Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    121s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    25/05/2024, 12:07

General

  • Target

    AdmTaskSvc.html

  • Size

    6KB

  • MD5

    440cc092eb6121e115653215f16eab03

  • SHA1

    cd61416949360902627030b23ec7338572215b90

  • SHA256

    c7a4f036e2663c6f7743e0d87c70fb3d39a2393894471159c8f42789ea9c21dd

  • SHA512

    df0325adf23cb0b505ad53b2eaafa9f778cdb902eaad37ebda73904ddf43368dfc2cf2335dbdfef06becc0f5451689098911a64dc8cd2e9fe13c74da97558883

  • SSDEEP

    192:oSFNVM9OAOUdDs4JASL2X3+IAmOo3cEn1:6PLsOmpMc

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\AdmTaskSvc.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2208
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2208 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2416

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5c996d6ed0b7a39348eec9e622d0e042

    SHA1

    1a5fc74a14b60eff526704fb2cd81dd2ba208623

    SHA256

    776eabc2bcb2b6648958e188c56231eb3eb30989416f3e6d6a5454453e6d983a

    SHA512

    b92148e945db55eab1249e8ac08ed4192b96ed0bb2068eaaa072e277ecd42369f0a52b56d06a9b59e087c2b4a63557c116504ea0120c2d8862ab68022d67717e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6af7a0f202b2fb8cab19233d8b1a6fec

    SHA1

    859fd9abda13d9c8836a8497c5fe48c11cd8f7d8

    SHA256

    3c54d3ddb0390476fb4c5803f72da434768502ca9ae1e861d088c2b29cc386d3

    SHA512

    48b661947e3556401e10f8be3f8366e3d6e8a1b7d85e5f7a75865f5e2d5dbd751730e2572a42d6a7860de8974f44650c1f2aff6b2afbf6ec99c994e4fe7d305d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c21c56919256c58185f16e13c5f09362

    SHA1

    376ea439f06952bd12e29ad7f392cf4594817f9b

    SHA256

    2ac5da238e96a9895763380cf24210d3d67139c27627ffe79d54c9593eb8ae58

    SHA512

    0d3c63c231a970120e5a3defd9164821b3ba78138d978e0a0c01676746377e4b2a2b980bacec051db42f708a2262cd087ad7751ad2967518395378eb1bf3f067

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b2e78da337bf77963e1b34303de0e091

    SHA1

    954b7e61f6edead3ca8758314bad7e695d7d9880

    SHA256

    fe68b036f382942cd10769b0d7e5c69222f443c19e8d80edd2cde1d337801952

    SHA512

    89e46aa2b31914efbe40ae89741ee429b887645531a0ea271d7d96d25196bc9e59f15e2bb85a111dab39db97e4150a91bbbe1852c2da8b710e981fdaf19deea8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8f353a34f19a7e1a6b35deca618efedb

    SHA1

    e3154af72e07269586213a29dc81293014e9b915

    SHA256

    8a3c64e680634434f555736bdcffc6bd1931fd54f23848f1404e3322ff2c20f3

    SHA512

    06dee0b91a798ea3767433a766571e6a684f18682bb6f4ffb94f35e9880dc519d3fdeac541719153a7c3016b29cc9c37cee43404a2b5ab3d2df6d987ee288fa0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5bf22cda4aedd62b56b7b67b151c4122

    SHA1

    887f4ad937a7c5fefee14592b5dd610322fd9c8c

    SHA256

    907b092aaa106c040dcd461bc940a6526f2c5300dbbc4e44a60e254983f5747b

    SHA512

    27f3c98858229b56d28e29aebc29c0bca49c7d69c46822080a1f3d0f9a36a417590070a6fb3db2bc35ba32ec4bb763c8153b3f6c8ed6c15bce5b7794f9452f3b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e0913e0427660768c85919f9de45573f

    SHA1

    8fc31f759fbd8201deb6b308fef1cedd007f76be

    SHA256

    2465d12b711d49c7f2981be15ee62e7070a5682181d02bafc3e9c53ddf5bbc90

    SHA512

    683faefc5c386448a72d0816e157fd3356993f59f033b1421d9b03b720b0cba754149cdfbe6b5e294d698a3e759ac732ee609c2e2ea736374657e517a8daa4e2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9110a5df818c6407d80901ef652987a9

    SHA1

    aa21bf11a28c98504953839e8eec08f1d395952c

    SHA256

    3e50340ecc11537defe3187812ba87a2fd7b063cc29f71b31661fd63294d8203

    SHA512

    626aa336275504e3cb1b668827fc199b6eff67fde6f96e8adb3fa92c9cfe963298de8e5ade55c30c5088e8746107ab08c3e58a4130e30cdfa55370706163e7e4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    219c11fb099fb767f57b0c2738082c13

    SHA1

    4c5b93cc79f9bdb70482b95346da997ccb41e212

    SHA256

    d85c93d99ad160997c59e58159c6d5718c66d777a0fef5828e2d3e13d34534e7

    SHA512

    c1bfb52e727391e186a2a703503d9d5ec38098a8059c02cd18d745b311127b5c8f7a96225c48a6b731273691bd87733bb699da660c72fbc849aafe694d5ce5d1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4a643f4f7d2a1d586b22e1c74bb41dff

    SHA1

    634289cf020684b350021f332218a922dfc3f65e

    SHA256

    6aaebc3aa19a9d0f5ca86bddf360d3c874eafb8761d76976bdca4b846929417f

    SHA512

    a03298987c25a39f31f608082471e014d5097342532b78fdb4deb2fa0eef342cba0947cfbdec48e0db333e21a7b2f35c6219a8664d5dc017d0e1fdc87a030cb1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bda722fc858a18e92742a81ec20d5a2c

    SHA1

    70eda988245f5e22a1156b53d5e3228593920a5c

    SHA256

    a8a341593ef7c961ae5a575c034b26d01e7f4c8b929139e6ac106a137097f8b7

    SHA512

    2c55b2a4ac9072425fc181d9adb7efe61e3d1c17f59f6dfc0b377ca1387a2a6a3c1db8771ac494f7c468a7c7ca36831352ddd0a89291a49cd212369cafecd7b3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ac284fef5c6bfcb339f82d5c652c03c1

    SHA1

    c47603a9aa3fed8d99b66c33f9e0c7d91eac44ce

    SHA256

    0627b63301c7c4780bea04558ee71f5844d2dc01b1ce3c84f138d09e3fe73b44

    SHA512

    427fd6dda5789edffe4a61f10469341be72951de09e6882d3010cd08210c0c326d18cdf2f431a8455da648a7e25836547c894a35c1b09a68173ee928e8794868

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8f0704d7cf536b65baa5bd426b613ebb

    SHA1

    d1dd29414d0eb90ac90a788b009700755920394e

    SHA256

    0fa3a7137105ed27a16139884fabced2cf52d43dff346191dd7e444c5c0ad0b2

    SHA512

    e10fcc9ee96355ab0b68b7fb31fb6a05ad647bd80b24704cc3d9ebc9472e28012efad22a1d81069c288cd45391b1dfbc06b96880233f1cada51f6338933b68e3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    aff62d45aa436362ac9c4ff3560789e7

    SHA1

    6192cfa6f0fe7de129da6439213d95a40d4ab971

    SHA256

    2da7bbf29b57cf5ae3de8519eb9512aea9f5c8799a12e6e7530020f7059a8c71

    SHA512

    7da6bfb6024acd18b786fc589014cdfa4179706832e60cb3554976913c0d2325e7c2189dc7266fa950f86641cc35ebb41796ce64df3d5e057bb2760891cf100b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4d3a7e5026ba471ed7e84ac244363842

    SHA1

    d702dcec1139660832373f36b405939c340f057e

    SHA256

    25daf32081147450a63d061ea2310dace04913465387fd3c96ca3b8e1add4492

    SHA512

    4b6c6baee4a10af736d73218dc5ce923625ff6b7d5055160bdfbdd0ae47f2faaff5179dd2232c764520d98616c1704598ccdb2f66655984485cfdfe2428c49af

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    18db2793bb5853007574bbab604bfcdd

    SHA1

    f2411727279bb2980e5cdd52f7fc86d49987902d

    SHA256

    20389337dd9fdc06f17a1ad49b679e82a8ddfa922c8ddca8ea532aa088413f70

    SHA512

    d82674afa4f34fd3ba5fef10c7de39bc5e1af73b13f2521ffd9cc84c14394b8e5d2a05ab8564d9a6f2a48b87b2bd141dfb3a4bece968b606abf62c083f39bad8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a866fe8f464ff11031f2b5a3a0021773

    SHA1

    172c002cafef4c24144b1b4e44e9f9d0661e2155

    SHA256

    f750af494f5508bd023c2195e039a4b4d972d01abd96fb0872685d03da0e9f22

    SHA512

    9a9a0032d4880b0d8a52e8c2b478d88cf3466b0858ab392cc476754698b9f7842ffeb1c9a137514e6fd1ab003285d6cc7e1aa8d4d72bae25b27a28a4eccf888d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1c3e1ac02b1a4b19a942e57cc1ed58f1

    SHA1

    b26010fc85847263ef5b6be42c84150679da5785

    SHA256

    b0414426ab8cc0977856bb251bb3b5227220dbbd9273115bfd9213780362ebb5

    SHA512

    2b03d8c9b5017e387492e3bceb87208cfc5e8ab4d98db606af75c56d2cc37c63666df8714360db5df3db785c3ab15b7af70878dd5af47ba72d6a4ba4ca09b14c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b2d35f570a30bd1bab22deb09c9192a0

    SHA1

    577a95dc3e62f62be0ded459d935c050fc353eb0

    SHA256

    c5c9cfbc3ed7388eeb970ad9b629298bf795c359d09ecec017bba0d843d3802d

    SHA512

    d88e8cdd0f42149f85cdb737cfe1c429da9e3cb08852920184eadba653673d3df5142be23f5eaf970eefc021cddb54118240af254319ef18f21346cae5623760

  • C:\Users\Admin\AppData\Local\Temp\Cab4119.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar4189.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a