Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    133s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    17/08/2024, 10:13

General

  • Target

    tbu03852/options.html

  • Size

    6KB

  • MD5

    adc6e16ce6e97bd1eb19d3a8dad7274f

  • SHA1

    12b55eab3225b2250ba051803f7d791db59a46a1

  • SHA256

    29e525a91d8ac4ec6bb2fa299a404d9f151b45400c7cab09675a23469373435b

  • SHA512

    2c4bc233ae8741fe0a6995845aa88d707b347cfc78745fefac346ce27ddd5b799dd374bbba15516f6e61348f52720be3639cf0cd925a599250a9947a33ab7103

  • SSDEEP

    96:BKQ/O9mOdYCQiLFyzNYs90Yi67mX9gPui39bnLNza7/OBgx4wTn:BFj1cFUYJYnV6Bm8

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\tbu03852\options.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2200
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2200 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2756

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0dcd4510381c6ad90377989b00776b5d

    SHA1

    ba83f6eada86b5b770ebaac6e189ad8ec510998e

    SHA256

    6065d1b78b8e63e351eacde3b07a6df01d697abd282c72016e626e73b1b7f5b9

    SHA512

    0c5ff0553be97540c4325701244c35a4ac8b15435b6da48aab608d1942c59a188c216bddfc3b32bb6148fdf75c00d18c4ae18d2e96470a842e8f446d85397e4c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c857bc214bb632dc5fe059a5575ea1b4

    SHA1

    955ea5fcc7f95d3b73a8c1cf605e739cb9328d9a

    SHA256

    7fa01fd035d208e45efb5d3021ddf8241f5152217621b041ac85e42b96dd76aa

    SHA512

    1be2b72837f3ed351b4aa0832e292377c1480b30a90908785b4491e7d0a648de8842738b97bc60e81213cf9439b922c82655f94e8cd8e398c1fa19ee16912172

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8023bcb88ad0cda287d3914b6c7e9ce5

    SHA1

    42e61ebfbd14aafc69917cda20531258da7660ac

    SHA256

    21048ca5f939c6e95dd85242d748208a5f3cbad12ea26960153fa9cd64388e90

    SHA512

    2e64e9c24b7331d918f273381d359f80a40eacd08444d8c584d43f197762c3b774af0b899bca1bb6a4b6e4c3e013a7a2bd1523209ccd7c369c73b33009bd2e63

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8bfd7f6de537c1f7a8c3d5c01db3b4ba

    SHA1

    d7edff67a8b568fdee953838e1d0ffa4b57f2f8e

    SHA256

    35bb7f51f1b1a5864ac9beaef4d595d6fe089575fec4d7f2947fdfc4ed4fe016

    SHA512

    4680526cec70d2954d7a67618a11c4eba21d3d07d6215949e6ae269876313c4b9c8248bb1fc48aafe974a5be9630ef4a0b0aae0c36a3461d55c79f1ab103d501

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a9ec73fd0a460a8c51bbe326c3f91cac

    SHA1

    7e4fe8162e1c1052a70abc8e7faffe0036a37774

    SHA256

    cb9a45366cbf7124b8645c7eb403421ba7fea54c9a4f98809ed246962476a92d

    SHA512

    bb610e640e0339742d398db240d82cb8bd709c4bcbd1f577adc361a09dffe1b1c4f4348f173aa29727cf128b2a94771172dd9c71669a44bb915f67b3658f922c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a245d5e11c4bb088575f341a52f7e6c5

    SHA1

    5ce0ded18042babd45d929c919063fba6537f22f

    SHA256

    9b3dc285652e3385ebe06b28192c82b0a16af8cdbd383c279eced9e1a19bbd1b

    SHA512

    53cd08266c0bee8b5da64c17e69bc001a4eb283111ce29a900e1760bb598c80ca6d576aa033f6ce1ab5688772b20d4c6954d91d3f854b880e2a91e3cdda64e67

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    443c683a16eae75935cdb860ccfaf417

    SHA1

    bed1bc49e704256f226ba60a98cd31c460883640

    SHA256

    76fc95cf5b9f20e8279feee09b7984e8cd4e2c85b3b09aafeef532ef93ea1d88

    SHA512

    48952cf607108fb6e718468a4a17740b1108e34ef05e22a86dfa4a1390f3a804e36df158ab786ffe46c76be50108d4fb643f249bb9c124049d4ad4f3354f54de

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    261367f6d80da6b2dbb6ad82e8b78662

    SHA1

    b9cb91041a57c0f3588c66a3b7bbdb5d9ac76876

    SHA256

    5dc067adffc0bc9dd9732e17b8eec12fb12fa1c3e4a4153e972536be13fe4df1

    SHA512

    18363420ac18c40d08cbae515dc0709099e1c95fc25d3c003efa795759b22499070d111b5db2d10ed509c9f56c8ee1b82f90b948f051f9598dd884b75e70130a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    95ce514aaae6b47e3a7133b8e2fd200f

    SHA1

    dada65269caa5e3171830f8b01ef9e6c64bb132e

    SHA256

    6b0354df0f2adc0f78a8966213a2ca8924c528b81740507ca727f07a9b715ba2

    SHA512

    4fafea32c37d6954b6dab519adf74d9edde7cf95f17c3d542ab5f915a50839099eab0ccc10dbd1c4575aa8cc8c63a27ff087a355a6e2dc6e516e5e95d4aa5771

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1b6dcc936f74f9664abb864c6942a57c

    SHA1

    558f66cbf527eb5468f6d35e2b956add05a7b116

    SHA256

    8d8561748b897ac156ed101c8f83dc36f27734e3d3a6440fe58bf3fb32d71a1a

    SHA512

    9089e1879a2d0fb9b4616ee599f857577e063d7330817d9588cf93dbe4296f478bec9bd2a8f4a4742809c14ffe480a55cf95d40f971bbceeec3f68963f30e315

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    909099fdc58004cf356fa741155f9c8d

    SHA1

    110f94a38267059d91dd991eed14d36fa32715e2

    SHA256

    dbd2bf28298555a15f61b65aa4e1c8135295dc8a3ea2467354b4527d28ffa5ee

    SHA512

    a420ed9222a4531e8fc2a47a1880cb23d326b178fe6275ef0b7a3e0a598434caf5477051b905719e5b1e654295d20042253359e363f5e7cb54cc84b3eb76e30b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9680d01275f40b78538a41133b9920da

    SHA1

    cbf5dec4fa0dea23cbda11707cf1379400999b2f

    SHA256

    a44264619bb43245e018dfb1c6479e68d430ffe6a92fa8e7eee4fdfef986934f

    SHA512

    37bb8a786d5eb58ec51fe7fcf43d11d7ac4c8a006fbabf55e93707226c8940ffa4cea003180389b735fa319246fa94e63947e56194470efff1fbc36ce2c3a627

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a9da51f73512c71f492657cdc57fbcee

    SHA1

    eda6c6e55927faeeb06b128b5607619f4ef65c98

    SHA256

    7a1b5ea046ddf356e6b427f44a01179d7071512ffccca33a52e1b6733f04feaa

    SHA512

    3fcde35954ab2112aba532b0c5af531e276def0e2a5338fc5df48f1d9a4edc2d82eab715fbf5d3268a03c07620f486480a0dc3ee795cfca094cfb179c2c13620

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d008aa69ff42fe4d685c84a9a02c950f

    SHA1

    e65ec62c4bed3a36280d89aa5644a3e680b380f1

    SHA256

    2573e340c40698779916b478a9014d54e25b37047a58d34507edaa57c5fdd295

    SHA512

    589c5f5c1ab4f972c3a60e58620ee4bf29031ff9dff7232bfa0af39ac120451c003140eca998de835eaad325deb131238b17d53f97d77a462927901410565edd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d792838b563122838632e86e8bf1d4be

    SHA1

    f24ca17bc005cd6cf115c7c6bead7e50dd095944

    SHA256

    a1e80da17c2a10a5aea45a5bf21dc1b6eeb3cf122752627f660d33529d796e09

    SHA512

    723604ef90189fa00ccfbe9d117e5a8b0fa40453142c018c52c69be324d2d94198993b8ec1895d85c029a7e072ffbb9b5ef68111e0f200e8cac44989b5a5b73e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b7c2f9042e57cf947608b0382c8553d1

    SHA1

    89c0901eff72abdeb6aad196f69fd4261bda4404

    SHA256

    b0ed2fa447acdfb02f0309a51d3ba0b99af2a62b828a269962b60b10ac1dfe9e

    SHA512

    730c785aa6f1e283ec7e9b2c1cceaa5c2ab844281f4ffd3713788798cb2f3fa168906f48ac5c502557a5e3f5a6b363033f826c92ff10792746f93f31af10be4b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    981336052a148fcf3dcfc585a422fa35

    SHA1

    8ff4d272a6496851d1da8566442217e75bd8838c

    SHA256

    6412ec627735a3211adcae0a94328460b63dcb2acc27462334d1aed0d963423b

    SHA512

    8af931d940bf4bdd9a86122ae6d51edff6fce5c20b59dcd66c006a7c53be47e6fd433eeb80873a815d347d1b4a341ba08bf8bcce822d2768c33933bf77ed2be8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    021904096f8f7d3ac451996fd7ff0aeb

    SHA1

    93b0179355dd54179369960b53a7fe490791ff2b

    SHA256

    3c1604ce4d31604175eabcb59d3d970286ad9740cd910c9441fbd09ba8558831

    SHA512

    15eaf0f81f4632c70ce3bc6e44dabcdf3b3ff6e01d19eabb0486c7ad9bf18a95e759e721e41d18fcfac8e03fe542d592a101ca7a37f8eb8cb1eeeec2a0cc1fdc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    61193269920efb60b34775d3f7290471

    SHA1

    2c296e6e134ca84ea94cf0245f6b96e24aca3953

    SHA256

    1f674042043ead9fc34840ce641ae4b3e26320fbe9a603a24d67af4f59316f7d

    SHA512

    cf017573f130bd2c1a3a2aacd4c6105d1b6a5e79d04212f8d837fa4b0f4430b25cd3ce78c49fce361f8729f44a38bd55881ffae1f6f866fa5006716920e223d6

  • C:\Users\Admin\AppData\Local\Temp\Cab9994.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar9A52.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b