Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    119s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240729-en
  • resource tags

    arch:x64arch:x86image:win7-20240729-enlocale:en-usos:windows7-x64system
  • submitted
    10/08/2024, 18:07

General

  • Target

    https://www.mediafire.com/file/lpvwoosgyfvh0w7/BootsStrapperV3.zip/file

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 34 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" https://www.mediafire.com/file/lpvwoosgyfvh0w7/BootsStrapperV3.zip/file
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2160
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2160 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2500

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0d54eb89afd2457999720175b34191ae

    SHA1

    db3eea5406066aae1a6fd5c5beeb646300788f3a

    SHA256

    8b1747919edc019f8e479115afca33c6eb2d2d300b8df941a61e786983b44639

    SHA512

    7561e4a1a3274a57266488e866b5ffe439d5d2b33fefb0b5ef13e1aa02f405568154cf8c4f857d5972cb6300aac81b86d5c3e94e82d11738ed94b9e3a7c7c13b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    638708c6ca2d08bce6ae9597d2ef5634

    SHA1

    b98bf9d4b50348fcfeb1e3b8866882f9f047a824

    SHA256

    3b14f7c4a5fa4145a623b618e3645a10b11d6f8827eb37116362f2bb6616ae04

    SHA512

    20c27e604a7359b2cba89ff2c5de45b579653e156b0f07bbdcadb4fb66ca8cde6de4bc48d232fac6943ece449c1bd6a472ad1fbde47baa2cfd74f5fad4ccf98b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    305f7cdf59f990d8549681a60043806a

    SHA1

    adc60a527ab4c215b27b2eff0fe9eb6b5b219c3e

    SHA256

    fc4549fa2f2f1d75a95d3555b81439a8a08eeeda945aa57ab9b2fbd03cd1ba5c

    SHA512

    ed64dfad6921c9a8d77b873c41c9b79a78fc7dc71b50b0d49b93c4ed0e9cb006ff7e4620bdbc886351f450154c305072c8b4f1e326b4aae23e1f7bcf5cb894cf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    83df66a99f04a864be9192bb916dceeb

    SHA1

    47b8cb7d32295d5cd0a043cb461fe459eadf939a

    SHA256

    c1e95b856cd07a28121ccc226de16f43b9a0780b6c249b1614b6f533e6a82e49

    SHA512

    09999454734c928a11d320884fa3bd41ce1def85872c3707719a2abc3b05e21d1ba8d4143555f012fcd3a3536af3d9088f5c62d517556982a0db5f38291365fa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2e292025fe065e8ff6d3d136bc816794

    SHA1

    a37e2426657a3f4777e8e21a0f6b8a0875882d5b

    SHA256

    42f7c29528c6ffbe94be50f143507bbb5a15ffeca3c532b0d1d95be783f587b6

    SHA512

    5733d04972d1a60348d24cab508e2cad882cf4ec979e876612feeb996c3db7e788492b9b291617a9d7d96ee13f6ba763999762c4a92d0af1d601b26c79deb986

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4afd4e20e66eab8542cd0f6ca5619106

    SHA1

    90f2fb760fb4c56c32ea41d7e1d37efb2aa0aba5

    SHA256

    8c538648d9d183f1dcadaea82270a32098f1a95da3559b0f0a7610d4b97cfa0e

    SHA512

    132cc3f9033aa1f57cee49bcef6bdbf7de44e469c88520848694803ba671225c2fa7b79104f228dfd75c1c9a89876af38820e8d5adc99318728b7cb6b83e2097

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f77cbbb5fcaf0629a3dc172ebfd6e574

    SHA1

    83f22e375b5f0c176455a93db0d7acb3850acd69

    SHA256

    551495130bbe54ee05cb55d22a105dfbaa4e51bf6cfc5c3c50f7798b51110ae1

    SHA512

    e5857325fb1e25036f7c182ebe5990ea4dd71d3153c1206b11fc9c41ddc8adca9efafe2eee1c1ff5da9139b2b8bc15278becad360ef98069847e5491993d77e4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e251fe80f5a5bc8ce8904979df1d16fa

    SHA1

    482b80c993931173213a3ed644b02b72bdb200e5

    SHA256

    f9eb74035f85cfa416721c2015b2c081a01d1fb1e045b138a519087b6de98645

    SHA512

    b4746ab3350424a65ee5c2567c3fdbd60af36f4fda7df775191f5f9f09df8899d2ae90239c9e7e02a3443c9aa1ded750a973ed54f172eb266cc1be8aaad3fb21

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    302c94b9dadaf90d12f369303769d2da

    SHA1

    e31055770019e6ad0850754a5850d2d17330fab7

    SHA256

    10058170a6e83e9072e5c3efc717659a88d8ce5c4065a17d531a65548ff26205

    SHA512

    02797ba07abb05713ddbabc983ac3d2c2fc5e2c0b462caffc3783b3a1b96e7bea2adc87036e553a4b9679eee6127167ae2ab78e7e1787499f9272b796c5ca396

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f7bdd5432da2722fba97ecef5a68937b

    SHA1

    e44e3cbb95ea105039a9125da750f49f9b3addfe

    SHA256

    ed6ceb9cb9690b428f1b447a85af9953151b70e69eb106d3ddcdab96a87e9364

    SHA512

    daee792de33510004086d2b3cd39c16066d46f4dd55d40bd36e25706129ea44fa58c269d35fb14be983f973b668c5ca35e42b383e2d537b2d0d9410da4d7d3b7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8c6a43e1912f0688a62f116277d4ef12

    SHA1

    833099ef88af465c5e9734e67509983127449854

    SHA256

    f112f9f9eddf27f6794928ac2962efb0c7cf55c6b4d97c5e8509f0df59e71117

    SHA512

    b86709cd4d46693d06b646e1bc2f46eb48ddc9e3abaaa1856ded8421e0b84b709cc4fed43403b14c38ac9e688bca685d6c528df9978b4ed6156300f5f3703693

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8c5132d12312a227fea0185b5baafde2

    SHA1

    cb6cf3efd3fb61d8a42c66f57e9e9051b16edf35

    SHA256

    760248ce6daf39b7c681366f89e55d4e06593e8b534fcb5cb1663c1e99f307a2

    SHA512

    13cbd7299756e0e0987a184f7ff87ce06b026dc32b32aa4c7725d7fcdf7eeba8c0bde01353c68eed8212512d2ae594ac3b3a86a12c5188f350ba6ff55567584f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5cc22f3148d9f2a095eba55f003df63c

    SHA1

    a51ef7437c5035b7bb513f0f844c27d8f4c8dd41

    SHA256

    a687471fc7758c048c08a8252a973639bb5b1889392a0b71cd03ab9902bbec0e

    SHA512

    69871d4c613245a78e61abdf1304ba3f7ba4969a9f23f31b7a1dd9e5cdd87c01c4ee8769c0ebb2496af13e4f9fbe4077a82a888a9cf918f0a184198e4abf8930

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    45653b6fc8697c168188d3845d0e5643

    SHA1

    5c0c0b360a1150997fd4e750c621f1414d92f6e6

    SHA256

    088d4a98842279ea1bebc08bcf1db884dea031fe08ed6b4411f391cd2d7bd5ad

    SHA512

    618eb461e5f896cc095fe3299b23148cfcad3c4ad8b1c81d6e593c4c8f95c4365630715d2cda86952aa833f5e6ad5e8c430976339e3d0a21cf0f114b567f4c98

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a2595fdd12734d77ad73f53830f1fb2f

    SHA1

    784c7125769ea044ebed37c6ccf502f2fb7ddfe6

    SHA256

    a04dc966839d3ea9ac3d970eac1eb957f536d6b04bc1ad04760cab0a3acaa321

    SHA512

    67633e9217dc7d7f0ab41aecf34bf7e03c25637c6103c627b54dd7f1307b86708dcd59203ce23d1195b67e60dabb0f35009dca6dbb194e10f1b74349383a85ee

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6acbee1b2538fc6c93bb57c72b37e2b2

    SHA1

    69cbceaf1b1b7dd5b697a865f9cc90923e9fe612

    SHA256

    9abe2b62a3869136eded370a468d048a7621e72bf8bc5011d7c5f496a56774c0

    SHA512

    953820fe008c0d554e6bb64bca616439865505d6dfc41bb8095c4b88f0ee7788d918e8f64a138d41c3f97fef5d0f7b134a672223b76493ebe986727bee15a70c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7a9424a5214c4286adcb4186f517d71a

    SHA1

    671ca4eae755921196ba41352d4c0634418ac367

    SHA256

    97caf3ed914b3a6703fb947d281237eac9e336d70b90319e8fe3cc07465ba57c

    SHA512

    f704346d5c02db89ba7bf1fe3f88383828881dc4cd10532ba6affaec2bd4eb89a30c17c57ce726f3608c9918e5ad8c33aac171b5bd55843d0916eed8d7488130

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e3806e12e279e5a5b74822d0f7a6838d

    SHA1

    ad0d793a2545e2a42df1012de1c165a3d4ea0eff

    SHA256

    42fd3fff5f47a99c69ff773b7f909d08721faf45a9bcc6a2b3acdc140bc14f2e

    SHA512

    0ba8a2bd2cf89e8827644c67d69c596d0bbf7cd21b5f721c1c14cffe619551d6093f25f1abc0bbda5eb95dd34fd9158e0398748669888e3609e75ea76672e3d0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6882af1939a0ded50e6dba1cd5779527

    SHA1

    e21d31591a4902f5a0fc8612c968ff8cfcc4b976

    SHA256

    0753300755b0b1fe6754cf850b741cce61647c865f2f5890be58967249b02550

    SHA512

    0b7e463f80b0b32aa124595d4c6d79eb951c0081ab34d2698d0b7d50ef80c83d8d33547b545dbe4a952c461c02012b5531c5b2d4ea4e01e1b0652a21b91309c7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0a5635f81f21a59045c7cc185a010ebc

    SHA1

    e550a36f479f8f4cda597fb50cf046ca7e98d3ed

    SHA256

    0fa2274bd524dfa81917b04f227c43c7889bc5321089a235f2714c26983b0c0d

    SHA512

    d421d57733db3f4038db9879472e730ef4509db35c269de21c7391fa757f362ee5d89c9b0c99b0a00438439a097857da2111049f56a83f5d66c7aff55ff34743

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2dc046101914612fa322c24c05ba9af8

    SHA1

    661403d75049c8d32bc92f53836868d10dfa3bda

    SHA256

    395e76b7e3ed07e22384d77a07e72e3e97788bfec27716b79032ad257763e6c2

    SHA512

    c5c151d32b5b939c06e7dfc68446e2bc6b1d671ef7e7e72b680b5d9b56684f6dc145ab53a41c44909f09b30f983296d4d7184cc2e1424ccb179654ec9db9f366

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    33955b2a5959051bd3ecfcc20a2d75c1

    SHA1

    b7dcd7c20bdf6dcb42801a09c8ae27816ac0c221

    SHA256

    f2c9f67840b7d9dec1c3ab55997f4a626b5520c51c795bec8efedfca130e76c4

    SHA512

    30b4be1815a4ffa57efcc898e04f210cd0b2fa5e2e80b8b0eeeb22fdb7cf7a9c40f5a7fcc3ee5ec93e076e3ee1a8940c72285d12c879ce017124f55ab1d5e90e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b71831d9b9c1f6dc841ae2256e823938

    SHA1

    468e329fe284a7eda3ddfa9155d1daba81fd94f8

    SHA256

    ad01a1353efdd47f0f0608784eafb568671699f52b73c4761c275746273268e7

    SHA512

    8cb9ebcb07aacec67df3e46db56af24c9c2abae606fbeabff230132ca11a2727443193613523e9d55ce8c5f25d2248361e3b7593edadd6d39f79242943d35cc7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d243065cef73e5c31c9132b5ce6e294e

    SHA1

    034d2e86bf1d8926d991c2f7c0d5e0682f3cc7c8

    SHA256

    9e78d0bcb28f324cd543decd808223997311041c515f1914552d058338942b5b

    SHA512

    de9d3e8a3e0ee9dc5b88e0f16cb3f0338d07ab70772f8bc0dac56629f794f6639f28aace705d23b5f9b8c34742860a506382185718f10e1c6d4a38fc7e77cbc1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    576401d94b8d411c130b8f3c4e051506

    SHA1

    efed55b3aabe4e1c80f57c9d99f49c21abce1a74

    SHA256

    1e1c70b5ef00a574a25f16d521149daad6ac8113bc0976d020d10f443429aad1

    SHA512

    0b528c32b43fb30a81e534d14351e46a8f1ad0dca09e7bfca225c6721d2f2ac20c9a4cd0c2b3e833e7d8d3ec5eb4853875a8f7a3a6ca987f15da07714646fa9c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    dd28bcb4668a2af01d8acace782086a9

    SHA1

    507446e74ff4e7d686d9787267bedad2a68c9c7d

    SHA256

    b8bc713d308746ea796be28564c5283f2d4896b3beb6b81bcade9530607b2dea

    SHA512

    f7c070049fe27eefaa808e373f861c7ae8fc0a27e0a6cfed5d9a29e82d6e555764a47b67fe44667bea1cc2204825bb49327ae815dc3bd5e1fe96e739d6463e72

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    904955b22cbed3368d20e53e07f5ab98

    SHA1

    36424bf39f2d24424cf330fa89d83fa1a71cedd2

    SHA256

    b5c8bf6f1e4fe2d0811f2a86245138b4ebe446ce95c700ff293c10b383afb058

    SHA512

    409db5170c3b11759df45be3aef4ee19947790336e04c91a5df5808de7453ecf7deabda7969b00c0bab1e75080801042edfec5a9ea56312b691fd9c680de10f9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    412228ce88d3d1e077f2e646ac0c5f2d

    SHA1

    97ffd61655a35c82421ebf74e49593f731dd7150

    SHA256

    740dbe0763b547e4e3eed71c036712459991d8162e1a77fc8d640c74a0a3c5a8

    SHA512

    d8823892ee550e7586e73a7719c862a42b0ca05022a4d95ccfbe36e62140e647074fdd20c8eb1269ce9b016bc0c2a1d8fcaff32c5fe98c07e503990489b399cb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b66ce4cdd2d31f4232c7a5178126ace3

    SHA1

    c42515d35cac6121ee223b19295e513a5db925f9

    SHA256

    b847bfd6f55102c914779204337df8fa1f9a82462be2617e1e3047237c72bec0

    SHA512

    801e37faa3fab3b09d48659c858ae5212ce1663cc31c781f6f985da2f457b4565bc97bd5e4e18fffaf8c5eb374f87a3a47af66ed6760402c23d0209d494bb2a1

  • C:\Users\Admin\AppData\Local\Temp\Cab453B.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar45BC.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b