Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    136s
  • max time network
    135s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    25/08/2024, 05:27

General

  • Target

    t6sg0AZJ.html

  • Size

    2KB

  • MD5

    cd78fee42bf06b0d2dfb07d4a0821049

  • SHA1

    cc316f5eab088251af7d5b27f81ddc679e02f366

  • SHA256

    2a0de0678026de7ceec7136264793d455886aeaa433abfcff9c948131c2d2019

  • SHA512

    0ab3a75eb682c225ef612de63dd06b7b98cbc30c284b798a1aa52a77b861b343d5f874ba2770b5d2b9f411fd5ae6d65f97fbf11cf3c4b9a75315e6303ed6d624

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\t6sg0AZJ.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2552
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2552 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2360

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f23fb886b0a91ba742082aef331a75d3

    SHA1

    ec627db9f9d046ca9f0651ea2195c507bc82ec8c

    SHA256

    617fec9afac70849828c11bde6d627a70baa9ce1ad16619317f974d9c55d7922

    SHA512

    a9de48745d2fd4eaea6fec565f85cb2070b190b61761121c24b226ca91c8b9046b4f4d01f6416caa3d756081221f5590cdf83df4dd686a0af07c14b211669a0b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0b72ef1d373a22064005d15ee13498b8

    SHA1

    090aee7cbde0d3ad5d1a3a8f1c74d82e682f237d

    SHA256

    1273e40853535674e689f0d8f3d121425e96444eb2ba5580765c7cbbe9b2ccaf

    SHA512

    1e224848dbaf1807577a9e07c7d9ac97e2f7f57ba8ded38ba5bd5a7851cb2e8ab653d3673787fe84d88a8e1cb5d63dd6893096de86e865f2ccdfc9bb93a78688

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b6237dfd7410848df8eb197750a890b1

    SHA1

    e0fe62b20e9fea2f2ff0cd80c0ff7df59d184413

    SHA256

    84d966849eeebc715dd6773a1f139b9d83b9d0c05a00e170115597a168e8cbbd

    SHA512

    9327e7b8a320b0ab538f913e505a324e6e79cec5af14716ba269c8b646b716b3448a46422a59b9754856e8c0055535c66d61d11ccabd7498f7bbf94d210e3658

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    90bbdb3e6368472a6c71581b5bebbf2e

    SHA1

    ac3188316a41b4628e81522365810a92a7fce37e

    SHA256

    47415d3c756a5e3aae9a059d1f552c4cacf7c6e745816eefaec97ea9340f5021

    SHA512

    5efe8f1e12bea357b26f97004a662712a66aa071f78ab75b93322e534713c72766d9183950dc7309f539464657978fbf8ac518e653a6132a22d13cd37e281b2d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b20cc09bd050206f47200ad01b4a5e4e

    SHA1

    cac14ebcdc3854be49881f0610cfa570df6f3178

    SHA256

    49bba843883f61db40b7a1dd2d9b28fecb515dba6190df1e0f2ca16f6bf52cbc

    SHA512

    635fe2b1d1dbb6e18065aa84f94ca0b2ed998b64884b98ffe3d682d775fac19a75ec10927bed1b6a3d8a6f188f744b150167314116ceb498e9a0c267c145d9aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    16f0b1dab79e544618404bf7ed0a7fcd

    SHA1

    138dcfaf859bac30cdb3c1df00a5415562d0080e

    SHA256

    367f17cbcc009417975c12af8c37d12829e42f24f91f2d1fc9de747a5bfe741c

    SHA512

    96139ff6ac3d1e72c9afaf229bc48e7320ef8a55165a3389d88ff14c4f366876b7f53ede9f75b5a97f4fd4bc3cf55f189c2da2fe71a7c6222f186c24d19cf58b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    828858859c4dee71cb871d024f913bc6

    SHA1

    6b3952fccdb8b9b52c00142f3cfae792709ee6d5

    SHA256

    dc8d3d128f72851365159f9d24734b6af148bd40a3a320937812db0fe3c51ad7

    SHA512

    cff400d80a208e356bad8e89606bb7cc71a7743fbc865e5c8ac137c0360f5f1e4cdcfc9c7fad841bbded9c6e2eaed23325e112cf3993a470daccce2e9020966c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6135f0511a9951db0291eb950dc3607e

    SHA1

    46eb31d0efeb069d5491fa59e440c87ed678fffa

    SHA256

    28da984f15858a79367aff5f340dc455e7d9d9ec74971d5e96561b9d0a0a496d

    SHA512

    8b0b49e6cec415eca96c53712ac84e0087f1df0295d319cb5d152b2272f0510adfd2d025feeec5ed043fcb226b0af946c4bd10298f46902224761e1e66c862f2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d0ea9020b9fb5bed84588db3062db1ac

    SHA1

    4d907049264d59c589b89439c5d18e2e481e9854

    SHA256

    06b30458ea4a4f677db7c845b732963360ab84732e4262529e2ca4dbd4c5dfa8

    SHA512

    c9f367964b956953fc6ef1c21a8f40d50904d4d84c3b8f7ed011c80d79bb9ba846f873c4bc0956fac2d05381b0246db51ac56eddf6e0ec08d25647f501961585

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d84c129219b6c03adcc8d0d3dee8914f

    SHA1

    3064d996977cc4b78a8a393ecaf7a851e183f232

    SHA256

    264b984de23e8b807665b3de9347e7379528ae46f82f3878280104b42bed7c21

    SHA512

    0893553237b0c1a356e44a6b76464b0a6ddeb2994948d43d774e916eb8cb84cf201ea2427b2b0aa1feb2a6697a630fb9c4feaa79dd62946c31bdfbbd32ffa856

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3eb637d6fe21583a98f7bc402fbbc2fc

    SHA1

    6556cc0c606e18c884d0e88d7ab2bfc84aa5349b

    SHA256

    1aa8052455b8a25fc0cd68ff183313d55943880755dfefc8c95c43854d7e299e

    SHA512

    40dc40e9e2b83ff345367ccb4dce0a110d84a1812740b89f2328dd020be7d6a980e581f5c259fe5e33639c69b85c72af82c3e503e1c8f6e5aa981c40d54cbd70

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    edf540be6f8be42cf03906790fe190db

    SHA1

    343354c2c4544ecdc3772bf8b55a2e2dfb55c2bf

    SHA256

    626c7fa37c044e390ba1ce3f1c748ccdd9ea726261158d76f71b5b1b5ae35a5a

    SHA512

    30a3e0cb9db6830107fdf5628f11dbd41534e2b713546ef13b81056eb84283fb85d129b04e9134ae66b340f4064c1fb6962ce7d631e709253f732d28183df17f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4f863875fdabd9ec8fe0c1c09ab69ca4

    SHA1

    ea3cdde9af51a19eed7d4620930c3340aa1ee797

    SHA256

    a34c75dbf831562d06893c54dda4adc94d9b125d0f7ab68359107eb3af723e4a

    SHA512

    4f72da580cfaaa3798ab955463283126212e8a6af3695035f07bcf9320c70ceaf6410d18441d5f9ab5a38efb1ee06fff62cfb354c6b8c8ce4b496a05d5166393

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    07735d1525c3de3cf1d67f25d10c4447

    SHA1

    ce999ee3109d2f5e7993d4f69cd3f34b23f15615

    SHA256

    fca44f0ee8524f0b81e8b2c0c5d2ba60d79c3644d88bc07f96cbf8514a123ba2

    SHA512

    ffab1a87d753cf85f374bf776c5ed9e23249ee8ce9db8bd8e5db6f77dce32cecc3a0b756d309c92009ad4b64acd6e32dffbb4bb6eb534ee85229c777c40b98fa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0831c65cd8152e86d4cc59e8242bdce4

    SHA1

    6269b63b150f100a25b1c3ff6d0fd9e6bab9534e

    SHA256

    6eaade57e921830d323b1405a20706a7378d6b9732aed3babee4fae410ec5171

    SHA512

    aa6b9d1a27adc303de7cd385472b9eabae420319f1f8e0b6d37b65be8ebd87cc7ba4b82dfe96045a134aafd5f33195a507f56252a21d5d7de841fa10d4c343a7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bc6f7b2f96a96d88f594e8e01dd1d3e5

    SHA1

    c63d7f474ad5e8423650caf31cfccbb6de0d3efc

    SHA256

    131f2e7580bd34616c44170e05cb503b667722217bb68967f3b02d97cd9ca927

    SHA512

    f1e5834dfb210062f36e685ff8b01594bdd7c2c0aaf1741d507378361d748c255156fdb82de98e89fe9c61d96b729daa027e88fba29cba3daa72414b6516acac

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    cbf5f9995fe6fa106398f9d2e23a2b84

    SHA1

    66c6fdaeeddb2c778573f56eecc0450444332819

    SHA256

    d336c5e0bdaeed690867581699e8b70b7c2f57e260c9662aa79e28958286c7b8

    SHA512

    0014690b1f8bcadc92200a5416c66977d43d18fd8788b8077c8348d8dbdc649e51701c8da47aefd55d640dca2dcbb0d61788838a975d496270370aec5cec08c5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2e43424f1a5da4b7dcc3a9a96d33164e

    SHA1

    53c8d71de80f4d4b47d4458c1a62b5794587da38

    SHA256

    087d0a981f7366c8ea5ca16942f451c0266f49d5069ad5f25498546f949ba96d

    SHA512

    0bc92d7885cadcf8a56a19d7040b6c841c59a462136b022d4f4be138d4db1a07b09189d2f374ca4df785c4de986e5a62acc3a2d4fb28cd74a1debf4b7769ad27

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c08a11b18373a504b6c19d4f8eebb7a2

    SHA1

    880035bdba7fc8de43652d16e1728258154c3908

    SHA256

    e3e7cdef84b3be8caa8c10f4e664bdd8d273468ca87fb64a2e89ea1091e229d3

    SHA512

    759f7ab89527cba8ba55d7cb2577ba8ec1d7abdd97f7d585f3cd28999517b8072ec375c26bfdfb452eea449b048585859d0c2afb10986ba389b3855f6a95c481

  • C:\Users\Admin\AppData\Local\Temp\Cab5CF1.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar5DCF.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b