Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    133s
  • max time network
    130s
  • platform
    windows7_x64
  • resource
    win7-20240215-en
  • resource tags

    arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
  • submitted
    19/04/2024, 10:29

General

  • Target

    libntservice_plugin.dll.svn-base?id=3053a167982e379b031fe9fbe2a1d57c23026a90.html

  • Size

    7KB

  • MD5

    76aab904305fc1a7a6e22d1628e9d0f2

  • SHA1

    4625ddc18b41226426cb88da3e9ce85e1d6eb9f0

  • SHA256

    259130c95b0e68507ae2277754f7d7287c0bbf486050a17e09afd16f7cb912f4

  • SHA512

    bf9ae90bbb6c522d55e1f7407896cdbb8d7aef9cc30a192a05cd71daf6537dd15d95ae8429dd532449cee35016de219b32f66a6183a552750e64f5689976b1d1

  • SSDEEP

    192:Z4vTPMcMHyx1jvWv/8v/dmv/TvCFv0mXHP5BxU6v/EvST/lo3fjvv2v/evjvpvhi:ZgPMcMHyx1QidENmXHP5BxUIdT/2QO2N

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\libntservice_plugin.dll.svn-base_id=3053a167982e379b031fe9fbe2a1d57c23026a90.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2932
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2932 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:3028

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c0c09e395211cb12f928af15ce68e9fe

    SHA1

    0f697f988ecc6e23e4da1ec9e78cb99e31b1c290

    SHA256

    0d6b14b8a069e6e7e9c6c71b4650ec08f7ab106c4851d0ea27e4521d66fbcf00

    SHA512

    fe12fcf2dc3cfc1c6c87205ff88eb1004007feda59da72907f5040799e9284feb71bf206887c973124d3b64ff73ac1dd884074131f5b1f2459dd5b77863ea747

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    50bc4a8967c4e909e9d49b1c94029e07

    SHA1

    7b9e3b2bbc58f897588ba35e21614baf24cf4383

    SHA256

    a4bba66d4ac79a859b6229090a4c3d0eb9f2a8980cfde55b1e4ad3b4eb41ad20

    SHA512

    c891640dadce10c6c35150c0f30c22cf4841591fe1fa1e161409588c02c2dd7485afbfc447c5eeac186929ee58d9093d6e2985989a36ba5a4d03265c7b179d1a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ff40aea4edc2c43d3641d06a51f1a800

    SHA1

    bd1195bdaf7653e21ab42b4b649325146b7748b7

    SHA256

    18813dc14d38a98139940593561c37e921c306ff447a571b26734d2543a694b2

    SHA512

    37b272c1dcabc913d631051f406397275141046f678ae6db59cd59a8082e371cdefa11daef149f5f2e97bf5c064d830ba02c88b775acce65b65f62829a2df079

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0b12cc1137e1e93466348761ad2ecd2c

    SHA1

    83b384e7e65d3ad9f0bdd5ea615a7f986ff60489

    SHA256

    5fac76d7f3841e29c41b147820c83b17f661d2517b586ece5480028b3d45dace

    SHA512

    e2a79b0da9d5e39ee965fcb9c75e1a6474812a9deac77584525869fc0ce4f5329520424ae759606d646f72882a2d73604222db5eceb695e2d9994151db870efc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9b1dc74b007a65ff635b1d92c8bc12eb

    SHA1

    9c6fa729b1c4636c0453621d0f45922324f243ac

    SHA256

    3fc8e12d6f9b9c59ce0ef994b5dc66ada16e18c066f3f1d332d8f78bd4e3e9f5

    SHA512

    f1a8603edbd3d20f623d353f5b60b3666cadd60e95f48f9b1bee7dc2d5c73027b37ffc067244262f262e88cfa8a0e4282fa2e51f0072c20ae07c692dca24e1c1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1378426fe8e78588d6db8d27fcaa4492

    SHA1

    ad1747d61620e1dfa7960290e5a51d7bb0f6a37d

    SHA256

    91db0ec7166694e93b57532f7c39b0e41e4b99fb746adb8d08deb6e973f56c3f

    SHA512

    ef4447c022668d2651b1e6d7d6a339f7fd6271fb73764407bdaf728b905eadafa52be01b7a9f5e3ea4735385d1ae470fa604945a8bdf7bcdd6e2969aee67ecdd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e15c8fcb193d7281b7b6660e0dc2e020

    SHA1

    a608938e23b2aeeb8a445bed105b1150cb127d2a

    SHA256

    4553126d5af2d58e4f86edc3dff9d38a8675f3c61e3414d5b6435b652a6c4c3f

    SHA512

    1b86a4ec62467ead06e014e8da42409bc5c267fff4a8b07de0f8985f8f339977ba5c7ad6c9b42eb632966d720eb502de88e16eb536f88ebeec0fbbe092ba348e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8b91295c2e0ad21fbb4757d9ff1996c5

    SHA1

    58817aee70aeaa048a090baf3290606efcba87c9

    SHA256

    7223dc17fc0db85018bd880082d5ae32df7e40e4609f3702bc773ec3414b1cb9

    SHA512

    7108ec459392d412409b19c32399065810bbe5a4e49554eaf6c684fa6b4c042952566a5bffc1419131e845b1c34133584539de65dada9c4b0c6fe94f98197219

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6aa47a0dbcbc8f50789b333a3aa5e38d

    SHA1

    39f58a6e898ad222840b368d5972fbc1fb894081

    SHA256

    ec15837c75704c0300a9ee6954764f001f2dfff5f2b9b09d3608bcaa9e007448

    SHA512

    5f718c7b242ccb53ff4829fd9146df1ffb9feccdc469a4798a5f26cd2e8c352852ee5fd89975cbde2c1ce410d5f3d52654901ebfc203a6b960b50071cb4300b9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    37aeeb39ee4e45c4dffdb015ee5c2244

    SHA1

    d84f16a1d1e24af0bb9d197fc57cd2c2e59ed571

    SHA256

    f62b9e5ddaa8cef637de4b4cc4dd148108f233489fa36be191fe983451894038

    SHA512

    bf8858f7cb1de13b423de8af0363dff1d90d2b542ce923383af76b10d8d1daed604fc57b1a25866f59a07dffdf89c71f93ac4d71de2961f24ad98495928a9ed3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    efd1c9bd88ee55e1430611cf32530394

    SHA1

    5612514b3bfb18fa44a2c75991375983a601b970

    SHA256

    0b52df6a5bda77730e9581b9c6fe5bf05be084414fc3c74da8bd75eaeefe3de3

    SHA512

    a0aec8c854de78dbb1b77458087ce8546e609faebf550274c22fbf09c714a8c03819b831fca5cb8a38b99a28b647b6fba3ce000dbd2e6c16fce1034842994b9f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c47f108cc63b23b59a485a2cbcfa05fb

    SHA1

    79eaf607a79049b441f6cd8a02f73202177cd3b3

    SHA256

    6623c6bed9852d3b6c5e19ebd55c0ee169fcf7060e1ed28bb49a8685f20fa87a

    SHA512

    44947c59c08dfd288e5e7ff682ce6d67c618a8be41afa66b4550b27185f41a43010f20a9217bcdf0e0cf6ca5d4f18c12052e954186231a3583f6ce9c4328ff51

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9f4e59eca5d87517c4db7434c8f85052

    SHA1

    4eead5cfdd22729ac63141d11fd12b68445e4eff

    SHA256

    28a48b1aa035f4704ab941eb9bebfd013bcf0996bc9be26a1dee59bbdb057eaf

    SHA512

    ec7862739c115adcd105761fd6899d956fb0aa4e4ac71fb1f2001387b6f8f84318fb803e3d84d93f148dd2231613e1bf020254da0b5939a5aa2a4281fcf52119

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d87c40d146ac6017f67b1c26cacb17cd

    SHA1

    08652ead30d7d8ebaf061ddc1e4492937cacbd81

    SHA256

    f0b0affb95b8c5e82d1926e881f3a0ceb228ead9f66f284c3923d5f31190487d

    SHA512

    b766422eb2ca77ec036bf2367cedd327bbe85ae726deae4d4fbb1d02bd6b201cdd10861e62c823a2c68d09140c0ae685e223c78061ad2286e2c87a40a64a27fa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bb76139b827b6db45c2197f9fc0fc825

    SHA1

    1c9dfde21cf4301064eef2f887557e08c33ef55b

    SHA256

    48be788b83a92a6c3e6ca544ca3a3d14d824f3e8bb33041ffe6ae0082349d681

    SHA512

    18e42bc9b112346547403847e04dd93eb2fe6ce7f57404776f16a8d27c2eeac0bd7c9a732e446230a09d8967b7cf97457ba899ed40a26a1b42c96d2358d53229

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1f9d678d6f14f497b4b003922e45e915

    SHA1

    79e84eebcee44fe4b07fed2a8290c761592fbd30

    SHA256

    96a5f20053be7811fdfb39b6ab331667f391e2941605de5c128b8bc4d088f5d4

    SHA512

    80d8c955e08c42eae52af35ec2f3ef558031af4a2abddf837b004d2703f8ded54d84930144cc07b06e9bcc15de250aa8dc131a60834cc7de542e530e52d292d1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b6f16f7d96b9e030e93349b4e4c07f40

    SHA1

    f3b6fca7158941e917cf49fdbdb204a7b751f8f6

    SHA256

    716ab7aad8b595a464ec7d25fc1b2fbef2f70c6080e398bb76264acb0bd547eb

    SHA512

    9ce8ffb09e7c380a70d9458a6cd53f9f4017c62198997b9f97968713b5d17e5866f3483c2aee8c8d562a8f2fc4cac10bbf2732380803b0ec53eedc669a9807d4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e4b4778bab2a6a4acb1117cf98cc7838

    SHA1

    38277f44833044ff96b3da897faedbf384cef820

    SHA256

    52d95299cf001c1d2e8c336dcbcea3cc0f454022b813c59c8eb5e922a4bc08ad

    SHA512

    f0c416fc05a5a81e9c752d8312c91c83be6490b553f2c90764741bcdab6deaa685254087ebbb300b5ddb1a83b90be479b3ee05ed1bf08b1097dbb8979d0d95a9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5132b31dd71f25595e312d3aec22b940

    SHA1

    a6ee61b9bc90f243ee2fda3a89ae8e5719a58866

    SHA256

    f168bc6be2554eb8308ff89e38724bb46dea58abdbae46250180255d6a432b94

    SHA512

    d42facccce080d6240f6af08f2ac4a4ebd4d6029ef679ae22f389a1e5500a743bcf186c04d8e6fd7cf160bc1476f544e0b8f3df7580d4fa878b9257403084c37

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bfc4bd6ed253609a9f2036ad977bd6e0

    SHA1

    ca93a837ed8518c9b1139e63647f3e77b2587f18

    SHA256

    fef633880fb505579c208399fca70ea633236b0dcbf002d2275264953fc4b125

    SHA512

    cce104fb1c2a9dc4fae9214f304145b9ff6400ad82cf6c0ae2e46d7d704a2401b9468cbd830e5cb3e19b54fcf8b22960508527f940456c3c3d897fab276fdd2e

  • C:\Users\Admin\AppData\Local\Temp\Cab3517.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar35F9.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a