Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    120s
  • max time network
    133s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    14/05/2024, 17:35

General

  • Target

    form/default.html

  • Size

    16KB

  • MD5

    7eb1d0befbc7ea745c8441498c64470e

  • SHA1

    dcd78c31411e28a0a2b61037a5fb248922833ad0

  • SHA256

    d81cb960dbb6c8e00637b0562349dd9edad9b1a28b3ea6b80b0f7ba077e70cb1

  • SHA512

    33acd9fae4527a38ece5c045e9d84d6abb3831cb88ba6e2368f6139d87443d90710c680d8ebf4b498eb92b162ce620599a64f43a76ca7369d099132bdd631685

  • SSDEEP

    192:Cm8szJ2A8snFWcgLAQ442+n6SoVGi3H3zi3H3LdamExoXC/uw+0WpPqyRoK/32hn:P+e4cdQ4u6rVGi3H3zi3H3Ldw52DReAC

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\form\default.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1612
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1612 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2744

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    57e470890a440f01ace1d87f83ebd0d1

    SHA1

    e27cca7ac3acdb4083116ac785f02399723b36f7

    SHA256

    c123d75a8cb8afb5489ec1041b53b2732c57aaa1f2b68a63215b6aeaca09dc37

    SHA512

    e356e40cfc699058a0e9c7b5142ff28573b2f1b221a332cd3a3e177461b0d2e29dc7e444d20fce069bf6a98120f25d460ffbbbc27a01fc4c5954b7942e92fb7a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    30a709520069ae4122830775c167d4e3

    SHA1

    c1dfcc4550e930839c2a90166252940219ee36dc

    SHA256

    1c754f4a23f349d66a9879d862e6559ab60bf4f6ab1aa3868214eb9d1e1e0f99

    SHA512

    3250feade2c43daee9956bfa75a1203b396410c6f64dbd68016b0767037c3b94ba051139728a317c0723d5a02ceb024c0f226005afe82ae32085d76b3735c525

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    054ee34b2d517eeeb23951e04ea82ab6

    SHA1

    4b6abce7b38107b4c1c7d9c824328f7e2338a2f4

    SHA256

    ee5d7d5ef5ef88cf0c5313ac6a2205a103b5f6afe7cdefaa5c06e32d44f72b9e

    SHA512

    3f4c7b23a48caadea72a0f66b246ff100688720074f5ba49d880d5183a2321955f322eb3123f0088e096c25e4d21e71f6b33cb1214670563380b2568169cb975

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0b29a8ba59ee797335b36f9c3c6e8b99

    SHA1

    5038c5588021d6e621afd9c600d57280ce7fb937

    SHA256

    ecf322bbe3a2496bf087b731f039e2955bd6b1a80f01c34df8e1c795b162368e

    SHA512

    87b68c1aa5930c762ce0d42a5982887aaf0e387791c37a3ae0469a8bca6477f4a3e2b3beeae824945dedbdb3b6af81b135d65844786684be3ea57479e845ae3f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bda5d55c5d7e4b5d9cfe2d5f178af9e9

    SHA1

    2e604c9ed0cbe3f24802ebf413e6a22c86555865

    SHA256

    1a5058298d0b1a246d09b19f9573d9b2124274c4e3236b202e17bc58e641988a

    SHA512

    8360cee455cae30252bc015fbdb6be3154968a24da432ad39fe0075f750609a9e801f321cb0ebca642a7c1bff0ed7fadf1e02523cef7d953101aa030865bb485

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c20b57b7a119fddeb2d45dca0bf247de

    SHA1

    5ee463f2fbca7b4a94a55fe69f2d4de5e192e3f2

    SHA256

    78a2b1823403bb5b4f2a2e6d38941e969ade4b46b469b4e4f248b3b598c3a283

    SHA512

    8683a673be03a666005d9a561fd43752899b6a1e3380825e3346b046939ad54b9161f8e4dd21cfea42104b6a45a4736c19be721378d1186390f4d183e3a46f23

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2421efebc9508abb5f68bfbcbced425e

    SHA1

    c2e4c0761b63b498fb7cd0873e92f37972c21c2e

    SHA256

    3b655901c2c2cb1400a1f5654b4290291f4964cf2bf3a04641a9b5f688415b73

    SHA512

    544910363fe1e96a798005118e2ad05e5552ff10a66adc2334dbcf15c6fedebe989f2130d036e4d36eb01cde7947a081df09a87ddc31fcf15024641ecf5469b7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f7c050fbfb6a3665d4d4649a34aaf4b1

    SHA1

    e8465bfb114745774e95ec5a1a3465e43447f16f

    SHA256

    be8e40c4628d1c41afc77878dfd57e022f20d35ef305c9c4a6f082afe46ad730

    SHA512

    603120d9f0d4da067be718e70f8cc524e8d6063affa8080b929e8df9007530450fd7a8daa7f0604b4e109f04d1bf0361b7962bf8c11917fe58ae302854ce08f9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d5b60041ab63e6b72b5d3af352d07969

    SHA1

    e083d691ecd65869f5d2038c4e648b6787b60465

    SHA256

    5cdd35d9c4462b7d0082decb632d4f5fe4f0e1e81addbcda36c1d04ac687fe49

    SHA512

    f8297f5e28e253a888a6222546d6cc7beb6f420b029856944e04ece1df257082f085bff0e40f402f829cf844320743cbd3cde8c24f9349f290762a443de794c0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d131fecb2ccc468f73dc826b0c9d83ad

    SHA1

    2c93eadfc4e5698818fd921f779818e1ec7c9d80

    SHA256

    0e80155e09fc5b39cfaa4f5b6c483e44d69726f746fdef9b80f140d8bcf5236e

    SHA512

    726533e2b3552b2ce1ee30f99fb089924b7fc92184bff83978d699b856e13fb258a4246d163e78620be3267b877ef1b714a19ff03d169221e58b5c62145684e9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4719c6f0b86cf4ea2a3d13baa7c26d40

    SHA1

    dc8a1da9c7d4832369fcaa86c9c56085dd2331a9

    SHA256

    ed4d99fd66481747635701d90233c6c2b8b231c49a367ccbd100b2332607f759

    SHA512

    35c9a1fce17b9988d4e358a45235906b3e66a93c9919106f9cd3e3f96b4964eec45c9e9c01c2e57aad3ac8d7d9e82949c1c7a41466c6a4748999ca4367668260

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1e9d459ec73e8f168d17739cbb24e808

    SHA1

    4d1ed2c46f10a2d03cfa278d3ca9b77fc2924b62

    SHA256

    ad1a068e491ab62994eab8e7a5583c9de0968d1742f867fdb1acf9f42881fb43

    SHA512

    3fb5fa1274b78260301b0002024725f7acd18d5613cbec13a1b0612cf57f41c35c2d85a80bcac98af6399246fa22451d939b3ef513db7aab07e2e43765897d4d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    34195f295c129ea3b93a3fa17634c0c7

    SHA1

    0c10f4abc5adb6d16f2201bc8e37be14919cda36

    SHA256

    8449e6d191b66c6a855a168e754298bf564521be31ef642824c205a234cf5715

    SHA512

    e7824f59018d0ace6c2ee1de6f50d096dd8094747cbab5b08ad59539cdc63d98c9d66f46f76ef34e50ac4c9a54c63fb99d7ffe013f0ee1d316c21cb183cd91b4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    543b2f19584713c1eb7512a845f79e82

    SHA1

    f1ae40ddfbbd3993cf886038607d5b23cb43d4cc

    SHA256

    7ea8bc08a2ce9e6d88987f1aaf40921e216f6167dad031d2420512a19ba92301

    SHA512

    ba417858e158fc9d0589a005e204a81c6108cead2e5310f403488e57f757eb166ef49401cae3e8c5408414edce92e360cae8a98618f66ec57c4e3d7edc98f81e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e5d782c15e5adca915d2d61444136333

    SHA1

    0c28ec1a9e680370dca637cc039370a2d90bc3f0

    SHA256

    30b2850af0d4d3c6e8d37314f057306f52d4d431e31b922a84b99b919b86840c

    SHA512

    04038c428b66690cf75a585dc1267396a44fb7799cbbfd1cab2b408988963a73974c480542c3ae5c1e25a18d8b36d807ef327adcd321665dc9ae584d775cadee

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e5689dd1d3d6fd07df08e2e450e688b0

    SHA1

    709ca82f3323acf0dba0742bb32c285678ee1e18

    SHA256

    deed069b88f94bb19086c28867cee66492a835500f919ff3ff2fee310809fdbf

    SHA512

    0df5fa48dc3474e1ca4685d1bd1389c338a3b7e7294b0d9be64364339cd223c1d16b692d1b73581854bf6eb624479a9d2b8b203daf288a06e01c1ed9eb3508ff

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    866d0cd19784d2642be73a80087e3c09

    SHA1

    84a8466a720d99f8e35f729fa5e7579e022261c3

    SHA256

    0bef0a854da491612625ee1287afd119f1cc2340b53ee5816a0772b1601a5855

    SHA512

    bdbf87c112f52d3b61c8de9cf05684646292d76900a94a7ca946e416629db8c69003a00fc97edfe05e347f2dec608d335a976cbebf2914ebfdde967094d1eff5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f5b04f1b4020f51a6a1faa03295d0587

    SHA1

    8f00e23cb23d0a4a597d337cc88b8f15a6c87019

    SHA256

    c3d6a148bdb1423e3c63bacd71813d8afbf6e895528f7a2b08a652cf5470fb43

    SHA512

    74c2f7367905320f81b2123fee0a639b3d44c80c955a993910b46dcc8b1514e66b46e5e08fb6e28376150e3dfda0efff5d0175626f5a109ee280b71652ecbd38

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0d27f5e1c3be626f054b511017ae11f4

    SHA1

    1daa0d723175cca4caf0915ce24a91c9574b75aa

    SHA256

    917aed921de5f4a3c32060979dba674842a2dd0a90986d94d329cacf8db5a156

    SHA512

    fa3f522b0e1bc92aea55d951f5a896f063482620ae5a09c120e327b93073eaf608ee453a2e66b5c22907a91a78daa6cfa516e5c7f51e119c122e048da708e974

  • C:\Users\Admin\AppData\Local\Temp\CabA8E0.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\CabA9CC.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\TarAA0F.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a