Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    132s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    08/07/2024, 20:09

General

  • Target

    dadeng.org-v0.6/404.html

  • Size

    582B

  • MD5

    293a4ba540af62247908bc04f7a821e0

  • SHA1

    fe8bf4afa74ca7268806f28974ab699d7e903c1d

  • SHA256

    15259df4d497b20e41df07f8989a0990c639220706c131882ac04da56d284b63

  • SHA512

    554e92a9fb9ee983956dfdf8b9642e388ddd9da80d2b0dc6c595324f8f0b2f70da0992864e524947608dda1734fd368804c0233b456193a83aac1c5a6247ec11

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\dadeng.org-v0.6\404.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2452
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2452 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2856

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    22ee92ca0137a58da51f0368041150a6

    SHA1

    1403054b66fe64e28e0791f6e411e979da22e5bb

    SHA256

    7d12decda65fee1ea1a4db0be0763f7a5fc747219fb3ea088bfcf1f48f78266e

    SHA512

    6da9eabdfcb6233afbde62f1a7cb303bfb3c846a3deb9adebd7f58797604f073857d6c1fc962e870d604557cf7a41e508ff87e9d88297ff806796bb1568932b5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c6734c83e009362f2a2cf83e18626f5d

    SHA1

    eb67f07db66e51b5d5015da32c4a02888e404424

    SHA256

    227fe9d1bf8dee185f708c24d171cc27f155ebe092388c739e475e44410865ce

    SHA512

    07704282c495a4ff8353878e6b0a2ce4c0a5e8d9964f7be9da3aa8b39616b72c170a001c11547467c8632480cb34d04ddeefd422231ca101ffd11599a1be7176

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3d7717338607ca3d90c6b7dd40ed028e

    SHA1

    6ff22e57e79c1db82408bbcd7ed32b5f34aba471

    SHA256

    bace2b990f400ad819512a732412f666870ca3751fb56c5f1718596748bbf1f1

    SHA512

    41d931abe98e427281f8e9923fbe96ed72abd0556c8d350318083d478032f8ef032bbf2ccdc323eaf114e913efa01fbd4ab565117eb448135fd34c5f520d2e9a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a34f3dcbab75ca10dce4f5911c898ca6

    SHA1

    d5165a927fc5a7b2343825c589d760a47c4f043d

    SHA256

    91f13bfbb24c63bc8a0a8cbe05c82c8e9ad4b43d31c65c71337d3d337463549f

    SHA512

    225fa46d6aee537a925ac3644656846d7c0926d4490dc061a8818cb4a9243ae37f59ad2f6bfd443253850dd8fd3c25bc2686d20f7aee67dec66efdb4ebf46c2d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fc6c1f4897992349c2c26253614e93d3

    SHA1

    5d312133c073b9b2d5d34d3fdf95f7d0720bb0ac

    SHA256

    9659f132482a6c87d5ade724eab7df3633d1f78abded8853931a50d466cb282a

    SHA512

    d25f24f256fd289ceb0c15edd7ae0751477c909f44b61759330cdf5501c9db21054d5afc72f507dcf091fa7138e6f1f5017874596781963f5426fb56b4fd4051

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    25cc9956efe044045210dabcf32b174e

    SHA1

    194806829179e6457e0649280caf105942ddf1a0

    SHA256

    f2f793334fba60ce4a1f69d3ba2874de75c36429816c695ca06a15f87f83b5f0

    SHA512

    5dc3c6ff3759fb0d15f00f5f873ef0be0db33a138a06b7ac3d456fd5a416b1c6021aaafa9c6f9a0a62ec99f5e59bf3b6142395068239abf6d9b1df55ab0655e0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    914eeea41dc77fb459634613bc2e07af

    SHA1

    822f51aaf9fc68e6e17069d38abfe6d566694b3e

    SHA256

    2c3e18c15386a72ba6ccb77c642a93549e5f6cd28c523dc0f4676edb37d9b1a9

    SHA512

    a9168546255e58a8eaa38580392d323ffbf3d1b0e6804ffc411f79ccd5af9f0b9718baf87ae3a309eeb02c21f6be4840389f0e2d7f2bf730e90e9ce71efeb502

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a702ef712ee1c8a1b1580ff7c6381c94

    SHA1

    0c99f78a2b93781f16832f887207b008a9b7b53c

    SHA256

    22d563020bb79616201ee64c2793f8902ebd89deaee2d0de0492b24af854433b

    SHA512

    e7c78527b8eaad42d2ab95144aad76e48cdb75688b00971716b01f36f5c897be24ae139eb3d1ae52d838a10f7bccd44686b8e18dee45cc0ff87aa55fb13a2ea7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    cf8c00309cb65360f8b736f7d518676d

    SHA1

    ed062d3a1f4d5f5bf1c81c9c177695450e80716f

    SHA256

    758ada20b309dabb5cb94b9d37c533753f75f2c005304991bb45664bbd62c874

    SHA512

    56fa6c650cefca844513448b904575869db25ade50c2284013a1f4900c12c75917ab80e69a21a44efddaa33b0dedd65eb61447498ffbf98a06b9ae1f10620337

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    38f2ed72193d5288841e61b48df8032e

    SHA1

    d103e73c945f793dbfefa9cba522e986fd170ebe

    SHA256

    239541a1160eac60a0871e4cd5a25dc34a214aa9663bf1b3eab5ad9e9ef18508

    SHA512

    03506aa6b603f72570b85bca13a17daa476f2c21f2b1357ecde27667c1af2d448299f361ac8eb7539f146095c1eec8f457f3ed7e4618028dc3201695c901e2ff

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3dd44f7a52d94fc617aca76b446b2433

    SHA1

    1f800fb024ed6a0e3cd87a43868e2e50152a981e

    SHA256

    b4fb1e4f390e658d966e96144399935074f1d618d51861983790c49efb15198b

    SHA512

    e92df96352e55533476552a771265e25bdf8d20220eada98a1e79cdc9bfcdd55650064fb4feeff96e1219cab97e8693effa0a972f28ce860a1004b55c9aa71b0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ffadc109599b4c8c05d5aa38f42897b8

    SHA1

    3418ae495a7aae5f68bd53b2112b8e140e9ec262

    SHA256

    2aea4dc0b8bfd4d408b07f290e08897e304b2a5629603266e1ad13c7ed0e08bc

    SHA512

    8f6ab251198a797980a88e08b41935295caaac9ddf8058653853396b70ed1395a9d13113419e56c48e1c541eb1240c8d36a1595d18d145a58d4963573790fa13

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    19464e8892a5cb8c6abc252c48664e83

    SHA1

    bc715c81bffaac10732048f2ae634fb8da6325d9

    SHA256

    e83516605b625f9413d418720c00ad4d8a67e1cd323075fdf5599729f8fb3f9f

    SHA512

    5edc3c4ca1828cf9f4abf59b87702fbb38c75090d4ad43a85aa1032d4ea1b2f159b22c8f8a2904da3b4ceb4c6665920c5690ff065bc04a037513dd3fd5f7adbb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2089d9cfcd06a66ececc03234f4c92aa

    SHA1

    a29c7329c7098ace7ca314e654575617d5b95f61

    SHA256

    9ffd134a367a34a2a6f0ddd0959351ac1b05fce49ee93aacc76df301b36e6371

    SHA512

    816b77b45ddcec70e1cdffb1abbb6b98a96a2e8e4b25cae13b39806b6e71056fcde833f193a018afd2060d9b12930df6651507f7aff0a02bf68d2b3629d5d6b4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    555612932649471f732734c972e91d21

    SHA1

    0d17ad9f07886503963c485dca31c3f55268cfbe

    SHA256

    8da0638f3145b3de82288e3c691a733e348813b60156dd0787060a17c1f854d9

    SHA512

    b5e32de33be225ed28b62ef9c1b58fc2280044ce973ec563ce9ddb943f43a8f7ee130d5a6f648cf87b75f03363774fb511a4e1e45f36c81c284eb0f282eb0da5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    dbb3fa55fc8739aaca317c99b006efc2

    SHA1

    bbd196e56f14e7c8604b89705beac4204f0eda8c

    SHA256

    ab3b93d28f647583b9be877e72c6fa1fc0018aff1011f252ad1c154322c057d8

    SHA512

    7494f373dd51a5a94830301123e0942d8344df4f76d576d439aa7ff72fef02318e7f095337bb43fe4a348d55ac5c99f63a3df3b2efbf5cebeae65e14d14cf392

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9a046b8a5933106106a204e2e33c3bf2

    SHA1

    3f1939891bc54ad384786dcda6ce69c41cff5baf

    SHA256

    5f9c8b17bcbb0855868293b1c0d525eca4fae6a8e0509116357a7608e6cefae5

    SHA512

    420d58af2851cb4051edafed15b436dc92d644723ab928ad475735eaf04051370a4349ced487dd99404e248756ed95e16e9671cc63a4ac02581f489ee144d1b8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    34219b6bc2507e1ac31304ab07db999b

    SHA1

    c0f89e24b6b025094f07164e02e8377333ba5387

    SHA256

    3ff9882df2cede0bc6db578cecf0da1bf133e24b010920d6f71710a4a0e27d98

    SHA512

    88050861dcfd4b0a1721ca894cf2291eaf333592564adf295ab71cc9f750ceab9eab8c4d18a1f2e7891a833d2e707310abd4de6f366bd3e35b3e742c87df7715

  • C:\Users\Admin\AppData\Local\Temp\Cab9EA1.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar9F03.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b