Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    121s
  • max time network
    152s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    25/05/2024, 12:37

General

  • Target

    https://gofile.io/d/hmYSyV

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" https://gofile.io/d/hmYSyV
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1248
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1248 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2988

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    6dbc5cd219cea4ee2f862d6fe8320592

    SHA1

    7660acfdbd5c4cfd7cf54bb84647619438379764

    SHA256

    ecaa4d9c100367e06183c7ec132d33e804d9de9b0a810f8e97ae829aca82c5c6

    SHA512

    a380ffb76ef2d4c802cee12247c905eebd18102f8f959a25ee2f8ccc7f02b9e048adce8dec03e9ed52313433d7200e3a8946ed78b17317807a4018616dc969ea

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    146329d9d603927d97f941fb89c05ad9

    SHA1

    5921061127e9e71ef3d5102e23dc58a86f8a5186

    SHA256

    28e6b16492d5e9e66aa083d1815e05d09855c2fa6efad40d0772ec463296439f

    SHA512

    5699e578d915df3b509b0238099fb23da971b40cccfb453011daa73bd1143c06d27dabb87666dff3dbc83b06795953ea0e88d2bf371e9d38045150e1f59be94f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1d816487a9f7eceb19b6ae10281e0018

    SHA1

    974f4d1539e3fda17c36add71be7e0333862b63c

    SHA256

    2e9b4c22b53a614046d1cc5a413c2d73e77afa029b14d686fd7ac46c05015c29

    SHA512

    498c8f03ebdfbef482cf941d3739c27857276499a57494d90ea6d1b2337b2b7bde810781e73e3c8452fb91b0a2f8679e47b7ef6023f98c45f73e3143c8f2d980

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    86022003744bd033a426cb43046240da

    SHA1

    5b3a8161570c816c80d540616f59c8b75c549914

    SHA256

    dabe8877a27dbcaa78770c5b9fd465ed8479ca5827fc6088c76d3dc5b09969f3

    SHA512

    6e0ae22293beb3963cb9342c719d21e24e2155fd81ee99bd1f8f4779afa96862b207fcb48b766bee7bb98f3a99725cb83f48986599afef204b6a93d21668845e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f85dcdbe7fc7c86da031838da3cbb748

    SHA1

    d1ee47dfe3cefa039a1b10968df96636b784d8a8

    SHA256

    9b0e05036a15f33e1db782a7c7fe9570b490470a15a991a60fa7f15448de784a

    SHA512

    38fa706227247c1bf66ef5c4421b97afb53079d1f6c266aef25077696065848a5a7eddbad9e434356bc78bd4b910635e0d5d9af27ab10d4cec1cf395621500aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7361c5d89fa100cc1dbe4c03a1a4ebc1

    SHA1

    4b1edff0e45416141f9dcb0738d417df87ac40fe

    SHA256

    5af4f9cae08f59b36ba5e5a55d73c69e3e1aab9cedb62a90b76834b9f408eec8

    SHA512

    30a2e559e45c6b9e4fbfe8d5c562120f6998ce6083e22dd2b5e47396aa968a6dcc3bb33e8ba1dd867b62353568ee5a8472462df554ca01c028f2437146e8c22a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    32557b2bdb8f6eab791c44a410d9118d

    SHA1

    33df3cb074cf0c796748272b6082677a7fffa8d0

    SHA256

    c3e9da9bd9679f37c80728fb09e54c6f66d736a5f1bc7134fad19581a3c15bcb

    SHA512

    7f6e8d35a82301c69a85e756a0d39944fcdb01cb8975c336ea5103402c074e3bdeadba4903f6edb3337dc0c02da99266c37dcfce92eb5b45cbfea8e64b720c1d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    935104967c1ed42275f255194232a8d9

    SHA1

    fdebb26af1adf810a8ddbada2ab7f43843af1b4e

    SHA256

    c7d584f7d9a481b08da7655245dc4083a9d97de8227142cac75b33661946021d

    SHA512

    0da3738afe34bca1c0d728a3a633c4324c2ef9353435bd0266355156b2f710b01a66db45f7d0c543b110c7ca0b74bc2d8f1b3aeb5ccedd52ab2fa704abfb4d84

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    30f8077d7c19842ff95f5a07f5bf0a0e

    SHA1

    64270564ba13a78a9a3899d396daee6972db9856

    SHA256

    a884fc35ad4859f71ff131d23601261da3ef238cd56dc785fcf86db0c84b6090

    SHA512

    c6dc9c3a9871fa69fa5b0495f9bb87f8c22e9f03205aa3c3d52b45707723f95d3e9212616168e2ad5a54c3182b3449b78aac17c0c776cbbdb507610b281dd66c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    01904fb87d7225de8828d1ca5445558f

    SHA1

    3347d86520064eee64af6467f08f3c443a8f067c

    SHA256

    552cadba4f79214a65d2d90e7048bc111277458cadb0430f558c22d23a64667e

    SHA512

    46300aa704be165d019ed74633b7b53e681d5cf1938f142c3c304bb802ab48b7a9e0173ae7e5c3dc189142ae8eba68dad5b40634835e2e6fc407d96ea5cf049b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    962341655680090a6afaf3fd4efb27ce

    SHA1

    e345f39d073277efd037375b3228df1b2641b32c

    SHA256

    32820b3b089c149e3ebfc5669f8be7205d42a8d91d3c4b4054169f0e5938c98c

    SHA512

    16f6709bf406a610f54923fffd5a9332096cedf88a28b3738a844d55791197e83d909bc7516ed32da1652fa6e00139aeae5c155a60151b7a14da12c75233c196

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    850a1d3443a145b7b3b7c5c4ed82cb3f

    SHA1

    4eaa9dff459a2cabc6c4d86e897defeab57cdcba

    SHA256

    438edcfc01c8693a849abd9606bb729360dec0be78e8538dcdb24178aa0cf42d

    SHA512

    b73255bfc2bcf5a0e9672f7840a1ae4d8c287841af80f692c8f894f157c812110d8069633865b98254fa8ba6c225af7218707f7b113c77ce24d86ee06641a899

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6d79898416b5a03b7c30145edc81228e

    SHA1

    b7b91aca6c025f68d6fc9c0b4ef709618e1c67be

    SHA256

    107b624fb2460623e8f880a5426550f2c92108f4933efeb25b95f0df89dcb545

    SHA512

    84ff6441c96891004378fee852ec2fd7ebafa8036e8b63e0fb90b7858285789e5e8b06291ab50f4b5e0b6ee401271f52fbee357f5b3d8bfcbb97bce03d7166e3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a2c1ec9e703f0881df9265a7c75d0024

    SHA1

    5f98689a1a0580517d51f05300988b588d58de58

    SHA256

    f147d3f49bba83cf48b3e0783eb3efc954636b508f771ce39e373652a966e8aa

    SHA512

    e5879ca9f0d2e0eee89bcd4a6de49d406f3a6a7a6579b68309711318bbb918047f453c5fb4b18567d45322be4a8f924f3accf1749bd4647d375bcdfe87c8301e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e890051b253138f7d90e661482cfee3a

    SHA1

    4cac35ed79b168ed9907173a182e412c43e82193

    SHA256

    8cd18b93d2e39153d9ac3b8d4204e1daf36c460a57e8dff5ca95a0e80e5ecb56

    SHA512

    a076fa3bbf03d0a1e4db1501e5b0784a9da533aba9842854b9fd445b1a27ddecf3c1c07090a43d4c239c45612780b40cc95537c02f77850d8ff6df3defe07e88

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7e791383c97762dafce632e90a5559b9

    SHA1

    279063c602420e70b5c4294cb1f9823c1d2e4422

    SHA256

    4ed129d61fa2aff33b6e98268677279d1f5877855977e04061194cc2aa2e9ce1

    SHA512

    0bf8b765c210de5bd82659e77b678070e30b8495b13093609011ef9d4645e9b3957beb18c1040b6c6c6a34d7ce9aec608a52c766b82ffb28e343cd396ea703ff

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c53c397332b39917b8ec844aeacc6682

    SHA1

    48bef6bc8af39c28c30501fbc07e13e5f63f7afa

    SHA256

    176edcf85f022c9be228d6cb60b746463db48a8b8f41301062e85b2aeb6e6e5b

    SHA512

    7a2ec486a0f7d97f6684557be65ff60cab5e95303a6df67a896711905402d5fe674d108973c36f628776be4dccb7cda93f591fdb45d628608bddbf775b6c575d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b06dc9c614cab796727bdaebf08c6a2c

    SHA1

    1b2ed5cce90a90206d5aff5b50ab7f7cb53aa7ca

    SHA256

    cf2420ae8087f72fa6647a5b2ddfa6d4ea53b9e0f1f821b8f24387b803f51a4f

    SHA512

    23ba178c8689f7a11527f3e1b0dbf281f1d6ccd5106a62c5e59f98dc91790c63be71cf9a104ea3a0280cae103efff8dcb8df4aaf8c256434a75a4dde0711a867

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    761bdd0dcf0c28d94ea63d12b7c7bda6

    SHA1

    e0ab018dd385fd7ed903db94b5f41a349864a360

    SHA256

    df3cd7857b137711fd18acf191913a620ba4eac187d4fe0e6214d9b656d9ed6c

    SHA512

    1dda6fbd3795f3e633f7a3cc00328de918bf8998cae6eb873f8ee97a8fe224eb4246dd9ed4be0e86463145eb3f0ebb75cc9519fe0c15f9398fc465bedc4b0d68

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    3436c481f1ac0207a76f74520108f331

    SHA1

    e8c334bc1b0aeecc0d942003a8203e1b1a8f4df3

    SHA256

    d716f381559d2094a0a199bcb5d78b619ccdcc81f998a8c4a45b76a874040d9e

    SHA512

    c4ea75cac4f86c1409d117a356bd0fb8d90f0e0daf36503841a92c529b675dbbd4ca72693407847754809912ec762df09577085c57a695c6c395e08458f14070

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RYNL6UIN\favicon[1].htm

    Filesize

    1KB

    MD5

    0961eb13ef799b1c1f2a335965f343bd

    SHA1

    5d7ce0e0c0137d85da4d7ced88bff2bdba80ed20

    SHA256

    8ef0aa04db9fe87fe3e9d92103882dde1531a55f8c7fcbceda55f8ae4f501435

    SHA512

    554458650ceec6f091e6451ed3eb46141d98deba5cab9fc54c0b956b90939caf5d846edc6ae4d368d88a964c2259f5cf9fcadc8f7e610b30928ea65af9b5c777

  • C:\Users\Admin\AppData\Local\Temp\Cab27EC.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar280E.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06

  • C:\Users\Admin\AppData\Local\Temp\Tar291D.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a