Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    144s
  • max time network
    149s
  • platform
    windows7_x64
  • resource
    win7-20240705-en
  • resource tags

    arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
  • submitted
    19/08/2024, 11:07

General

  • Target

    U8J6H1l5l4J5x70202207.html

  • Size

    45KB

  • MD5

    8b65e86d5342528cfe56a0e32209a25b

  • SHA1

    790ff8b26ef7d435c3caf2efb9b1954387de3247

  • SHA256

    0a57a421c3fe7f7e9931bb12e0b3722f848e29d184cc41eb3e93195ea79b5078

  • SHA512

    594529d4a3c091ab46419112f4e3eb01058320c795d402ee19409b9bcf3a010b3cd5200dfc6966e85e47ee22c56870576f4cbea904db06beda09cba74af0824e

  • SSDEEP

    768:s0UOUhevmvtx+zNuiQdgZc0UOUhevmvtx+zNuiQdgZr:3QdgxQdgl

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 34 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\U8J6H1l5l4J5x70202207.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2444
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2444 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2036

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    5d3fb5738164bebe507a3741604cf570

    SHA1

    b2c5fcec3c97c00b827d098bbe58cd078bba95fb

    SHA256

    509da78543b537538d3c1e53fa0cd89def5a4eee213c06e91f0d3cefcb27969e

    SHA512

    b10cb594da3fe8eae31cca8c4de43345417aff3433cc3550ac6ed8ecf873ff65311d3bd8157eda90026e68ac431d447683f8feaa46cb06df4daf9fb11881265f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fde89e968d34ceb7d8abb2ddf9cd6b6b

    SHA1

    582f94a1e4851d8ac1a7697cfb2eb3f7f548a6a0

    SHA256

    147a50694a48184df85d4e80e7e207d2163c04c6c63b610639255807c5f06a0a

    SHA512

    f68ba54fa5e76886717e8bb14e4b6e7f37f85fd87c1fef2e4a31d09b3a29595cc6f8eb1e36f8a94fed871e57494f4c39858ce8edad08deedd26e99c776ac565e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    95f7f6914e518aeeb0adc0bca974be78

    SHA1

    dc4334d815c1e6cd7adaa11efe09915160440be5

    SHA256

    0e534f89be6b99c7d136348b78105c9f7b18379301ed0cbc23bb9f21e757e5ed

    SHA512

    89faae8ec70ae181b7174ffc260dfd0396fe4f0687fec93a296bf093c447d6636207b8f2e099a63a72233a096f82c756c4a04b812cf90367cb388bd444f60fd8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8ab46fb13e6b3b5c098e02809ef69134

    SHA1

    51894346ada261278498211d0c2592095b3757b1

    SHA256

    04ef25c8390ea1842046b4f5131aa5357dc515b8ee3c72e94367c99a558aaea8

    SHA512

    27104c9766517abdfefb1f4b5eca9b2a5c186694b1406016e807e7987e59539baa9552a7aa7d6450f3711df2c3bbba24d3cf0a9d3f4071841e927ec6cfd1fad9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    358b1b8db4e6740a0a44ed9e16fd6582

    SHA1

    c9cc7282b3e5a04898860e532f98fdecffef761f

    SHA256

    9c16350539aaeebf7c752990f876007a79e4af1d43e33506841b491ddca26c1f

    SHA512

    e6c693704126d358ccb4facdc9631eca3ebcd0df988b4cfffc56062cc578f140131213114615571400dcb4356a75838132d3f76cf1c13b645f280ea5bbc98c34

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2d8c09cc70d83b9c884743ed5f9be83c

    SHA1

    a1a3968a8761881e4e42aa493843775f6b341354

    SHA256

    c85a0f0ddfd51f82e011bd8964ba2880cb9f04bc89aa60fba5fa0247c7b4c2a3

    SHA512

    86837ec03577216ed2f642b8786fa19bba464c860ff262e5d18c3944eaf3b2d49fa9981120e2a7278f1bb6233e68a96e331a40faad1735dbb412e0bcbb104d2a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3792cd88e6491f08ef2a6f5d918fdd78

    SHA1

    ae9423701449bdf45fec0170ffa60619bcdc3cb6

    SHA256

    723d72e94d17aea76cb4280edf464d9d0f452e4cca59991f528390b4632d9f8c

    SHA512

    5f40a7f6ea2b2bd68b692a5bccf2f9944f5ad8735e27517fd1682f85f056537ed4e76bbb731bed20fba37e8752aca81d984150246a6fbfa22ba7a40076d2b127

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d665cb405af3e61b700ef780e178851a

    SHA1

    1558357f17ae117da494e2aac12414558e80c8c3

    SHA256

    d9021c38763ad815ea098ad04a4bd2044d067b101dd1188ddd72f4440e6891dc

    SHA512

    bfd42d937f1350f1dee9bc8ee82aa285cb9459a5144e574556e83e71ee1f34f64ae7aff3fdd3b82107c538b36b49d3a9ecfa34194a6b2760dfbad042a4d7d50e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a2ec464c512aa8666b144906034f8ee1

    SHA1

    f97553730a5553316c2e9d14b47d191745e7023f

    SHA256

    3951e71a974274b9858b388c5d6cedc617439d3ac6cf8481f74b4a98f01d3a45

    SHA512

    17b36b7b7a02977e87cf3a42ebb0acd69a49ca13727655fa8d4259e1a55d5923bd43bee420a803ac52c3ed9b13d7493908d830d65eddb43fbe80601c34216fcc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bd6ad9957658644f4462e9daabf89ae4

    SHA1

    27bc1f293d155afc913df20376ef0976374bcf1e

    SHA256

    d3d95544637a6db07b1f25aebc7985fbded5c8db234ddec8a17c3dd429b946e8

    SHA512

    9efbe2875d276ccc9d938d8aee12aa7291f1d592d04651640d9f8046b717cec6c7b12dd283bdbbdbba5439c7ba8159b04d3d3fa1f1f44b7f9913b7d64bf6ecb1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    80649a2793077779b53d56b3fc874b79

    SHA1

    38cb6d9ac43af7016ddec54c84d93ea37458009d

    SHA256

    01d78bf28b50c0c78387c0525ec5eebfa97454c4edf41c2f0148558d62521dda

    SHA512

    f5c7ded83e8a2447bf8409e91570948771a587fa2b2810c85a96a793d9e0d1bb14a38bc58945e0a7281961dc1c1ad1fef7f314b963a75ed74aa88d16b18eaa2b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9cda51b96b0b98805b8d475e93791fae

    SHA1

    a7d90874e7f9d6556120a9db0da5e8db5d34e5cf

    SHA256

    eecf1361501e75f93423d4f7a1efaa0d6f4527d2bfdf7c082bbf0197e7274658

    SHA512

    f1845de7ef313a637c08f4b432cef5bf0e2043be48e33dc6f56ac71884fa9bf6c955cc4418aa5eaf8a4f601ba7ab300b04e716ca18ec90acd59fee0316b2876a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    692e8b61e419440e982b8fd4609209ed

    SHA1

    a714ed06d3411b28b259d47dad5cd106c0dd6edd

    SHA256

    22782ae7416f868ac870e72d0f3fd8a7b7fdfc4aaed3e4810bac1c0056344b48

    SHA512

    6aac63b2ca95778b594713e6ed50910b8166ab30895bb923ab2d5ed46a424d132418b8858c1bdb4a0488a3ccfa5d5eee75389934984e32290e77dfc63ad6ce64

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9fa2468d7e0f78f2750f4b33281dd712

    SHA1

    012f2dfd0786c2476184b7b55dc736a2722dd50f

    SHA256

    7af2ee2e886fd614536b1eacbf283add52b92cee6f74609f6587f6a87e1f5834

    SHA512

    430a471c3c9684d430e10ffabaa9c89cb330aec8ef31cfbf16c8489a666f0121920f64661bab97bc548bb4f4c6bece6e69f1e8429ee2123741aa92d99d4e84df

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d7cf53692cf49e9612155dff140d0a31

    SHA1

    f530fc6a10adf2bc8aaf713f17eca6788aa66e50

    SHA256

    a7ced355685d914854d304bb7b4f215169de34812b4e0cf3ed464ea1d9680d48

    SHA512

    65986e0ddfb22e7810a66bf3c8965f71c1a478caa144b1a33a312c87546417a1fce9a7d310663f93462fa4d4e592a6fac1940740db0790ce0326ac60ada41349

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c01bd3ad6c302c74837a6f55c89674c1

    SHA1

    1ffc79f1a29f2daafeae4dde6287afeac280c13a

    SHA256

    a524e2db4c7e9aa29f92d9f9ca03c8ef7fd95726abd5928fd6d4cc66d5b33cf0

    SHA512

    fc2d33d3cf0d61840941a3fd2045d480958fa19c1008bf00cb49592ed484ae4b0dc733a64ce86f3be41174c66d537bda6a6ae7013cdd65d29b25dc4e4ec482ba

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    06b36defcba3f021d6b9cc7df1bbfddc

    SHA1

    dbadf959f372f2a25c983f02484e9db1dc18f25f

    SHA256

    b581efcad41f46d23bc185878acbbaf85c09f84fc598fe2fa6f446db9ff71fda

    SHA512

    f194733a358e117027a4e8592e05f5f18703342699d1e730015b519edf3c6c27439acf7aecabce11da0e2d2178c5f212f4e12df1aebc4c8a9ca77547efe06ec0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bda084a4e370335663519d405eeef800

    SHA1

    d55e76581be19cb517f8e61a2cda34171dd23b60

    SHA256

    c74e5f25af424d9eb91b3f9ae5597bcad29ad8516c339bfdffef22d5a762359e

    SHA512

    ced53bc9fd17d5b25a4161de38faf22c054e3dae80e072602d1967dc2d462cbc9aa142aea78b40259ec557e7c2b0e8d702c4b407f104f9973ca0371deb898b10

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f10dafa7549beeeec2f7638d77490029

    SHA1

    95549fedcf4a2ed0defb1f6fc4cef98ff2b85da4

    SHA256

    300e704574c7a5d5148372b30feca0ddd47483055b521ef49124df9c2930c35c

    SHA512

    63c2ecdcead33d02f7b266d81498798a95c566a1531bd641f43b1ec351f2eeb5432216da5e2c09b23d0f3a9a940bb5cb998a836c974de8b8031fe5b6c6af385f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    021a663da6e0a2da0f4434be3781f8b7

    SHA1

    cfad7d34aa08975624b250beadac294d1a951364

    SHA256

    4090c7bbb6124da298ae3617c5d92c95d3c4aa35cda01dd58b58fad116e83913

    SHA512

    2e0cbf852b581ce72f32e31886e8adee2045da7290807d79c06f226cf43d8ec891079c4c0f14772eb17e9d425d29c34dfa81e951e65e1f6fca26cda67a670d88

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    0cf8630e557ee57dc3c0fae76b737dd5

    SHA1

    8f6af4cddefaca818b12591721bd7aded041defa

    SHA256

    0bd19cd89e04addc1d38303d6f5c14b1f29deaa57de20aadf54bc1ef83bd57f0

    SHA512

    14ad2d109c620ae015d324812495409b0407fbb962d8641278551827f464d50fab930cf2e7cee802a1f81622aa72bbd8baefae6b7e13f65db64dee17aa33bcde

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\M7GT0RRO\app[1].css

    Filesize

    156KB

    MD5

    541ce778a664ec8729b6689ad3fff2a3

    SHA1

    5baf1c192bd41c528c4f9b691ea95251df7d4c9b

    SHA256

    3dac0fa7043e929eb410072be516267265c9c9fb1aa50adbc46e8618a578cafc

    SHA512

    a6900e74e404818055081cbb2f358dd388cbe79e251fbfba5888917c788da85ada4d30a2df735649cb3984c17d04a441cf9ad17b3b7e7c61f58214b6f5c766af

  • C:\Users\Admin\AppData\Local\Temp\CabCBA9.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarCC87.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b