Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    139s
  • max time network
    140s
  • platform
    windows7_x64
  • resource
    win7-20240419-en
  • resource tags

    arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system
  • submitted
    11/05/2024, 01:38

General

  • Target

    4e7bd7518f0f21fad8b4901bec5b8520_NeikiAnalytics.html

  • Size

    42KB

  • MD5

    4e7bd7518f0f21fad8b4901bec5b8520

  • SHA1

    7850ce83bbe100c3f43088309342313cd23afa60

  • SHA256

    ed5f6e00ab997d7621e1d2cd7159b7833bcb02d7824582565c6957f440156254

  • SHA512

    5eda0f3837d1d7829bff4355f6bc8b9aa34a05f7947de2fe12cd174ff105ce7afbc488fa01bc1240f5ee460d880553adb83314c6f5a6a48ede405603adc62e5c

  • SSDEEP

    384:jHivukj/TKNZFkhe/KMJehWD9E/FMsQUIicX5klG06w68u1jZ9Z9TYtuujtY3t+G:jHivdLKtPGYZJGQsaPO0D5zTzvF

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\4e7bd7518f0f21fad8b4901bec5b8520_NeikiAnalytics.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:3020
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:3020 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2556

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    1KB

    MD5

    d4f07ee61e152f1392d3acfbd611a65d

    SHA1

    cbad4b0fc4b752be2a4b29ac12b40b9d04d3888a

    SHA256

    e3568bd51370abfded43c7e09b4f26d1d018e3d0925890d457d0bcf080cfc495

    SHA512

    209fed14cb895ff81521ed80a93b9c1c10c227b8102d65dddd9fd651fa5990d307a7f3836766f660362caaba2fb6573a2b3e542254eb593466e8696a3b87102e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\CAF4703619713E3F18D8A9D5D88D6288_F2DAF19C1F776537105D08FC8D978464

    Filesize

    724B

    MD5

    8202a1cd02e7d69597995cabbe881a12

    SHA1

    8858d9d934b7aa9330ee73de6c476acf19929ff6

    SHA256

    58f381c3a0a0ace6321da22e40bd44a597bd98b9c9390ab9258426b5cf75a7a5

    SHA512

    97ba9fceab995d4bef706f8deef99e06862999734ebe6a05832c710104479c6337cbf0a76e1c1e0f91566a61334dc100d837dfd049e20da765fe49def684f9c9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    410B

    MD5

    a072eedc0a9bc8daf1c8cf360296371d

    SHA1

    1d9fd8ce43e3ef97ecde03158a0e13a74a676c0e

    SHA256

    d5b6271c0afae72702de2695a439275b6070f39a51437f6bede3fa46652b5bf9

    SHA512

    e076ba8d3bae75f8b317d3a5710cdadbc2b9aba1882f64d6e2f608b2524daf76934f7db4204c4208775cd149c97843ddc8bd9b35b39865839815b23245a6a431

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    410B

    MD5

    48d64497c7ecd153e7d5ac95a1e5df31

    SHA1

    88124c3c1788b0cc54a93b11eec08e627cdbc766

    SHA256

    e573e8f59d30eca0b705bc61ffd2d8444241b51cc5cbc936d90c5a0005424145

    SHA512

    d73acc067df058dee7a6485f3fb3462435639e16291cce18aa00a475e615875ea98583ed30daec005c4dddcff33516f483741b55978f1cadeb34a16274d6c25f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ce9a8cd186871a257eac6da5ebb1f4f9

    SHA1

    580185967daf91e5dd3eff5d76972336d697fbfb

    SHA256

    b663ed77927e5b5f890b1f18319f355160f70de3a7f7e9535a926a1e86a652d7

    SHA512

    27f6fabf017ee65e2f3489c05b9eef222b230e89d1febbb969b091f94a257a095100423e35fc4f5356736fad20c70a3e4e2ee7f18872e81d21c32cc077d91627

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fdd52c47da9a78ca603e1e07f7e314a6

    SHA1

    643908401fc4f6e966ac6bda4e4ccdedb0972e72

    SHA256

    faa2c456e59fe5990c1667e1f924dfd6b1a5bba3edd22bf69d27c9f6b27e7603

    SHA512

    e82b96f24b9dace434586a0ad30dd51de7891e38fd57502b30fb137a5c5cfe79592a24e3965459b2afee4b0517da41b41e33454de59e776e09a344d9527d0e43

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6cacd8ebd4d0edc98fc6c82cf49f6e78

    SHA1

    b1186d8416c8b8c4ca142072c3462f08f89859fb

    SHA256

    374aea47379016fbff9c14b82b2ed50b3ac55ba53dbf9f1558c953b8de43307a

    SHA512

    8a004ba038378876d2a5f26ce7e7632183ba5a284ef769bd5334bc8678b775e38c68df806badfe08c12487bdb59aa8bfb0c383cfa8cca69cef3449aef37364d6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ed0f98559d23e924c4be90f63e406a68

    SHA1

    1ca33c282ad2cf96f1593f1eb02baa4d193e8918

    SHA256

    8ac633e0024fff5a2ab7c51685a17c2e2f3f991d87c8f4d0c3877598600aea6e

    SHA512

    79ac2b095e568a3db9af0c0bff8aedd73db90530b1d56d783b92a150693c20814845e1a84c3dd1d3840073a7fd01ce3529f156139470146a1631101c200315f4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    19acbddd98e1e44f3b815bc9f7c22057

    SHA1

    8de9ecdd6f855c8d8a96801ced221ff40af5c51c

    SHA256

    5be7f0c969fc23c41dd499401af74e785b6706912e876c0469f0e8f1e6cf16aa

    SHA512

    8d7328ebb46ffa8029096c8109637ac86cfcae4b2b41dab48a00fb21c3a44d31c3447014bd1b8cf89bb582dc062ba940c3e53ebdfe6b0202532eceb7a39df237

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    94346fdcc23b964e45ec6fc515f3321c

    SHA1

    5094ce454f98ce72b15aafe23786d8b3e7e9225d

    SHA256

    edb4eab8fe6e1b10017040067e7636eec9638fcdc29de9fd79d6b2a8ed5f6df3

    SHA512

    35556b47c467ddc75a3ea14e7428b1d35f8e37f5dff68c0ec4b9f8e8a8eb4a97b8b2b393924ff6e7606c3635c61195bcb18899df7f24010d69888f2822715a90

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f731f8ef81dbb5c0856be55b52e3b058

    SHA1

    c3cbc100736691113e3f64879ac7dc42a5e4104b

    SHA256

    b7fa2ede05be26df8f2bd72a1e30e8f35e7cb7b38a9dc2763be141fb7523880b

    SHA512

    8f4fc92fbc8fd6fa9e2ac81468b9d3c7ebf9c66f01fbc7ba143c23de0133ae5d71fb588e0b0d86db03545f0fd7e0ec8c6df7a268247d4dc79027b5ad0dffced9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    873b5a3670d45625ac8a5a73e195fb1d

    SHA1

    316e57c94db37729a6731dc5b2c3f6c85d897ca7

    SHA256

    263c78235b3e2c1452a249a8c25e04ea2861b6b59a9588bb2fb99ff9739f1ede

    SHA512

    0946df7dd671a54ad2ab56170406b4bafe2cf107836161610a0eaf1cd8f639f16693b05919f1f3f73dbc57f6593b3a9b6edbec30efb31e4e741e6f0b6717b234

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d755413e73fa4fbb67ef343335767ae0

    SHA1

    45bbcd3385e6179400af051c612c1837836c1117

    SHA256

    a866f10856dc287bc724497e5a1f00a8cc5d03042334e7b059da9b762883d3d4

    SHA512

    8e5a68a4679b7e409be02b883cefb9a0ff436476d9d522dffd8a82a6169585e4d7bb542acd20510ea5df641146814f5f574a4ebbeab26c4f9e440431fc08900f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5c38d072b2d581a91e143a6fd6595794

    SHA1

    24f4bf1cc3c2ac275a83d61aca19e82d68f04a3f

    SHA256

    1ae008fdb072e54688ccfe0efe496a60c5b1b17f3a46e1adc9beb11ee1398650

    SHA512

    bf570baf7b7666e3c263225308bc9d5c4e2b44064c9fb6f7949fe45633830f7ba05646f7dedb723b8ad03f76f436a36c3614f0f9d5083d4eed2d2dcc0b4b5d37

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cc4c5e3f2a5abb4bf500c4068e0f3ad1

    SHA1

    c7b247094bb7713c62ee1cbd79cfacfbc2040816

    SHA256

    355e5159e17502cf15bb85c93b67eb99c1fd866da0f4d21ba2bbb0f9720b5439

    SHA512

    a5801b815cf50c77078f61c95aab27fd3409cb25d77976762ee677469e27a570bd530879a62b2baa7b0fb36dbd635da28b3d41240fe720c17cb1107c3e88c369

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bf102c06da9f9c3bc356562d3e62c94e

    SHA1

    2eb687c564c3f48b9160ced368e81c4cda5a36fa

    SHA256

    c345dcf268a7a0d3b4acd959df8d3312b020db423b67b5f539990ed416911484

    SHA512

    e896bb1ba2c1e913ae7e9e76dc66c9bb0124e29e39db5d18c1b72c66c169ebf70e5774da60a2eaf9ec0e26b9c9003dbc82f4d1f0c79b8ab5340a3079ba7ad26b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    083e4787814b04f4b0cb28a04e3acb97

    SHA1

    28a01c209954d771ca90dd5f406df7f9013d79f1

    SHA256

    a423f2b90b9b89f0eae21878f1b3807b61d37539130f3eda7505cb0fe08efa23

    SHA512

    330e30d1b03f03e9fb4d31f468ddbaead82f6ba13b589580041a7f49c69faa17a26f8d8392b1228cf1fa75dada70fa2894e9fd5e90e23107e7e2b44ec87b866b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ad1ac5e4dd34abee361d59e99d947c08

    SHA1

    0c50f75994a6f512cab9d79254569ccfff81ddf2

    SHA256

    01a01fd506a07c575861d4401ecda1ba7d9cfd642e9bbe73a2bc8efc3c063aa4

    SHA512

    e9735e4219daed1ea2b62d5fb4eef0246a9e691ffac020665db7c4a7c164e1e8f53aba2be1f71fec6233392bfa0342a59cac1f911a42627aa09f5d6985e6794e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    20f14a7c265cc6fbcdb27992f7ddc704

    SHA1

    d06a75071cd8c2b29bbc674975ecec71beb3af49

    SHA256

    c5786893b497f32a7f57f8aa8adc58d78f2e9871bb2fa98fed5c29704843153f

    SHA512

    6722618c45e8cc2167bc0ff7abd8f202811044a3555fd5c92da2f42397b173b10a88d57e057422a3962e6b2fbb5c5d69bffc8c2539ff2f15d78e15211d0f9419

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bd61bc096b3fef151fa075dec1c60c85

    SHA1

    0dcec77e577e8ad5f7f4442326467371a1a4df86

    SHA256

    27fc0e65eae5d1e402ca96bc82b52fd5318166daffb6e0416683614f679768e4

    SHA512

    7dea4b8145a4a491cc7c1aae9a44f958cbf55064fb4c9aa3c40b85d528f3a410383e6feb72d33fc63a1fdd014898c0ceaa28ae737db3808a4e7f39ec780c8118

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f7dd59fdfe0c7a15906eeebaa4465cdf

    SHA1

    6c8ad55e22a16d92c9dd9fd0c11eb9211786f8f2

    SHA256

    1e47b42c71ea4f28dea3c1e0245d470cd63a59a13ec4064002543fffed185f98

    SHA512

    1a0817019787b3f1de249863a175c3291249cfdd29632ca01e7e7508585282d941630cb96ca74a7367dbbfafe1b4e895f685bb1070309cf2ffaa3886207c6d48

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\CAF4703619713E3F18D8A9D5D88D6288_F2DAF19C1F776537105D08FC8D978464

    Filesize

    392B

    MD5

    cb4fa9e5ac2f5568832ecea7a8d34b49

    SHA1

    11653b91980c9fafbc41f9b1d22bd7dca97fa4b8

    SHA256

    15f034c0243874e53072050e13b41817730ca77ca037268c79007d1231c18f72

    SHA512

    9388559e8de56a68c8f41864e2c159b80915d8771e7b7c1d6c227da8905127806beb646776361e59909a70a29c997e8d7b9c7f7e9bb951ba4b203093ce3c1bf0

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\PH7CXNA3\lan_hs[1].htm

    Filesize

    167B

    MD5

    0104c301c5e02bd6148b8703d19b3a73

    SHA1

    7436e0b4b1f8c222c38069890b75fa2baf9ca620

    SHA256

    446a6087825fa73eadb045e5a2e9e2adf7df241b571228187728191d961dda1f

    SHA512

    84427b656a6234a651a6d8285c103645b861a18a6c5af4abb5cb4f3beb5a4f0df4a74603a0896c7608790fbb886dc40508e92d5709f44dca05dd46c8316d15bf

  • C:\Users\Admin\AppData\Local\Temp\Cab1547.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar154A.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a