Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

3

2024-10-01...er.exe

windows7-x64

3

2024-10-01...er.exe

windows10-2004-x64

3

Analysis

  • max time kernel
    122s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    01/10/2024, 01:31

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    2024-10-01_d1e0d958232da44207eb7cb1dc7433d1_avoslocker.exe

  • Size

    7.7MB

  • MD5

    d1e0d958232da44207eb7cb1dc7433d1

  • SHA1

    a3adf3f60f54f41994c9093841ea91d59b7821a4

  • SHA256

    77947d5edd467052f2bc684827454f86ef318c22d438420313ea6457b7038e09

  • SHA512

    17ed8be06e05c987aefda96f6ff5dbb7dfb972f8543aaa7917e7303f9a7781d28dbde6ca7ee300a7b64f3f7c2fa5860bc794f9c3a0faa6c4b09cbcd06ceaaa02

  • SSDEEP

    98304:wTisnWeTgdq8EDJnkDcxiChFWGc5gg3Jyw0WImZWr7lbioe00HcM5y:EiEpTgdq8SJnkDqXvngZyw0WY7QoeP5y

Score
3/10
discovery

Malware Config

Signatures

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Modifies Internet Explorer settings 1 TTPs 5 IoCs
    adwarespyware
  • Suspicious behavior: EnumeratesProcesses 46 IoCs
  • Suspicious use of AdjustPrivilegeToken 46 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2024-10-01_d1e0d958232da44207eb7cb1dc7433d1_avoslocker.exe
    "C:\Users\Admin\AppData\Local\Temp\2024-10-01_d1e0d958232da44207eb7cb1dc7433d1_avoslocker.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    • Modifies Internet Explorer settings
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of SetWindowsHookEx
    PID:2160

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    342B

    MD5

    39f9f530d88b0027cfb8280fa43ff0a6

    SHA1

    5d3a11aa84a4130659698d7c1da0322c418c1c57

    SHA256

    5ba028f7053419460a459a13c2c53a958988f049f307bf57f9ff0ec84947ee86

    SHA512

    eb8589d94eef8e2b5ff4f2d41071d935290cd30036a4c766b94ae1ec20c9b9a1575580348037feea0a8cdb5794bcce6f9d6b2758cf2e77a994a144c22087ecfe

    Download Submit

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    342B

    MD5

    6d74f83e3a246dd9694a795db5711562

    SHA1

    1bb9f7cc146c0269b88892a31318a2c42c77b44f

    SHA256

    7198d2e36400446d8170b424f7c8f330fcb799dc1901fcc2aca6062f45259b9d

    SHA512

    ee6337007cad00756720baca0797a6bfd77e5e971bbaa636e5f39a0e8ffc8e78eea44d4d92b54de227e174e8cad90168d5715c3dd9a51a0b65479a84673ff40c

    Download Submit

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    342B

    MD5

    4724633b55ca78ea5b6293665135426e

    SHA1

    4033b9b804b4379ae73be1c5b526f55fec161042

    SHA256

    7b13faa0134655f5ae81d0df0d950065f359e5c643b7e38a4413d819d9faeb35

    SHA512

    87a42de498f9a91fd43b994b369470e593a809ad127337fe810879be2bbec31d830fc0e95ffe23dfefab6f02d46168727a8f1325e5d17023bf65cf061f29111a

    Download Submit

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    342B

    MD5

    b98ca970f714f03928420e10af710795

    SHA1

    b489eade24f240f0c01a800b5360aed2056d42cc

    SHA256

    06268136b484c93137a74224eaded79ff2012950cdb45915a571d3d82e92178a

    SHA512

    dc71f94a0e902842c52370a19c25af3ef6bfac0fcd3e86be7c7ab99e81b0cfe9334f3276b4a873125003a556b90ec2a70da17944a07bd5e56968b890707697e1

    Download Submit

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    342B

    MD5

    8867ec99c02dc622470cde7148bfe056

    SHA1

    fe6dc0b60f02b56fb64662291fb74dcb1e824b10

    SHA256

    3da1e4330277fd379f2c2421097dec538652899ebd25b7e82d011318498d7d42

    SHA512

    89d30b49f0584324f2288809c672da451bf29177e35bfbbafc5fc2447b53d10ed8d154c8b0adde7ce0ae8b3ea063dd36f7c8d4807a3ffcaea4f148e1ca77c382

    Download Submit

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    342B

    MD5

    70fcf56399cc6e830c779a53a596f986

    SHA1

    7fae21a152385b04715b1a9a7e99aed9228bd1ff

    SHA256

    6660201babc4ad6e7ec0e8f73a4de758339e3ec0fb09f507039041f3458b22df

    SHA512

    03a7fbf804a9fe857d1685dc029eaae20840d3b4518207718b20cd85402c8098c6f332b2debe6495b76d5d0d2de9e7cd2cb8dec88e7e6b90a845c267cc21412b

    Download Submit

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    342B

    MD5

    593ffe83ac72d2329b547fc5ab890447

    SHA1

    d7a795846de36cf5f99c94d8c21b2d89adfcdb07

    SHA256

    ca63c6e50599397ece415245b66824d6ab58a1d543442d185ef7b1e1c4a9c726

    SHA512

    5089c302b3073f62ed42865ab57893bc235598e2a53c8dccd453af8c70dc065ae1169435c5011de76c07271ab8cf93c0219efbebc24b80591069f27babb2f3ec

    Download Submit

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    342B

    MD5

    ab0f2c40098cfdd472c1633ab1fbfca4

    SHA1

    24995cbaa829a6493af77a12a7cc104bab6a5f51

    SHA256

    53b94d988795598b5f75723272a3fc262c8538905ee141503de27013e8a1e208

    SHA512

    2d9c2888ef97b984a591785dcff0ff5efdd4b152133f4310f08ee2ea10cd133a0a25cf13f931ed7f17d4041cbe563089e2384f64adb219c5ebb625b9284f8b10

    Download Submit

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    342B

    MD5

    adcc694e718402154b5a65422e5752d1

    SHA1

    23febb3d8042a5c1924d2a734bf1e16d98b1e6dc

    SHA256

    885f60299d284bf0816c4e2d7b44bcf243e18454ab69456992ee47c99a30a0ca

    SHA512

    5de946a6b880d0a17e16bebd1538d4618aa1ed33fa41c65b5af2cd8911de443c0b1422e61dcfd4724606c9f1f446fe9d6dc1616d03c6fd87cf0b0b6853056b6a

    Download Submit

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    342B

    MD5

    377eeee2b9c7fd2715a802772cf74fb5

    SHA1

    6aba0cd7453753dcd980b56bc3e4a89cc0ce9d79

    SHA256

    c6aee31a1a1478076a7b51c6efcdab6dd195388cf241c632a339c5c1e75debe2

    SHA512

    bbffddc4500737a6b3673941a71cfbb788e63dfe34fdb394f252c94ec055fc0f155bbbcc56db6408a76d9c0b36aad4aa2b9bcd6ad1716b70aba64e804debc851

    Download Submit

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    342B

    MD5

    732debeba4d5bd49d765e2cdd777a4de

    SHA1

    6644a86fef45b7e339415b26266034626f2790bc

    SHA256

    2f08e84c9603a24bb9fdb19df55392d93461273ea56226f9e4c25184a0d8dd9a

    SHA512

    983e65bb19bed1e8f60710b2c1d37991aed81129e86442ab19ef393df954828fb32d1c503489c7f2b777139c75c664fb368e5964c828683998864017f778eaff

    Download Submit

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    342B

    MD5

    526ebdc99ec9bc7aa69ad3e3c9add276

    SHA1

    2dfd8e01e0714630c580e2179b0f8117c06f541b

    SHA256

    aa76bdbeaf12cf07982aa9c7bd92550ade085ffae1a360f73e251f8f1bbe1384

    SHA512

    a242abeec9ad1f869dcc1d1032cb3f321de7b5f52b3685a8cd53576d86aaeb7cc28c34a34463447953f71fc2ebb2aec4107f25a9cc4cdc937991e24a6eb78e69

    Download Submit

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    342B

    MD5

    7b5b59ca60648cd7c206583ea7e1557f

    SHA1

    1369c4fc4e4e5f74e519501c711968f8db412251

    SHA256

    500b0d3b69a5b0bc11828383825574e8af993dc7f24daf3608f3b7a48232aace

    SHA512

    c99fb4324dee05209ecd69ea6304a9e8d64c572e7b3ca99e5a50afc6733cbc42010ffa89dfafefb67f316b3a1bcca8aab45058a6ccf4c43ec7a369b79dd2a12b

    Download Submit

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    342B

    MD5

    6caeda2806d7ccba3ea37b36d8ffe585

    SHA1

    3fd8ca74e58e0e79d875a431f318926c1bfea603

    SHA256

    ce77930c30a1d57aadc8cacec1f93d71e677d08a918e1d3897f83233de2901f5

    SHA512

    127254ba2eea738eebc08c7057d4a919c65cf37a2707835f45e913825c966c8c88cda4e1ece0fa9ceabffa51d1d50ffd0d6ad2347d0d3bc81abd8dfa0bdb0ed2

    Download Submit

  • C:\Users\Admin\AppData\Local\Adobe\OOBE\temp_ins_lbs_wid
    Filesize

    38B

    MD5

    a329d3b528597b4821bbae185131b799

    SHA1

    5e836b19da31f70f0ccc4eb02f3a60efd5565808

    SHA256

    138a1b0b0b6649e8149536465d6e10f4aee418b713547e3298f20a4927a734e9

    SHA512

    65972495474cbeffaf9de5fbca51644c455930a1f2bcd10622db3d18e0abd3a85a4e035cceeda78cc38f67a1087401eb54ee76159e20b30559e51c7cd747bb82

    Download Submit

  • C:\Users\Admin\AppData\Local\Adobe\OOBE\temp_lbs_wid
    Filesize

    38B

    MD5

    605c36e5fd67d2194ea5f7e3f03917ed

    SHA1

    a32a05ad0dd771a228a4dd715af1ec9da956766a

    SHA256

    4dec295b831bb61c30874af849c491dec5e1a05f52a6837f126e7a1a9dc53dda

    SHA512

    8f0f593e4445b03b65ddb34874e7878b78d0d2226419019b166cb139d68c3deecbf7e3bba7e38ec61892387216883ce273339cea0e4342c49662011e05523bb6

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\CabE315.tmp
    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\TarE327.tmp
    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\{F97C32C2-8CE8-4E25-B86B-9FCAB0E456F8}\CCDInstaller.js
    Filesize

    1.3MB

    MD5

    7c577a9f582682f27eef11030195b57c

    SHA1

    3b517edd713615f353ac85d910b0e7df4aeeed47

    SHA256

    ac03e251735b01492afaba4eda6a22f9a903b73ae2c16e5a7cd176db43275a03

    SHA512

    91a9dca69c477a0d8d8ee085eff2b7a89ac1c535aad0a942b4d068f80bff5e4a1f6b507643046d820e8150c17a1e5ef322f266d4f9d12a6592b4a972c054db4c

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\{F97C32C2-8CE8-4E25-B86B-9FCAB0E456F8}\index.html
    Filesize

    426B

    MD5

    a28ab17b18ff254173dfeef03245efd0

    SHA1

    c6ce20924565644601d4e0dd0fba9dde8dea5c77

    SHA256

    886c0ab69e6e9d9d5b5909451640ea587accfcdf11b8369cad8542d1626ac375

    SHA512

    9371a699921b028bd93c35f9f2896d9997b906c8aba90dd4279abba0ae1909a8808a43bf829584e552ccfe534b2c991a5a7e3e3de7618343f50b1c47cff269d6

    Download Submit

  • memory/2160-12-0x0000000001280000-0x0000000001281000-memory.dmp

    Filesize

    4KB

    Download

  • memory/2160-31-0x0000000007880000-0x00000000078A0000-memory.dmp

    Filesize

    128KB

    Download

  • memory/2160-29-0x0000000007880000-0x00000000078A0000-memory.dmp

    Filesize

    128KB

    Download

  • memory/2160-652-0x0000000001280000-0x0000000001281000-memory.dmp

    Filesize

    4KB

    Download

  • memory/2160-653-0x0000000007880000-0x00000000078A0000-memory.dmp

    Filesize

    128KB

    Download