Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    134s
  • max time network
    132s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    01/08/2024, 22:09

General

  • Target

    LICENSES.chromium.html

  • Size

    8.8MB

  • MD5

    2675b30d524b6c79b6cee41af86fc619

  • SHA1

    407716c1bb83c211bcb51efbbcb6bf2ef1664e5b

  • SHA256

    6a717038f81271f62318212f00b1a2173b9cb0cc435f984710ac8355eb409081

  • SHA512

    3214341da8bf3347a6874535bb0ff8d059ee604e779491780f2b29172f9963e23acbe3c534d888f7a3b99274f46d0628962e1e72a5d3fc6f18ca2b62343df485

  • SSDEEP

    24576:cpD6826x5kSWSsRinoHnmfm646a6N6z68SH4SApTJ:cHSek

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\LICENSES.chromium.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1668
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1668 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1072

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d8e2a6c31171bfaeb20712c8b37cce6d

    SHA1

    879198069fa8769f91841a773cb0a7e2e1f74f0d

    SHA256

    0ea86646a3e0f41d9754b0b1569402e7599573f6b317936f8347da41569af93e

    SHA512

    1ba66890ab38720745b5ec107d8685adff88e6a03c2d4489201006d43c68608eb8e982d2c36a4f5207638679ebb3d172f4e45a672910d3fe0dac5a93dccd12c4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3ccbfeeec40067bd0463d4e3ca560d0c

    SHA1

    c9c6a7d0536d384737ec04a0feef18d3a2d3b639

    SHA256

    0026be4a8ac34936dfdf44786c20bbeb394e546418e26dd6cf542032719f48c4

    SHA512

    77b941947e130e87b7a727179d222867f0d1a745368a918ef87664787563ac45bf72399f792a493bef114fd28335a760e9448cea3a69c7e6e82f9ac000b269b9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    cd8ee247470b698a539caff49ff21ca6

    SHA1

    759348e94848fd11c82bdafd3d4ad39f6c4986d7

    SHA256

    da3ad0cac28a254a8a79aa40f3c83366668a1c6b2081a00d18d2e75369d17e3a

    SHA512

    f16b1d67690455499599e8fa309c0ef80e6fc39d9f08016811e905bca90d5c92668560d14c92a9c0547a09b085d34d49349f94c9043a0bff68829bb9a93f62ec

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b2d7481514baeb894ea070befded4bc3

    SHA1

    c19dd9a413ac525a1b8bf454faac7f282525d6db

    SHA256

    95195837e2d74147f4955aac52ee502344eb3e70f0e0b56bd3c4d2f83fa21553

    SHA512

    d016af57215eb35268dfaef230ba56d7bfe258bb6acfa395e093c04f14878e55b7d43013fbab1b340ca9782f6dd3eaf55022bb4bd310ed106245d01481ff342b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b7e397d6d36209660b29b6bf1f38dbab

    SHA1

    0b81d2fd1320a964a520f22a4cfd9af22ed71cb3

    SHA256

    f7e2f85c29574967c27ec0cccda2b33324e4a23e81e21bcf6444a23e29f7a4fa

    SHA512

    86eabf6c9c99760366f8ae65da6d4f5da4a033fe4fa4804db511c39a39216a3523bb70db0d6f42fb07e0eb49ab7366fe1765d627373346abb215eb141731410b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a96dbf31227ebbfa7a03983ac0d59897

    SHA1

    87afabe283cf177bfbf0f8e551b92fa0bcb745f6

    SHA256

    91820dac578146c4c26a48e59a164db46605669fdb6b5740d4aad03629431810

    SHA512

    24f5f1d5ccf25ed532d015d0811741c930ff59fc75ee4e6caf53fd20019eff8d40fd7998c24879ff9175d05c5934205e4d31a1cad9c093290f102b8de5764fd0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2cc1c80a7df8ad721a41eb94de24de0a

    SHA1

    ce7a7f8bb239213d1dd1ab4f91ba161a85b87843

    SHA256

    2f5f14b006d236a2e87af055f53f06c45ddf6c6d9ca0d7682b0d4bdec5f7d426

    SHA512

    814be16da1f5115a19d6dca955bcb0700527423a0fbab1119b893979a6a6eff95211e329327f8255ef1299b58796a1e1e0002ce0adc24d7e977f952a0ba87735

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8c1a23d1d3e1574d407a9747f058ea11

    SHA1

    b36e9916c2547f314b932464b5332f8e1028b0f3

    SHA256

    453544667cc5b0bacb8a66a6acf0f25693f2f15ea09c76a0b5dde57da9fbc13b

    SHA512

    cd6d2050a73c680fcc2e14222d7442a1b3f47d1e48dc6ebb25f46a859b2845642d1bc4736cd1d84bc8e26bbc2908e9749fca5766c330e645055c32f4e8b231dc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    32cb6bed4a9682577f9a6e7d0ba030a4

    SHA1

    a71e99b9643705c967a473b8507f9d4f41f0acf1

    SHA256

    56856d562335627774191e0d727208197fe61e57fa201ea261cf135f3ad96579

    SHA512

    9da5fb1c00c1d567f6caee598f870ed9aca3fde1ae4841f412332bf862db41202bbf65cdbe6f17e220bbf30e076675c1743ce53df9bb836e1cd080416db1f1ec

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    cf06735450f0876833c7b0b5b674d5da

    SHA1

    4feb497fc35db547e9e9167b02dd41ad772f975a

    SHA256

    7a972c3cd9d1be58aff1014a8d03bedf2d79d912622b29e78399073488717d2c

    SHA512

    da1a04e7d047e62f0a6b89825d054dc876ae5ea986a42f51adc4f78b58be2bb54c05a63f4bf228ec6054657a981b58390382e4e4988aea4c2a6f0a957a61a60c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    633637ff98f752f288777269e4c2279e

    SHA1

    e0a2142480c59cf08e02f30b61f45add5f87de36

    SHA256

    f22bf6d1d9f580c4f5a8ceeb1399d56c70eadf3fe11344de44e600150381f06a

    SHA512

    069295bbc01340ae634687dbfa09bd9af070c814c97470fe654042489046dbd270046daf2780361d2e7a54e578c93b11721d29ad87b269a6d7956f5096d1cc0f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6d3b43003d8e4b52ceb48589f703f09d

    SHA1

    e47f084a08c5dbb9a8fc7b22cc5eef355ac851b7

    SHA256

    9992d574658a091994c7604eb8ee0790860c3f70b12b271e2eae8918376de907

    SHA512

    c618a0fed50c1bc4f3abd8f21a2b69515170500a665f451dbdee0444196cfd0184b98aff5fdc7fd859f951da4197b7d09d1d1e08d91aa4c679343c7a64fc94ee

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e3004c5271bf3e67c2d1717cdf0e4b75

    SHA1

    5af4d9d5016ced8acaf61bcc60c5dca0edf7f352

    SHA256

    dcd95efea929877d2020d90878339a9811db6c3e1521910becddf0afb895fb21

    SHA512

    bc81e62c17f9fe91a16d774cf95bcccda9a9667d12857eca5db76c8798aba327166fcaa872a607d57e07bd6c57dc4361a258e7260f5786532c9ae624689457f2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0599beda5e5af59360a764a6e78b9ac4

    SHA1

    738c069d9d30ba9ce5c447aedc1dfcef2806c1c2

    SHA256

    d4406fdaa7361462a4745425c04e59b46ace510f93961606d9ce0c678f024df2

    SHA512

    cfc8ac5b75ace2dd37d861962ff6e7a0252f19481ae3082a088f13ed497afa2b17787305f3cb518bb0698212f1efaac079e22b85095325db0ea90bfff81d34f4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    eccfd5c2b8de045525b36aa731524f89

    SHA1

    18fd90056c6436009c22252c19e993c842666c79

    SHA256

    4842970d76bf73d83e8f8003eec711edbea47b10fff8d2ebf68ed8e859dea081

    SHA512

    715d7ae1e4e59700e6a5362115fb4645ccea75f4ddb2b13eeb055805d17414ea7624a499ff0a20e09956c7a5b0d9fcc3948ae2a72186b7e66618906499ef7bdd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    04b761b45d063a5c5fc3a9708c5f9588

    SHA1

    44afcdeafe77e06626b3110160775ea8753c4213

    SHA256

    89dfac016c2d6516370f967ee5e1c7617f4708f4bb17adf206360244e3fb92a2

    SHA512

    7f45f2b7c0011b69877288c95cb4a4efd1b36dbea9a45c7f7813eee5492d47bbcdc9919edbe7bfa01f0328a874e6b53a8253360d472f91780dc6c28542ae2825

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    75c81881788d58a6b20734dca47c7dc8

    SHA1

    f62c9c9618230dce1cbd24aae8e9bc600ae8de2a

    SHA256

    a7f18c97cedd5b00144999f070db76daf01fa23785c6bf2d4e5d5d28cf2570b8

    SHA512

    e34078d3a89a043d51d04663bae64b7010bf44fbdeeed0f6d14f627f22f2f717235515f645b34cd47c4861726ec064bccec58fb443b154dc1bbe5791517b8657

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    62d07cb1dec02e1b2ffe5fec80d25d54

    SHA1

    bcdfcd295286a6af6992560c1a068ecd85e602db

    SHA256

    c231374674b52c994a0e51e2afe3c1c2952df8f6c1de0ebde5e17408b48645b5

    SHA512

    620240063542d5f111313e45784a7db8654659f724c33ead18507774b3854c306ad74569459da839a49657eb60239f40b6c27ffafe3e46f9acbf58c15266831f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c187b26d4b85a5b36dbd16d274ef6ec1

    SHA1

    8e867611d5e44cbadeda844ca7639e2bf122236f

    SHA256

    db8246bcb25c55f98a47aadf432436a31602f75ee657fbcc25a267d681df9c03

    SHA512

    ae023f36a2464ea9779e0a5f4f5f9aca7bba4a7dd2d1a1336dc304163e7593c77e56fb673bfc79a1a309b74319ce70b69785d292ef49d49b690b6e55dc1e65d3

  • C:\Users\Admin\AppData\Local\Temp\CabD616.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarD687.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b