Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    119s
  • max time network
    130s
  • platform
    windows7_x64
  • resource
    win7-20240705-en
  • resource tags

    arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
  • submitted
    23/08/2024, 19:43

General

  • Target

    华锁万绍球整站完美版MN 1.91/Bill/INDEX.html

  • Size

    3KB

  • MD5

    c4e28854e697ea2c94cd6927551e9941

  • SHA1

    b5b80f26daee87f5b66299e20d42e333debafd8d

  • SHA256

    bf2c2f06ed5c9e739aa0bb3001f2d236f383828474f696a9414d89f1c13f460f

  • SHA512

    c3880c69a71cfc54114f60b47f921afce837219dcfa899ef573553363db125b7bb432d8f0a2d9233d9273bcf84a7c370c221a4c571f967a52d8dec7cf659610a

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 39 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" "C:\Users\Admin\AppData\Local\Temp\华锁万绍球整站完美版MN 1.91\Bill\INDEX.html"
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2872
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2872 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1780

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5ee31f89566e1f3d6f54eb516dfc7539

    SHA1

    40a124bdacae78fc04a2da3c3590a276d6d939bd

    SHA256

    0d0339d68cd265f7e1202345eddb969c6f0ee3ab74f92ceedb03bb91e21a046d

    SHA512

    670d3846893fdbf39240e1c2e54402203e38f1d7df82949955d1a9865407f90a049b10611f11ae334302aee3a4bd002a10e3e0b926e498616948670be237497d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ad8c71a5ab9c3450096c38bbc2d77a13

    SHA1

    07295991afac485e3187afdb70eb45dc3098ba9b

    SHA256

    fce3bc6efb14740ea791d81b84ac47d28ebd0d23e46a3b9d4696436d0cd59db5

    SHA512

    22ae446d0bc6f2b9ed5f8e38755e67633df9254e8e44e2afaf00ce4532f65419d1e178ced2625f4fa91ad6029dd83c2c2b810ca7d9ba6602934fee6f8a315313

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    095368d118659cd0a5e7d52e1d85d343

    SHA1

    b6d806bf34728cbd4f57bf6a7c14a71d8b3cd20e

    SHA256

    17e1ea1746bb5410d9be0b368d53086883bcc19fbd6b69676fb638b6bd1dda9e

    SHA512

    fba24c5ce1ed46d9fe14c17bfcfb27d9371de98478957219473de9ae7899466a963bf0438cad53c211a19284fc6d7fda9d2a0160c69a44747d18ecca1de7ef8b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0ce50ef31329c6dbc845ef0c3e477082

    SHA1

    cb76ae418e83fd49d3e9d01c190e2333f82feb0a

    SHA256

    8b58ce381b0cf6ee60bf496ece3a3ca169b1ec28c8e5b81437d38e7540f8ba1a

    SHA512

    d9607675c5049cce579868d8167f24852ff6675d01a629070e855afecdb1731375be09ca65b295c975e7121de6e1ca83484f5648f687ef9c0ea09aab40a60cfa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3ef70f564f8bf078bcadec9e62676a36

    SHA1

    98330fa583fe21dd719a4b3005f575097a2672f8

    SHA256

    28ec6528c277b59ac9af6505d091b8ca3ac7e076d49a091df411d641e52a95b2

    SHA512

    610be0129e263016e717d1638235ba88e098ba8427a1c9dac48abbe39e3f86812b65a2bb9f651466e8f385a9f1bbfeab15422034594d4a9d07c61d7ac1dc3052

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2ccad06cb47d8859055ef68a29061f3e

    SHA1

    3e7a768904dc7e0e40a8d57a8ea503caba8f5040

    SHA256

    bdd44fd369a515bb568161b5b7c6e31c6fe63e64ae1c08011558f3b849df1067

    SHA512

    0023cb7fca693ca4428c119fa35caf10370f61908bf2f876e4f50abbba31a7dff7e40e81f8c26e4ee55f4e9815ccb46849c48f2fa2b0d727d07b79110d7bbbea

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fa52cd120a3d485390f371f42e1cdd2f

    SHA1

    24aac6e42f48d7419524b4c4dc24e6bcdba569c6

    SHA256

    ef25cad18ecb944b50d9b7847ccb1249c6fa46a26a0be44f22f8ee19a0407ad3

    SHA512

    897b0344dfb6289d4d0a987eb61fedd38b1d7f1225400194341e79e2264408e5532790c1197e337a952a114b63760bbbbc8d98e5a9d16b2285d226c919304bb1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5474d3e5e7f8bfe3cd7c1d611a77f25e

    SHA1

    bc732e822d207cc196c607f3f93794652654e291

    SHA256

    f41bd4c718fba7462f6bba040ff1766e90306514c25bd4f6436c70843fff13e2

    SHA512

    1ae94e83d91c116743ec5758e91d45a32f8938a6c7fee4b87f4d6efcdf7c1de64309d4143d29368128edcb099b6a904803a9adad1c060feaca44fc8bfb0346e4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4aee8fbf62a59b42bb3bbc33044bd854

    SHA1

    b8f801a3aedcc1287321f71091167e42f9a934c9

    SHA256

    cebb9663aaac51dcb6f575ce660b4acffbe5aba20120998f1e179e6bdd306007

    SHA512

    7583d44ef1b7b4185bbae38cba80d8476c899e10c61e61ad312e2b8aa70ceed9eb68bdc95996a3dbbf2c445aaa03bc9587494d1ea598387abef5480cbff0e514

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8399cbf88cfab7e5a67f6693199e863e

    SHA1

    028f7dafd3cfc8fe584035f6d5eafbf5c265a043

    SHA256

    9c8f3c67a41ba634072b3f42505a7e8a27a5ac393cdbc3889f789879a651c95c

    SHA512

    320d78ae6b81fedc43324a650cd4067fd51ee6cafad99e09d581fe4f24c90ff24971acb3d03abd8acdf3286e9a0cd6ca63b6c64f4068639c877222d17811f570

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4e4c2a8fa246d13118bad47e211194c7

    SHA1

    6321ee67d70e2c748758de9a4fa4b100e8dd52f0

    SHA256

    d00faa767d6ada8f3d89f5cc3b41810adb645ab61f095ef145451ccaa0b88a22

    SHA512

    959f688dd5ae56d380f7e572ea0c9252eecc22cc54ed1bd1d61d34ef278d3941b130cf7a35b4a6da216763f80e487a5b5836267a33e8af9c14bb6e07cac1fc1f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    269d7c70136a6434eafda478e8132c72

    SHA1

    76941e6831fdc8ccd911eba5b821311a25c05e71

    SHA256

    cabec19c318f85a7086289978f16ef317248bb60aaf961d83d8c86bfd220a773

    SHA512

    d054ca903a0febb85b89128e0067e3479c048d5f86a182f084f7aa58c989e7cf239299be1d960e270b2240959bec120d347bddbb4f15a56a0ab2a9397948febb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2aba62cc07cb6bc6fa507683f0ad4559

    SHA1

    d98d0466d2b35de3aa28597c1936145723f434aa

    SHA256

    6a797520cb32d2f2c345737eae008d09488f1c90949b94af0f6b9bdd5f7c6a4f

    SHA512

    977084c0e6195b3ecebfb52076e7dcc1d9bbd2d562d32b2d07bb277b88fc0bfc1b9937477abac73625261194425699c2a229b20793ed12d059ec97ffca65c114

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5e288efb4dbaa36d4464233decda7e18

    SHA1

    dc7d7d1dd8c3c61ac976a9d34813ccf41a1c6363

    SHA256

    2ac9bf1ecaa8024c5cb49311d0821e2153a3d1361dfce70899731cdaa6606426

    SHA512

    92ab2812970b0957a5843ff418911ee44d1011d1bfd8293fb5f1f8e602eaca41adc4b457aca6b2e6d45e58ebbbc4bf7315c547a3d08c809804f599a85346b7d3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c8989caef909e43b318a1b57ba10ce1a

    SHA1

    aa0aacad7af4b36cd0c90a2c26cc1e70f9b8b070

    SHA256

    dc42207a63e6ef037b9ada5dfbc36abe97220739e27fc7703a5a26f1ef4afde8

    SHA512

    71887be9b24c9f9481ccf50919bf7380633996deee06a23068312f05f9dee247024add3482af96ff65a6ad48441287397e726e07805f7c117c1726246ede952e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1b43e5e915678caf85bc32f4faa5eaa5

    SHA1

    84a7f4b44c707a0bdf39ffc39a92938bd2f6a114

    SHA256

    03e2659e207194822737766b5ba522ce115e52bc753b1ed2a36bb2a49bcd723d

    SHA512

    badce06f7c24380fee7e4e292c738dd23399a6f79fd5071c9c1daacf82f36bfddfb239314d7f1eac657719158de1ee2330e60e9f25add3480125f0072fadc99e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4ba907414fc6ea002e31c10729003595

    SHA1

    2b0c2e8c5b7a95675497b2fd64074bbcbf17e3e9

    SHA256

    649cd27713568a556cf2556ba0e7567db452a2db6753199133c0c99abf86c495

    SHA512

    96e4700d74c126c5c9bcab779030d30dd100e50cd18e8e89c44b5264dfa19076132b65f080a5f9b1a33643adc01ce9a482666ce3c0e0b4f11234e33b75b44395

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d5f9ec516d8b10c45e34396af235f76f

    SHA1

    28905e033bc923d8db58e817974e464a36183849

    SHA256

    74ce1cd639866953b5daaa13b6eaa056365d497a7656d706f60a39a080897312

    SHA512

    9a421706a94cb20beab62199ee45676d8ad5758cda53e9313d4bb388199d5ae4d57100677af42133b6c4485436d91ff273cb09e393abf5ce3b6e235aed91226b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e607f3d45d85adb99a7082a85c337a16

    SHA1

    59f2cd544a94de41be003f570b91625911051fc9

    SHA256

    603d8b67db3eb16059500ec68e8dc9b00f798c8567b7fd97700589be6783e047

    SHA512

    0718a18c3e5d9505b8ec343d592e5e703b6f455a9443ca5dd61fe606db91878412b7bf1b2f0cb250fbc46e14248d02837d2d6f238ab11781ae878902e085df5c

  • C:\Users\Admin\AppData\Local\Temp\CabCCB4.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarCD34.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b