Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    133s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    11/07/2024, 11:31

General

  • Target

    plugins/kanal.htm

  • Size

    4KB

  • MD5

    19aabc88706c8234397936204669c79b

  • SHA1

    7e6ad805cf0f3beb93749cf092494a44119e5b46

  • SHA256

    948f110943513e7229290f8406ca72aa39175eb5dbef5c3cf383a467072c041d

  • SHA512

    17eecb6c4773e80b34bbc49cdaf48bf5bfe1682cb2e40fcc69796a36a50103cce3bd90b6f952f8de8ed31642370d7a578ff0f67ea98ea3923869d4430bdb6dfd

  • SSDEEP

    96:QcKfXA3RFJkBH40mf8hHXNFX5HMEFSLlgL+0C5auRv0h:afwTJkBH4mFdFZMEsLZ4uM

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\plugins\kanal.htm
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2060
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2060 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2776

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4c5bc264ec6f87823264c2c972a9f630

    SHA1

    a861e0774d80ec8ef568db6a92fa2375054ae1bf

    SHA256

    a9e900e22b3d8640079a8a4f7e92749c658af22c0060516f4b397fa5d099799b

    SHA512

    319f3dde4dc220341dc3508aca565e6a90422feaed2ea116422ca2c239d55caa11c69bff2444bd7e5c2368348790abb9553a1a78d436732a662c9f7daa978f5a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e24421ea03fa71ef0b9c5604dd4c70ea

    SHA1

    bf503442e60c78f4a2f719ba556009967a2e23e0

    SHA256

    f7091b672c553ab07fd43689764206b551b274a7f6beab2517aaa6d9d75fc155

    SHA512

    4b4b08df0bfb182a69ad3127489a2c55cbb1a90851765d6a73f98b8a64c35db35336a2c6785d4bb9b31053afacd3d70d89f2a8d1eb71edbcda2ab4d0f8a6ad50

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d3485f1be4d9050f1abf3f1b3f828977

    SHA1

    7dab45be912dd0061455571877030dd16a510229

    SHA256

    126ee20455670c30a8f72f52e5b08f76e927cda5358d87a7c9ee899ed884d47f

    SHA512

    bcde0852120fe9d25d24e3b591d266af686ffa988acb4a2c878eb8ad975b09bc646dc897eb870ee9def056b6dceca916a86fdc545ce54b2ef70bf43bcbc2f722

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2673b5e6ee312e4f0f68afbb52c1841a

    SHA1

    8d3c8592823e3862e1be7f04feccd2460b228aea

    SHA256

    cad2523092af2da59fb6841cef0bffb156315feb690143758772c4c207274aed

    SHA512

    d65af9d736ec3b3c102185577c78ac671f9d1c3b81484f580fe69da50f9ff8d8040df751a5a3f470c02301dc8820a71db7e98698cfbab30ae6180eca2e78bc31

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b911a3d7a7d599ecbc088607c90a1ef4

    SHA1

    dd35df4874545c04552094660e2f6af3b45e191f

    SHA256

    ad97add42bdbe21d186e890ba1bde3a9c7f7bb19a220cc179ab982680851c7b4

    SHA512

    f17a5bfac7b1af94c2904918b174984df08dfffd6249f0cefa799d5df40521837e72e9be1d3cd4e6071fd110f4306b292c25a2c1b922f2878322f636ab80c452

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6d3afbab1e70e71b032bdb2f157df0b3

    SHA1

    658b541a0550d42242d5f86857c719f8d6d22cff

    SHA256

    aa4e028dbdde6ebc5237b6f6ed3493aa23caa9140a5daef2f9cd9b7d365da76c

    SHA512

    4a60adc657c2d51a1c5f376738dd17cf328f98224451f6b4ccde973ba2ac266b04afd54db003419b56f344396430aa3854b42e433b4166b1aa99fd07a3e245f0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4834a9f278a3d27a9a95acfd8e6217de

    SHA1

    d5c9a2736c7927014738be8b3b228b5df05fee64

    SHA256

    42a519fc4dce4d40d8005886085f5884b644d91d779692e4196d4be436d0a4ad

    SHA512

    733cd74a57a1c77ed94d7e8eff0f4ece84ea692f02fc1344e2b144f8af39b272398af85cfbb78685acf1d0aba0307242d8b87cf583c8e85a0d8e3bfa06bcc6b5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2ac41b20dad008e382d47e31442a16ba

    SHA1

    e94be22afffc8efcb943d06df55de3dda31bea88

    SHA256

    b347b72ddf171d4a6654fe8eaa4299801322d10c6ac8b326284b168832dcd08f

    SHA512

    d7734144a6a4bdf926d3b5e82c5c40aa0a82a0aabd5e3a3724abb251cb5ca6656b7e1580a86b6e2adbe929898855d058d093f5bdbe8e63aa8140e5cbd6d39b9f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    845ebd8ae07bcd288f75edb88bc1bbee

    SHA1

    d46e77c5af6b665ffedf646e1009c49d87277254

    SHA256

    d20d641d7730a0964e29477a9f66a706a209e053f60a9062537c87972e337112

    SHA512

    a96001a8163f3f9df85d2b93f2acaf0a60643837d61f416d49b86e6a6ca7e81a1326e36cc9b673afd90f4b9c384e1d397381afa47ef682ca5b67ce873b7ac918

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c6635b5f1ad0b1836d8c5f90a3f4f683

    SHA1

    bc328a35642bedc86d8ea64f31147d0338aa49c3

    SHA256

    0d698d7ee64ad031c9cbe2e7c5dd5cbe332aff6e626078b2e6aec7724855438e

    SHA512

    ec622196794260be91c407f1b8ca1d4742ab6fc2a2b81c0da670fb90ee210ea821b71e64dec2921517a21a904a05cfb41f2c0c311d85c1e0ec98c171f166c784

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fccb00d499638821439b3226d4700114

    SHA1

    cd3e6a0b4c6c9394426c63405dc22b8a8fbb74c2

    SHA256

    2d2448c7f6ea64deae2f6801f64740430ac5236f6be8a7fadf9fc7753cf00568

    SHA512

    fdc4d24d6f2839fdcb2bfae02ebaf8ad2e6dc89d06907b26baf7c5a51083e4023b9f7fa5e8a1db8e60288dc22a0b22469977a457244e93d7a2c90152c8bc5e14

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9e9da530a6048590e01c035658a83fe3

    SHA1

    aa8f0d9c5f1577860639f779c7c0d11195fb4de0

    SHA256

    1d1cfc4a47f81b29705e9fb122f8f3aa46eb81229b537d9c64dbc9a32e5f9775

    SHA512

    0eaaa3b1269e982c6534baba1ea6cd37eb2ff4a68d516e9e9ffca90f4dc5f376cad428d0cb4036d2f02ad802ed5816de62dab691d6df44210485c4c5554c4188

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f047d27e3eee3d972dc53956e2cb4456

    SHA1

    7ef8cf8853fd9278a80d8e33cd8cd122a60698de

    SHA256

    3fa293ee3f536943d48b954865670172cc085021ab7f8e00566f5e5f96178db2

    SHA512

    aba7d327db9c58c37ae9498405821f206b6837b5c1b72d40808847d31aff6f2917dadb4946aa60884410d5b8f959ea842a04078ca791ecd8e175fa330d8c8815

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e6b538765c8e73b514d3220aa4c5a4cc

    SHA1

    c841ae5a401ad0e811ab1b627df9544b5ad80895

    SHA256

    696610fe455ab893311654ed101c5599551133206d285805486af8aab5ba3380

    SHA512

    1848808e3851be562252281b0a45f0328f011dce33c3beb83c5072a84b53d7fb72b86796526ef4cae2302c4d75baea545389e7e33d48b5edd068a6612ff2f6a0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    dbc9af416c1dd6a7da03f90e25d0946e

    SHA1

    3109bf2b476fb9187bcc280f278ceeeeb04df0bb

    SHA256

    601f8d9606130421cdcc6bab9060ed606f67e41899f8fa1df3da86e4d0ab9205

    SHA512

    8f2f0541ef463385babbaf72b88c319a60e99938a3a5bb2fb8678546df6b775069278b9e1d6949bbd20c9af8a7634d73f70a144173c1d6d20f58c9cdd54d52ef

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a6e21e2d262153b4608714165b2b153d

    SHA1

    b18233713fd71c040bd94a414fa2a4ac4f678eb3

    SHA256

    32d11a1a6763451cf11461e1e90bbdb395b5ca04b8ddbd2e3d2fbdf9804d7559

    SHA512

    843fa5fcba5eb5d9b6e609e0c56939f26fcacb90260917fd9d55c0ab608a8c1c9f74fcf2cadd6f7c3a7e2cf3bce868decfa21b29feb6b70d36c5836ca963cf9a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7008843456f9e33a1618efa7b8bdc80a

    SHA1

    a69176116b490b4dad9b392d738dbceea3e512c6

    SHA256

    851211fac139c4ed2904ba8e9dc5a40056eca04782b51418e3a7a0a21e77e6cb

    SHA512

    9ee22cd5b3893db4016620845df502bca8f2eda21a95036872274c52426d0c1ef0526b3e5ca7306fc39d86a909ae0c9005bb97ef7bc7426e4b4d865c913231a7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5206ff083ea9648cb69f4744669c7ca3

    SHA1

    9cf811608928659b3dbfef1055014f8f47134728

    SHA256

    88b4c3fa4309cb1086f5732ddddb5ceefbee249707e121e1130db1d5025973c8

    SHA512

    d17d471e62d9818141b71df9aed63c22c0ab5e6e96cc666894246ec581d30d491d4b93d245668be2f12b10532d13e05fdf6200ac2de71792c6d924edd4f03960

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    afa3434e09004dc469d0e7477b9cb5b5

    SHA1

    685d99f9ce565009de478be268a4a39cb2e858a3

    SHA256

    4c592964e4dc5b6c4feed132d5cbeb1aee2eb80e0ef296d0167c3c1a748a6077

    SHA512

    e7d77e9b6af5ca8078dc1d4984e705e9cbbc3ae9e4dacda3e9782f8164f23d25a3eff03844f286ac5284f13ea47a379a604e20304b6cb28a5c0b975a0ba5cdbb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    021a981802b42284d6883f43cea37dee

    SHA1

    9859acdb4c5c67cec90d3d601c31b7814c823055

    SHA256

    b12278172c6528966f9aa990835181968e2e986bb94248b632997fbaf83312b1

    SHA512

    b65814feb8007e8d00ef4d5f23f601d375e5c3ae6c660a268f857d4580cf8bd8d4c3377ce3071eefd8e1833e6f767a92379404b6eb1ccfe8a61ce2c7d0df3269

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    79c1425785c7a97f98e054c2b851dfb6

    SHA1

    438e28ad6d3b8b21bdda72efe2ff3109e416443c

    SHA256

    3002e0c47a9bef233538330059dd9610a90d06f94bbe890fec3a2178100b3729

    SHA512

    ae98862b3ea4d07c8e45fd86587a8e4cb812ca0290d4dbe10445016b1511c2f3d4d842682258c199b51529aaac2c4d9b8a75bbf5e592a2f704227bbbaaadfe63

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2bca850a522d1270a42de0f2052d9560

    SHA1

    8b09f8dd0479082f52e2a070a48830ca29864a8c

    SHA256

    980cec606bb5e079fd2425570c11fa4feb1fe6a0b15603596ba09df0d06c8880

    SHA512

    011fe2b58334cebc2cbe7601c54a535df71fe592acf3d98b487e0c05865d4ec9a14a4d412e57ae90f33b98a6e784c3f2a1f920aa9891d4e3c902b87a27dbc473

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    db88c2fbfb5afea625166ce634b8a28f

    SHA1

    a04b5440a14e69f15976c65269b979a0ae17ef6a

    SHA256

    bea24242c632b01fa55cfc7c8f3b0d842063cbc0e72643aa85be5a79dbb6bf80

    SHA512

    2de9dbe51f6bac8ff32118abb16952b97befb4d8bd70dd85a29d8b4afa37ce59dc8051fa9bc624550a76fa30931b4c18d07c55467eaeb725610944831ca343df

  • C:\Users\Admin\AppData\Local\Temp\CabCEF.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarDAD.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b