Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    133s
  • max time network
    131s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    27/05/2024, 12:35

General

  • Target

    CallCenterApi.html

  • Size

    82B

  • MD5

    c112e24ac692f947fe6e9df8af1d722a

  • SHA1

    5183defb754833bfa60514cb96a4532d323c5ffd

  • SHA256

    e13589b92f2c6a484ff9f61a5c0eae71af9dc91473baba2051fdc12eb4687948

  • SHA512

    810db12a725d9e11c77eb11b00d4480ab0422efd071215bdf7f6ee777d23ead0dc72a017a5310bcf14b9da3c05ed93fb4ce6151c801294b1fed5dca5722e2cbb

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\CallCenterApi.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1920
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1920 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2612

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    aa5f558058a91138d48fdee35ad49c17

    SHA1

    b3ba6e4fb1628016f54aeb6d73f9140cdd242143

    SHA256

    cc9ae472f616dc6e40f647af4dd39252780055fcba50f052f233e03b4b526673

    SHA512

    e158e6246e895d80f2cb8aaac2f85baf21078191358615e45ec04aea762126cb83a0e2f859a085262454f15dc5f2a2394240a49f06aa40ac36c1bac7c58be964

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d0b592e84b0269f489a3f45e8d9f9a21

    SHA1

    fb51619945a91ec395e324f48c8a4c707f892eac

    SHA256

    2f012b3fcf8a19c0be4b3a4a7c680db21c69cdaa685730841bb52dd5ef3f46a8

    SHA512

    5b840f627c247b37ba7c0d301b95064d21f38902f22e52cf0240c599fde76768a54479f5ea3b5c02c95d03d2b5148ff48d02fcce8ff2009cbc7ff79d4638a4e5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    465fbd8c61a2b50a3356550ea3f46a86

    SHA1

    e249d930fcf2924fb245a3e305e4ee365bb5131b

    SHA256

    7c93bc7a41f4fcbf0f69fbcbef8877fad88e4e8593d63b38cdb8565efd33e8c5

    SHA512

    a4a747fa57c3f776283a180a8e0b27af4f844b68be668fe40514f7ba166a447adc86915786b053c611809a133784ed7822b267309ab89fcc602db5222879365c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    80b96a208b2c8af92587d614fc5e2b05

    SHA1

    6936781603085e90193520dc6f20c55bc8cc598d

    SHA256

    5a33546c1d7da40c9c86bafea65d135ee39d5682ea34b3816a071a1a9066f6ca

    SHA512

    0c606ce2db8035dd045e2550ba5cdee0a05192198810aacc5826218f61231928983db0bfdce3cabec338e5ed98dfa68f75516db6424ba7de6a99fe51b1260bd5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    37d271afbf1517232b1e6689df19bdea

    SHA1

    41b30caad24035e3117478ac01198f77fc1e42fd

    SHA256

    6182aea41793a6a4d0b3ad72a921c228bcaff61bcccf11107c06f307deea35f4

    SHA512

    4bc0fe6f29cd771209728eec0de9794fef1bcc2a0122b0650366e777d7ea3154a69d97ae07fd06e7303e32e994aa9ad1afbac0e7a8310d3898bb0460188c1220

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a47ef1f007e565360a3d98c9bd404b47

    SHA1

    9627ac386fe18dc4e76ee399f0102fdd3810a52b

    SHA256

    d344e536b0c2b53693a71a60310c098b36e3cf46337ea1aeb1a86495e2e9b5eb

    SHA512

    45df73def797480e88c1dff59b94a5552ac77dde0119f27a8e5bf60c26965a0619f84424321596156d068ae53145b3de6971982e8508b94ed8c1b514188d8cd2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bfd788c5abb42ffa13559ed51992b5ef

    SHA1

    ecf1478db1fdb0da4aaa90c924888a20cde84b15

    SHA256

    ad94202ae6050fd27e3803b7bcd266fa8cad6a37b8ca341e172ec44afefb8f26

    SHA512

    b4b2b0ffd150df5f7e63fe236966b22c53406a8dcfb2deb97b077ff15cf4b72737bf4d9cce77a15cf27ec075ce7ce8c34d092b5acd1652b0db6275283e66a6f9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7586cb7b5dcba191827fed3b697fee64

    SHA1

    6b5c0c67314964f20f23fb4c6bef0870711d2006

    SHA256

    949b27b2442d7c64ecf9d3301934a2ba7eaaba87d04418ac092567cc3768505a

    SHA512

    9929c4438f9e73ed4778a8035e9951d92d18d5f3022b5327a01608224c0f5cfa0527f0b11d6b45fe4a3473cb846a3c55cfae19cfc5004c4190616433aab887a7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4ffeba7bab3db824cf52a52ed023c1d8

    SHA1

    4452d9e25f110c52caf62a7f32c9c118d0b8cec7

    SHA256

    ed88eacfb2540e5f1d1d5d15cc03c1a1e1f26cf8c98f3a3a84cb73cf74abb86d

    SHA512

    fe89d28168b5a92843983773359cb5583881ef37afcfb4939510f4ca8943f493d007a6da5a6fc87e27fbf49c9e7e2a20dd4d4473a82a7fea352f7336ac856eae

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    05b85649836b1a84e663ecb7b511a90f

    SHA1

    77be6d15cecf8999307746d3ccf16f8d5ff6b4da

    SHA256

    f5bed3b80b3b685a13b8e54c7aeea0337d03a6a83bb2504e46abdc25d3a4d4f2

    SHA512

    14652e326b239daa4ff7be5b258797e62dfc6840b5e1e4a2e8a48eb43828e8271696fe9eed13f6ce75deebe87ffb6bea3d94cec6e8e224d95ea99bfe15bc7577

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    62d660b9b1ba3b0be3209b0f7e3867d6

    SHA1

    b5cd567c0684a2a111ddd9938304a25c77d54d25

    SHA256

    9828eca178e7de898b546083a18996eeb264cadb0a9f7e2aa55412a7e45cab96

    SHA512

    c63bf59cb5bc81cf48ad38c7daed7f96f7232a916b47f4ed73019273eee264fb7fe7cc614ee356003bd70f88b306d78874245a2c5d38562944b5248a1ca300ed

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b2f5a45be52d8d31ca4ae2acf3e36bde

    SHA1

    4c30d3e8a094d35fd27aea4756ddb88e8dfe35cc

    SHA256

    6d67aa7922974a0942595532e9e2bf51a065bf4ac92f99303da25aee1ccdf175

    SHA512

    d66b924dc5b4391467004de2524ee6d8c0bccd6b7afd6e598c8770931c6fb5da5630eba8ae0aa70b0447adbdc46a5599b1920bf48045cd663912d103b48584eb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    117c988a78ce4dd679cd7c441fab77dd

    SHA1

    63ac434bbc55b51bb7409284f99e8f20903c6219

    SHA256

    52681cff39257556ef2b8d61ed6f73bb994aa1f4ea2a847bb66f3537f2b254d5

    SHA512

    a3ba9887514b4c471528a27f8441a6ba0cedbe87f3fccc8ad86bda35529d2a1168ccbcef43d84de43ffa482a09ea01f0fd2acaf678b1bfa1395901143c8a67b4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    88a999a55f3367816c04d3266a613829

    SHA1

    a0439855cc6b72d780bebb56333bab832193ee2a

    SHA256

    2b2380fb696f6d17886d6cf4a1c5f6e996db460b10a29ed343d1f7a3f8dfa3bf

    SHA512

    25860ea99a63d4d246deb9926a24040099fb734661e8e8a60b34f8c21d8429bcfbaffd71a1c1129bbea4637d0bfd2ec25550903b7e18f7e74e0665305c4dd593

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    43074b47d4e8ac89d628cd8dcad16b7a

    SHA1

    2a17aab6e50bf516ab78512d464286a7208436e8

    SHA256

    f5eafe93633397e25d0d2d3d1480ff6713f98209607a142f196512b8895279e2

    SHA512

    3e907709f2930fb86acdae242b676c1daaafb14f001bf7723d12a0e3cf5dfceb629d13af4eb38098e3c822fd834e2036abe89d06934624ddf77af88d0d2982f9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    60ad538551ff11aa0c0752307b482f04

    SHA1

    7d6876cea11d2fd9dc8e19c6080bd552a30b9bf3

    SHA256

    ad0085cafb08c885f8091fcdb648d549a0dacc94418750c7466e26a27a15fec9

    SHA512

    482be833be927d0e84c25f6fc595bba14b199e42dbabcdbd3e15b0ec359c0b12cdea40bd5bf3765dd20d382f76aeb9113cf3b510a42efd9e371e63f6fe852cbc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1a55756f7ab94f7644fdb499f2467108

    SHA1

    26cf71e6f80e5f52080c37e35cf67e848644cf74

    SHA256

    48fb8f72ceafca7401ea13ddc7675a52e8cc25806355b34a6f6eaf97ed84188e

    SHA512

    08796a4ad12ca3473b8f6a11f5d64a0af20adebbdfd6a78c3217f2c2024b8b926d134e11a01b153a5623b75d87c844f7a2e23739d4cf08aa9d3e1df21f19365f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e3a5f72f176a46d17b04bfef6bbb89c6

    SHA1

    ae67ac35ad01908c41696cdf5bac5b43c545a2c7

    SHA256

    d1eee783bda93e6c6eb637bbab29fa6930bd161cb2cfec5386259d9021c6155e

    SHA512

    d06dbcec17b168f617c6bf7a9147af1183c285aabdc3ffa6271b267c5bd5f739939983915ceb332642bb878c3b8150d3e536a6460579b96b5e1a75631d3d41ab

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b7e39dfc21141204ae2f35327bead897

    SHA1

    eaa13ae182f84256faaa0c80e721c2957fb6e867

    SHA256

    18a1b9bffea5902edbb981f858a0d0b7c65ccd56bf6703b5af93c8c861b31831

    SHA512

    76aa786d74f71935a9027ba3f54db959aee3eef3c5cf56ff71b2f6ee00d9fbced82bc904dbb79dda523e0b03b039f429557d15f027781700a4deab8c81fe77e8

  • C:\Users\Admin\AppData\Local\Temp\Cab2DE7.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar2E57.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a