Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    134s
  • max time network
    130s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    03/07/2024, 03:55

General

  • Target

    clantiger/filter.html

  • Size

    41B

  • MD5

    dbf1594d10f32c715fb66121bee9a88d

  • SHA1

    009e5f2417956ac9b32a3c8a22f66aca3ea4bb68

  • SHA256

    004d9a720ea57677abe970abc3d85935b8385bd831708a2b9536a8a5ba36c807

  • SHA512

    e4c6d83c87eb2f8a1a23279903c36d33a646ca538d4da570e4552e0dcafc4eb9f901bdbc6316d574898db233b25ab2b511d29794e1c7ceadc1bb2f326ffa140c

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\clantiger\filter.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2992
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2992 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2796

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a7c9989bd6c1141fcf46704264684aba

    SHA1

    8487a057f2f6b86b4d65a57f48cf574db4262794

    SHA256

    8b51d2c558ef9c8dfe6242242b44ebe14b35e0cc0e7efa0e81910c627845383e

    SHA512

    74a2b136fa061c149479c0981fc9d2ac5cda651784901df7750dc4c7c6cf258dd684a214a10467c0c1cf492cecc987239c4ed9c9930b2208817bff4774dfc2f4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    57fc87a07e1db3189cfd1bb24da123fd

    SHA1

    fd71a67d6dd4edb3b94eb62a152746330695edf3

    SHA256

    3d5fa5539522b4e0e4a4196d937fa01741cf3b5c4d8d605fa6bc2a9864b56af1

    SHA512

    710a024b01d0b315803aa74f221fdc24e20337098e5ab26948af06c7dd06d50d6ba60f44cc12ec68c465622b13bf677b5c0a9a38ba79a159762e4d6615142f36

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    753312213f06249674ba86a0024e5279

    SHA1

    49d5ad1d2648f2db1030ce779ec470af0e526f27

    SHA256

    e9d7cc29269cb6da295dbda82b03dafa8663d73841aff71cc9ae54ea5089804c

    SHA512

    6e17a937f62d9ca74a368b11669f8f556269ac5120affd719b077666e050b534874cdc16cda2b3287e942253a5d0b61f0f38aab78c0e3feee870d2e3f56d13ad

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    170cabb41eca61066260ad18fa6a8a5e

    SHA1

    54abedde55be95aaf0e6184aaeed23d61b53c5a4

    SHA256

    9c31f68691fb8988db69c34cd2c9d4910e9c76092603cfb820520784e6877a35

    SHA512

    633ed9f58d18b68675097d7f1d05f112a0ac3099c4e68c75108fbdcbb9b30c56df648883b3b9b9941ee51a3c5ff92b3e02a5820edf345bc52ee78122980c016a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6a2630bc5fe94a89022663a73445da73

    SHA1

    fdb6ea759583c5f3a42ae4de6ab3bb6b0e054e1e

    SHA256

    91f813502f486859a8523c1e35b94b4a7731fecd26473afbc426f14c7cce99b3

    SHA512

    1c3b1ff5f0d7c59cfb5141177f341f7dce8df7db0547a4cf94f59cc777175f79f8136be51bb163aaab5f088f52a0f4036e0fa5186a1f4d500ac979c8f32fd431

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c50c109acf03f337e15fee1b184d47a8

    SHA1

    a04178949baa042597acf337d133803776fc4b07

    SHA256

    c3c586ec43cd865838c0febc12a279cca0c0015edbcffa4b80c05e4c82f30f16

    SHA512

    8e8265f1021d7a7d897d5d56952d0548af1119681c78b969eaf253eac07f1982e0c9ed952ac2beb78a73e56739d6aa310f7e480009a2dbe3fb03879602378225

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    37926d91b99ba4e1184243c3a9e8c864

    SHA1

    24d3c8131e39425bcf3bb4e2b57721cc23ba3d67

    SHA256

    9bd6e39ff9eb8c06f3516325bf0bc8e73e603487ec2bb95b3c2bb77133dcad53

    SHA512

    c29831bce5401ae432401751ccff1ca59591561f516841fcd0340c019e52d224685d1f5393e7e55c8a5d394f1831a921ba4829bf29d90c044ad50f30ad1349fc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5d7ff36c78b2e38be0fdbe02aa027cdd

    SHA1

    033e33b81c1cf0c80c5b695ac26bd67e333919b1

    SHA256

    a89e55cb6c406df5982084632feb9bcc0f11cebeaeaef76e555a343babaddb5e

    SHA512

    ef3fc9e1b9a8dab6df24c92846fc40845ea84c5984853099051752bfe3e34fd643ab497cd1c8df013185d1ef30135eabca315e6113cf67c32d5bde13c7715a28

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8202665dc3484450ba30d7120784af10

    SHA1

    e8b23de456a87752124cbb0e6962f7430c09c290

    SHA256

    6c80305139335e6c08b2d63c16bae3a72d41d557aa6be2b2b20a368ca39d2136

    SHA512

    1fd4904e0909a571b46cbeda5a67c87e8cbff1269dde83b5c265af52632b21f38f1b8771e7d4b0d550503176b8d0ada3e8f3f9274b00b739ef0498b8b6e26ca7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c5f7bde6f855156e926c3118cd29e07a

    SHA1

    e0a75c279909ab318bb8b79bcb27b371c27cbb32

    SHA256

    11b8ea37cced1821cb28f107edd8c73834b45add61ca0fde2de7f6a1dc2cce98

    SHA512

    b7e0b22ac8df2fbdef227f03c2f636352e1b48a67b5e0553d01c905ce2daee9d93c27036064783f792ebc3a78b02abac2b6b89efa8ef8947a0381d12045c0025

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    37a1708bf0c75e20d24b2ff1c3269afe

    SHA1

    8bd21e44241fa28631b4a4e7c10ebe1424744db1

    SHA256

    f251166ba0d08fa0ee1a8a7c3b2390a5788cb232b6357cade58ccb760fbb18e6

    SHA512

    191e217a036cde6cfa0b0dda2d01cc88598220cd89424cef70de6c7f3f218a7f035be93637adabc78338cf26e8cbfde4b1e50e1e1ab802c054fc199fe6464a91

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    351b4623f5389dfefd71fd0585a5d07d

    SHA1

    ed5544ae383ce3716b6a1ef289a5d7c816ab5d69

    SHA256

    fcc07f9c5c6823fe557426a53e5dd2842134a45758053ad8801a1ae8b148bf56

    SHA512

    4aa25ae8f4cc729f541d01add3b2c9fa5556af87cecddacc7ca62b8dc5c5c9bb95c67e4a00591f04bb1962f57ed0b4f7fb3cd23f9d6af2ceb05a3cb9063a3ac8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    cc706e0c8a38d138ce5d7fcfb168c3cf

    SHA1

    25059764d97977b4c12934c3fa134523bb297b70

    SHA256

    ec35a8815b875d6d732ae43aa1b38aed3b9c0d805f622c78b1be2ec392ae4ca3

    SHA512

    e42b2c5e31361c4fb9a50ad169684c247e54d758798612fa318aece6daef64c3f9f47e245fde2645297d750961918f5232428a82a2916102a7337946027441e3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9350c68794559382c5eb5a70fa688eff

    SHA1

    35918ccb033dc1e97240363cef8a38591f838e0d

    SHA256

    9b4501579bad4f3ecd9eb0be8555c78a5b1bfb38b05d68129b146a8cf139154e

    SHA512

    c736a225769b528e66dd888eb84ccfd060d4a21b8a6f8fd276f7b3ea9a141528aeaceddec8270d967ae7ceb955ae3506dcbbb5af51f06dba4b76119f5b95a0ea

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    271eadf949ac2e5132a9b4944d12dbcb

    SHA1

    5722460f2824fd726f543966193aff428352db54

    SHA256

    167988946533bf3d0ef2565b65b92723f86ec945e3851d28c929e19ce3fb6d7d

    SHA512

    35b749580b1559808268e0e6be6e752cfc7b3bd75264d882b15e966a408680b45c33c3a3d3a81bb8620b13afccb648cbc96d1940dc904c5af12802fd0ef8fa94

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    46be9049f9edc7386a85fba2e74b50db

    SHA1

    e73c22242e9166f114eaac558a412759b2c75eac

    SHA256

    18f65d152f9ac1217db10858ae3187eb938e2d20f83aa011785f00b78d312572

    SHA512

    0dae8f79602274a0dcfad2ac9a48880fe2c6d12d8a29fd52af65cae6bc84e9767cadc90927a6f475f9f3b144ed457d3943b084103929638c22e169b7eb1f747c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    45277b0dbfa0c916433d9a021de82a55

    SHA1

    d87f962fdefffe1041fc3916cada105d428015e2

    SHA256

    2ad694ec0a9fa23f67aeacffbe3e575754ddfdf00a269e2b27d39b097d8a542f

    SHA512

    763eb383ef05da443648adffaa14b91d43730b40b3e25515043415808e7851f78aa666d1f909c47ced785053bef76732ff5bf558c5a59fe0bad57273287a2474

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f5d8c12d65f342d6e3fb01992086dec8

    SHA1

    136f3a2d3ee2550cc00e5c6840b93218fef2cefd

    SHA256

    ef256aa0539fc879b21057f8d9234ac28f030a42ec66b9e17af4beeb8704b370

    SHA512

    baf2030f68c94ca6fc39730b7ed6a24f5cc709e04fa45d54357a695e15bd075127569b336bcd3ffbaf03df67fcc172fde8305bddde12822c944f71bbcdd1a609

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c5799e8adc9e2afd1523a39531558c0c

    SHA1

    b463dab5f66ed77094d0bf9529a696fb9d2ed3d7

    SHA256

    93b05fb8b8de2a6d880bf9cb702a7887378116957c64386e57450a993937806c

    SHA512

    93c32f641636578408dac1016fa842a5112378fd9fe7b04d859ebf7ba5f2f5085e1f401cc9dc5d1415c2390251635715fa37df005fcf3321021e005ef6ee73cd

  • C:\Users\Admin\AppData\Local\Temp\Cab31AD.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar3222.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b