Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    68s
  • max time network
    172s
  • platform
    windows7_x64
  • resource
    win7-20240704-es
  • resource tags

    arch:x64arch:x86image:win7-20240704-eslocale:es-esos:windows7-x64systemwindows
  • submitted
    10/07/2024, 01:40

General

  • Target

    Conquerors v1.5.1/jre/Welcome.html

  • Size

    955B

  • MD5

    810ef9be9bdf09983d41e244a6179a20

  • SHA1

    d98ae54f03dac87419abc19b97e315830c2da55f

  • SHA256

    db34008b34b4bc3177436e71bd01557d45d52e710699758ab227e5fec7ffadb8

  • SHA512

    3da4de8d7a7d037aa64f9a771c9aeb743d43839294acb773cecb2ba9b0c869cf3d7f3e3bc41d803238f297647e85abd43f596f1c2df46579ec0a34263744e406

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" "C:\Users\Admin\AppData\Local\Temp\Conquerors v1.5.1\jre\Welcome.html"
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2920
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2920 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2988

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    94a28b37eff71098009ac1dbbc41466c

    SHA1

    972a7f728357e5392fb19aa8bfb429720dcb782b

    SHA256

    b98177c4e765aeff1e7bce31470b5e375555762608c21e43f8453bf61d710861

    SHA512

    8aecc4943567e82e905bf8aebab6b1ea3a202afcce1350c0acf500972f696c25b066733f6f343c7b9cb0d6773fd0b2a8e4b0bd7b532f5328e1fd593a8757a0c5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    2a77401faf77a62c27892b9aa10a54d8

    SHA1

    2256b7aabd15252d3920a9b4a041224ddca28ecc

    SHA256

    4b63d9dabc094a24f3328872304f2562877c20b0f7ca6795d52f814f3e2b18a4

    SHA512

    e5ad3d9b2409154a6fae87f38c7109fb10fb8ea06ae31eddb668200416fba1857f283fe78a744a18d367491bb346781676486821047e4ff436acc43b200b0405

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    59d495330b6b830e26a8fc4e5d12f0d4

    SHA1

    4a71db5549a12a8eb6b0e9bb9c6ecd363537e204

    SHA256

    f5b1dee3c9cb8bbb5dc9347ddfa936df5486990b0e15c0f3e4dcb30d2320e502

    SHA512

    213aa4103b9efa81b69232326e5fe7ce883cb5d9de7f6d68fe1193f16a93a0f9f692048a7dc8a5b7ef28af627b557e9838506b9ff3f0d3e233f459f3792b0306

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    4f4423908baadab3a63b4936f5b4660a

    SHA1

    9447e1be2f69ced2af803258e50af518c09d3e8c

    SHA256

    28a469dac2b364b66518b6d171db1755000b269c00bd18fcd3e92203408d93e5

    SHA512

    93232df2b163b2327e0bee698e8b658946bdda804af5479dae04bd10abbe76d2ef30dbaa81ee6c649156ed234beec613d8a748b766f9ed4cd3741b12d4793bec

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    5eaa728ebe020fa5ad5aa6a90e28181f

    SHA1

    b574eb120b732c6d537346a07d25f0b938125f4a

    SHA256

    fa7c903f56aef3e27cb14cc58a6752e4054ba27940192baf599d27199adf71de

    SHA512

    82623f367329ba7b697e79ce67edb87324137a27998e2169458f26eca20ba8e7f17634d0178a34544071b5011c4e30f9f58948e11103f29c2695b5221637526a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    d89037d15d6ef553ba5f44e56cd496b7

    SHA1

    8c4fa3f57be2d7b9352cc690f5a016e9a01ee78a

    SHA256

    acaf894daea581417b3bb77d72c4c70e934f1a7a734a877c15bc3042740c25ef

    SHA512

    49e2d0e32e8ac83d3448cbd7a8d366fdfe29d1ebae6c34131aee1aba61a604ebfd1a2c46c94fa8f29bc1a377c07ee6870330e3ed71663b66ade8328521d49ea8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    30296cddb5bbdc896c1b91184bf9d687

    SHA1

    78c527b1914fa511ef0d6bc2d52f48ec3128521f

    SHA256

    37f6852d22f7d1797271dc71facacceca6024ce64b4917211c4fa8fcc1838687

    SHA512

    8c4f667c5d468920f490012bfc005855918867abf199cecec6933743e844df30b51523a8ccb843ea22adbef0f8c4433bd7295d4dde61f0b8161ca658a46d5b57

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    789ace904588c67a0e8dab98d0cc5663

    SHA1

    242c2aa35dcc909560a29aba72468fdaa9a9f241

    SHA256

    82d0ce06ef3f25f15740f00dbe4aadee3859f0d776231f1931b01db60a9d72ef

    SHA512

    604d67a3afa35126b9dd5d8ae171942eb9c1e6aaca5185c49e1f81c0f1719fe7c2d5ec0d52f0f8d800e578b622e01700d738ba86d5b023edf71a8f18bc26dee9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    3448df3f13b2b8d9124db21d88d569e9

    SHA1

    1e6e24359dce39865b16e6d2b9e277ddb3adfd15

    SHA256

    aa70e03879a37a1e43724ea6e6e553efa7859aff47951ce09d5919fdc991fd5c

    SHA512

    9071a203b559319759a4b3d435e1e541a3b6822395dedc1e256b51b6734c4eab56f7dabe87d79fc6d5b3361e70378e39621225a468de0350ea94c26f62917e6a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    2b2f3b23b7fc1c0c0b6e65987720fd45

    SHA1

    5a52b4bb5b3dfbd07d2d7d47ac460bdc95c79e75

    SHA256

    43976f3bc28e41e1dfadc036a886397e07623c7e033bc0c896632fd2878b972c

    SHA512

    973157ee3f7255a34c7c82cc36bb1bbe73d5110f5cb5ebe892d5a43713256e6e2771940ae70d4db0e46fd96d3a0f42b3e9c5047867a93a554cdec70aae434a55

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    fa5db764e80678625587659265d90a5f

    SHA1

    4907d807dfdbb25e3435c6df600ddb8450d63008

    SHA256

    5b85f357e1afd3b05992ee33ced372ce17d69025aece50d6018bcdb2751ffef9

    SHA512

    12cd097ea7ca4cace610dc796d5d8975147df79f66f26ab960f3f5c3ed22e0768bebc016db571886da5722d0e222b81df44cd5db75f0b26f17abc206bf096022

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    c5322b3ca0594412853e9c5e7fb2780c

    SHA1

    a5f0d69f122aef25aae59b1dc16d13a6a8cc2494

    SHA256

    1ffe1a37f005a887bf539f316f557fcd413a1b46c0bf4c8e694c44e09b553ce4

    SHA512

    c1b4983f5a347242699f6bc6454dabf61a84a645f36205955cba78085e48469608a6a21d65b8fd1c3a1b4025890f07c49a598c81da09d8ac3991f15ec804cdad

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    4cf592fdaa7c290bfad1765e1fc5f216

    SHA1

    b7cb61edb84de2f8d822e213ca0b1d069d1fee31

    SHA256

    a58445a6b99da362006335a1a302394623ed34389a83b67ed0ee59430e4f3a21

    SHA512

    aca1d75c6bab9ec99a8aec1a31e044939626a49816bf321e02f0935011a747523e66c82254880fd1f042148a41dc17dbbf96b4d56f8027d5132e15305e3e854a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    8591acf6b216d9d5ad571d3fe001d48b

    SHA1

    9c51b7f2900a9a9247b2d6c34756b8d2f48e5515

    SHA256

    a0634f71141feebcc81a9d26a8adfe4726583b99018ac6a51d3d0929ab01862c

    SHA512

    e3b77062dd964559f917c673480d845a283390bd7561f420c0ad8523cb527e749cfb3f9413b98cb9b020e3209ea08205ef58a7c0ce28431c32657bce12e785bc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    718aa7c0bfd1018e220eb6ff5ae747cf

    SHA1

    cb6a201fc59382894268a76d557fa854aaf88382

    SHA256

    d4dad605927cd357f877bac0ca1d6998a8ec49290a5fccfa7adc2b3f7c82ab6c

    SHA512

    5a543076ccd6ec9a8ff6d1de178b7dba04914429f84130dd6616c8adaf8cac9cde1f9569594e1b611396b6b5bfa9f995a8072779dc80c00422efcb787e9f1c26

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    3eca367afaa999b1a77cb4ddbeddbd9e

    SHA1

    ced964252617b9fb72f4b4cb0dde83f3f8bae6f3

    SHA256

    7f1b1167d4d641cd82f3052646bbdd1ea7be55620d674b5aaaacfd0452e8ecdd

    SHA512

    c995b8255a17dbb95ed4afa8a89950692f2bf20ff9ae5c4d60a70fbf29a04058cf0a2e7974444c3548bc52fdc1531c08f9022e28d40f5847b40417882dffbb23

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    805f83af789fe6cd128c666c4b06f4f0

    SHA1

    4b55f630e6d9a1b743260e6785f669d52db0685f

    SHA256

    1bc6ba3a761d4c389b7fcd6d8ac7fa1e65acba0410e7bba20120d9dfaf589211

    SHA512

    f208ec789c189f02efa5f3883bcd8001427019efeed089957ef3f878217924720e109aff06f2ffb93f1098e06e160d26f73af64096de7248433f74f8ef4000cc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    96f5b420bd828b2f82fa33e7d5beda68

    SHA1

    6d519ff82484c84154a180e412a3164bc8157ac0

    SHA256

    49e7b31c243c7d99794f61ab3d64d53c9f4ad3bd5cc88d6282108d820bf332cc

    SHA512

    a523a4e8de9ab872f65407dc92243da65df15647c7351f04fca2f3513909b609690fb317df2ab0a067d71f11543fcae20647b7f4adc221568c989e3c6a24de82

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    9e7f3adf3b8b8c746c874daf3bf66a38

    SHA1

    7c34c1ded8a1d28db5c6b44ed7143895852ded21

    SHA256

    0a3aa0b06fdd4a3dd4fcfbb08f268edbabde23b4a4aa8f31e4f844671e8d4b2d

    SHA512

    2f85f69242360f4c57cea9f4682db8dcfce82acc08b5bd134c0e136398b59ef9c73d190429f1bdaafe3fa7d39d92ed8a2f3bdc7c2061fa35fde28eea837b92d3

  • C:\Users\Admin\AppData\Local\Temp\CabD1D.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarDFB.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b