Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    133s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240729-en
  • resource tags

    arch:x64arch:x86image:win7-20240729-enlocale:en-usos:windows7-x64system
  • submitted
    19/08/2024, 20:20

General

  • Target

    lvxing360/data/agentinfo.html

  • Size

    6KB

  • MD5

    890b55f3ebe8a81cc8a6f9add7851c68

  • SHA1

    6ceae8c07572760d09bc8c573ef1aae46c321274

  • SHA256

    17b3c369603395dbf328451382c51f792e22abff0b137a3247a885d94215850f

  • SHA512

    7d5eaf8646429ca8c839ef3c40cd7038bbc7b1fcfb87a048f4d180ecb0686758695a8da4ea7441a2e27e273484ae228bba843bd12c1e7b61a4b7e67cd0c0f4aa

  • SSDEEP

    192:cF4nFKR5+e5+k45+P0QVw6QQQQQQQQEQQQQQQQQEQQQQQQQQEQQQQQQQQEQQQQQ4:kVR5+e5+X5+P0QVzQQQQQQQQEQQQQQQq

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\lvxing360\data\agentinfo.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2848
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2848 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2768

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    22d4c2d845e9196b3eed79418074a5c5

    SHA1

    fa2ba1b74e19966a251d5a37c2471450a6ebc0a6

    SHA256

    95c3873a00f30c346a94b5584dc9a86dfed9906c6f9d8934a2f598d5bc67666b

    SHA512

    8d2dfd9844f467bab350293e3b981f3ca664a4d310a52da501d889c70048d22f37e0b15001b146a53fab01f7bb71885bbbc4288fa71204e1907e77b5aeb8dd79

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f043d92c672c52aa5bfa70aa7f8729bd

    SHA1

    d6de96af8d61ffb0851c4a0d46a2b48dcba57610

    SHA256

    42cdf2ee49e83e2d409450514c27f48cb84c481482c977552060e2baea08bd0d

    SHA512

    89afca41f5f5944e1b5d198353c763b51e3fc7c1c4468104309f730c3a0e0d33a4c11138074055bc0c03b98d20e284f0b92543edbee0e5cec3d55e1539d36b2f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    39018c88727236957399880a53a1e366

    SHA1

    66e684e7ef1cae7cbd781942340d8814289b1bbb

    SHA256

    6b934f7434569b9db3f38a011db14d08801788f280594cc719386f98c7136f64

    SHA512

    b6c0c93479408f958e9f2853d828ac9d652f2c96542a9401cb53cb3a39ccc3dc67f72874b15ad0bc27b2d563c4536a69ddec466d286c43301de3994b46d8eddf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f01700391ee746300f568d4c8f65dbaa

    SHA1

    45427268e4f7c65b1d03b9f7f949b35e00888a8c

    SHA256

    5aac9f67d8b654242a5667083de6f90285df52e09c85417cda5a264f3ab72d27

    SHA512

    864579422f06d6f4e1abc23d5b0558fbc32311ea375e45abac1ae508844c65b6b0a4d865722e1918d6a0cc2d3abbb9476f256d5cc037e67ffa22520ce014d1f3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a463b84e1b5c3e306f97b300c2074bb4

    SHA1

    37bbf6e45f6e54814b08576030a79d8f43f0851c

    SHA256

    d9a840c50e515bc745f8f27e0df14a5a9ba580cdada5e392b7a5cf1125d6b322

    SHA512

    7e39905e95a2f293a213a80e62771a49a0d7c1e370b90462d3f5300cecffb6af8e3a7fd695ce44b927bb573a19a01488b54da4d9dcbb75b46742623686d2a707

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0334ffa507a3f81df44fc867a2a9da75

    SHA1

    f13e7b8dcf8a1d40e1856d709807a21d5a707ca5

    SHA256

    ce0a325404ea5338840fa605e2e78502d9c57bc6260eb6a6a7174a5339d75677

    SHA512

    0e370249c3e36234e95a62d640f3da329e1852bfbae40e761305045454ff9dbd6d63c586cda372eb92afcdff156af6511efd056cdddc21dd821b00fa68fd15cd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e0c4b8af3868267cb218b838afb92f9d

    SHA1

    d850fd5250501357723141c7dc5e81ea915c66d7

    SHA256

    711e1e63e5dc735e32cb1cc7fb96c0a1498cb843104604453cd97928aed32d55

    SHA512

    cacdd5d5032b870a585e575b4abaa236087267c63350818d41491a9952809dff501d7d1974fac81651dad1d913a129998e618d6040f7dca222059d301983bc5a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9f05e16615bfa2857fbc8e1eef4e5ffd

    SHA1

    076e38733501ac44a3c03e5ba0f2e5cac2ef8d1e

    SHA256

    740fafce048b4e277a42f555cd6660fa187703135af8a5e901ee2c539000eca6

    SHA512

    46404a4268600bce6fe24401dad3bcfa527eccd1ba73ac712b4813be8bfc6e0b45ef1f9d8589c77af577d84d6af9c428491764018700388f096435502807c671

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a0c6710c5ee7440e8cd2e9242e3de20d

    SHA1

    af4318259a4dadaee6c9c751b2167531e5698f90

    SHA256

    afe3ccff2e73496e78d704323cd2ca0947372c1a31c974cdf27e31e7d6f5ede5

    SHA512

    83353cd8282ef3b419e0fc770dd26bd9a1bd2a3eb3c9694d3677f67d944e39cc7cd42573b1b3830aa95269396701a0279642e8faf9a0e069e9892feead5e550c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d85a6e24357dbed5399c2eff993abe62

    SHA1

    78fb61bc92427406a8f7560be57d11f466e43583

    SHA256

    af9142d9b42d7a03248aeb2dc5f5acc079446aacb20273bca37931b7b0e5b7dc

    SHA512

    4a997fdc717673442efc760131d271dd203d099a2b28ceacd9834a491da01173f2fd8c39f5d41df6e378e7296fa5d9f6b6c05375eb3de388f14b307f5180a779

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    39c22b6264a71b3ef3402ace8b0cf059

    SHA1

    985b4371e72d89f8a58d8a822cc43cea1d889ca9

    SHA256

    25621f6a2f6fb61ab27436724cb4b5697d8bfe1de48ea4d1cf4a4880ef4092e0

    SHA512

    23acb5612d131a667662d55aeb70dc39343352395ec43a9cebd0510d6070390ff835bb5a0a3deedebb1aeb89d44d9e48e5b41f5d4378d9a61106f3f5f604df88

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ad9f428ad7f5c5f9bd8282de36dda3ba

    SHA1

    b46010e5e39b8b513c0416fe17fb8005d420d00d

    SHA256

    5700187b09a4dfaa78ceba2e067c78e3fe4ab088e9273f1769cf3289f40bcacb

    SHA512

    351650e98c8a9421793ef2478737f751111aa8b423a617bedc0851e4ea3bef54e440b52564f7149cff41001d0e193cc6dc634b17b15e1affe3759f17ee395637

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b46d2d7c94694dc12237f9fdbfc5f2cf

    SHA1

    bcff601a0046583b092c9f0fd10ddaf02402063d

    SHA256

    11e1cb4b67af50f2a61c50dbfdeae302ae2e23bc0d83581705655cbdc17d366e

    SHA512

    7ea42ae747af2f708dd38a22f857247aba56afed655019991dd6ce926a9558bea917bd6eddce29e0dddc70f751d5c39866ffeb95099886834c4589c1cb3d682d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    08aac86959524adde58ad6479741f3ca

    SHA1

    49e466234a5d743d71c7728cfb10d6a6bcf591aa

    SHA256

    2cefcae2e6bd47abce86e8803e0c81ef175ad48c04acdb498d8c691d67a110af

    SHA512

    1bdbcf45be474f626b20de46172a1ad368a714f7f659ed163979f31d4e26b7faa1833bad9075c2f51a92c1e2f216a9c403b29865f2dd0b099ebece28f2ecdc4d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b60998b292feea4b5f43fd20e24922d8

    SHA1

    b402a43d22f762b0f43674aee925cf2139ab5c99

    SHA256

    51724fd498fa3f259f81dc9963659694dbc2f68230a96c18f5554443b4aae322

    SHA512

    d29bada5b223c13983877a4708a1a110482c3a8761421e74c444bfa493fc92469c36757737b79aa23879e121a646ff3d9d78ed606a37a88e363c16c588126341

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6dd23d934a3842f69952ca1e0be4ad66

    SHA1

    3903e59abc1618874b72ebd4a669856181ee0096

    SHA256

    053225118c2722ddd6aa6a3f42133da190f6fdef5c7352f1200444ef17018f80

    SHA512

    fd8bc633e68f08f87dc6878bf66cec9611ab2868d3cf99a1b4722dc7fa41d8de3a684f0e5a56ea198a94c7a81e80533a0535d672309d6debd7fa697c7da83883

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    596976b68ea6731ed3d32e823c1d32ba

    SHA1

    fe59f2ad6be07fe626b6fe65b0d4fbf7783df196

    SHA256

    be31eea02d7b104ae13e3bdd330c2526ea1fbd8f81708ce72eb944d57267a0c1

    SHA512

    cf5565ae80a43c134402100cabd9e6025d50e518dc2397a1ee61aa1c60f3d662c8d6f5e3631819445a6addd0144221330d8c0340c5922a200e7038af64ee9769

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    34e9b4c44abe3cbc838f466e0c3bef73

    SHA1

    fea7ff57ef1d2d2aa8b48c5f3cdff84469ec9d38

    SHA256

    7f1179b81b1ff02b83d313e3294a46f8fe2b67c27033c31be4d81b009b6204f3

    SHA512

    53b820931a4432dbc165fa4860f2c744d845d2b73360884a164c09ac08e4066aab3621d87aca55b9d8349f33e6a57fa5bdaf675d427fd6185cee65c575953219

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    747e314a3063440dfb72fb9ccbe0f04c

    SHA1

    bfc77b00e5e1b2bdb2ea8ec4154146a07f9f27e5

    SHA256

    77481a0da2551da43d2587a200f9953a90ca271c9df2efeeb74e23e2dc75bec8

    SHA512

    cc445bd90b09935e6fe0039fa68795cba143ab1535a6f655fa57dc5aca10ba7f7d0825e2da19809ac300e0d9ad7075127089071f834e2d3704e55f17e2fa141c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    61baacea4902f89550592873381fc057

    SHA1

    87b70e2f05deb058d5e4a9f4b34b268f85b8076b

    SHA256

    fe7c8185a48a92625eb1d78807befa654376323e8fa25b1d7e4a1399417755bb

    SHA512

    95d1fc9ac205c8699e5cee54bfc8c9066406e3a3733fa33dacc757f61bef90fbae855bf331e5a0e206fb783202b457dd093c043dba3d90b508768088a7f077ba

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7efd827d773f97fcee2f1ced2590b332

    SHA1

    46e66de789b43358acfb4f3dd5a12f463d822aa6

    SHA256

    bf5fe4d43f68feb9b4c04011a349c223458c35ddb03f2a59c9f2a237b9bdf5ad

    SHA512

    11b5854d090bdcc52a414eab2dfc3c99cf75ddee92635444be1280172cf9f7198a2b4fefe7422a79acfc3791ed06174ea64af4072cfc94bff0ff51b4ef59af04

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0e36f7beb0a1d6800d739eeddc94cef2

    SHA1

    fb0accae2002ab680fe3f38c4c2b8a44b71c8417

    SHA256

    542e0654a7ed4a844b62020b57c617dc53476e24951da4cc52702113d33a4e3e

    SHA512

    27b912b81ca2c93fff00e0dddd280ae2701126a0b0109209e6d0faf8b40ca6be89248d293065dcdfc13aa70bc4f79073fa01184fdc5cd416ff46fbd5bc9f5a6c

  • C:\Users\Admin\AppData\Local\Temp\Cab6B13.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar6B85.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b