00a01742fc4a166ac011b9d800b7e068b02241af1cba7a6930e79b8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f5a577ecd330034a70da7132cdca2b13

    SHA1

    5a90c6a4a918011b0e476e4bce74b70fc7695c2d

    SHA256

    b67d09c53735fb1236260fd7be09b12d67137b2bd374a5e65d1178731e059eee

    SHA512

    b31568d8855f5daa4303cd6a33174902c0df210e306dfb29579a24b435eb1fb2e95de42944ce0ccdc2f6d10a9523798ae47157ce80c0f2f657eb3525f02a68fb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d17bc663f527fd13f8667ba9ab64af92

    SHA1

    09329b71adb73c631781985e4041100a6bddea39

    SHA256

    183fb99b433a67831465957408513dae7f3841b1a48167c9c06ce795efd3694b

    SHA512

    fd218cd124cb5b8d20025226eeaa6bda7307baa6a2ed20b2088924d4bbc5cf00f96106dc9ab1e02dbcc18c42999e034df6cea54bd99f536547521a27683bbef0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bbf87571e6d8395cd60c03f3da07cf81

    SHA1

    b33f943ed89540574b6e0e43f13fc1bd10d6f4a0

    SHA256

    74e46439b1c6a56d8231fee7ab9e96fe40c65e36ee521055b9f6e84acee6bfb4

    SHA512

    adce368e55d110f0966fd559018e846d79d81366489a41e45b9ee1244bb8dac6d6b8ec867683b9330bf78ab628460740d200a6e669ae4a87cf554d72c5099dfc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    919e577be7c3943a41fb8e41e802403a

    SHA1

    d445edc73056e2815f1f56fa20794d1062df8929

    SHA256

    9f4cd4ad069cdb9ac88d34b1656be4daa267e29a1ba481c8d19b63a267cdb1c6

    SHA512

    870053a5bef0d9df9d495fe8b2e8de04dd2c08aabe3564c0894306a130615fc9081a4b15b880c99f1162ee6fdb2ba2c526dfb95bbb54c8445b21ecf73778cd79

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1c895459d76db9f68171f83841bde0cf

    SHA1

    28b7b0436a390a4eda9333ed5dc8b77cbdec6211

    SHA256

    affdf746ebe1e77b7637cfaec060a7300eec9b7b050e04c31394fc76071785d4

    SHA512

    0581ddaed1e296ea3dfc1746092803127cfbdfa6ea8865f166f542ab93d503b25e80dd6299ed65736373a8b74ab286a631cd13cfcd6e942894fc5e2ba87a47ac

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    404d213a1e3d3a1fb05eb692dcfbcbd7

    SHA1

    fde35350c66c33cf0dea679bbb59c5a3eca043c0

    SHA256

    e0804223c8229b0a2f6a78c43ddbf1449e886501181fd19694ccbe04d8702f1c

    SHA512

    a0c72f7d4ffea21ce2f781518f398b7af50ec5d6ce96a8dee34cec801570cab025c89ad4983ca4125bd35d05e3ee94027ca70932a18c0b82c28edfd91c153b03

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2fb8c116d30fa22203300046a09847b3

    SHA1

    8519deee038c3cdd3de50bd809a4af5b06f75c1f

    SHA256

    a59f5a0703f7c5e2c1e0682084845315ce32df18186369f44581fbde8ff67294

    SHA512

    c1cdf667486e1fdc1abd042811ccaccc80f1881c9bf0dfa66d9ccc7c31706a6f66eaf2344ae08e97c83128d56caf3767b07706d95d635a6b3ff241da1ee266c6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    af3e8cd0198ef5857511a9af4b01e3c0

    SHA1

    6611ffb342df5f83638afc793d08c47d1dd8e4e2

    SHA256

    6cd9a135381e3055bf2cd40307063512aa48333e2e6300dc6e398e0ab45a2fd8

    SHA512

    fb86d05027c7bf5a797521f80d3eeed5573e448a2cbf67bc6e4134888ef1f6a7859ef24ba1fb4e632a30cc52fcb35611029c36a94a2eaa215419660a806015ef

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e904432aa8eb4301f55678bcf44cc94f

    SHA1

    9c98e5d598c0402b3b634d3351b9a8f05f961426

    SHA256

    84f8670bba2411f37924988b78199e401265e1dcaacb785b59ca756f3f46523d

    SHA512

    a91877110c48e12883c97690ecb5c642f9643889818ed8a125f8d7026723ebd4e2bed927d9d9a570eaf64677b2d8c1105820bc2289f443d695f5fcb1e14d9df8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bba38631a8084664827abe48c781b01c

    SHA1

    ca50390010565bcef1694573090cce4319bbf616

    SHA256

    03c0a9bbd3b36e8b12f70ae89c7ee85a404bb4d615c1fcbcf6c10ae468a487f2

    SHA512

    0276405e5baa2847e1cf7d4c1cfd2c63178b52aaaa4301382e580b21b0d93a8ac0e18a26821f6c03223ddbe87b7f299a4b7374f48eeb9144e6ae4b6c74c65abd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1aaf0ff7b26737230fd6abce5e5c5267

    SHA1

    46793ab708eaa0a4fcf67fd5da955391b72b665c

    SHA256

    f4354d2026e733f8574113aab50388284885f59419704f5288ca7054229cf481

    SHA512

    008216e43d22f9ab6d99e86e1a1d8d5f440707b8be25922c50f5b6d85a29f453b6e8c869bbd4b9b29a478021f1b460e92a2dd8a49ed914181a6f7c73f6c3a0e8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    746a8d934c4239823368544452947d8f

    SHA1

    656dd2025adc64f086a8d918fa73e58382f45b46

    SHA256

    2f119eaaa8887eeadc90700b16a2f782514a1386195f0b03635f6cff2a564843

    SHA512

    75c222dba40c38f6aa6d50af9ff9cde077edbc8a3965bd8d7e62d1309d9e672c8a3e2f3fa20f0b93bb642588e303cf18510bc7f71ba082222cd25bc70eb06cfb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9a4b2aafac5f55330bcdd7005363068a

    SHA1

    108080fb97eba5131b4c2090d05a2cda9b058e0c

    SHA256

    418e88ba36fc6f6afbdd15215d26182f75daf8cabef656b77756b75ebf33e6fb

    SHA512

    66339ee9a628f6e1452e1a87b41c91fdbd0461e1f12e97cd36c70b94d409581b2b7e1dd1002db7ce332b542f0082cb040898e0808dac3628e8453bac55101485

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e109619d2d91eb5182faef3ba04f79d7

    SHA1

    dd4849f4d5a394d98fadbe0fe97f586506dd9e7e

    SHA256

    0767a790631147aecce9b6c5e3473308a41ae11ba76aa3b4c07dd8ef147acdfd

    SHA512

    f12509e57d22e37dc5bbed7917c600577350d1486c1b9bc1ba118be83b424ca73507413b66c0b7c6a93485ede1f24c433390afec54b71fb2423ec4a7a98d7a7e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4288a320929893b772b1b4f9a08b57a1

    SHA1

    57d9b0c21c07f8b5511cc092f48bc9d31281d82c

    SHA256

    b1b4a2d0ef51dfa757ae5abe0aeb8ef46a2e3886e21332a2d5840ef3f015ac56

    SHA512

    9b6e7887048c908f8024e2ab697289ac4998f538ceb9b8aeeb2c1b2d536f40c8479381cb402b100d114fe8d95f8bb0d80b24cd887e351973eebd171a57cae39b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d31e80616af4f80a0bba8f3a15819f7a

    SHA1

    d4a5ca8c169749922b3e122f5646eaeb3e37125b

    SHA256

    123d97a6af7e9660936971c078fc31814756fdaf01f099994f9c45a2c1adcfa3

    SHA512

    435dd3ec066c13660f685b81e0977b089868f50c68175b04fe67da41182aa41d96b263e1f2679c6c49c59d970582ca358eb80424eaaaee8ac88550fd723040d6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    59ed1a402871a4d82873fd6eb8752282

    SHA1

    fe5c9f5747d748683b58b5ddbc3486f055d60561

    SHA256

    e69338265a6b0995a7ba1058a89a551be3767f7eaa926c9a6b304919e5838cd5

    SHA512

    d30527472708ffae6902722d660f2f21f9276b98d4e29a43f5cd27ef073cbe7182a4898d39f9a4a4b3c2f2359ce385b84c9411ea930a736e3cf10637c076a722

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b488d34e956bc7a89e42779d39d89f3f

    SHA1

    bc2206c4dbd6e84a1258f29ec39f8a818ec50e88

    SHA256

    a06932dba8367cfbcfa5e0c490e272c8be999af1125fdc2195b33bffff556198

    SHA512

    96c87559cf7d89205c8004011cb907a9f6c14d0ca455c98896af4b19d0bf032d9f332c87576f9273037c53f894335b5e8223e26269fddb4930a20c3825178cd2

  • C:\Users\Admin\AppData\Local\Temp\Cab4932.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar4A63.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a