Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    69s
  • max time network
    135s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    18/08/2024, 13:30

General

  • Target

    Converter/More/Multimedia.htm

  • Size

    6KB

  • MD5

    ef35e2d5af7c4db14eddace8710befc7

  • SHA1

    046073898e02adc5a7adde2de0969078ec917842

  • SHA256

    e56ead00f16bbe620a3f5bab2b0742c23e921767abc4c1ec71bcbe5f30ef33cc

  • SHA512

    2d172849d283a9c544df18df49432e2e398d02a436c88b53c0d6f2a8e48b9e30c34c433aa2c1b00f4f5494be75f9f8dde5cbaee88256fba686452eae4701c024

  • SSDEEP

    48:bpIE8S2+bS9fLQ29GGYhoUKQMdAzhQabMgokeXCAmu3xTcx9Mo2ADry+AMkREE+Z:IShS8peXCupt+CmBHIEd8ul/8uqAhv

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\Converter\More\Multimedia.htm
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2544
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2544 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2072

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    15a6c7da89dd3b092231ac2a6791a5bd

    SHA1

    75c4b1dfdf8df4e5d552214d306afc777bbafdfc

    SHA256

    f64634a7674f6170ce271b72ac583a0fe27489b81f85589a1b2aa915f4a35816

    SHA512

    acbf048db043f24b5af537ded9b0f14cabb1e356514c59f7be052fcf17b467f02a4df85d76268985c40ae101548b39f950c031995d1344dc0dddac167f1d4d54

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    72352bf819c0499884e050dbed5ba886

    SHA1

    f764bca4235f5c7691a255f13010d9f80563d174

    SHA256

    18f703c127a20bd11dc4ee58189a3ba43695d2542c65c7be1ef559c45d01e8a1

    SHA512

    35a181f40f2470fea86078417f51691718e56f509bbb296786fca6cff74905fd885fc7012acebd3aaea4c0a572c2f09ef67e068dfa4add01c2f576630ce4ce8f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2cdbd358647b75d8fb75e9fda3bc0940

    SHA1

    c5ee24733d7eff4783084347b97a59957d9a5c8b

    SHA256

    bea5494cd57db79d74d66260fd54e4db847c40cac93db82c3d343ad29e6e7fe0

    SHA512

    09821af223776d55c678297746368628d5d62fc9f9cbb7ed83f2237b15954d12ba73e25ee415e75e7d7dadca38c26d98c8fc5351885c979376da5c77ba623063

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    92a13afc90465753f04704cce07e9d88

    SHA1

    be380d51b4ad5f2b9a85ce1132c0dbd829c628c3

    SHA256

    07bd36d43f1099146dbfd9e1068b0bfabe1418ae3d03f86412b78f85c51a9084

    SHA512

    ce49941123ac4c7a6dcc0cee536e20140d7bf981608db6cc4bcf7af861c8b47c61c38936f555c25aad71f0cc33788d6413ead7406c9067a0fcad2cec2c915a27

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0679bbfc80342c0855b0bc64de439b1d

    SHA1

    1839882495f1ea4fd942f046a695409e6269fae5

    SHA256

    0ae8597a59663db1d90f9f79a33a40d1bec1fac08efa5b2b69b443f52a2a62f1

    SHA512

    e937db2db498c8d4e676797b61c5d4b8c740ded6174f3d2cfd55111cfdd04545915f69ca6dc92dd6ec1ede4ac40fb0aa5c602708291a6db44b15253fde3b7bb7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4ab93fd5d966d4635f72029a063860c9

    SHA1

    9c3959332c1fb6c03c452f08b18f2c2fecf20a7d

    SHA256

    c0a108691c80a74be62d157bc96c5b2ce69476e7a260da743bf4077fd5ea74e4

    SHA512

    92fc12acc4a7f7c80d3b0f32114861bc7ce77be9cb2bf5ab12aef89520ad65fdde02c0261e886a4af42a48df3e6d202fca71c127b7c83e4ee84a67434a09a5ca

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c33161bfa03648ab08842a93960c4ff0

    SHA1

    211f581b6e25a80edc4bde44a68d1aa71f14d785

    SHA256

    b3cecf4db545e17223f7c90a4c331a651b633ead51902aa706ecac63ad52ab19

    SHA512

    0d2d59bbb27a5f8cc8204fbf86cbdf00733ecd7dd8bbc3ee3e45f2cd602e217c531565f07bae8d24996753a3cf3efcf2421a616a46a1b9c0458110da801b8f04

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    452acca0e8f323ba138cd7f8be6fca26

    SHA1

    10624380024d3cfa45d95ecdd7414905001dcccb

    SHA256

    57ee4a705c7fe6920a202de54fc2639f718e60a43007429f05286a7d47ee436e

    SHA512

    f86ec0d45503e217c975cd0a53436d081ebd83ac9299b7bd84755a6a88fe2264b37d59c5e9fc51bbc190740cf9bdd9e5d93d5fafe45e4927ce2012bdcc2b5b62

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    71ebb1c3fe616ddadc19ac34d1a86fe9

    SHA1

    d5bd70b5a43ca9c3cd6206d181f0cc77f637dd33

    SHA256

    71e87a7e5f1d772757ffbc5d5578f23a8b48226af7826740c3faecfa61a86f87

    SHA512

    b9329ea0c564b5d21836caccbccddc39d45e41213057756138ecdf7b9ac6f98341f3f2cedb811da8073bd3e9d0e70eb87b512762f4d9c6cac62191adae133619

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    213a7930e82c13c8d00cf19704f85b64

    SHA1

    509c5ade10f46c4a6d8e762c3f2fedb2fdcf0396

    SHA256

    39238eb1e9d97d10c52b96aec55454b0ac2d0ff47dcfd31c7a2b368374dd46eb

    SHA512

    540e81e0c88f4ba953f580ec94f5ad29daee605b80ce87b44cc8ebb54e145826b89398b8ba3657b17e1f0fb02987264514351536ffa850867ddb55e97f7c0bbe

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f9965a0b3543abf67f6b07621e9bbab7

    SHA1

    688ead1a2fe75eb8e6e604802e62de5ad456c054

    SHA256

    476ff5942680ac7e3750d03a13b84f89dd95b168ca30562eb8cebe52d982f2b5

    SHA512

    d6d9cb0af11b12ab70a71cf12a84dbd33e656d37b7230a1aec9335206586e7320b907ba27823498a0b95e730a161e894cba9b4bc21dccf87736f48bfb313cf5e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    cab9e68e97119f5036388fd519193010

    SHA1

    fea9a43b8d5f9126cbe7fe5bbb3752cbd858ae4f

    SHA256

    777ce14aff874a777270ecdf6c32c8bd9518a9ffb25f762ef9d175d25948a83b

    SHA512

    871ac37ab0c07f39257c7ad21574804ad156b0b6e6f14666a10bf4d6c5e8e5c3cdbe8c28abb3523ae1d70782c6d14333298994edd596e0340c9aea722239b205

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8828bbe9340aac0cccf6495dbf0bf075

    SHA1

    4e236adea6500d7e72ec6e650ebf12de9054d668

    SHA256

    43404ba90133d001f5e04e14e2d2380a88b519fb51b02c57e5a4162acd3a46e7

    SHA512

    88e913238bbb377182f866f084ca2c5efc67f68419befaf048ff84a3a6417e28849b6d0f4398711457ae11f958346fc870d4e3744f0d891946df43ef66d20df8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d1f171a3a1f907c4dd06e25a6a439c92

    SHA1

    1c6fc031626c9451a0813dee83e3d6ca4597493f

    SHA256

    409ddf1395e0f825d979799d92204435da83f9ea1e1f4e9cbff908d0ebc414b8

    SHA512

    b6a7a7b57106dec15a51075df93c7c20774632b19c3c78455c6d3267368ff994bb3f72f0548847b960823efa1d85821dfe9f66931a61bea1d4f326cd248293bc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0b412a792f393cffa7670fa3bdc611f7

    SHA1

    982bb8d3c29740144c0c9ce76d0740ff52dbf2cf

    SHA256

    fc3d48d3cb589bc94b774b1e20d8c72ca36c72d4cc8b2bb9f5ab196a9245f459

    SHA512

    e04b6a2edbdef5785ce0e56c3a5bee63c873e62ac75ae41097ebe41f217d510f0129b9347b54de90543d858234ae460ba335dc6b049b44f9971a2c864bbda4eb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0d645313db8e78f1fcbd6ddafe8837bf

    SHA1

    64eef131c579393088caae1ebdd1d54f6b87d3e6

    SHA256

    209cdae421743f9ca19d3cefcc37a9610ee866538ac16fee842d03d3c76634e7

    SHA512

    0001eb9306a129c55617ca767d53fcc1225bbf41226a6dceca8127cff902aafe444030b16127540d5db985598778a022de38ef8c5d8e316ea0786413586880b3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0d67a5592d772b025e249e95b4d08a6a

    SHA1

    8ff5114038be464534f45e9f5f87d0ff969314ce

    SHA256

    e50aa25c69a81aae5508b0ce6affafe6df49495f0e4df73082cbf0e232ee11ed

    SHA512

    0da1c0af0cea8715aaa8f05653b587abfe8c824bd236fbbd48842bc5c15cf968ca06957c67d4f92ed2289937ea80d6a0de299b90b619459fba4e046370c19e16

  • C:\Users\Admin\AppData\Local\Temp\CabAF.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar1CB.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b