Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    132s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    22/05/2024, 11:52

General

  • Target

    libshishi-0.html

  • Size

    301B

  • MD5

    3ad86757308d2031e59e6d05ed48fea0

  • SHA1

    176df81d0b6f24253958fb93f7651a65e5b9fd3b

  • SHA256

    4a95ea496ea305b2aa9507e0c180befd7f01d9778af2b2f9817725679743dc49

  • SHA512

    3a3e33283e56a74d883513fb414b3c4bbb7835790be2d9de653fbac6b5a393805a8cc6d44d856f50025f94980ff0a88caf2aa9564c4b71744d859e571bc1eb70

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\libshishi-0.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2132
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2132 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2080

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7f57a20a4ee09abb8cf5065b0dc220ed

    SHA1

    eaec3d68963dc42f9fe2c3395c70056938420cbf

    SHA256

    56ec0828b7f03d2903c565649ef4f230f978eb38be6c95a1a3ca63c51505c6a5

    SHA512

    b85736bc86f53f98dc500b9fbfdb10fe888aea4af269f2a2ec6f2a6a052f1a810445acfd6816476bfc8d9ee3ce8ec997924b72e2c7ec90173bbb4c67776c1350

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    dcac9da8418e346c7afffc3cfc6482b0

    SHA1

    faf7f9c297ee461bb15f25387e6863d2e5f4e7ca

    SHA256

    ba5f7fe57e3e0297e5691221bfc6be17c6becc9c18596d8a3b0899189ed7413e

    SHA512

    886cf150be8e21bc047e7b77315792a86a438cfdafe813381a0aa55c409d453649828b1f1bda95324e274ccb4c34cc43da08d3f055f87ff5b4f3f6a7089f3472

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d4fc4b39452a59cb1b8be2537f88b5e4

    SHA1

    d1cf16e30806f0cc866447b20735a2f2ecdbf946

    SHA256

    f47a1e62b655d0989c4d6e2e951590d9820bc872ca4c46e6e5cf03e2c91ac2c5

    SHA512

    ecd3a69ea67202cf82c56d3c0cb60be4fa344abb3064b65047220f6433b36f9c59acc35fe5b8fabebdb396c0b593da2cd0156bbb711fd18aae00f0b6698cfe9c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4ffccdf5f8978d0fb62591cd869579a9

    SHA1

    2072f73e1aa4bc928c2443a65aa4f09a01a68ab9

    SHA256

    daa0cc5a491214a96b6937bc21671eb38025a665186bce9ecc4c40142ad38d80

    SHA512

    dc61247287a9bd623b6ec6597d9b2d5b6d2f8269b90fe21c563750201bb3d55fb06bf913f204a8d9fe1c442d57edcce654eca10d3591039bb315937d6dc2b2e8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    dcc87e11ef9818959714dbe0d3cdb34d

    SHA1

    2c8a7712d6d610e30a9bd27055fddb72295a2dda

    SHA256

    a40977d70d99fb350cab52501abe757fe7b2ffda95bdddd050e6b4628239fd81

    SHA512

    195660e8f748abb53ce850668f505a8ebb7a6f2d2e4e3f22602537ff73d86e7464d3bc7a8348abb9b4bb1d8b310d7a22eef590e2604715bb44cfd515605629f1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    eba84b4b5d92f55440af37b5bb952514

    SHA1

    488e1d47458ea9bbd6e6b2f182ddea09aa538574

    SHA256

    200df9305edc29bc07cf9f6a54eaa537ceae68505be696ae9cc10503968eb91c

    SHA512

    3039d54b561242cfd2d39e411813a7c278a9f39f95e61209da7bdbfe7259a156811d05946e31f3e2c2e59a39fac4aa5fbd18b55ba4f89eb3625b891f32580a53

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c43fcad650c9c8f668ce197f3b9bde22

    SHA1

    7a0b8129c9fff55f538726b5577c56ccba45aefc

    SHA256

    1842adfd8052f90af60fdd1d492ca2f6a49a9013ccfe78ebb3b01ae0d0658065

    SHA512

    d88fb0128e11615561c44abbe8f0ce7fd1d5721107cf660251de3679e58892a820b7163555028b5796783dec47a73e207a917d1f6cc500329fde9a415b0213a0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    154ec490dd9db185f657cf37cb868752

    SHA1

    0e817c3d7f6bd53776a6aac525979f97ebb18fa9

    SHA256

    0417f1e6fe4d1732666631176d5db1be3cfbec5ef51a1ba173d595940ee05f76

    SHA512

    060c5fb1d03251fa532c7eb4fef03d9f68fd4d0a45b2f1ef6678f546269f7fad2f12210a136271d9d6fb56ff5deb1d0a2fd83353f825f71cb67445c256881241

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c90dcae30954653565fc26aad09ab4f7

    SHA1

    57f5e5102bab2fb9ee98e9c38ee745727068950f

    SHA256

    d3c96b60ca09e58229bc799ffecfd41a68d5a5096a7b2f6eab4f06544ae6762b

    SHA512

    cadbfe7f248e563855ca0fb78e418fff97743fdfd40c4c0a8ad1b79e6fe75e89cfee16786172ec2ba4acf4c7cec07a30843d2697d1aa83fd03f234162338b5a5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9bba3a366d1c5d8293205ffd62a67394

    SHA1

    9abc7175c46c42e03d2a34b51e407e31287bb255

    SHA256

    80a678f4b2f6ab04dbff2bdb902313acc5552e3f9a96fabc622e27fd8f7eeff7

    SHA512

    6d0f107afd59f06e00e0928e107a998cf00dd2a5184811b11f26045d4c22a2c27199b0d12c56d3389f7dfc125153b4f2ecd384c2da520566330c0ffaa50f8bcf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a8d272e026e407dd611981a60d1cea8b

    SHA1

    0a6b3c8e9d9fb23f462ebe5154190c70b100db32

    SHA256

    b8ee14af1dafcdb13dffea0ab8c099d3e1b60d7e0de2bd7d4885c3fbb1d90d9e

    SHA512

    96bc21b4c45ab60369c672496e4a5854f1d26f743beb7b4b3250f5f269298cd78b3031a572f1c9cb35c79430f1519262d2c913023ab6791ea812fe6ce7b081a9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f644494b44252c40d0474cc90c92cd14

    SHA1

    cb9ec836a1a9ee81571d7806212319632a1aef19

    SHA256

    9042be1be9fbc529802bece1342ebcfdc4309cea4b57d509d2b13b126f29b659

    SHA512

    1313085d7eea71a15c2b4dc830a9d06bcd7a1e23d99427e4687458a3d1a323a6d313fde4f60220d4e06b99e1a82e64ceaa9877dc904e8499d50f4884eb874861

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4e6639ee300f92bf4ac079ab2e0a3ec8

    SHA1

    13b09cc762eeefa0f22139a529e95cbaef75f596

    SHA256

    d1ed43e3d00b000cc21e4eb38fb39884131c80b618bff0b55e024d07f9db4954

    SHA512

    542663d0fe4f41bf1a0ccf54891b15d6400d45d9df0853e265e1be821f61f51c51d849f6652d89eb07e4231bf7d0463c51ef4c6a92f2826fd9510055af41b6b9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e470b3264673f544ab5947f1064c94cf

    SHA1

    b2fe513ffb16e0ca72c8314454f06228a94bab58

    SHA256

    e2a11d9dade6a92b3a9d926410f6cd4802636d2fcd664d75b73370e71efa9735

    SHA512

    9f58ae9946ed5f99a92c5a676217c9e8f16ae62faafe640b56a1477ee66ccfa27b6be3f57b2247a545934e3bb0b436e097f96cb93a77033092ff0a4e31df181e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9f6977b73e0eb2537f0799676e13760a

    SHA1

    9696d5e39cc3dc6aa9c988bf3f3b7207f333b817

    SHA256

    514ab8c8c5604cb5f77612533eb0cd77800f11e1686cf1ad7d7c546333a50cf4

    SHA512

    bad68256af4d9e5b0421cb10f53996f2ee274ab6779a9287ef93dd110ce8ddb67b891183b4a225340a3524d486456b18ea1663370e67d11978f6b990159cdb70

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2d99884900b34bd38cdca26e0289a82b

    SHA1

    de26aaec051e619dc4d323abcb04831a99580000

    SHA256

    4ef67174fc2ab3f5f89b992c32065481ec9f493e26110f7143fa4f014b068581

    SHA512

    3b511d58a3d12aa09c977d9dca19a32f649bc58b04265b9958f2f953a8426007b9c5efee16fc4e6591de6eace51a82befc3b780e57eb4eb9a52dd0220d18d568

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1f1c7f05d5921ce600ba646d14495eff

    SHA1

    cd44bb1299a313c658a1cc5d73e755e40f3be9db

    SHA256

    7b1fdd741e2ef21ab875fb9ae6459144cacf985431098dd5471308f2f665da51

    SHA512

    1d5596a0c3ee55f14fdfae37a9e3b268468b87bee91391d8536bfd1dc8aa2db0b8c92bd47aff2478a4f216edbd59c1dcdd26768fae7884dcfc42d3da18d51601

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3218f02095e0f3dddbc22d49a5c138d2

    SHA1

    bc3bf82ca04e46db882663c19e623470ab2c0935

    SHA256

    afb5c1b549653a9d03792ac0b361188d34ec30a3e93416d6c94d75a5ac5e3798

    SHA512

    be3281572bc53696bd151bf8a89400a6ab4c100063ef31ef33b7987bdedc4b8b8320209d8ad54ef38195a879adb9200a57d4eaea59f34c99e4cf71bbd6e5dd6d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0dd46aae9be6df28a4b88eb9444f90e5

    SHA1

    d3c5f919d46a5f9ab4ce4895c74f58f7dfdaee16

    SHA256

    bedb5a5f81e491395033ce7fcf9095e87afa630b09921314cb9953e60fa016fa

    SHA512

    a628909e20b7627b1f197c9251bfc29de0d2ec51eb7d5105433de2b75e377b28d220dc4bdae9260adefa7d4f94f8a10e3fc68f79c24088250f7bf503a8a2ec08

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    dfdeaaadf437d03c9f38c4c34558f75a

    SHA1

    452f2dc60d4ace402f57e140ccb3d06b0a7d0d02

    SHA256

    4bced690d3868fc11bedc921374d55f92dec0ac8935a52416001e878590bc214

    SHA512

    82fbb3663e90fb25f296b7a008accb9528534c26e13142f7a4db178da4f903facfecd1af312f852a4074427b4dfb3af7c906ca8ba1780adb12aa617a594158e7

  • C:\Users\Admin\AppData\Local\Temp\Cab33DE.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar3430.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a