Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    133s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    03/10/2024, 21:45

General

  • Target

    $0/Resources/BrowserSearch/alot_search_defend.html

  • Size

    1KB

  • MD5

    32ad78f67cba13b15f746cb9b172c3e7

  • SHA1

    1a9d093b854adb26be538730f31b2de89db80b5d

  • SHA256

    a98eab555814276b5016d687c3945093705dc610a755892a712b7b7a423c5f29

  • SHA512

    95856f4924c5bfc6265e9767c2c0fb2fb4fa10bad780c4152c07c0fe9123f7efa8766d80ab82150755fa75979f4f7af4b3aab2e3181a66cfc91d04caf2f8bf50

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\$0\Resources\BrowserSearch\alot_search_defend.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2636
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2636 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2700

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8344d6a4f6587e4f2f6824500df05bdb

    SHA1

    4f7f0c8c7e4253401c49f3e14ceaa71a293b0c2d

    SHA256

    8863f5bb859029c082c15cdf6b4158c14787dc20bac82c15b23a6fbf2eba3833

    SHA512

    363b45bec684a8e5168214c8c182abf53794e772068811b99b3f91b9db1feec3cebab60880fada3825a560f55a6ba6cac64b11084c139d18069e49aedc225a26

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6d253381150462f057a00f52ac09ae65

    SHA1

    86d5989f2b57a7f14827c62d26ae22afe2224e58

    SHA256

    bc23598eeefa41333b979e6b05f82e31716af4427f675bd7c721900226369c89

    SHA512

    cf8a99ba14b2f2befc8f47127a90e443531f5380ca0335c6465521e8c425fea5b615e3d39095f9949cc1fe529e2b77fab3c14963fbe62c3e242f677aa361153f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b456cc282b7f0b2f0f9300ac83e895c5

    SHA1

    458f15e0fe0fdc9ef10c276132916c783af7c360

    SHA256

    306520489161c7e9d204e8cee54c45380210de97aeec004e3a5049b1a383d760

    SHA512

    43b4ba3c1db2504ed5c3140a2442b0e5ac779a0fe5fc4e48ab6610a6f5b921259ad29a573120c33b168a8971a81b3c91508f3cf78a20a0ca4d59baee853bac5d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0fe5aec7c043c71d086833049015d913

    SHA1

    3b9de35fc619ad6b85c432022eaf8ed75f550b15

    SHA256

    7014eef89b23d6082bf814b890b0ddb23751a471497047fc73c89bba00d7c390

    SHA512

    f026d36a651032400885d9d51f4181b86d94c8533aabab4c622aee316803761c908d5bfce68516e97d574b59656b653c2ff410f501e325e9ea236fc5ae58bd09

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4ebcff51797ba35137d48e42cb682868

    SHA1

    a459e9a2a9b081f45f25e8fdc04393ec24acb328

    SHA256

    bbe5d1671aee3276b1a51f6a28df11da347d9fec0dd47985bf0f0ad7ff76878f

    SHA512

    cfc60d2738c5533f6880ed34e0f43b8c614d49823429941718b8ef298f489f1ec7fc99c7b05b551b0e3d2859a7f13da047029e62dd6a73caec617622e9736664

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    439427e6134f6908a22fc17681bd3ec3

    SHA1

    90dfed00ee9aff20e5e9d395f4e8d15d7e484868

    SHA256

    4eea54d18a22f08df623d4d0db639fab83671edb3c0da258defdc896647195e4

    SHA512

    1d3e929e0bf44a3f326ac4e1cb108645f547fbfb991e2c4d7f3009a3cb90331836717b7a00d987b8b9ea4853ff121c256891b8fc791c34951453a0cfbe77b339

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b31a8beaae2c1e4671ad382f6c507af1

    SHA1

    078e6bad0f9fe356d61f5bcdee0460dc691b4161

    SHA256

    f575222a2c0601112b2aa4a2229cf5807abb938964b642e274105af845de16bf

    SHA512

    d3c50baf692d16c1f9580e7239063471df6d6b400a3dc7d5b9f17658a1c43a2a90d0f823b78d2cab1ea59f60b627d595cc9f0097716bf84101b94baf0a40b189

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7695ebca2812ccd448a0d654f7e71bd0

    SHA1

    627402739637dff7bbed8636d9e9055c532ffc63

    SHA256

    7a4aae30ca78fefba8e7416825f05681562508a7db46b31bd7fcd0a719c5aa0e

    SHA512

    c83df014bde0b5384dcab796ef1764b9aac3b3cf58ad2e3031374047082f3e30e41eeb00aba87bde4b42ab2364c130b897128098988bfd486d4e35752c58c0f8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2b42d2ab74548680b3f37b2c317efcc9

    SHA1

    ea29b33490c53407fde057f37e51e5dcf862956f

    SHA256

    cc2f8dc43d3f0bc67f3564c17528d29e5b6aebf5b6e00c884016ff72e791f2a4

    SHA512

    77d1d1afd14ff01e2fc4f0d9be3a8a334b2d9dc26801c92ed53865c591474574babf45c315e07855267d8da2b477c3c49a354229aaefd88fb142c9ffd9671879

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    af23dfb1713368ee23bccdaba72fb1d1

    SHA1

    44b6c5100aa07f9ffd9ab52d58d6b5044aa26e72

    SHA256

    213a62ac01396f460bef0b0c157e3b72fc78d1c46b56034a9645218e3e67156f

    SHA512

    a4a281ca752220f4ec9b00f752732467237472043d3f1b887583675d46a48ae77ebf5ea990f3b0471b235042b63f007b686eecac57663fc87b733dd95de32862

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e2927179e5e9c600f00bf8e40095ac2b

    SHA1

    6d19cc6b974d9f2a23ebc9e12f7d5c739fabe591

    SHA256

    de912fb1509e1ce2263644f1da93e35584c77ad3f1fdcf1b8995f2bbbd781a05

    SHA512

    c355e836e11edd7f3f1522901898976bc6a9434a7a947b13982198c4bf70a25f7c513dd15ff32780195eb223d1ea55d005cd843a5e6a77aaeb0bfb4e800b530f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b823ada387fed6dd4401d69f8241867b

    SHA1

    4080abb0f899bf6c25bcf97f9d9989cad99c7508

    SHA256

    4991c233de77324c55de6834b6574c31bdeb58a641d17856361e83d244416ca6

    SHA512

    1a8a4604fb791cabb3bf41de24487bfd5f5ac3db73978165248e550843bbff7e32b330c863243415e24968bdcfacccfb1127e23af7ad5ef2f0397ad6d0527e3a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e20c71f6166b91667147e4d6d13773a3

    SHA1

    2c8959a120326e5e61f3efee27b204f0f1c8a51d

    SHA256

    80438d04b57e0cafc709d2c896fdd9ba490935143a5e004fbad0b8b662f0316d

    SHA512

    e7d0ce766d9d63cb72236d431900c83167d8f1392aeba68a268a2f1d6ace82fc48ee7849f956fc46db5088963071544297847dcaa09b97aa2ca4ab6286767469

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    efb9aedd2b869a92814fb1d7f787c829

    SHA1

    30c3a2d4be01f64827103cbaaea2aa08d63e6b41

    SHA256

    70fa7c55198bc6d2797d157e90903fe880398f7ec8012e4c0a557c0925f7d687

    SHA512

    e433bceefb2cc87ff78d017e64a713a24a7ea2d86bd2a928c57aef12dfabd79ce184caa4e6c8500defc3e941a1ffdbe0c8600ef6629b981d099b7fd04885e848

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b78d1722915220a82d3db70ee01c2a63

    SHA1

    7226325889be97b084b3e51c312f08ee5a14b8de

    SHA256

    28e13fdf591f896ed8ed19b8eed1c1216deeea3ac4bdd931158b2b95669f9fbf

    SHA512

    80ee667cef565fa58765d2825a6496bed472f69b6cd61238795eefa289630f65535ca01d1cc9e1ee48b3e27a2825df8b6499a96ee40453267508ab783f1fb385

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    cac77ce877b61f096c3a51d6a2110df7

    SHA1

    26ee16f6799e4ec8553d60e381b76d087396930d

    SHA256

    bb8ebcdfe634cfb459b05fbe7e756d4b3e4011bbba1e797fb4cb2f2f61887887

    SHA512

    3b4248552e72ecd74c76f003bf75e863f9ab3e6b5ecb384e552078430e88e04baeb7091032dbdcd650227acd1180242927d86ea9c9809d90f20015faa82ebf48

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    91f9ee9c3efa535bb061f81c29a1964c

    SHA1

    bc10cdcc4d5635c841cfb5227a25ae97ddd56c91

    SHA256

    fd116723af3e5390f54b45706c6fd862000fdf51db36ef4d1452c54ff9812dc7

    SHA512

    2474682bf6903bd7d0d77d5eb200bc3ab1c65342560036e2e38117cee2c023971e066e669b7fc2e9bc570b7d39dcb75da240101196c898774cfdd5ff0c40790f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fdf1b975e17b26284efdc0d3818d5e06

    SHA1

    ff35b8c1b6bf0ad00a109ada032056c93ebbe575

    SHA256

    64f77c10f7ed43c8323db41096efbb07aa7e6a56034365378a456af3d54fc098

    SHA512

    bbd09defb2daf0b40545b3860c04ef7f7d33f480c5f25ec474bf9fff01614589a7cc6127c1b34288885de69baa298b28f9b43fd9f780ba5145122c3ac8166f95

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    211468037751d790577b32d8a8e46029

    SHA1

    c5cbf23dfef4dffe815f9fbba22c14d44e089fcd

    SHA256

    516a2b27d94bf7a86da67b4403f23248d4634c796c9085da95e38404989b7f85

    SHA512

    2e41f7daa819015f0f95c66ef8c12615cb71991a2255c2e2bc57a48a6d1ef3b1a0f886df9fab2ec78540f5ca715dc02311da1f46076da5ffebbb781bdff81a17

  • C:\Users\Admin\AppData\Local\Temp\CabFD17.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarFD87.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b