Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Resubmissions

28/07/2024, 17:32

240728-v397layfmg 7

28/07/2024, 17:11

240728-vqcqkayakd 7

11/07/2024, 10:44

240711-mstg4avhlf 7

Analysis

  • max time kernel
    119s
  • max time network
    139s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    28/07/2024, 17:32

General

  • Target

    LICENSES.chromium.html

  • Size

    7.9MB

  • MD5

    312446edf757f7e92aad311f625cef2a

  • SHA1

    91102d30d5abcfa7b6ec732e3682fb9c77279ba3

  • SHA256

    c2656201ac86438d062673771e33e44d6d5e97670c3160e0de1cb0bd5fbbae9b

  • SHA512

    dce01f2448a49a0e6f08bbde6570f76a87dcc81179bb51d5e2642ad033ee81ae3996800363826a65485ab79085572bbace51409ae7102ed1a12df65018676333

  • SSDEEP

    24576:dbTy6TU675kfWScRQfJw91SmfJB6i6e6R626X8HHdE/pG6:tygpj

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\LICENSES.chromium.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1644
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1644 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1624

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    312f887afdb354fd3ed59e33dea0fe5e

    SHA1

    a68b7c5bbe5296cf11c3addcc28e0672479e2d1e

    SHA256

    a7d0a6453ae93b89bbf83d21c923bfa2fcea5d47993fb870a007071ad62b1be8

    SHA512

    a012fbd30dcef8ea57abbbb72a90967154a03749c172aededa3c47824d07ebcef7579f40cde1dbaec8924eb7e4bb7b9ae248debde44f4ca8487ed237393c176e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7e1a4725ab86712173df035b0fa3b2c9

    SHA1

    ec6a6848e6d0520896819fe719584996ebb118e5

    SHA256

    9a79940770d291d1ae66c5964c44a9c299c9325b723480416d0dbd7d8c81fb2b

    SHA512

    c7cb9f51b289f9044cfeb50f4ac8cbd917d281ffccc46e1712195d1b2422e3de367915c27c86ed946b09d79ba4e91619840b09693e4100d44fa0d5b9bf95d004

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9b0f3ab0c4157a9e90fe33dd9d1c6e62

    SHA1

    48713e70438aef5a519ca83c3aea6a833fd41269

    SHA256

    ec9c1fc38bc38971aa792256fefb90c7ce1a4c23de1835b261e28098abdf4a2b

    SHA512

    ded07d7137a1b2e665f598e2f77671f3523754b860bfe44099cb7c8777b225b998fc4f1ed6ca6293d0364c0d4d3a99be8ee95d133ac792fc8476d7b888838fa4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    02e8c3067acb41bbe51c9c0bdcf4ec46

    SHA1

    7ade6d76066d41125f0be2b5bb3d9b00f6657394

    SHA256

    93dc78d8e45443680cbc47a5a2cc777c93221eb0f83fe1f900c9facb2c2ed92f

    SHA512

    de1a8e0b079f90b45494d3e5c86c062a54cc65b5decfb6ea38551527a650ac9f29ae2b6616ce246a69591784699add81d33b78ed96213d4b25bf979d31e042c2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    987fad1b4ef1a4e3acf1f989e01b6f40

    SHA1

    a78ca8dac9201fe34d73730eba5549ea37c074af

    SHA256

    6addd2d6ab429f0a0b50641b1ecc22ef4e59f5627f05cf554aa8f789ae4c5a5b

    SHA512

    0077d653cc9b9e3f8078c8b5686020876b9af187d4ee9e30843ddb4d36da04c474a93f86dacf7091d646964f505532815e8c683ebc35c240cea26dd6ae5d6405

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2270e8e2266f32471fccf464dd46d0c0

    SHA1

    1ab2958e5049520a876ec8cbe31fffe6e05848a4

    SHA256

    ea91b801655f0a8f859db10774ad22c8b741c5a7aa920f720a1bebaed9ac7117

    SHA512

    4d6d8384187ec1777645823d6237d7ee328232da377d08793e656915de12e10aa7dead2767ab24d378b919260cdf260551ae7053257ba9e12225f8db1aec572c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7888a8782e038a5cbbbf41e64c4a56e9

    SHA1

    590d18fc2b73a8f52b7d13f67e245525fb6dfa33

    SHA256

    fb92bca88d44e436b55bb5b60b2d6d8d4ebaafb3e1c328baecae91ccbf94c05c

    SHA512

    93ea8d5707b76988bf6f834f84e3a79002f54ae3302282c3413b493ef5f00864a41eaef0a551061bfb4e46c66302cfadeb2861276a6483f4737fecbc8e28a98d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    920785e69e51c7aa7bc6b5559da4edfc

    SHA1

    af3eb2b77341a801573df5440a98120527d2936c

    SHA256

    7c48863c83a1fb3ae4618259a826be8ef95d6299e55433fe5807e94959b9da6a

    SHA512

    b21f1abcc9a43e3f66a86f156e66ce87b5b49d9b7c7ae05b5d352ca2bc073ba5d760d368116e2055a7e7c1dd97e31d82ae67bc937a88f09d33a2cff71a1e5af7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    09c153ea4257351e559654c37419a1dd

    SHA1

    76f0a8ef0565099b2303e550ffe3fdee8b567ce8

    SHA256

    1627c1ffd1e8192eda0dcc15cf9a75d997728a54ec6517dc3033ddeb9c15ce8a

    SHA512

    6352a32e12dd4e2b6eb76e31089e92b475689b036ab8b139458a9c188e428e83cb9dc083f34232ca525a2a5ac751cfc67af470c18f1bfed7387012e872e6fae4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    172faa05e8ddeccfe24c8e65dca3708f

    SHA1

    7237a06dbe28b359ae34b937bf1c69c83e5c8aed

    SHA256

    6d678f01e1fa29262ab696d0f05f69261e8996be81b552d8a5684bead17c3084

    SHA512

    20be9f16bc4cee958d087339009fdc61a7ed56116433e210b57f15d7cbe3694c70e921e33365864190325b4d427175f6e8be18220d54a2fab37445ee538f8a96

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3b208427d4a64d7a0df6811ac9027767

    SHA1

    00cbb3de5dc00bd5a0ed6918b485a563aeb4bbe2

    SHA256

    4010ac3b2f4bf3e82343fe0cedda29615745d2ac4682413386e4c0232f2afc61

    SHA512

    5880b7424ad1a7fe53eeeb12292d83fd574fbcabb91a97ae90c320656e0b2f6d212c0951fae92252a90de8d266ed6e473d737145886143f2a178454c7f9a5db7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3a4df72925bc78439ace14bd19450109

    SHA1

    d3786e833066bad327d6d87e6404c40f7c5975d2

    SHA256

    e531bfe7bf71f9dc932577e729adc43d4d4a62e6e813ffdbe06b14aa77e97871

    SHA512

    e9a27c64c7b8641fd7460c993f47f79fa17715f52643466bbc2a57ea612a1cded654bb461625c476386ecbe2c6523cd91dc14231388fb4199dfab5ea10ff55ea

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6d7ec14d1a7f5a2d0ad3a5c611a5a789

    SHA1

    0e53ff3eba594edf9dbfb6c0c76d6b1a29a5e3ec

    SHA256

    55dacd433313114b627a8d356a47640331501810fbbce27a407e78ac2404c1c5

    SHA512

    71c2a5d144cfeb4baf093e25d6a0035979688a0ae71244a9c717dba7673806dae0935ed5613ad6df1fc57a10a52c3e2c51114751ee2c0aa9d35b827595259177

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c13382844931aa0ef466dc759770e6a2

    SHA1

    00a72e6cbba26cb9e92a2be54e8d20f9f3250340

    SHA256

    c31b646c4e63036167c68c1e49f98ae6dd7c8d585535e59bb5b7e0bf8b64f6e3

    SHA512

    708fa4c92da25b3742d4545139b4287430ddc413448dc236d31c43556a13fdd3b7168d6e79e1626c3433143cbc5425fac921370d56b2078f127896695df0f98f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f2cc2112f42ed46f35f5926538b5b859

    SHA1

    3b2eadb8db52873302ce0748d8327edc0bc6871b

    SHA256

    105d896445f19516dfe4cd174ec72cf6f2d2430e9e0d91626be94722db43f349

    SHA512

    4256a0717e49e7a015ad10b5fee4ce8eea98273fd60eb54dc711d6287f373ad1613aa6c4b70e4193d47f1d0d06fe4352b552ef17fac3b05d7ce0f95efcc32033

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b91d58fde9e938d5f4277e6a2ededc6a

    SHA1

    3a5a6d209e1b981b7dcb6b20ab4d9cad5b3e47a0

    SHA256

    b415ecc3126819312cf07bef5a65497eecd6157e344db0adbb2cfed0ace856d1

    SHA512

    b6c04cd5b1eaa1d3725874d391600046ba760d1068265bea2edb0a5d51bdceda61b8b8cd35c7ca61664c7fb30dcde24828045eed40b3c7824c5b1ff9e2af7e52

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d1c1c38f242922d4fb719e95266424a2

    SHA1

    78a8295321b4fe6c26479c337aabdfefdc43a178

    SHA256

    bcbf8aab2b5ef8a9083d2c15133a016d87ea93589d4b69179e1a7231bb949bdd

    SHA512

    c9a09791369337c40313693a60ef07ad8965187aefdd5cb82f0bbcd70890f9c7c06d5cbcf5eaaf31b2815cb81929bddea78968befd82ccd3bff496e94b26b3b1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    856eea52873d473b143b5c09a0eebdea

    SHA1

    cfc9dd7c9ec8e71e7585552a4c47c4943652077c

    SHA256

    17bd38846733a4685a4789d83dcdb3cc4429b80a199988ee48d3540f45f33424

    SHA512

    6b08f378f9dbf3d4006ef115caecb25792d6878336f139a54ea4d7437388a1f2935d8c9710a4ee02859fbf704f400090fb289a45c85a23090252402ce5e90f02

  • C:\Users\Admin\AppData\Local\Temp\Cab2260.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar2330.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b