Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    119s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    19/04/2024, 09:53

General

  • Target

    libaccess_output_http_plugin.dll.svn-base?id=8328c31dba7c71ee20ee32f1a735d639f9e43928.html

  • Size

    216KB

  • MD5

    4fa9fb9c3e3621d08374470ff69a9548

  • SHA1

    1abef67dae3c95d303bdf8ebd4e8b01459678375

  • SHA256

    492ca7b6e74dee3cdf68c433845ba9fadc6ca667b9530a6d5281c6b9a5e4b225

  • SHA512

    b4f66b5216f34ca5992efd792ba68dd8d09b109b67a057b4b721d16f0ae77e9d8744dbed27fff791762e01209a604324ae399eb1ae5dafe94aa842c8772024b9

  • SSDEEP

    1536:ch/1v+PuIisnRJKtwlZB715ToOOfe3AokmLJQFKju9I9BombE8B:ch/1qiijNjnnHk26Fd9I9GmZ

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\libaccess_output_http_plugin.dll.svn-base_id=8328c31dba7c71ee20ee32f1a735d639f9e43928.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2324
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2324 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1580

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    665c71380cacd5be1690a01cb495267f

    SHA1

    923e723c3810bc350b61ce5be4bef4040e0c7cf8

    SHA256

    eee377fa45f74621c67d9ca4d10e245182714e7680c0b7054649b328a4485d4f

    SHA512

    52ab2c2892dc09f78b165d3461d146513f0a57dcd355402b0a1a9dc1f0507b84311ce1b462ccc9a3a1b9c12e1f3867034df981e8ee0af4ba573a049ff739810c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    30c7e814e10549efeba5bee5e3fed1de

    SHA1

    a24c37ad3fe8ada2d8b2a027fd1f5cd4e4fefe99

    SHA256

    c9e03829b5da8bdd9ce79453c275da1b2ab613ec14bb0c3c18bb31e70622414d

    SHA512

    aaae771da4bc08d43e230e089767331eefc9b5c744b1237e10a24cdf00aebfce196b6b229463183861f719945c2cd19c0d4d6142682d7719e879fe62eaea030b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    dc3362771dbd4ebc247886f3bcb83ea2

    SHA1

    90153593a6f549bd5c80629bf8a0993e415f6687

    SHA256

    d3d119575f85446694fcda2884b89fd32fee5d5e930b1578927d1a1a9188155f

    SHA512

    e7f5cc764a80082120fcada740d66ee6ce90f6c5ec3912c014c727bc6cd0b455f8cec945cf2ccde1d4e65f91e29619c9f03241d7af91bb45e68e2d4c121ebb14

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    71784dea761445e138e1b0d006db15e1

    SHA1

    4cb5403b51b62f6d8de125087542e0f269cc5f22

    SHA256

    f3f56db4c3db175a5db8a5bf778a37bc2ff397e243856bbaf32475c6538756c4

    SHA512

    91cbadaf9ab2066f0424efddeebcbc11587aa7ff394da25ec424c560f36d67b4ad6707b99f6a3d8c6eb543b83bc5844797b059e8e0bf5dfe0145dbdce10fdca6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1b5df34c72796fc5059560ccca1ad1e6

    SHA1

    7cf7df951adbbba0f9927bffd0b2152754aae5a0

    SHA256

    ccbfbc7a4b1b3797f26bbc3a7b87c3de6033c7a83b74c399e5b0055867b3a9e6

    SHA512

    90a0c9e3022714d886e49464f7e644e5843039ee10175d558d20ee4dd7611819cfae9bdaaebe89f7cb4252232225791377c7cee139dc29d79c95a6dfc80eb62b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d7ecc8e0251f01d0623a5209d1212682

    SHA1

    f24e0fafec55818de70185c4bf0957269df66861

    SHA256

    81bfa6b400db58b5d936e87d8aea493b2c343bc5ed8c3cdeb65bebaf290141e5

    SHA512

    8a9c6665ec6b5cfba1de32f10db5e035c9bf9a387af5e177547b09cc370476a6e2d115f042afe701f30d0079e16570987bb1c57b432955a12982f5d5c6352fff

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d8c8c6ce82a51768325e6fd94415b912

    SHA1

    98de4e1399898b006cc3573b6a459c8c49be11f7

    SHA256

    4e7ea26e2087a9e9af4418c3cc7fe0af74e7be31c08077802b6b289dcac634b6

    SHA512

    d6dcf1871f783d07de3c19ca92227859e60fc60cd76814110048ec0241f416ad7b8e507b10156f98bd7a37dacdee8facf751afea3c9d384157f5a410adaf9d2d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    380013cda27b72d4401204f169ff14a9

    SHA1

    7145f5536ccc25e54156de134a6468a33d6509d3

    SHA256

    2603ea196bbbbce6c8a2c2f1b7c372fd52771bd85ab519fc2f218c4e1b362d6e

    SHA512

    85257051fad9266f790f3913f9c51fd27ed720152bec8bf2f6bd684250177b171390e88e1d85c4f203728b84dce01c0223ebc55353ff7d461516ae01aa32ad4d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    77d21ff23fe3b8885d657ea55d4af390

    SHA1

    e1d15a351f4fc98316df03c86eae1eafca2a4538

    SHA256

    e789cf9539053dc79cb9fade0968e68cb8ee56e959e6b2bfaa5851be1f281ff6

    SHA512

    da35aaf375c4ae406de939394c779858aa96d108ce1745217f38611c1d0596633ee484f4e0ed364b0a3c2ba5fe7330e313e4779c8a6cf6fd897203a73fee252a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7288d4f0217324d0f575e967500d1df9

    SHA1

    4d7da1fa1d53b6ce915b18203e1fdfffeb46db2a

    SHA256

    ee4219eae311f5b784460c3ebc87bd17651dc28325f2e1721b29162421469074

    SHA512

    2ce61c3ea2af42af54b7a5cfd5cbcbdec724df7fb3db4718a4e17e9b0da6381d575a5bae7c878af5634d350a4867e2c8febeb148f264e0901de92726bcd6b59f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0be493dd9046538ae56e082e637abf19

    SHA1

    e538983ad105f3dfc6ec887089bc5baa6c9af5ef

    SHA256

    b10a210eb402f5895612d78cc0da5884fd7fa8afa9fc5650281ea935e6e3f012

    SHA512

    56735a55f7bed64bbaa4912674237be110a1147320a1ca86a3abe99d052fe2006a25484d1e92e74105f336022268298dc1659c5520ffa295957b6a1f186d81ca

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e710daef1d87f123162343ecfe36b289

    SHA1

    7936aaec6c0a5b104ceeb28f62a9ca80358ce288

    SHA256

    6f6a7c8f350087865ddc7c7f71899967e1fd2f10536d38a3d95de6da25b60abc

    SHA512

    3fb864ca2a6bfae0587278667970dea93f7ff24fac9082b0856e2888f08f47e64f3e84df89739b7341af136dbff8e97982fb39f079c17e759ed7981e79953b57

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e9b6b3988db7f93a203d09bafa7ae202

    SHA1

    2ff78e3d5a521f98b0cc7b8373cc5c32496a51e1

    SHA256

    047c1252cf63a37b05a35c850a2ce55bfb54d382b28b232ae7671659902cf3be

    SHA512

    84af6c8f1e968664403fa24c4a020c319976747d2dfc9a1cdaf7a0d9f82e8b53e7c9d1d1217db310910572d9780e9a78ff40aeebba9a370e0809a9535de640b7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    268d0e1b2cb37b16d767cffa4888d415

    SHA1

    70c4f7d24c79f30f6db5e8a35201b5aae635a684

    SHA256

    47dc842263dddb83223de8f11106945b88e92a426fb47b985a000a2ff4d0f3e8

    SHA512

    f0f13799878f1ddec51d3f599225d60f6a43921ef0086feb658f463ccbf68bc03530676ad1b7b30e8f8238c745dfbdadb4340b90bab712263b40733ac2d9a70f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    21925377e07c96247162eeb8819a15b6

    SHA1

    436c1a9c8a633316faaff658c79ff0ad45187e4e

    SHA256

    f4be44799e9b148fd83909b3a60ada0a2be143380daca0f41693d5201766ec28

    SHA512

    2020560fb90b203f4ef4cb36bc36f05fb67ea1bb32062ca097f4ed86f010ef458064eac1c175d5ed0efc69578e8a9cab92d5d65da7b6739c1caa46659bec44d6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    71e71b78b75ff4f816b4683a46a02e74

    SHA1

    bf6957cd495626460a511c8157c4830513ab3359

    SHA256

    15b5b6d976e8cde31cf8636d9a6cd953756bed32407dabd802cff763c3e4b221

    SHA512

    b2daf88d580ba4ea40564eb9ea630a332a41827813be36fbc46577cbfd53485b05da0954a32e23b85aa87f3c908525bf0700986abccba5bfd2baaabae527627d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a2fc9a4e19afb37f70a7273cb384f0ea

    SHA1

    b2fa082a0b19f227a14601d2fbeab85897dfa934

    SHA256

    7fb06b85691d905526087b5abc11884d3b4550b4b64a9555eadbe37e2784621a

    SHA512

    7d91fad636cd51e7580b71ebbf945cb86afb006686c0f8094351739dbbc3e1b096cf684984313e736e8d771ef024ead9bba4137e6a16f521c48ed15e7e520f36

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cf9cf2ad9c4d48da169199e05457b953

    SHA1

    a712658c0e2cc6d0af7d4ae937e1703fa81c7f5a

    SHA256

    e358da41f422c57b69a644ed5a76761067e371df709317712e87fa05cf607499

    SHA512

    9aa8fc18747c069541bd83a33979025b2aed88e1cdddd67b1ec52bf416ba8ff6eda82cd853d55d6f829597052ecfe5fc8c91feff1bad0e614467ab766c0c8977

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e0920b77e29f8d56dd235db482c7a758

    SHA1

    e59fccf14f32501e881d295ccfdd62c7c9201309

    SHA256

    73f1186ddb3e5acfbcc50f5c0d8842d0e45c9de07cb068cb99d0f9fcd179e757

    SHA512

    b931f43733f979d31e87a2c9387359d6c6e18e79f3e67438c084551b02e10f41ff688fcb8f282cffc50827eef41adb6c1f62f72278cc254597911dd74e860c89

  • C:\Users\Admin\AppData\Local\Temp\Cab2BA3.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar2C96.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a