Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    119s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    18/04/2024, 01:00

General

  • Target

    libxa_plugin.dll?id=8328c31dba7c71ee20ee32f1a735d639f9e43928.html

  • Size

    193KB

  • MD5

    381ffad8b0c2318f2c862ec03501e3f1

  • SHA1

    b418a98e5200dcf5bd5730af3c554c7a16e8c94d

  • SHA256

    1b91ff2ccb2fc7026e90b2b8d56ef2e910702dbaa250ebfca1b9e1c8aefa0a19

  • SHA512

    4dc07d7768bb16b7b461c117b25639533920593b2cc94c9cf0bd77cf1e67768a5b9322b40b53d612eef6281d05ad41fe2fa320075fd717ab2e11fd584744af55

  • SSDEEP

    1536:Ch/TtQt07K/ZjgPGfv+H8DmDyfc7uAJv5vKQhqXN1cp7gXE8B:Ch/TwuMUVeKlRvKPNSpkd

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\libxa_plugin.dll_id=8328c31dba7c71ee20ee32f1a735d639f9e43928.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2760
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2760 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1300

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3c2fff2c0e5df1d6aeccca62f491ab3c

    SHA1

    09eecc5279e6b85aae04f115ee92f74274f6ad91

    SHA256

    f67d7835b56208984782d6b36ee88892f9ea9fd9e350fbd7e5f5ca3e05efcc7b

    SHA512

    75b009d33d21941ef2a637016358f94cb380eb61f8036bd5b2501323970761f185bdfb529fdf16a2a6a12cc4d8d10b12db9f6a246c6def5c651774c8c923c4fc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f4b740c9dd16acfd8d2478e2794ddbbf

    SHA1

    33e342e0342103c76686e62a1d6a1a40121b4699

    SHA256

    fdda5831add1e343f922f023f7103e60cbb952b6623d9cedac9225e612b1510b

    SHA512

    967d5674f3734c7033de3f21aee796c37d29724e6acdb70fd90c5053c5abb1b32dca829766b36d23db4adb6d9ccc08bb8c062cdd8db61371b7dfd8da5154c41d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    28dc619055a4fa77cc522b2c9ead9489

    SHA1

    08ca977b4a022a72031e88b78cf0cb8c0b2d12a1

    SHA256

    07bd826d5b5e98b60b040fe4ac5aa090d6a4d245284441fbadd5ef07ac4d264f

    SHA512

    023edd1dbf7b189b98e2753152006d1f3b47f496a0ba07dba05c5f34701debc2b5b0731ced6f5ea4f74ab041fd98d7d88baaccad4319381b5f171abad4e04c79

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cd627d47b21f1eb732a83f5003edc3d1

    SHA1

    5d814dd1dc9d35b9d5ca553513fb03cb18e90b66

    SHA256

    4d119dc731e9f97f3b3e4eb2cc727577e697e6a7cbaefb2ccd622cf022fe3712

    SHA512

    883f659a41e585a26ab9d9a0dfc5be8203c5c49d888514ab1aff05ec920e3f70e2cbbfe85bfbc00ea1aefe90201d89b9d5c03019d8b457c07b050b3fc44a297d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c7cccad6196d67ec0c243627ec86cb11

    SHA1

    d9015b947d10cfd8e797891f8c4e308ce2fa6543

    SHA256

    57e23c98b700223c494e4ec50ce179b75dbcc185d5d846150e42b1424e66e58e

    SHA512

    89addcac91c5092206d7e0da4c48c7a6db7893328961ea097f01862f270ed62a00649e7648fe910798e49b4014006d67c7de5c49617d38ec334054c43bee401f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1449abc7a26d79642b2c78758fe60ffa

    SHA1

    0d80aa8adb1276cc5d94c94d258bb7dea0634d11

    SHA256

    89c8efaceab2ce7b815318d60556a67155097f76918b7283a2a04ef7b11744b1

    SHA512

    aa15220fbdd40e72ab62dc334095b1c24e12a4b0f1c666c2fbd3391e5718ee6f96bb767cebea392e163071fb532ccfa34c9e0711e24d36e1a456b3ad72819f78

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6ce529ba4b88acd9c822b7a98b350464

    SHA1

    96a0cc91b053bc88d97602bd804bad4e7094df5b

    SHA256

    89e8c05cf4ab24053be358baf9080d8050066a3a6b2ea7e074394a3269df492d

    SHA512

    d728047f1cf219ae0ae4edcf03388fd5aa715ee3b458e1d6f1f8b1a03e5306886e644ee7d7bcd064f553222e3c8bc9110e6b51859cdbdd9a00846bcc5066f0e3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1c9c0fdba17b3dff724df128f6fb4d96

    SHA1

    f9a64b6b698ec3ecd092f5ad57e483e65c2a5157

    SHA256

    652b80421baa1fddb2dda71d8170251ebd814d1855afc7e371bce58eddf02a6f

    SHA512

    1edc598dd414a959cfb5259f25025b552c75290b4a30ab98e08c0b6eee8fcd5f241cd0f2b62659254542a1c8cb50c5ac06c64518ead4f5456e6de5928e4c23e9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bdc5af3c1a54d16ad4d5092238f19a53

    SHA1

    b2270b0d1b602ab052baa7b756281e759bbeea4d

    SHA256

    8077a101d7d89b86181457c8676d5336ea87dde6e6d7d98caa2cdc1ee082d62d

    SHA512

    a972e48e15a0ffb281c4ccde89ac6d02e44ea091911a22bf1ccaec1acc16ea87202acf40010e28cd4264089a84d53ddb84092e6189cd23b86db58c81b847ff90

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3795a3cc9c76c33d32c734efe84a8583

    SHA1

    e046a78699ab9a2bae5709e4e2995e06ae50cc87

    SHA256

    b4ab6d1f3dee70b4111228ebb2faaf1bcdf085b70a9c4ed94f1e2d7baee5fdfc

    SHA512

    d93575b769c8ceec46efa9959b846780deb01120f9ca5745aac4b5dba08c35d155bf7fecefb624adf90f00ac2f624a94cfa141e6952045d8caf3204e24aca010

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e3a18545e9e2f341ca402ca219c3ef23

    SHA1

    3f43886b1e492656896c08f367f48119be11df36

    SHA256

    7846665294a730e7e70286dae558dbf68059eb4f3af3b07396d79a5885299536

    SHA512

    d6bdf86de29d01c8056f9cb760bef6604a267e7e76f8e1de41c669d56ecff92e4c3f4297dca57d11cf7db410ef0972507ac26e1c7b5dc5b2efeac6ae36174e44

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    02f599a9f615c8a83b665b7e71cdcecb

    SHA1

    a8ca25c7becdbe1a9e281084276995b5790d0852

    SHA256

    5ccca792c7ef6789c3da1c234f141aa2f419526e2922a9676327e30e05a9c48c

    SHA512

    eda30e1be6a695d93763ba854eaba2c413f9c0c73771be33ad75123739702c5d401a005169dbd3747bd0e7364455b874588ddecefbdc3a0c6fe58d4d7d7d663e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c01ba4339b33c426796016e31c9fd0e5

    SHA1

    590644edfed962fb218a356c008c4a4eff95831c

    SHA256

    e9045aef9f32562fd0cc98d31633e1eee2062027b05c19e07dff6bb8c1f4e177

    SHA512

    08de2e95c86bcb050fd22d489babfe67ddf43cebeecd1d37f741a3c8098874ef549371379bce0952bcb96930fa47389d9e4be45302a612b0816e1b08b9f34b2e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a0248b0f86c569f13697759c490be002

    SHA1

    4acca4e7ebe2cf898bca3e1b02fdf9a1249e09bd

    SHA256

    509a6b3c2f56ea10e2a30f8c9c125baac10d5fde9afbe6acb4827eee471b0e7b

    SHA512

    9c855f759f154d33c1b4e4ef47f8d62294e10e974596c8dec562b077a76345be143f4db188c09e341f29a9c6d2b02637599d25a0b71ca737688a9b9acff59d93

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8430b7ea1c82819c39836a81581eef87

    SHA1

    27107f71db5cf345a543506c9e23a5b9d37357d0

    SHA256

    3758db11d09117b136c1b8475509eb3c0ab655996bf7d9a7c7ad77610399e909

    SHA512

    6b6b7ff378870deda7b5658dd0c246bfc527316edb4f2b02c3eae5b3de279d82097832845f7bc01a6ab50dfa5824b20616e40e8d397c9dc663d608a673322f26

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    315b71b7218a33ea2992f460d4ca110d

    SHA1

    91f553ae34346cabc6416251cb472a02d71ce4fa

    SHA256

    0b19a88eab0df2644db0b2679d0cdfd392d590a05592c08890c6d0bfcac3b31c

    SHA512

    59b0369fa8d319f912e082352968841a32243dfd4c6b85a07d860b78ed687332f60e8001b774c5e925c229bf61b26580b76eef3fc911559909e03801d36b5288

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2d19e936b50e7dfb67a96089d237442a

    SHA1

    868c96277e968cfd24375c9a1fa0a6fe7f6fccc6

    SHA256

    8ecc5f584dcd75a96ca40c215232b291bafe02d32b776354ee627ee6b924b107

    SHA512

    722ebbf6678ea0c18384b3d1ad9b332887cc22d7347b5c42663c57269b60b348b7976033585823e71d8dab6c538a4945e32d0af09468c81afcf5480a17fe9937

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    59d83a49ff03c45df3d4fab07c569d4f

    SHA1

    8e30bdce95eb5ad11a251f7d0f7e04eaf6fd3e21

    SHA256

    8ef663bca7b84668d49e51e4842582ea64e75a5dd3035afc602a4532abb11174

    SHA512

    d83c921515250b2d5fda42d72a95e42a00c0cae0a5b5cb025e7b2d94abb63ff059e565ae61d24e1642d06ebb3028121ad3c72d5d4f81cf4b4eaeebf2366d5755

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e6bd0f47d93b37cae453cabd05e374cb

    SHA1

    c377874bac1d2597b75bf0cabc4979c161eb2739

    SHA256

    986436b9e406ebce3732be9d7912369d53e185296cfa1074f07678dd7d2e2eab

    SHA512

    021d564f87c54a2daa1203335ef342bdbd7dea152571962657a0c26439817a5edfd0f6e92eb90cef5050806f57c38f94c0373142fb68f10f44bef31fd3d19a46

  • C:\Users\Admin\AppData\Local\Temp\Cab3A35.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar3B65.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a