Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    148s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    23/08/2024, 14:49

General

  • Target

    INVOICE_INFO_5V9PJ.html

  • Size

    3KB

  • MD5

    d7eeefac9ba6ba6c86525079fbf4017c

  • SHA1

    63bdcbba8bd06ca82d10c2c9c11f8d8041811e2e

  • SHA256

    9ac710131ff47c1e2c795de165bf1ffe740e3b5f6a8fc5624639e9e438fadfea

  • SHA512

    bd196934d885c1e97307c696d689e8ee381e6ab25377833cbe9f7e7cdbcbb166b5b6d381e38111a63a3472eb12415ce7f4ec47b08387b6f68b01a9c5ae2fffe8

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 38 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\INVOICE_INFO_5V9PJ.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2276
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2276 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2684

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f0d556c38f6d87bf6a4ac6beb9b3bab5

    SHA1

    993f86252e4daec0a152616d8302eeda08275b94

    SHA256

    ce654c1b7c66012190c5ed0fb5fbb12b2b27fbb6cceb442a92f9349fdd533310

    SHA512

    f4649bc8ebbfa4177d3e8f4b65acce7cdc0c838ce33ecbb276192ed9c36dd96348b71dd6c43d821395cff35a49d19b87313d3c889a92342c03f34d1febf51dd0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    cd9cb4368e4b9d3a2afd062802586610

    SHA1

    588a51326320a82181d6b750d2ff8033ae396184

    SHA256

    8031f5ce56f3d93f615beab2ab862f9a18019f736d0a2ab9280100b710fda0b5

    SHA512

    0fb2f757e2be6a27f22459f84a7c196cef8d2b382d5fbd97e96d7de6760b562d9ce9c748e1fc7157baf0afc2fc44a67c4706cad41f3fee35c362a44595acc83e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3c2293b176b59efe7cf50b1ef1369e0e

    SHA1

    0711bc5ac5e17cd3f1f5fddfb65c5153f4d2d420

    SHA256

    2ec311eb4e27d18f5b0fca4188ec20d4a78a4abd132f6a72ca94e08dcc8f698d

    SHA512

    c415bad23e0758d8bf515ee4518fe0a2a24de72a8067ba1efb6d0c7cb2a7cfecfdb709ff276aa265f0ae2bf040a81ee168f08e10d6bbb59343d1d795b752e04a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1717f5d8bb4e2f56f77145778a9479ff

    SHA1

    342019dd80864283c08685d140fdf000f0d3d1ce

    SHA256

    999b72b01bebdecf300e9c1b0494fee993412513358278df3505163037bc9830

    SHA512

    35e1eec3904d7f7d6f4549f3f06f68a8b225ae374175ced7f17b99a15239b1a877489f0f28d386cb58fb96c6f0287902e2901ba197eb133af7c840bb931823f0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bcfd46c487c0dacd3ef99fb7b9fb0768

    SHA1

    de5627928daa705873b5dd0edae4ac3826b66e73

    SHA256

    5e1e33de18a31f51c8e1a6b26b26719ec295a00fb3adcd48d2ffd932a16873c6

    SHA512

    4a0b7c60a7695f1ab7ca7823c093ebc77385a23f0955146dd7b56f25f5a27cfa7217856a4d3aa6c32c131169e1681c4ab175c68f35502c9a6645140185f5cbfb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2caf4b10eda3a9601dafa7cce5b74788

    SHA1

    d1c8548a4c920e1f27860933c3e2fc926ef64acf

    SHA256

    8ec149a9c9b940b5eb797839ffca4765bd0a93b8aae53283abe7e90da308df5d

    SHA512

    96b502cc5756c59967f405d126e42e86c819ada88d8738e8cf50f878041fbb0ebeca65bc011a67b7ba91dd693bc18cb447bbfd4618082c639184110a17b6810b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    25714c7c1c3a75a1881b75bace850960

    SHA1

    34bc3d80968a3a99728ad36150daee2593a3055f

    SHA256

    f9f818019e0bef8e77ac3500cdb449a29d733b1eeb635b72190b83e10910ea0c

    SHA512

    f481d47e06cbdff913fa2a8d1732af910ff80f151b864f2e94c7e1a1d79fc549560ab08357f7e4c3618399207e5119e740eda4b8e10527dcab8cc7e931072c2b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f4182a563202a594ba88e5d797d0b521

    SHA1

    b551c317e4521747357b694ffb683cd1f83d83da

    SHA256

    13dd057517d37df93ca929aa625c12243a6a5445ee91ea8c18870ac213be201c

    SHA512

    99be5ae58d699b9def38ccb09101cb39a74a65337aa2953fd9c5225e24d767acedccc2df623a42472aef2a11698f10c56bd882a7343b98b05f9970ddcc64a949

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    abd09918e5e607ce27500946ee3956e1

    SHA1

    08c971744333fb60c933bb974bf3492ca49b2c7d

    SHA256

    496bede77541abe0204b8a9767e413115df6485c50266df061d0e448ba52f6d0

    SHA512

    2367f4a099c19824e865661afc409bff3b9298b18142f53e5ca9cff61ba596cd9e6274c3becf6851585faad18c6966b0387bcc5ed3d6c20be9ce4a61f07c58d3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2663835d7527e78d591d5f3aec77bcf2

    SHA1

    35aba5eb108601f27400896c868f31cd1cccb86c

    SHA256

    edd0cda113d8dee01342ce8cecd751bbb16fe966aaf8bbce0c5efb24b32ca01c

    SHA512

    dfb5cedafe4603fb8ba27301e3ed9717f6cee9d7b83cb0e9dcc99578f0533af091f12a2bf0a2c0431c46105767981c5cf5fb97a87324b8326d7a97e68cd856dc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d4a670ac485b7c29d3bd5ad7fed89eb7

    SHA1

    8756e173f0528f15c507e989d9edd00bd8e13a7a

    SHA256

    e3c93ab35aabf49d061e6b24d1e818a094b14fc4cba87fca5b976297b0e1e801

    SHA512

    899f05605de6f7803b83e4bd2589ab1755590380bd55ebd351cc6c3513a0f5cd1512f981ef118b1ac9c173862476186952c15f8ebd69d7317b8009e3029fffbb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5588cb7bb3e76aace85bc608dcb7f410

    SHA1

    0ed6dcf6d691a10aa46a5f930b93201316430b72

    SHA256

    2514813bbb4e152d1039458d3f7e0ea2eeb9de7d39201b045df560015e06f1c1

    SHA512

    563174109ed0ebb295e9fc7f6c45c9844a14794e260ba14dc8890d2ed9d1222b3855dc31bd0a8d9983042eca448f15f1b4f3ba676aa49478553cfd6e2dc670f2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    dce22d65ca37c1f58633bc22e4d29ef6

    SHA1

    a9a4625440200d09ba34d06e7add2816ae876a90

    SHA256

    43d7a189ebb7b8bdd792c381a62a47e2c5bfba15174aaaa75b602367ebc15e5c

    SHA512

    45f6f4651079d810ba02273b0877dcd0b7e75e45c645689777fcc830ac8916eac9ece942edde32d6ecb2855aed219b0c0324bc38dea64934f74377ceac071222

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fda48d231e1794a2ee4c46bdea376119

    SHA1

    1572e12b019b5a0f69d3a602bee23d31b942ae79

    SHA256

    b43b4e00f544ac0e45794c11348ec6b70eac80b82e2b9afbf260370d0a08f221

    SHA512

    c6d281c18c670e46e3f6283203e4deee390f1137cfd2cdb584a70aff07d4ce47c05459ecfb5c5bd98ef0661caf8069042ce5821effffedc389240c2aad267bb0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    135286efeacda6cdc4840e986140831e

    SHA1

    1a0b3c65e5d4c02b99b83fba73f81224cc65976b

    SHA256

    cc9b1be28686f654319c8c6cabe8addcbaf64e0b536262d8c48a052083293e74

    SHA512

    35529309f1b9fae4ec9192013e6b40ff613b6267379bcb2ce928e7a5e1a1b5389de573cebba90f35fe540ed098817fbb20a0de2cb54720efb5e54088d90e5294

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    48fdac8e6a6c283203327bb5e2ef496d

    SHA1

    637c75b4d57032287eb8283ac2b1f1affd13fb93

    SHA256

    d3e9c02370bd60e6a9f0b5207b64210bd3dde20fccc97ca5781aca0f8a70b252

    SHA512

    48ee3b3ff3c0ef4c8219d7f31241cbdf8374df91331a8a16871f64b4b7ac12e0b87259a7ddbbafd3269d94a17af89657dd375c2a986c73841a3e795fa8250263

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    030541b9219a66def3791b2908b48c7a

    SHA1

    975cc88ee8a814e0f89d657339a7eab46da21b95

    SHA256

    205858110b1a679a5ed77bee58e00045ca02c1fe4b752a3db87f533c34957bf8

    SHA512

    fde336bbd41b591c55ec8a236699c4b0a67588e89b6687e89dfeb13cbbfe9a5723cc17bc430b82b61b567a6d81b09c16827115be16d993d64cf6ace2671535d3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5c244b75bad7f606b5f1411ee7c1211b

    SHA1

    915caf649b4bfad6e7c8faf1e42095f5a05975b3

    SHA256

    3346f85626b7ebb7882b9252db5e1dbdc26555b5f237b60d26757c30802c3953

    SHA512

    1b49756d834bc1c7f5cc26096c16975068a2109e6230db51ff528caf76db5f2fe39fcc8539ac4ecc0dff9789e6b24e2c5d246f3056481d514d90aa5984ac3941

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8b8b9eb6a9840d6f23de717b53d270cf

    SHA1

    c6852180d6a75141356ebb21b0120fae4a26e182

    SHA256

    b8041c626754c0987b8f46c9c7808eac4529146ab6f8a4984f45d092021cc4c8

    SHA512

    bbec7c37ec475cf43898dcd87db7cdcce4688990923ecc84a45921bd0fc4af9ac87c32b54ff389f1e6dfe9d520b3f3994a41dc56756ecaa0bc1a71318c5183fc

  • C:\Users\Admin\AppData\Local\Temp\CabAFC.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarBCA.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b