Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    118s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    19/04/2024, 10:29

General

  • Target

    libmux_wav_plugin.dll.svn-base?id=e3b43bd36fd50840467669364014ee53553872c1.html

  • Size

    15KB

  • MD5

    68237c9f38b4f0aacd255917c10197b0

  • SHA1

    ff4c5332977367eece8c2c6b5b514c2561e678c5

  • SHA256

    a9fbcfea6379c3fa6cd30944cab2a22c6094c633c37253be98c057a569fef60b

  • SHA512

    e172b0da8e7c2e857a8bd4d69cf2db5cfcdd9dde7eb8f2708322eca671e4bc1166180446f7d19d1d16192e5f89d236db792902e86ad4b94e8d5447652ab8f669

  • SSDEEP

    384:lcPMcMHyAcaC/ju/cvXkvDZ3eItILJzl+Cq124kbrBZFE8uI:+PMcMHyAcaC/ju/cvUvDZ3eItILtFE8B

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\libmux_wav_plugin.dll.svn-base_id=e3b43bd36fd50840467669364014ee53553872c1.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1712
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1712 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2072

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ba2bb1c34c3860704c1b0e85625e1b2f

    SHA1

    7f9dfa707e03d31d84a10e64f51444c7d2aa0bde

    SHA256

    2b8ed7a697d95b69620f77c33a32adab3bdc31b2f11bce1dc5bd5bf99c8f1b60

    SHA512

    5cf5edbe5facb3ffb1b472dea0af3b219ae5e543ee887880546542f8eec5d7a345f1225257c9c2258b0bbd7fbb494dc927474fa10f9740b14f37e0e3b4f82488

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ba6551b1f8f01a680108aed50984c83c

    SHA1

    0e39d23801c3b41a1f90670183d95c28c7e230e5

    SHA256

    0d149e7fc00b461370ead9332b73b785c143a3b7830024f0dd3ba27dca2d6672

    SHA512

    2b3a58970f8507224afecb6d9077a8746f4cd169bfa47145f9c5e6caaa97e889599e421a756bd9d7d1254a11885679ecab13dcbd3326218d4299b06ec5494d3a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0f80588b7ac35454a3a2ad6b6605aa26

    SHA1

    9b73a341641e011cd277c3425c4bf880f43b068f

    SHA256

    d5658aaea121b4d92c16d92d62d8947a6e7afa444fd9743147860a8b311a8fa6

    SHA512

    c61cb4f6cb9c7b9286a2b57dad1389f1205234b21ca645f1c5ae8aaf92bc8d4fef64147fdcbb20fff5d0c70d470faded0afe7225d175b45bc6ea1ccb3573dd51

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ae7daf3db3964a7d44ec07b571e590e4

    SHA1

    e9bbccc046619a94736788f5e197dd6889530cce

    SHA256

    3e00b75b14ed2ddd69363e9b61d0772d70397afd576ea48abc9cb8845b596f5b

    SHA512

    3860ede57bb21aa8b8d385c73de37c550ec7ddbef0da53c7c087d1fbc5cac78037bf02baa1bc167f89ad32de5c4509e956d4a99ac55c50fad6b508984f3416f1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a6ca52e16e6e06648287685de2273ee9

    SHA1

    ee39e27d9d90b9c8fa7f931bf661098ddd438d1c

    SHA256

    d95113ce2fc5cc2e190f61ef75c26e897bb94a67405d5a3cab578b0692c714f2

    SHA512

    65c85f1c706586b2a1ea0033682dafc34dfa1ece49be77b5fab97f2962a28eb772aa9d46a0b80e22f198bc8809704788a8b74ecaf3fc2b7137fe599969370f59

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c6b9aff3590e18c709753cfd80fcaf25

    SHA1

    a1a0777f53ce62ef7ff00019a0c1260e73b93884

    SHA256

    dfab16b6ddd99b3263adba0e0e1c6f19443fd949c90d43db91aaf3a099dea56e

    SHA512

    a75d023f17b4f0ae30f3b9c325fea72b5b567c8866465ea7479d650c9eeb13a53fdb6c0189f57dc9f70564149cfd74bfac1afff992ae10329b8c32a9364d371f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bf5fcd9fbb95e54c91fd5e9011c2eb3d

    SHA1

    8cd49fae38507715224eeb5b5faaf780290edcd8

    SHA256

    f9e820c864f7a4dd2f61b66eff18f5f52856eef23a212763873c55b896e6935f

    SHA512

    43fd62a8584f2bf9839e4f6c70251dfcd2b914df9994695e6f0e8a4310527167951c66da616370f8e79d0f607998794b360a66e22c3899c7493bf1687eacf831

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    32251bdcc55fcf76c460cc041188e199

    SHA1

    8939cdb27352296e88aeaa9c1c91b00fde058dd3

    SHA256

    094d3d00b113ae1336e74eba4bd1c1e4b17406fc8bcc139e7780d880ac06a856

    SHA512

    046fbe69983e281bf003a0a8cbdb0a981a4c96c36a35257cfa9351269df2841e374fa65f9076b2be52801f22235d001e43bb9fe897d1eae44c4f4725f885be1b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    75175c7154a2240018986c3f6675fbfa

    SHA1

    66ef9bc7d924fa86252f83712374b8f126b4f911

    SHA256

    1ff76371f691e07baef9cfe56cba98819bccc64f1f619947cc2554c355b53567

    SHA512

    03066b9cc5a95dcc9a95c989b209fac9ebb7952d15a2f0c6d29ba482870b8336cc60d65b3de3e92c9f5331893b67055690bb67fbe1a04a3b8aeee6b6433f20f0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    96b89184619d6d9c4dbbf040fb797fe1

    SHA1

    bf1f8cff229b413ae9d4948a20ab2e5fa2aac896

    SHA256

    5ba0ea1d999bad994a1a4299a842e2d5addccb39843a53ba07c535a609cd2136

    SHA512

    25a4de3176a53674253b9e242fb2bc740ef3a1c1dd485a6313ca46642807e84a1a28f8104a559a05742e4b2ad51ab689de0444bbb4e887cf046357f6a50a6253

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    34f97fa24926ce5a1c668666de920f09

    SHA1

    f1d934b7059ae6b9adc5822bff19b2a0ee999298

    SHA256

    6f294fb08c2e1b9688100561d8f48c20041059162de81ffed27be530840df125

    SHA512

    0bff663d4d00aac246dff1358c38b0fb5683acebb4df67205b06f7f93b643b5ff4d2cda21c07ceba6bbd5caaf03bda4878c681bf78201ef9844233632043cc90

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2d58a0b379f480f370179e97d1fd6a8e

    SHA1

    af78cc2b5a3a4cd84609f3d53ae12092a3421d2e

    SHA256

    1f7e0e3de8cd2eaac49cb69ed1a58930e78e17ccb454d20f091a80db0fa36bf4

    SHA512

    ccf7ce94b72ffa77077a5fccd96106dfe561ec04b334f2b437c4a592ea79a4424ed11781725c54bcc971c187cb28cef9df295443447f4b8ab6477e15347137b6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a5d2117ce7e2aa72e9c364f675146aef

    SHA1

    9c10722fa4a43e62059101f3157c708309b48e76

    SHA256

    e405738c593ce5fb2f58407ff23212ad565c256612d0ab09390a1b96872002cf

    SHA512

    cfe12fbf6deae2e09f1c30aa10234d20df90d2923fc8b509385a644b03de677a956e28b13ed8d0dea6ca3aca49fc86519dbc09c203ecd533c5e75fdcf6723f91

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ea1d836902e0ba39fbbfb12c4be03aef

    SHA1

    4fd54758ed3374d414009b8680a3c25fd258c22b

    SHA256

    afcae180c630c0a19bc0ff87e32f0ba47cd410441551859d2f7c14be5cbd28b2

    SHA512

    a29e3db2835488efd8b262f756b2ace9eb885ae1905520f48dbe4cdeeae3cc7ea4ed7c7c8d1124893d0879e4d8b2c83c5261af357f65810efec759acdebbb89f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c6fd529cd51ae35b270d95c9cd184342

    SHA1

    6dd3d291ce28e324d470b7a3ee7e39b951d18d8d

    SHA256

    bb45c5c3a5ba3757dcbfaa879b87eb2fd0ff3ea8d344151d192862edeb9e5ce9

    SHA512

    57ec495dffb81436527afaf8e640f1aadf0e350013e3fc5133fba5d96cd83a5b82ff494504f4ccb50aa1e9441f778ddc6f10b13c9f7eec3eaa916092e2cc94a1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ba7cf13d86a8b29ff0c4a9e83e1f663a

    SHA1

    8c81f313710c4b94a856792874796afb542d5c36

    SHA256

    33168b1c38fac094a3651d2981b5c6e0388685ce12a1205b3224af1f5aba939c

    SHA512

    e1c63dd13cb29b571e39e5d2108b6cf63041e00eb56be38ad8e5724c1418eb6820d5371e45207a89fe95437390b4630736cf706eebb97fde810c773cad28f5e9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8ddefb2509dd956ed19aa1807a36651a

    SHA1

    178f1026dab86da3619e1a88d316a6b9b5542600

    SHA256

    c6fb87b058dc0b7a403478167507d63738c3ba1e386ccaa547add99d35841215

    SHA512

    3e3dbc3a9e773e39620029a212a0d2b6e69ebc2ac30019c92f0b6b6ca62373ebe50217927344ec945ccb175730b44c432711fe907b3c3c37c11dfa321a7b1963

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4ac2f132bcb11667bf4056cb2566294f

    SHA1

    71a536959f330d085bf8905f4f1ffd86d6a50c52

    SHA256

    9ade767422d87fa5d890f351f33da9307dac006839631a443f60bfeae3ce6e96

    SHA512

    945761506431eecdb59d2c565e3a8f401c40ba7a9b9f47948af418eaa5c6881b54fdddd83a94335fe6a4db89fdcab6ed9ff15d0d4ee20998b5d1035017c34766

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6e02065175eebca5f8a43a3c2d8454ba

    SHA1

    8104d0582916e57a407e6c1e5e695c1c7a06fa19

    SHA256

    41507af8fe26a45bae166eea8e04c9b462c6c4f3500ac2ece22343a6d9f172ac

    SHA512

    5ee57c0f93cc5dbec17865541a76f268b3041ce3bcfa647d98ff765bc4b4f978953d13a5feea5ad677135d954eaea40bd986a5ead717edb0c57c745305956c98

  • C:\Users\Admin\AppData\Local\Temp\Cab2BD3.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar2CA6.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a