Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    133s
  • max time network
    134s
  • platform
    windows7_x64
  • resource
    win7-20240705-en
  • resource tags

    arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
  • submitted
    10/07/2024, 17:45

General

  • Target

    EnableQ/CSS/index.html

  • Size

    1KB

  • MD5

    b0f6a443f3ce5c3d544d6dbcc0d34945

  • SHA1

    5d32522aeb124036c35fc15902c6d2a27a86b7f2

  • SHA256

    2b04e56dad5cc36eee8100c60bf9edfa28ba0295fa015070ab695d6c2ca0ae4c

  • SHA512

    79d1085bb7bff135751793750a2eca6188c29b2bb02d1cc1f8fd53e776ea8a776ac5e7216f84a668fa9514d4586714d84e262a18ba08fbeee9336415baebcc9d

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\EnableQ\CSS\index.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2812
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2812 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2832

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7167b9397fe4d313829ad1132918b5f7

    SHA1

    a7f92988092a8237f39e7c63a54806875882d7be

    SHA256

    cc78d465f7c05e3cf5f6349c4e9fba57f3de2ed9e0a8b062bea998a8a349d2f2

    SHA512

    7e8a91d0fe455a8ee290ae301ee3cf246d5356092bfcbfb5e1dab73fc3da43409ac70545fc904f3626b5b62ef9297ca99b1caf47a7ee9c7be27b39c28ed3aab4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2112da0fc67fe7724a341cbc7b8aca06

    SHA1

    24d26283c0da5c82483d45c0dc14955d107d6bc7

    SHA256

    106e87c9efaf0df26558cfab9f6545ad471d95816b91aabe5ad91594ca99f22b

    SHA512

    d7bc5023bfabea4ff3276d9e3e26562dcca682e594a4c484f09089005551c01b360021c01d5c53c5a899574b86e94b002e3f16e6156478d4bfc4d5aa3671e112

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    17c3ec7661c02246a7ae9553119ff862

    SHA1

    53cb27c23989864d199cf84ca275e7438e61adf9

    SHA256

    6bb4d0b2ecbfeef2c0b9a31f9d37f46dbbc1e0166fa4b349a0177476fc798a55

    SHA512

    852c07ad50fa3a1180a8fe62f8bd18ee4e0f2d21a9da55bf14ae403e498cc03c7c2a89598c899eaa4b0d8f16159c2e01732d9c856bb0c785fd6b2b0c5b5037ca

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    79cdae83bd2f99dde2172afc07e1cf95

    SHA1

    014d97ae1dc51c883ccf9584083d9947f404f1ba

    SHA256

    2acb523cedc1e7d154ccda3a1a204d6c8caec61bd99e66fd56e7e2e16fe5fcac

    SHA512

    19d429fcc1a50e78ef335fb0be899a906e7ce61369fb2cbe3e6a16f2fbf508e54284cbc23f5674ad193bb8d210c168094910b2fcef0ce9d587bc4b5f97d3ee9e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a03da99eaa9c7fdf26fe490252d904fc

    SHA1

    a0740d9b246de0414815b8ef672a1e45d3b60f10

    SHA256

    1b86c043f173f0ba03519658807626b414a26b4f287f4ba1b92a427debec6dc2

    SHA512

    f8999126d5865c3632f603257d7181625b02aa3e26258f0304106e9188f880a44b8df0fcc7618772ffe4c2e6331f7a624f452ea9f32d24cda6de76accfedb446

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e52319865736b7f6e6814eea6a98f2e9

    SHA1

    a6643dec08377f3a6d94b12149741c717c1a8155

    SHA256

    783f4ea60aa3f6bc370b47a703c46c3069300d69e6b24a85e49be4add0ebf2ba

    SHA512

    11c125c223b9578d444cfd00ec96e58b430c0452a531d1c10689270623969d47e5d17061ba86e2185d271d7f81e1d939e9694353c251537dcf830d37fa9486ac

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9dc45e17b0e5208ebf74fc5bbd30b2cd

    SHA1

    515bd5ba3adc69f6098ac955221a3f10e4622be3

    SHA256

    a8e2794f1d80e6bf496f971e1941f4e3b9c5af408790fd367ff14bfc97a9bd71

    SHA512

    946ee8820f7c5d1593c4d6fba5760c377246b7ea1ab24cadadf3c6704577c8bbf706d9be92cf9f042c04f3d4e40c95d6d877db48f669f99fc24fa44d87bf7d29

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    67e7ddfefa27c5415beec29cd9a19a1d

    SHA1

    138be3f74399f6daff6868cb46da46e19e9a9b6c

    SHA256

    531124c1e4616dba1d1924013778568c33a3254960def4513420304a5bcc6c18

    SHA512

    4bfb849b0360c6d14b8507e33e23917f65566c6fc89dd9664f261034451f9e3ebde92542f6f6580f2039f64c89200e0ba5d034553f9396ba83b2dd102a3713ad

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    50c0e8ac544acec414d9363bee9c2e62

    SHA1

    0212ac339d1a4403f58d3923cbfcbb404f208ffa

    SHA256

    f6d4816f4916d1836680339fdc035090113ffad3cd055d6a6e7d3b806b3713c8

    SHA512

    a25c254e84d0972230995710cb5804bfcbe30d185fd89eb8a99128b1c06f3590284381d3be05d7536607d59c96436ac0f814bd18f6df2696512b0fb518b8bbff

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bcba79892521d24b075ff927196862ae

    SHA1

    10287dd4f0cde0b9508da608898f04917fcb8a5c

    SHA256

    85948c4e5b15431e0e6b0a296cc259046c59c154d6f4b4e0a2dd52f61018b786

    SHA512

    02553f36840411719b28481ee7bada41e18723ac50780b85bec6b034863e9e36e5f589181353edb8b0a8fd6ab22033be06b3c93b26d12bc37863f5d400ed81bb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    57a52385804ffb57741096142ba440e8

    SHA1

    82c0373597263296cd60d8bcefca06f0c755a6f8

    SHA256

    ac62d22e536bed2500fca88d79c93becf2396b67ac6bf26d552a07a63c60cec2

    SHA512

    233d9bf8fa4b2621b304c21cf717bb5dc7678387e1804a272a4a8fbf0352a5ff31321da593393663c38adba9f07443f8b445e1be5302a4496c568b1061b85cf0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    09fa6636e6335262c27db058780a8147

    SHA1

    d57a8aaa9f7c6a582e2bdf8150e94118c559f97e

    SHA256

    1dbf0545017f781a019fce3c693fbc0256e673270a69ddd6818497e812cdf4b1

    SHA512

    337d83d84863976436f4e3002fe44cfd3df201c4f8ea4bf2389b328c98d11ca4113abd3aae29d9470e5986d41a1e57ac0013ec813c53f6e646929d042318dc76

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    986fe5637064883d0f932751a5d5f0ca

    SHA1

    f54bfc7cdff1b720e4ccb82454afdee6d38112ae

    SHA256

    c78c373757b9f037925c96160510126e53bfadcaf9815f8e8e552c9c17c88097

    SHA512

    9ab5c0855e7bdcca2fc10b2465722fa654e7b26523f50103d10f840d3ce6702f06f8018fad8090a8ddd3d68820deab7cf10908dd9b5ed7c9d979e8ead76b8726

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    57465618b207318a620ccd5d2adbb12f

    SHA1

    337793d58d5471d853d3fb1f4b3b764405a37fbc

    SHA256

    8b490e3c6671ad8421c0a147f7e3d207f0b00bdac45914020b05faf3e89f249c

    SHA512

    19bd63532d990169f5c0cc031d4a1056a577f992dd02c1a5e5dfce4ab08e90e54fc34dd05b259c760f770c173adacc9dc19eebc45b3ae381ff326b2d87fec0c4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5aa35a534329888d7a03fe717852bdc8

    SHA1

    ac7a9ff475b060c81ec8775763624b6a31973920

    SHA256

    030cd320bda7f78f1d4b88a150eb1b4d2b9d0fdc428c2b2485d167702176bafd

    SHA512

    b6704faa3516757be916de4ec8dc5a8b8a3346d68386e7f190f402f74cc5126b2290907a11d75635bdceda2c540e9338e76d67d1da3c77701174c7b0d4c24e44

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    efd81994a282b51d6fd8ced0ba1b481e

    SHA1

    cf9d5406b7d27b9e1e9303093e661a7659539bbb

    SHA256

    11bb4dda9d9ff001c8199cd5c6ed2fe38e4fd158eba32f4e20fe95adb693c255

    SHA512

    28f184f857912041511056830761576742230811ad54212d834d2f1b4b23f04540f1076114706ef40051b42c5594e06ac995ff881927c62058af137b0669d862

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    89a3f3b977f34bbb63bf67fef3a3f41a

    SHA1

    37c67aac8cd52e93e4ea6763c9b26b92c07292b1

    SHA256

    15e3246b44643abd1cee05fa237a706252d696d4950408a7e507eb6b9b93c533

    SHA512

    488346dfbb37da57f101a970106d82fb2b3a1b627e59cd54540ce1e38aa1301b548011b129d64dc1659ced4b0198a6b3512ca55c62db634974118fa9fd5e47c0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    639b9477ed5dc973b20c6481d17e7006

    SHA1

    e82abcba7f8f6e3524ad3494a5cfd4ae7e8d62da

    SHA256

    cab3ec0bf91d0d4a0f0f2c29603e0376fed3c1fca003ee48c5b0513b60aa55eb

    SHA512

    b52a688b8abe281643dd11d0daeafa43dda20a37f899b69b250cc31b396cb2afb95d7ddd70129d3013e1a34b4b28b6b50a2137b81451a834a199583d06a8bb4e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e1afd411fdcd3a8111fc039b95e777f2

    SHA1

    c2e7cd03ac6614dc7272fec7184e6f7eaa4fcd1d

    SHA256

    ff2f205d29da2350ca5301ad5d3c0148819e5e5cfd2f16012bc9a6abf1109df3

    SHA512

    e23fd79c6eae756178bda101550129996b3ff41e8820ce2fbdc2350acd520d42c2ba0da216860a8ad80362b22572ceb7c737cfce8b99936341036b8b22e296fe

  • C:\Users\Admin\AppData\Local\Temp\Cab12C8.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar1339.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b