Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    117s
  • max time network
    129s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    02/09/2024, 22:30

General

  • Target

    d82d99f6a734adb4ca11b341aad178bddd6a4110095a5887c1327af18ac9f69c.html

  • Size

    1KB

  • MD5

    2abcf48a053fc5cf45199c51760f8ad0

  • SHA1

    a06648ac457cad83bbf677361db4aceffc4a6ec6

  • SHA256

    d82d99f6a734adb4ca11b341aad178bddd6a4110095a5887c1327af18ac9f69c

  • SHA512

    262ef86546fa32e9292ce627d2d6374e8acde32bf10cbaf2ea1b24ec9828ddff6de2b12839854f9cf0c56a7d0b9f19a58fff343bfaa072418e33520e6235c5cd

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\d82d99f6a734adb4ca11b341aad178bddd6a4110095a5887c1327af18ac9f69c.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2740
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2740 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2704

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fd44221b318ce378d23609d385508611

    SHA1

    21c2543f2d5f4eeb033a297b0f3368e30874079e

    SHA256

    162924d6de497d3c735ef6deaeb93822b575db888e598b85d85aceeef171714b

    SHA512

    326b20465f28b534ee829590458a1833a83f98852133ede6e3a57a33b551bcf1f533acf88b808e485a67c3dda7b80be7e6a578668156b0aeb24b11bfaeda4be1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b3d8f4c2bbefe57e40019182da132e9b

    SHA1

    4bec837f99945d809918c382dddaebc5f4bb064f

    SHA256

    4364a52a4298cfadcc343cced6b1a9c5f8c8deff87de5fa12c2c807cb82985df

    SHA512

    5b08b6c536316aaa4659f1ac7879364fe353743f3ab9802e577affb7078355df8df4da9cb4a2e17941a2da967c4544cd291302ad54df0743ea99ec751d1dcad4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5aed1b5f83c29dd2b8279940c84db87b

    SHA1

    7df41d1d56fd0a33e26817566f5f3429af46625c

    SHA256

    39fbdbafaf46aea9bec9ee763afd80ca6084b6e5644983fa90b6a72b661d35ae

    SHA512

    ffbcb288b50233b182cdbf01211c226e94b32ac6c44f69b9384bf9d350ee783b66e7867dc727b922f660d2417be82645a36f3855cbec42cf55d33cb004073a9d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    26b213f7e543a5ef3f9aca050f0b35c4

    SHA1

    5ad9e7aeec870d70171c65a6d32afded0ea40e51

    SHA256

    f866ff00db20c09e859024feac8da366b0dfac9462f4ec7475dd9a98a22773b9

    SHA512

    2bea3e917d56760f275a81e133c3b60486574c4d6fa3cc7fab81318ac0bab83d62498685ae219b1ff854e293c2ab22b05dd7cb80b82206d22116002ebb5bab4a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8016a569060a1a604c396d5df1576e42

    SHA1

    d1690762660f69272b2d6297b84d04e3fb93ced4

    SHA256

    2eb083be6e5a8f8e36d76b3107c93d4f62b0c406054acea3c20aa86d3771022f

    SHA512

    c7dcb0f55bf835608cba10c99a88d38d5d19a7c3abbb69b6843d703238161a96b9b9b88a14594520e562405ecc98c527544bdf012d8f2306b0f94580940c52c0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0711473b452c36c8f0e43e3b29cb5c7e

    SHA1

    5cd39077fe93b12f309d37359478febee11d9572

    SHA256

    c8c566ae5aceb47cc5051d9c569c3fe59062715e0b07e6081c85ed806fe1002b

    SHA512

    217b8bf410b3f3e553e64eb9b508ea711f00ad938a6a048e2fcd87d68f9af99eb158f78dac923222b04c1e84511b4c1d5f6ff523a8d4de6e471bfcdb7fa8dec7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d1b8b1d530fea787a5f1f35b23107a5b

    SHA1

    315c7c7d2764d5bb6c62e1a2cc42b7edf4ad09de

    SHA256

    d62be96ddac2727f83cb6b04e022ac79f5664bc7e56307c914906876becf744f

    SHA512

    1eac8cafc715ebd90ea01942153ba4b4b553c560b304c390f1d38550000f750367ef1dc730ed8ae0ecc59bb83689457c48c9b0d04a16decceeb9565b5a6d1024

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    83ccf866b6fb49facc5bc011c33b684e

    SHA1

    5dd34955b7fdc2126139efe40c2a1c1b00217e78

    SHA256

    424b82f58b910c0c735943694d5640502d9ac4e2b513e492ebe5502528f2d9b4

    SHA512

    0831c8886be1c2e385c87af3b88ff15eb0bce2360d44cf164007ffa4178b472d8ba7668ce660770ea6463fa10b1205d1cf06b5a224539a9186525d4adbed22f9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6dac0cdb64977be14ced77c08e50562b

    SHA1

    2ba250530e85a4b035dfff5f7646e690b6414a8d

    SHA256

    9932fc89f8f3da6ee011c60875e2d58e110e2e9bcdcd1ba217b1624dba4af81a

    SHA512

    34dfb42d5dea67f9169616efbeaf2cb4bd333f31aa579f241882c6246266eb206cebe6c71a9febb8901ecc94ae47242c9c0ca71085a9e8d416afa34a2ac88df9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1f0fbc079a7db203c4b62e042d133dae

    SHA1

    4a0afd399f4d01f540fbc4dfc46887ab95cdfc1e

    SHA256

    860c6bbfa17579735f379885ed863b68964f6e14df627505661ddf63bb0bdf7b

    SHA512

    7080561ffa515069c518e07cc71edb8ef41361ad2552946e8e5a58c7460d3dda2ee807f79702e29bba7017b54492e7fc5fc1ecc0d1a0c70bdfd6a7c3d990ec62

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f96fe8f2731817e849e643944ab2ecc2

    SHA1

    4e4a6d8c0e7abf69de8ac3cf1a678fc9ffcbb23c

    SHA256

    bdc666e5a32720f6c10393366e69105a3590a36aad7fe01733e95fea3816d8aa

    SHA512

    ea2588c3424b9c61da89b787a99925df7366a6ddc1dd4a3985595eb5d859e0f7a0983dbc7555661f3dcc1160e65f4100090ff6dee7bb90d6df95cae42af85876

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    eb4f0c4760d7abfcd4abacdea026d2fa

    SHA1

    bd8cf43c07899b43ca99893a0f001a41b84d52d3

    SHA256

    fb77def2e8ee4a78a206dbe58623e61eec27ca2d074b66ebda576ec8dfeedd7d

    SHA512

    65786727e79423654938c98906be84c9d9a12984f92a237a9d578f3c6ea2d85ef1f7e29dd58498a6bb96880ed13799416f500b4cf22b5d1e10fff9aeb0d4a6e1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8c22a5c207faddc0e095fd598def24ee

    SHA1

    1510f45ea17501ee884ae32263b568d6a7d7ca67

    SHA256

    66fce25ae244f91cedae80d1c3fa8af67ef90951d1f68d7c490085d64a6f0ccb

    SHA512

    2366ab5b684d1337d91359abcb8dd9b1a36bfb3e6f34bd65d64e17a27b3e86ba6da28df81ad8dd44c5e3189f1ff7988fbdc85e644977c93305f728d3dd4679d0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c6f0a4be5cd41f93eae7fc96799d0cae

    SHA1

    48283bdb0c4e3703520543268611effbb7eb2ef3

    SHA256

    ba211ec2d04f5e6bdb69b196ab08ec54faa9f0a459f10cbd71dc8f317b7fcd50

    SHA512

    5f8c1dbe1d42787e0506b3098a6e722576b8734da104c33c0f51185e1d451e24bb57f290ee5a676e57f174b6ad422e918f5a0064ada9f897aa74d9110c5677e0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2338f0b99cfac62d22c0db4abc1b940f

    SHA1

    08c6eef7ad4d9d8f4824ad015751f3b43518f5b6

    SHA256

    5522b0ca4b3282816483f6a5dc907caec848a5d61631ce4a595ad839deb2d6f5

    SHA512

    8c35449322a99aa0625738da0f954e2b2703a0e9299f221a6bd044a64b4f6c3ce362026e4cd1b111b6aba8789d6c9338314a06846712e722e9740a4291c8b95d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    df8653c06cc309caac4473a8c66de56c

    SHA1

    0f732d6b93539f2a35670ab8ae90a0f8a45b4193

    SHA256

    96697fef0058a4969e51ecbda8d9ffcbbdf5577d91775035d29a17c6c58d5bdc

    SHA512

    74ca51dfcbf8cc4540047c71a3c52e9dd269a3a6eca3284bf258b837a65290e92fe6e6853626694dd505f42f93592b9717d307e4b344cbc0d7e6557e713bd2f5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e9b59bf0cbe1d2824c95bea4090ea365

    SHA1

    a358f7c0ffcb6ea9ac3b82afcd35a706a7c91a0e

    SHA256

    b6e286dbbc45980a6bc7a906f79dbf1ed30dad3e368ec4662d9a242748adc42c

    SHA512

    60e793be81b0fd38e625a2ea39420ba989d98277d38270da3583b97b318185dfa647a9c0485a5ba92d3c47c4b374f972b281e70fc604615c9cb3306d6727c8c5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    aefa625828d3e3416c182e1a121036b6

    SHA1

    3100746bc06860e7b4c3768ae9e9cfbb9f0d12a7

    SHA256

    5650d3acef0da6e144bfd33f0eb3da537f414da5230b866388ee1f9443a3df98

    SHA512

    cd6a88fe76ae939c824a6547be92f5c5eae69ea1a3e3c485c89cb4ab588abb2e3d0ce66b427fe1c517edd1cf77f9896b181d70555d5f2289082a5a60d079d142

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    657ac2424aea7be43f2996c5238c7dc4

    SHA1

    5f86f30f2dbbb4887124522dbb201f196652e6e9

    SHA256

    818eeeb5e5655f6df7393925a6a63d382ff1bc8050be7f47aa362cdbbca19e4a

    SHA512

    e548055683bc3077d93fef9ee488fee9db5dfea042d66d08f54e9a665e70941f441cf90230ad132c56e65a630e28392b604fcc75039ce16a72f65ea0fcd295aa

  • C:\Users\Admin\AppData\Local\Temp\Cab1D9F.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar1E50.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b