Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    141s
  • max time network
    145s
  • platform
    windows7_x64
  • resource
    win7-20240705-en
  • resource tags

    arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
  • submitted
    22/07/2024, 10:16

General

  • Target

    155ɫվ.lnk

  • Size

    350B

  • MD5

    2eefc9c46f6597c7b8e425f8c2130e64

  • SHA1

    4dbcb7c15a8624c9054debd1261963a35ccf8d74

  • SHA256

    7756423e3de11499438968c53aeb575285995045b33832d601612512dc9e2424

  • SHA512

    2226a924ccebfa75d3e6927d64c58917e27b57ae2af3fc658126902f511c3ea3c4f362306a7eeb6073445d3de48b125453756121d1ed3e694b5e44a5fdc23efc

Score
3/10

Malware Config

Signatures

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 7 IoCs

Processes

  • C:\Windows\system32\cmd.exe
    cmd /c C:\Users\Admin\AppData\Local\Temp\155ɫվ.lnk
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:2424
    • C:\Program Files\Internet Explorer\iexplore.exe
      "C:\Program Files\Internet Explorer\iexplore.exe" http://www.soft155.com/
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of SetWindowsHookEx
      • Suspicious use of WriteProcessMemory
      PID:2724
      • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
        "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2724 CREDAT:275457 /prefetch:2
        3⤵
        • Modifies Internet Explorer settings
        • Suspicious use of SetWindowsHookEx
        PID:2624

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8838741e02bfec0a41d747cb13c548f8

    SHA1

    c78c8f8423354323b1e7d030f250cbafade1e8b2

    SHA256

    e8b27004f92e0b81c69ad7b85a54515bc8f52879d6dc8ac0b5a2975e5923c031

    SHA512

    1c8bca5f009462d50183040a1dd6ca433591f6293efdb2c2b37bffebd8128677baf823573749539b8e081eda8cfdb328fb684ffc024a8d1eefef99b8ab8880f8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3fa114484c0bff8c49071c0c7d517f26

    SHA1

    0a2870b75b1dffcb762bce329a65dfa341f84f05

    SHA256

    e27cf6bbcf6ca1331063ef5d17453bb292b3135240f5efe328f5dd8795585e60

    SHA512

    89904003f92325e423bcd67dc44be5f2b5531a9c5a97b3b90e9dc0745e0cf394e8aac0057e9c2b6e1defcc1cb6b27bb04b16b81c2a4e72ea0b86ddf3cd7172a0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2264c9f2429c0a97312e74e465364d93

    SHA1

    53de92b4fb2700d0a272a30b7dcb71f34c23a489

    SHA256

    d5c33b3dafb32d4a4c9b572e09d89895e01959674a056384ae662143d018b2cd

    SHA512

    c7dd26c4fdadd6a0336ae4f589cf4b896c3811fc02e826ec3262c4ecce9fc66f0885e8e8a945c49024866db042dd1414baa7ddd6d31053032fa18a721409142a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c4d5f04e2a647866cfed486605adfc85

    SHA1

    d91f8195fee0f0139d770bdd07e20fbf29d92958

    SHA256

    71e45b5954b32b62c676ae633678c8be929c42255c3e72c2959f4d66fde4c996

    SHA512

    a88b26ffb82478643ff0e2fe6860582a30dbb34b67979ecd6a8b6c33176a42014b5ff26b4da7879959df08e07f1032a3784e73a904f93c1fb573540e6330d6ae

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e7ca8cf5a20f8f377b0ecc368c21bb77

    SHA1

    2af255d5c11be92a7a92f71aeab11173306014f5

    SHA256

    b30f49abe00cbcf8d2cafe9e7b865cb3013698ad9fc4d7c3e1ba3997364fc8b1

    SHA512

    243bc84f47c4a7e1de033e5740f21cb41ce891b60e070817c86bfeb9b1fb118ccc09297f1970d4153a5130b05eec31af5e205657bc867a481e90088426831644

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    adb1c7976b43935ac8ceba6b083cc7dc

    SHA1

    22af28995675ab9400e8308978fd6ee459b384a1

    SHA256

    6343d5e1a8b2ed2fd57a7f373d6d0881f4513a11bdd8320129e7662b6df2ac8e

    SHA512

    f91c9ac06c6f5dee5257ac153324f85576b1f6192f8ce53d55f9e19d0ae6b0bb2cc12bfa2901b7dcda1f4a7e7d7b176144fc67201ee364be541429c2dc55a443

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e9a1abf7bfc0739a3e7f232f2c6999f4

    SHA1

    a475386e0444c5188cb14c8d22bc995ec4e03553

    SHA256

    9ea655ee89136a284169c0da10bccdc0e6bbd745110be08232f872a38866dfa5

    SHA512

    8a62bed3ac3cd5a36a90bc01bb8537d78d175dad3d4a59545dbe3e4268e30ab00c533b1ddf75ca4e6fd70cd0f227f037f7ebc165817f2d54076870c291314c0e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    133835135bcd62dbb4079a2a2f267e98

    SHA1

    3513ece3b911cc9945464126313b05be91d9c6a7

    SHA256

    6793abd3d90825fa8c0dc6f84f471e42618b020c4336a57dc7f319f66ee14769

    SHA512

    6f626850a596cf3edeeb1f4396bbf4d9015e34c463960ed47f90ac32a11e7ea0e88981cd5b7b9d9ec5c8a234f57b7b84216134c988c590e3cfda26b8d05909d3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    96bb9f64bcbd5d1276bd0cfd0717be2c

    SHA1

    b8d1b23b01714fc8921934c37248f498335c7c62

    SHA256

    e4294f2386d1a1163d37865bc201a8c83f5d571211f3a2255985ad8ff1b619d3

    SHA512

    c454b0cab689abd01b5fe9d2d6b1a298e7ce22b3bf45b28f6dd867d2cf1cc6190ac7ce6274a52678efb6d6f606bbdad683445d3fe580167fb42eccb88c0adc69

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ab2660fa63d6361358eb86803e6a0e30

    SHA1

    0f3d8c971d3125385b59765e79a1536db994f475

    SHA256

    fe6a5ed4d3a37123c7a42805cb74650892ebd29e398835da4ff17d6724d6f178

    SHA512

    599ce203cbb2e1cf39223df53cd92f3e6cd22ffda07545f3f009af9ba00e78ea30a13efdd58c0c8d7ff2659c17872969300d0e034f49b3627982a06cf19eaa28

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    654fd32ed746d5878822dfdf68681ae3

    SHA1

    ef673fbee03bfe4975f9b4e60a05017dc492d5bc

    SHA256

    763bd9bb6439e781fea451c84c4d730ac1ec4dc12efc553952078c1f3d2c59d1

    SHA512

    a2545b7d3041d4e5579e94d08aa4ff525f8d91a61b3cfdc53c65ce38bda1a12735b89c7b0d0dd66ca6f8f2515133596dab31a376585024803f614b2fd42c366c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0cfec86876f9895c8f593624f92f7b03

    SHA1

    19b71dedd235fc73ed506c178d9af4e8d1266f1d

    SHA256

    34baef21fa593558ade093c78c8328c5619c4a7a5d82b53a0d385ae28149daca

    SHA512

    732fc4329caec9f2cb103f17144be030ce3a1dc86850bcd3156669ada84ac0d71df9fda11f3742628a1a9d7d3bcaedd61e2867cafe0404af8e2fcefccbc56db1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0c392cf6f1b31f0c01d924183b190746

    SHA1

    3ca38c12e9ae39b741a85cb0eced0e2a37670411

    SHA256

    1b11fde0c46cccf424204acabcbb6bac4d645c6f5426fd5cb125c7a6b627d5af

    SHA512

    4e43ebea8623f1d818fbfe8bcb96c6cba037e101e379655e02100cb92eb2c6f3d1c011696445ed6a1167b269f9dfebc69d23175b1079b000da664f32967fb398

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0e28eb67ec202556e11142e01aea7ecf

    SHA1

    b9a23dc21c6bde60d36f8f3d0faa5ca99cdc0756

    SHA256

    2f03b391c701d66abdd10871c3765d4ec0fbe9573d4062a5f963c16e0f49a747

    SHA512

    0fa27b622a899cf63bbd4b162e6833ec466d254689d6bde295c80eb0ee077c2fc2734969ea9f1d494b513224299f42e2e56dd161292cf5b88f1af78a555b43ef

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d6dd7f4b481e0b447625e9c49064a5bd

    SHA1

    be63ff3df732094f7575646edb5af8367dd74470

    SHA256

    e37bb6449df94d5afb3499e4a18225578e939a55a9b93f494ba04271d5adf234

    SHA512

    ac012bd86bd0be7f0e1b4f4397e27b35676d0b611848bfb3b220d6a2b2e578ea25b837a28b091f4955590204c40f7f522528bc93e6cddc27e36e6c683c35f9a0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    141a16ca43e1cf68f53b1e58118cabef

    SHA1

    d2f4a33e140fe74614d0aa3ae4aadcf1ca5999be

    SHA256

    2856c9c1d441c1f43c319eda1c9227d7d85070d3d9f2d93dcd64a8c46d2e44dc

    SHA512

    6ef04a436693d7c6546954d380a381dbe4ee5001711e27e82798230fea92dede146cc4931c533325bb561737070387c114d88216ec6e7a38f76c9b493feb9f70

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7ae478aa1fa8586f8be0de9109b2b7c0

    SHA1

    079a250f26c48308055a4343840f094a89ff21ce

    SHA256

    904ac60572b7e9fae28275aada83a3965470242b6a747baebb2495c8fb09e388

    SHA512

    8104c76418ff202450d00bc174d5bec5f7e18dca04005ee39800081c86f6cfd889fe42f345196e2e2a5e4b6ddacc91fec6332c139b863aab4387908321f8d3bc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d9c9415cf013eb2bb6f841d38cb7fbb5

    SHA1

    5e2eb707e021a7e1ac414be52c5b5b4ebfd6385b

    SHA256

    fae44ed174214a3641a5d29ba792566042f8612667c03d0adb814f1126e4d9f8

    SHA512

    e0aaf30903d1dd93b24a705732299f8623ba85b2dea1b69dd6f2f37ebb391fb4386f5344cd4f6f8de969b27dff0127c24aa1c11ef11eb151c0ee4899b7a82323

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2a2a08c68c9f3b851171fa1ca93bcb64

    SHA1

    20a3ff8f5d002dfbb190dc8fb2488376ed10d183

    SHA256

    648043c6c5c64ba569cea9d63f42f32485f6b63ddcee9d9c80ed4f62488296b5

    SHA512

    23c784212dc7a3351f59a35e20133274f6440f08b848bb4b91113bf2f89a197e055d7fecfc909d99a917764fd3e77dfc176796a61d4338667b5ae68a40addcaa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a219724bc3c08c63980cfa4cddbb2fc7

    SHA1

    2cd9fb02c677efd1cf9afc7738479f5eb2201003

    SHA256

    2b00020c668df5b62ece068c87d8d85dff72cc0b6b0c54815bf934627f049177

    SHA512

    74eb0cd4d75c98c5fe2734515ab0da1c0a21eadbdb461a76efa1d186cd034af0263243a920388e58a9e15d8e0bafc2ce14c5da76d4659f5267c4463b0f702704

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7b40d1573d17a1d78c65b7f7db9e0c96

    SHA1

    514805dde4be1fdf20b94fe27a0e2a6c17b2f8fb

    SHA256

    0937ae4701ae5885a7cb32e8f686c717c43eb1acbaba1d92d0b77c23ab1b3fa5

    SHA512

    ff9c8666848a9e67354678a65eacc1553314f6d0d20076469e60b839a8109945c2ea228162cca3af3a06365a6174559ae6c394e6c4dfee88042ae88c0810fef2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    80d77830982c80efdd5e63895d61f86a

    SHA1

    b73657089cb253d5bb58ecb911f9342c92d7239c

    SHA256

    e3ad18e5ee88c6926d1d61c1db61cc18fbd65dde309976a86ab25baa5aa71ed1

    SHA512

    db6fda0ba3a9fab0be01df53a9c077acdd3e734ed643e1f8a9b8b1b83524b96e8fcb3bc5a52f2f5f4fcd2fd245b651ecaa01d4c998dc54cfb108e3d758f212a0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3f87f0a4045c188486ef374a6e6d0677

    SHA1

    dbacafd14dbddb33190ed77aaf1d2dda7c448a81

    SHA256

    c304efdc373521fe7648c26e996f02593b1e73004546265ce5d9d833396c2d9c

    SHA512

    8b14f493134a5095de15fb52e57375a02fa13f4d20c9f39f21ab518ebe3fb84a508ce3c64627dfb9b2642090075e634ba363ac9053f18e694ec97f470c332fce

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    de85de89976b2ca989a7deb0b0de0eb1

    SHA1

    fc149f339a3fa797a616743b160f3052ac5aaa06

    SHA256

    713fda7fadb802d11e9322dbbd96f69e73258179e5f7845fdd395a528395994f

    SHA512

    584850d9d472f929f1659a204cfb2c3b4acf48553a2446b02a0ca160dac54073550e0e153abc951ee6d7cc56451007ff9d4ba83afbbc7c5a951e094fb6de4cb1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2fccc1d884f59d6930c85e0330d8dd21

    SHA1

    d2851300f886230bf37a198fb147fd9e9fcc0dd3

    SHA256

    af1deeaf6d83f15d54699ca48b3e711c94ba02c76e670941b9c47441032f58a5

    SHA512

    38f0ee8496ccf2ac003b708538087396f76ed91d6ef44ac9155c7eac9817371d88364adc4b134aff70ffa10ac160c1da3b61926bd2dbdfe90b8691aad7f5bca6

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\imagestore\p6d9oj1\imagestore.dat

    Filesize

    8KB

    MD5

    df209e9d578d7fbba3d236d101eae1b1

    SHA1

    14c31f0e67f8af66349e6af0ef31b269cbc0d299

    SHA256

    c8bdda9eced7866f9c375f8a2cfb7adcd5520daf00dc53787b4c770fad3858c0

    SHA512

    4a5d1de738c587bcb40284bda98ba1b4ed2ff444752548888380d3d5fa497a88ccd72b4647eaec8d934cb488bef3f402e0092101f2397700412cd298a6ae0a28

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Z2D3H3V6\favicon[1].ico

    Filesize

    7KB

    MD5

    08fb0139e6adf41c8daa4d5781bd3bf9

    SHA1

    c3402e3631daa7ffe5cc8fb70758ca16397d249e

    SHA256

    d383f96417f493626b0414711d0b2b19430d87fb1c936a99fc76216e112b38fc

    SHA512

    9902d967caaea37a2d40cfb800530cb778132db455d0fe2fd62c9e3e2636bff8ae66a33126d8246f962e006f6b3a968bd461f1b8077c504a79769130408c52dd

  • C:\Users\Admin\AppData\Local\Temp\Cab283C.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar283F.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b