Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Resubmissions

29/06/2024, 22:21

240629-19544s1epm 7

29/06/2024, 22:13

240629-145amaxfjc 7

Analysis

  • max time kernel
    134s
  • max time network
    135s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    29/06/2024, 22:21

General

  • Target

    LICENSES.chromium.html

  • Size

    8.8MB

  • MD5

    2675b30d524b6c79b6cee41af86fc619

  • SHA1

    407716c1bb83c211bcb51efbbcb6bf2ef1664e5b

  • SHA256

    6a717038f81271f62318212f00b1a2173b9cb0cc435f984710ac8355eb409081

  • SHA512

    3214341da8bf3347a6874535bb0ff8d059ee604e779491780f2b29172f9963e23acbe3c534d888f7a3b99274f46d0628962e1e72a5d3fc6f18ca2b62343df485

  • SSDEEP

    24576:cpD6826x5kSWSsRinoHnmfm646a6N6z68SH4SApTJ:cHSek

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\LICENSES.chromium.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2368
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2368 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1976

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e6d227a9a028766599eeecd831107784

    SHA1

    a3550f789a54c0bec9cb90755c3c227ba3301a98

    SHA256

    4fef3e4515842d98eca02053866007a6ec33d3d7d7b74138dd5f5f9cbd8dea29

    SHA512

    4661c93e59d4d2581b4623c101ff5b0992fd84f2095de95ef3cd8b57eec7fb68508a3a9e5521f6d8db6bcd437a9c5fad4e5da438e634613e12c136b45e5cd465

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    02b75d8c5bf7420c92c79931a5093ec4

    SHA1

    2d31544ac899ecd0329d45b5114457f097d0a6d1

    SHA256

    67e2f34f5a32152133feca6355e1f5c21c5d16678e2c951d8d63b686d09dc224

    SHA512

    92ccf0ec2974a6622da923618cc82cd90f2b3cc6942c658baf3789ef3335f7ec2dbcd9ad295a6ed6a1423a872192c18c9830df7ae9ae2a066c820bcbe59d3dab

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bad5003c273619b8923976164feb255e

    SHA1

    fa9c96f20c69803d4651d20cad0325318a707ebb

    SHA256

    bd7747c809787f3a0cb8d5aae495a83b524709d301e07b322dc06f7a9bc77505

    SHA512

    ecb2582a0035a0fe0a6eae3ac34184cc96a7010374a1bda575f1ac9b6bf2ccc3ae45edd1d31f9cdd6a1db0cf2a3d8a319484437a0725b5aacc226a17603fccd4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5ce65c110949f60c0d9bd204085aebb5

    SHA1

    cc837830ac1d7135f5c1244183015c2e9548ac62

    SHA256

    be3433191f88aa20bf7348ca287344e02d1f759e08cb2fed27b78ebecb7f24ef

    SHA512

    75be22fedbdf106e1688b3c210b31830bd845c818550c9647e18a5dd8c596f3b8975887fe2f2b090cf2d0fb198b3187fb26cc4e8ad4f9ee68f61e3e17a2be6bd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    435dae6a0b38630e167c4d394fcffb93

    SHA1

    19b6943a78058690bce9f00121a40f0c7dca7c43

    SHA256

    0c09e3079d0234f6bf946b0335bca66a5f6d64ddbd386eb93cd5cc8e50e0de75

    SHA512

    bb4b34f196b37592f984e7aa8c21683ed34b220a8bab168307aa8ab2d61f700777e68b216da61933fc414a2a8a0e04672575d4f40786c576f147f27f4a7245c0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b3df19ef1e7bb7159ce5f9553b36d827

    SHA1

    64e5f9a4e9772b90ad25633a88280296364e5dac

    SHA256

    059ae9ea651f2f2da692d9603f9bd6dd8595e191e75d75b45777ad35ff9ecc91

    SHA512

    e218b9d488dc59dcd880be2f323481f9351aa446ba3d769ab4d6ccc7b7131089cc26f1291e6c32a1bb4005257310701d90a3d22526cbf812065eda02cc99a68f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c2d2298fc3297590df5c136f2f8e7dab

    SHA1

    a6a2984d985141f35871b3764c7ec1f4b4ac6f8c

    SHA256

    cbf2705a86b3ac3461284a94bda3b49e71b54d9a7aa614bd47b3267c31b16d26

    SHA512

    fbc5cffeda68c97fa264a87403c62c02ecf6701bc564ae5ffcbc0e1169ba9e8d0f0641c872e2efb3979677cf6cbbd31bf12fb677f98ec719a70aa10ffe7e133b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ef9f5871cb18d325c4826201759ce8d0

    SHA1

    0f7e9c2e06c8dcf9c719062bd29945259b23ff43

    SHA256

    5fd2cf438af7f43f4edd7a22f606f0bf10925b01667b810296ccf68a551f5eaa

    SHA512

    03ed6ac690ac6d6a34141c8e764deb09a7d8f48d488e2e6b3d20a06e621d406a09f69517a2682c61eb104ccbcc07fd7216af241a43bef1c0004abe81c7ea300e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8d67e8397ec8a38381201cd46c1fbb35

    SHA1

    222465ac06ba329af8f22c17010470ab4a341930

    SHA256

    04186ec6a20325e0678f6143588743d751d0a47bdf359050b5ce002c6836ad98

    SHA512

    e88d70ad4b9c18113b4852cbeff7914cde5d45b4f189ed43305f2a7a148346fa813e387289db62a8a345c27eb2acba56ea73fd265b68cd6fddf8421aea39dbdc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e6ca0866916286487f6a18799cd56e08

    SHA1

    6f3d33a79e1aa74307fa613b222abf5d9fe434f4

    SHA256

    e922777a71e7512a0c39cd75f58e4b00859d5122c0388108048e4ab4443b8131

    SHA512

    14bf4f78ff443cdbb884fca30f799503c8d1c1385621091c3d11feace8ef681afee9d0821bdcd83cfaf09c11c7f551282c2fb889f9aa2d8432ec1a009b57ff56

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8ad6b929d5d8db6ee313b2f4bc9fd00a

    SHA1

    db206ffcfa4343e1fbec6ace0db1d689daffcbb8

    SHA256

    bfaf1c544f98e4d961c8217d66149939065300955875b5aed2444b1f71bc97a8

    SHA512

    3bb4763a75209aab981cc831a3a937cb07571ea0d7046db969a1a00191609b8ecc6403319f81312d8f15da61038e5c3d392c30b9f177d2eb55b49397611e8d24

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c0cb091fec07f36df9d6738e321ccc56

    SHA1

    51e0c93ab02b26137efb0c95c65df02825cd99ff

    SHA256

    45f696f8b6d5cf15a03d89ec7ea94b9363ffcdfa43a5632364d026e152e192f0

    SHA512

    4104c1a7d92b7abd322dbd8691063236af9d2ba3b9ab9f999c10c0d0b06812dd71cf88734b73056c4130b0772562388d7848ab456fce59f494bdd5fd1ba359c9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    25d5595722f1e236729ff5da248e1dd6

    SHA1

    2f2dcf87d33d45756974a3de53cb680e0a7ed5a8

    SHA256

    9c2877f2ebadea6e07b9fac997c1b01c2ab87a349afc9b64c46cec7adda2812a

    SHA512

    2a19a7e3fd4effd55643dbb6747aec7a2cc3d67334395f9038740407e4ea60a8bd5eef0a703df44a7c1e79544ec4f0b215fc6f0d7273934da9a06f7ca7db6cc1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    84207a5f3884c97ce0c24f777e77494d

    SHA1

    9c3781f9528d4994b8addcbdc9d770317e4721e1

    SHA256

    3508ec00c3b0f282df2b1f14165ca5752bcc3afe763ada5c3d154932602d75c7

    SHA512

    cc1241cb5011fb9fcc9504a9c8f0dc4536c4694df731c38b393b0e639cae4e83d5911ae6421db943ef601c38b993729b27d8310aa2212e7f5aa0b8b1fa7e78f8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e92a2f5e4bab7447aac926b358333d14

    SHA1

    0194b8befd4dcb20dba922c92cdeeb7c50b0cf0e

    SHA256

    09e14bb3486ff886a7f502976b965afc1da77b42916ef2df0ebf767b8d4d4cfb

    SHA512

    6720ffdc184b897cd01c7cce00bd2789d683b93df8cec170a9627166cb75ee76b476ef75062ef12abb32f408717565f5e3344c6656ce43d33ea742e14df6573b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c0ad0585bb7782cd134ad78f014f6036

    SHA1

    7eb74c39b17b7c8d34c2d56de24bfcce8c6ef33b

    SHA256

    5020abe1b5abc975e977483fe817723007317804bd750387afe6a19ce7ca2293

    SHA512

    3248b3744e9664a72715dd11f7fb91cebb77990fbab05931768b3e2384cb4af6d694ef95bad5c2e2f15d02212ef2cca32369d510e1efbcc6df77d74b2592dee6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    aa42134a4a2e363d61ee08890ee65495

    SHA1

    06be6cf87b523087f0ab187bc9fc416312c75ef3

    SHA256

    d25417bdcdb02cd9be74c9df703d771847f75ab541cdbded39c9bfdcfdd3db7b

    SHA512

    814deae8e2a66cec30f4347f5918d34e43b5aa6fb63bed58a031a13c047671d2b6392439c6346c59c41ea160a381b765c6f203a92637a1f723a8b31fba4aa27d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9a4b73c32a06fbc52f89230fae648849

    SHA1

    0144025a54ce9993cb122d98f4a74209f8fd99c9

    SHA256

    cf5ce58298ecf05e2e14435a77f3fcd6d8aaf8cec3ab47e36c8c9544f9cf0240

    SHA512

    f3de0325ffd17602b3dab3be317fc8cf0da92c2db7ede845ebe3eeba3044e9906300128ef1e14d2231763f8f2779538c081c7c97e6b6841cecc2822135a485c7

  • C:\Users\Admin\AppData\Local\Temp\Cab5986.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar5A6A.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b