Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    119s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    29/09/2024, 07:50

General

  • Target

    mantiwpfdownloadstep2.html

  • Size

    13KB

  • MD5

    f0ee5156a32b09e78b227659fdd154e2

  • SHA1

    b53a7cc2e32ceb369bb90e8a45483cba105c9646

  • SHA256

    98b5ccea3eabaaa36e7d2397e6d75939a9abf5e02675393b75932b289ae52a57

  • SHA512

    c4f45a383feb25e334162c6043f10a35abea90f058c4b39408abb93bb67f6c76c6ef45125177a86bfe1922296248fdf1b542b1a2f5a0c8c6c28ea22903650022

  • SSDEEP

    192:CFg5BZRif8EukiNa8pf3KbwbPbP8mBaaiF1drYSLfvyth8dvsY:C4fwf8EuJUYaLFQCfUG

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\mantiwpfdownloadstep2.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2824
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2824 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2704

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    038eedf9b9d3a83588c23fa37415e8d5

    SHA1

    531c2da6f8a01ff83caab4ccccce574c73e004a7

    SHA256

    e3bf93d2e322c111c479f278fe2d2c285b3bde965d3a26325913bc519fb12bba

    SHA512

    888e144a8cc50aaf552d903e392c27037b25a8628934326f6d9e0b0f7aaae93bf077f008382f29b566cc59a7cd4a434cf823df53a52398f4af3709dc8d5fa7b8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d5e63d797e42d7402c1cbf421ab4512f

    SHA1

    30b2ffaad32cd010224f31e94603129c36839d3f

    SHA256

    7969e0b25c0221803bc4da442310e622c63e2c6d2319242362715c4c098ff44f

    SHA512

    e1ac747fbab95a686eca3c0fd466ee79035fa1a8f43544ee8374e27a02c8c4364fc9f4c12fc9f610387fde01e9d439583e11ff28a41ef1672e72b61d0089d720

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ca635f28e9bd028024af7aaff8ed4164

    SHA1

    04cb39b27c287f05022858c2b1a25dbcc4a72877

    SHA256

    3876f42dfa06e7770a2348ad96172088ee5246e5554caba290a32e6a68b17ea0

    SHA512

    8f99301b9a453dadb6234cef470d9deed80649265bd74778435c8c8e1c9f593f4bd7fd59c16e617338d9499cec905a1698a6ccc564fcc0341e7e017be799d534

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8bddc741bad838c2e255f9c427df88ed

    SHA1

    5a9934187f6de767e62c1e52b11cccec96d74e1c

    SHA256

    49080458c15f93668022abb0893524d79ea8e820562c79391a74ea46a455cdd9

    SHA512

    2e04a9f283656b466fdb7bdcb0ae3b0b8de8559850fef73637087f3b0d82247d8519ab047f71965698adba360ed855c10564614bf7d48d6803347b3e6cf90033

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0cef802e214c79bb448fd6bd25e55950

    SHA1

    a25f7dbed97a94956ba349c05e693a0ed7c222d7

    SHA256

    5523ffa7a1233f0b1efdcd5977ed7a2c4938a64dfdb6fcee10b7302a5578cb6b

    SHA512

    ef5217daba3b51fe333974d5ff75675c0e967ba38bbad4e30a0a0ba4bd006343fccda1a3e0ef07f64988b258cfe81d023acf0ac73b34e0f28c7f4326d1e5ea7d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2c48d25086b27f28f919fec9ac9a7301

    SHA1

    53877aa7497b4f51e8fe08fdbac5ce2dd707c1c1

    SHA256

    086754afeae4cd989f514d972d3702e7f44913ddf4cbb5b33087a43cf94646fd

    SHA512

    be3c030b7891568d06f6cb5fbcda7020cee5d48ab8cb11ff27fd154520b070c141b81cab61f15acfd7c16fdba8022541cac11fe5fd12b8b2cadc0865ee5582be

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bbec7bf686b7cfa23bd11b02780f286d

    SHA1

    7378d902c437dd7ec45220a3ce153a647463a81c

    SHA256

    2cbbd0885c2c44127a0293950fe81f15a12c763468f5a9420dc7bec3bafc8776

    SHA512

    d9568ecf965c140416c5e53c1a6bf42fa7363e9b77bbdb6c57ff0931601875f44e1b07b8588dfc50c7f99dcbb580dfcc3d11f540c18fbb0fd19746c51688e7ba

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1b91f23149a8647efb26b58bbd8ea71d

    SHA1

    2941b5ca8a49bd3535afb4eee383bc0cc9208a10

    SHA256

    af3753d30ee2e98457b19471bb4157ca7e70f111db036c7af7799ad9ad989d35

    SHA512

    8a14d71c0cde7dd79cabadd760f96a9bb77c79b328648f4f77f5c95224842c8e9509f54169a6d537194d3815aeece3e5667eafc93bfb5143b283f8ea716ac381

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    edb31a7f521cd2b047bb41b218ddc5bb

    SHA1

    839595995c7ad6d42eaa033748bcaaa8ff26fca9

    SHA256

    954ce59b887bf9d0b8b55176e87f591edf6c42a1507c59493c819efad50b3556

    SHA512

    b31f995a1395d8600b8dd09895b7c25bf9adc33f14061b1b8657d4b22633bbbe2a4a8b2776d18b39b59bb9ab26ba8e921be21b5b9b4c3060911470c3851e2a3f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    dc5f02214a4690d0f38ff24ccfdf5306

    SHA1

    caa2a04e53c7d4755b2ca9b78d3476693f712968

    SHA256

    2ff858fc4f624ef428039499d4172169abb2cf9d01e302686df544ec289483d5

    SHA512

    dd1d569bc7afb4b5746cf7fc276a8b6a317a90caa0bd96e0ba50fb2a99291b009297cb48d5f501d500890356d786934f7c14e5d819fc3b033886f5e659febacd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1d2afa384286ab84beaf72013e294f16

    SHA1

    206c1b9eac2f9aa9782951f08a5086c2ab6e4d28

    SHA256

    e10094dc3d0d2261c12f1f55f84b9a83e59d0cc6484b9f466a650fda2a85bb81

    SHA512

    13c412fc87af5fce13d8f11be386bef2d3e4835b6fa4c7055e828923a1df650fb32fe38ff2c1804558b94a1723c99ac07b9b43341fa2538267b5c3555d8a346c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e99220003e12f05340611d313b795dab

    SHA1

    d043a1fbbd61f51aa1cbf31f1a9d520581588ba0

    SHA256

    af28cae1c74a5ab3f7f01fbe8d254a75d29b70ef2c3d0c80afe5b615535f55a5

    SHA512

    b0af3b10d4dae22e48528b60a1c15e9d5de6f569ed08ac57884c53711fbcc4d4158fe80c4038b05be7d86e13fd9a47d123abe8106c8acc83d3c70b7097a0a3a3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    282ca706e366d1b48830579bac287026

    SHA1

    ec21daf68696ebecdc273676b44970008ec25daf

    SHA256

    1851a20cd64aa73ceb16fd91d5a01f85c19a38df750fd9061c94f30140ed6887

    SHA512

    2f4cacf1bf29f0fe9c8669ed76fe05baeaf3164fc1d95e642d5b6e7463586d65ac6bcfb7d1bd8ddec28dd98211eb752580995a99c8c421dea5d5d95d55bc6d5f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    75d14b667762cb660533d1e8599129fc

    SHA1

    47a0d4630b4750306551324dccffae324203faae

    SHA256

    403bffcb0a2ab1f40a324a3deeb59119f17c518138289f8502d4fe9fbffcb4e5

    SHA512

    377bb31b306a77490a8e4001dec6773c74e0d69ec06bd4f5586487e1e5a67196ca43e4c8407a3c8ea78b6efe768c49e824d8790c932155d80fb53c1e1896f605

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4cf09608e197c184c912d1570563cf2e

    SHA1

    76cdf296f1e88c1d42016a245edd226b2c85964c

    SHA256

    719e0824bb789e895390fa1d718e0c007445091f4f0c8f8d4f76a0bdec5fc447

    SHA512

    4a2ed87e012fae83113e63d82f536a7843aceef9471d8cb31cd131340a16e753a1442d65f31e26fc754be80c36c6373d5430e4169f6f851829ad0df75dcae579

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0a2dfb98c38ec2d5f1fe3b830dfda5b0

    SHA1

    b597691b86e6f32a44f7a7af038a09ab242783da

    SHA256

    286fc10aa2e99a5d06914ed1877b822adf9347d1fffc75626ba9049c327bbf24

    SHA512

    056aa9ea2ac134955e5c889a26da3db99e6eecf33a7987b407bd482418ef4f78c431fcabc79333413da892193689086ae7f447c42a6eb0beba00dcf6710b23f9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5ff979a76b32c0f461c1bbd1cc97be17

    SHA1

    765153a9b2c576ab8cd9c29676804c416abc3683

    SHA256

    e771fc09e54353917bc1f71f03fbdd3c69ac81607d5367347d8e4b5cd263e0ee

    SHA512

    180a1163b3a8a5331c408f520c2757ca8a2662332cfd74b3954b95a52f354a96d947f30c00904914737aeb9dd4140fde7fbf1d70b23c5a2ae1ae07611956576e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    daaaac98237a5b92023adb3686b56324

    SHA1

    e4d97d4a7d4fae8654ad588de3dac16afde7db11

    SHA256

    435c3917e4a59a9c9e04afe450d724a66cb76def4f4800ca5c8d8dab158264cf

    SHA512

    8ea75f90ef97bb452b237e2c6750c6bc83d09724f9f1645d0e98ae5127cb4e7061fbd2d1128d2ea1c4df4f849c630b88114d65090f30439adf7b7aaba6774743

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    adfcff4a509800a890c9f221148d3979

    SHA1

    d506c317a5312ac4b867815b1671e6400bd7aa2b

    SHA256

    effe26776792b372ceac46e1b5a909a23a95e32bf9d210eb78249452c6fc1441

    SHA512

    d079a89da0f82db577606f3a57707e9558c77deebe6abf4e2c133bbe198efbf7d510db40b386b734b8973da59bda0f583fc5fc34b5e653ad3a0068338b957ad7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5a58e8a7bf07f3628f28cbf7e2521491

    SHA1

    a39f9701492b341ab80a0c51e4b6ef3ab69846d7

    SHA256

    57d97fccfbe3896dc4af0cd5c595ac45d77778ea26c6400382bf56c50c48ed4e

    SHA512

    a94c67e426fed2c1a778363c925faef898230bda92e393b33ce9d0feff127faea0191fbd475e59446ac1003241ca490dc120835218532975e390323b09b58a5f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    88605fb1eacfed423dfeda5b933dd409

    SHA1

    70887b3d8c32211e8f9ccaed262faa91633dca8c

    SHA256

    22ed349060168f72f0f338ef5b02a88073094a3f264d118c5c9bd4ef9fcadcdf

    SHA512

    550896e06b6f145f89c0541ce7a59e23d0375c5cd190c0830c17a846ce0e383e9b842136c0c9caf97ee568326054a5389574e5d01329977b72c2c47d5104a733

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    3b48846e37556da01c7c35193185ea19

    SHA1

    8ec080e7eb7eea9c2a143e0debeb5032ae64d3ab

    SHA256

    0da36eceaa696869536677439fc8fc40370344d5f218e1ef7532e3e5113e6604

    SHA512

    59673289f06e28d8fc2f1a7925efe46d350e6b24bf260376b98dfe2ea4c0dab898e826b7b4b4c52e3ef7ef2399101e236e3ba6a123ba0a002111f69cb282b762

  • C:\Users\Admin\AppData\Local\Temp\Cab80C6.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar80D6.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b