Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Resubmissions

27/05/2024, 17:48

240527-wdtnzscb2y 8

27/05/2024, 17:48

240527-wdp1sscb2v 1

27/05/2024, 17:48

240527-wdkq3sca91 1

27/05/2024, 17:47

240527-wc2cfadb28 1

27/05/2024, 17:30

240527-v2957scf68 4

27/05/2024, 17:30

240527-v25kqacf65 1

27/05/2024, 17:28

240527-v2byeacf54 8

Analysis

  • max time kernel
    363s
  • max time network
    364s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    27/05/2024, 17:48

General

  • Target

    http://arc.net

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" http://arc.net
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2320
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2320 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:3020

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    978d3b775e004ed5e2a9009a3d3e6fd2

    SHA1

    fd867722990d9365f23527d98bdb88e8b0978cf7

    SHA256

    e765b3e8084469945af5d9a8e8e62ed502411826a7a4f0e5c3594671e40cfd16

    SHA512

    1f841e2b158e7d1d61547653962cfe91be012d90607f0fc1947190016baf03821598b77438e1735652b3140d968c4c20caced249681dec1b6893fbd269e9c915

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4634f21ae774b752ae86eece4cb429ec

    SHA1

    87ae9fa65314172ea178529b8570d037e51d8bae

    SHA256

    3838f8dd811197ea09f74aac47660cce3d43e954a2a6cc806365bae1428bd538

    SHA512

    6cc8441fd960e33010f8683f8cd4a4988e746300b0b0709338c19084baca12797cf031d8df193ab5190259e8b994138493382da5db7e246c4b78a89125444ede

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fc1b4aeab633136efa3665b3427ef9d3

    SHA1

    13b0124d03a5e9e7d19e12888de02c5979ffc4b7

    SHA256

    6a78e0f1e4554f474028fd6dfb3ae7d4dba5abb24dad2f210a06e6fc50d82a56

    SHA512

    29d22d732facc08134c2349039dc2f202d897991a8a45fdcce5bf79093572c67ab4e54092e993f409a2a4f221415de78105bf4dba434299090375fa41d4c089d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3915564017526c5bb230e16caff49430

    SHA1

    cb30a02f45b1a68a686307642b17609c7e2d3c2b

    SHA256

    0a0c01466dd175b9abd24b7e57264c2e0ff18c949318bbf4a307421b4d487a2d

    SHA512

    242297c19e4e739690d49e7df9469ec30d4ad988b10ef75fddebc247dd30bb9a1dd3e85a2addcd30ba772a4b0e4d6e2bff2c06d67c948325abe297c21076204e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f0f17f64c7d9561e588a122cc401e63d

    SHA1

    814a46f171b41770bbedd2b575f215c7f37a4ca0

    SHA256

    6fe8e627f060ec366b7ac5e2ccf633d3cb5a7bcb3576160596d306ffbf3bb6bf

    SHA512

    f89e0b983743ffcbd14840c5daaa86f680a3c317bdfaec2322ef1903f9cc87f6871edd85014fc8f01f657134ec4850af271985bb916fd204eec2bfedc4b089a6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1be6ec461d4cab1f2797b6e98120c5f9

    SHA1

    b536ce0ea1b742c02e2afe290f20fae2cf15238c

    SHA256

    05f781cf1bf03caeac126fe48132e36fd73ae0b198bd15bb1939024c84c94cdd

    SHA512

    1c7cba7a8f6f1baab6b209312ad4cc77cb36b526a20d1467b1178472cd7d963253bb642a230b8a2b11e3dde1c3bbcb0341edc5b6fa1da5206f0439daa2db3dad

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7253cdeb00d97bb3d22875a611487489

    SHA1

    23e2b6bcaee2bd0ca2ce0dd2e0c1979cfe691cb5

    SHA256

    0210efe9dbc88abe7c9c0568a9e27cc09ac3e7e8dfd81f843415c9e1bee7d087

    SHA512

    6b237b247dc6aa45c21a251155eb794d6dfa1d48fe6a8fab273321d85169107d80b1d4eca48a4894fa8dfe4d3657573ff423b11480cbbeea1fd39b9fc3dcdd23

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    38d25c97ba7d35e769a1798ac0c32c06

    SHA1

    65d013ac83aa53568e3f8cd0e28855e617b98bf0

    SHA256

    a6d68c9986a8ea57aa2b03aedac83cfd68b6bacfc00d23d6ea5ebc41f76e2239

    SHA512

    dac653855e32c681025b36866138e16badd55a2261ddb6f9659ea2e05d402fc581df03cf19fca26f68e5e5c5c38d5096774504bb4e42dba24cc11c9c90aaf7a5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    df49fc9ad0bc25ba73b84d2522450ed9

    SHA1

    b100a7bbdfab7b685265d373f0234cbf8a5101b8

    SHA256

    5b557111565b28033438983478368392c0c5a39f2cbf67cf90d387bc6e82c6fa

    SHA512

    29d34d6cc298250d2a308946b2b67be5bd0e5fdfbb96e4e03a0558025a254ac7d1ae7fc272a1accea6ec2da6f1e719552d57dd2270c0c0455e88dfce48839eb0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    48b5056851585622f34473972fa1c51e

    SHA1

    1fc8a4cd5eda076f0eaca474af883aede4ded3d7

    SHA256

    c157236347633b9a49deeb164cef87b8c5b494756fe1c0ff271383975dad9fb4

    SHA512

    91ea994df8d0b73d6f86919681479ad11c5c592d81e114e18caa64326a9c0f65c2dd8f7655c4ad32b523643b64b60a5f77a31234de90ea851f8a3a5358ee10fe

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    18d3c8bad743def2cdc4e09f5bf646b8

    SHA1

    1c80b6c2e15eb45aba0004659944738d4bb2a8de

    SHA256

    9505b97f5b536d526600c4fcff2100abf9e694957ca73854ea989a221a5e9b2a

    SHA512

    8ce91218f6f8e0c45029a9cc88e5ce113ec37e3e266c0e38cddd044043d37411aea3df631ff89f81601d55e637f4f2c24aaf17a5d8ccd60a7e85b3ee5d40c76c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    79f7d0e3485beb8d821e0a03e102f808

    SHA1

    1864b7708e48effddc1bd2fc77984672980a2519

    SHA256

    3f163bdb82c277a98ac1fb733b3c3294fa11aecfbee2056616a12111e396993e

    SHA512

    64566e42c00785413814af868995ae78746ff2a58d5844dc1b93617377e0133a53b5979c7f39d8f090e798c017ff944dd9bfc972cd74e832259e722cb1cce252

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6f333fb8c9d48b3dfa3702120e8362dc

    SHA1

    4ca5c377dd6fafeb68a9c932db716427253b8181

    SHA256

    d23ddb145f134ee4586f9ed969b4ffef21bf99ef36f0cebb1b82dc012e39876c

    SHA512

    f094172cb32c4fb81909026f3e1b0aa612f57d36690d3c53b319dd464e2bd550dacc73287aa0203063f6975788c681ed8df176feae2bc48ebe7d726a19745609

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fd278dec279727abf81fd59b431f9b56

    SHA1

    3ecabb4ddc844616f07b5bdddc260355851764bb

    SHA256

    94cb86193677210f88f2400a6da375f00ee8eadd346eec65bc6fb728a91ac5ed

    SHA512

    72c15eaff414f17f74f63f768cd074e9f595de42138e1d2189f191c002e9c4b9e4aabdfc269788971ca53b2f815b7444d9320c6c7b98bb933b93779a366fe2a5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    28109fa360939fb79cf76dc56fb4e46f

    SHA1

    7a05462c5fac0e61edda99f9927c2e2bc8d6e1e2

    SHA256

    67f49bd26ac54a248ea224f3e1843b47063328b50e7754cd82df2542a529edfe

    SHA512

    449b1a7b02a0169c9403b30b8389fa1991f7a8b873f91afa8f15c9f8e7e80f99bf92e08a50fa76c4f377d07ce14b119a46ea57b1f9c703406d7d9f69aa6e8704

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    88ca8241ff156759bf4c9f98da56a215

    SHA1

    5e7eac0f790da52749dead83844545782a427754

    SHA256

    39ea289b87fa659bf3e0d3c518aab9f5571c02f11fc656282969fcb35f640125

    SHA512

    5de37009ce9768b8441afe18d0c079271e2e494a37f810b1dfde0f93286088965434f6da01aae64dba8ea7b292c249f69e4adaec1a265d00bd6483c170038a02

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5a4ce1803b1149b10bcd33da597c87a0

    SHA1

    4d275a493cf5982e47642cd654220041c47bcb36

    SHA256

    7e6c1c19e8abee8a4c27dc39f2843e7749393b6fce42e3fc9258a2fa9a3f3240

    SHA512

    8c3f6d865f49f332c44d872ba09e4a7e447a3647b8379d42feaea9becce0ad569e5ffda2cfa47e959635c818127cdfa5592528df9b196c47345838c4f689f09c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fc0c451a5923985d895f39413892230e

    SHA1

    9770efa58e604967d5f32bff3d85421cf7e149ce

    SHA256

    db81b79011e9a280188bff3c14ea5e10657e9e90f34628aad93910ef867ab7ff

    SHA512

    d7ffda85ac32a188bd0157c9ad7cf9272cbba72fd92e035723dac8b90947f7c121d16cf0d08c07bd73a7ec759f98169c6996cf6e26466c0aa4ba664484bf1fd1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    06c3165e4ba2af87b5b17847f1e320a1

    SHA1

    01c2ede043dcfe0a0e95392de5064f0632ec611c

    SHA256

    bab69003e580296239792e03660c27237ee928e3c167289762226eddc6cb0c27

    SHA512

    e25ea8e4b3e81766b67969dbee5fa6bfa9d6559433dd9bd1bcc82e271d48b0d7988fc13ac26c53dc39ba44bcbcbce912a5b3e92c9af6e67034e50d1cf55f9ad3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    048e579d396e400059c4ee41dc59c28d

    SHA1

    9482e7f9e8700cb936561384d021057cd7e501ae

    SHA256

    d554368a9e039244140da9afced49ee64f6265105fa00bec3af6e6da8c4997c1

    SHA512

    2e2f8c50388475a24443e469c4d55fb9542707aea83014e48e900fd8961a6b299886852fdc8e551022798f9e374fd5e363fbbac9a45c35022675eccda709d9b5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    02ec35b23255016a7c08d4ab11d1e877

    SHA1

    371a7e6c921027b129b1a72afa1da0a499d71ab2

    SHA256

    386c4fffacec54f5d0906e2a6a401d31618f2e87dd947ad07c986c05ca913a69

    SHA512

    76c83025619e3de07b577be3c6dadff90235ed78c61041249336974b9264c41b13b152bc0cf0ff301a1fa6d423023399ffb3f79d358f5d83b4bc66d4ec140787

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    45da924caf5933a2a1792876eb724753

    SHA1

    9e7b76629aeebe01f5e61b0424798ab4c5ee47e2

    SHA256

    8e6bd2b58dfe9822b68d9f9802be0bf69af470b91eab8077118df1304ff6ae58

    SHA512

    d4e8072d0d6fcf40294b9a0e6041f5123f5d6d885c27426a094159a2b85660e9a2cc71067eb605242c60a420f8bcce64292b8268f572b174b49e62bfc1e23bec

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\imagestore\3pl5scb\imagestore.dat

    Filesize

    1KB

    MD5

    a5be66cd4054e350e759073c650b1ff9

    SHA1

    11f895c06d2135faad3be1af0c706a2605593f02

    SHA256

    a71d9d13ade6b942c3d32cdd6692e83f3665405e7d87203b42add38830f2df43

    SHA512

    94c56122239bf540b3fb20f693824906fd6eab258d6c3d0192ec6b6b920688a92cee318d5da048b18b30f32bb53b7db0fc5be6aafba0dae0d507bc7905e677d9

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\9ZQLLOZN\favicon[1].png

    Filesize

    1KB

    MD5

    f53e1753810163abf2b66fe3a6fe6ec0

    SHA1

    3315b32243c9fdbf2621ab71d745d05d35e15163

    SHA256

    2e6881ee4ea7b22e3bdd97f2432b7ce5bb3e3d5bbbdb5457a4a4f8b69a43e7bd

    SHA512

    6dca496cc9ad57d73031c26e5715780b8226ab1d14a14bf181f75e0b261f20cb32b0f448d6ffa51da55cfcfa39fac9610fa211d8df6ba9d6043b1169ce9a82f7

  • C:\Users\Admin\AppData\Local\Temp\Tar2B0D.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a