Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    141s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20240729-en
  • resource tags

    arch:x64arch:x86image:win7-20240729-enlocale:en-usos:windows7-x64system
  • submitted
    09/10/2024, 06:09

General

  • Target

    sample.html

  • Size

    41KB

  • MD5

    23785c0effa869d9632b2885f5f7b224

  • SHA1

    f470bcd49543f4a79c1a667854fa56487cb538c4

  • SHA256

    34ed688d8ed5ae6193ea3aaae25e2d06ba39ba395fcc2282b2c365d0e47abcd1

  • SHA512

    adfa5000c8314c628e3f9ebc723ffdbe8fecbe38cc451bf36ec7c89e33b594f1f80c2cb60f6d2a32993165cc70386226a1ee42d11d839586a1de1479fe8f9810

  • SSDEEP

    768:SNImh0OfX0Xp/BqWYViveBc3Z8vfIX+h1BNYrJ+M7hVbU5+mNHEm8j+qtmr7CI+P:SWmS+Kp/BGViWBc3Z8vfIX+h1BNYrJ+8

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\sample.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2124
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2124 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2532

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    569825fe5f0c8f6bda89780171be8df9

    SHA1

    1a767cc445fd65f2179cd82c17be399f62a2b7b5

    SHA256

    a7c8006f0cf78b5500d047455988d19f2afae5de87950d3d43bead7f28adb726

    SHA512

    56a7cc29ab722b700c935e528e6ce0d32e3a91b893355f4d7e5ecf15e921bd3761c928f3cb34d9ac1f582ba3a830269fffe7aa09363931f07ae0c37dcb2fd94e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fc04253c7803b86afee44a4a2916ffd4

    SHA1

    98d0dd5fff0d5c157b5e5e8c2c442530f1223e74

    SHA256

    5fafcee1a12d43fc84d09c713d1e51586e5a99d0e10e34c7e66f93ed59add9ac

    SHA512

    d83d3c29753b0cf8a424d4d70b5ea3226f516e30627ade7a679ab68cc4a0caf7dcfc9bdf4ca1c5b6acc84b4d21cff8db51f72876dcad7afffd4407dc7e9db13e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    92f0347eb17e348c3e3eb73dbea0d3f1

    SHA1

    9566f1bc41d7b59865c35e088b51a013042c3039

    SHA256

    0b51f49349146e5022e03fc4ab3b4a00d4e0a63ce75e529884a44f356dd1732f

    SHA512

    f61a30698371238642c804030ee6eb6e42feeacd790ffd76cca68406c9400eb953f128dca9ac3229e238aaf5817c44dd5df9d53e50e204be8f7937084d0d7514

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    76a96566181b13614d25d6e73e99d87a

    SHA1

    a2c3173463bc94e57acfabd74acdd36823945ae9

    SHA256

    447c2949db605905be243608cc98f3a31d7037aa021b68892ff785ab29bd6174

    SHA512

    2969a4289d79ce57809fa572eef839abbbc61180b6ef9dbf2ef663454bcc04369243dc08c132240102b6b8851e308b9ad26bf97a22f1d07f43457db00530744a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6ad5e5a4d567abb65a459800251b9212

    SHA1

    5f7384672f14178a62c5833ad1d740bbd4292050

    SHA256

    9b351f8fac627d0a022bad8a0231aaebcb136de28a6467960d3fd5f61529d722

    SHA512

    fe0187d2e5fc90317bff8f5527df54c35d725c26c030d21d1c9a47237a486e45e9dece8878cdc520649e0a6fb720a03ec7eef881dc14fc58d759c98e9f382484

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2df77e0c964e45ad2dfd00da6ee52ee9

    SHA1

    c373e6d89c9b499719c4a85b49dc13674bf54cde

    SHA256

    345afbe7ca1307fc2496c7f92f1fc592751f1d18bd88f67d19940fa97df3fef5

    SHA512

    99f2588c65392285e10c7fcd10648853e861d8ce82b02d593931572356466891548aecef749087fafb218f4f13c9473666af1bb5b2aca4a64b957dae8a72d462

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    05160d1893513edfd58cf1a144e4e72c

    SHA1

    1039eb81b4a7751716eef93884c1660df406d8aa

    SHA256

    e091a555dc9fef145079c26618113eb938e9293aad1944082b195d301f3b2e1e

    SHA512

    d59fb75d478b6b50315976674f872ccbcb7835db597fc5aac31ae784b2e2f780ab5548abf5dbd8c46d014ff347d0ca8139b33e53e6c0bfa02135d88c8f07ed2d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    41418a0a9c31869564312b04716d859a

    SHA1

    aab048982d77c24ae594347dd617fa6ee5dbaab8

    SHA256

    11e7bfdbeb537ea4276393367f97ba9a0152711fec461828ebfd89ee5b313e0b

    SHA512

    f93216cefb2585341c820d256ac8edf6fe436b8e305f63bf72516c479a22ab6e9e92e386bd192d98626b1e7516525422d92ebf425f7c104934d5d09306a66ee6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ead5c2f7d9033524ef07596fc8a07946

    SHA1

    6964adc00d6bd7226724d010fc4498008f77728b

    SHA256

    9c29babc1609804d4a2de1553fbcea00a57b984e36a4c0afc4e6bb3aed70901a

    SHA512

    2033afa0e1178464d8c0fa3b2403d9f7f0f0e9ef371657f729048fda9ace0fe7f745fc19d16d68013258ed9517d3f09e4b906a1fdadab0f4cf8406b3b46a66b3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    96158e52db21dc3d12311f62cc70a97e

    SHA1

    a6552b37236beafdbe932dbbcfdaa2811ff8004e

    SHA256

    57733ff0213e8ec667e731512c03f05f48837e92aab50dd53f368aa698bc7a09

    SHA512

    3ca2dcb0871a4a7c5dca8492e2d9285df670af0b8d0f2bf4ca496a1f373d434d5093d33f76d1cc40c207fbb709719ec697554ef7bd582d9e7c757718b0a9ba0a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8de8783ff21c40ec87532f733428e5a4

    SHA1

    3f82b2b8c32f992e8f9bef744226baec1618bb5b

    SHA256

    608df4b1c85f5fd4c558a10b8b5bab1079873386c7eccf6c78c680b1a95accf6

    SHA512

    3c0418429780ab07b098149bd929fab12a90ddbef4c4287fba784b67d3c67875d63a1340c36c5a5297b7d9f90bbd2078dc57bf20c0c849c80586adea247f8005

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    89acc7036fa80abb702bad937da7aeb7

    SHA1

    ff98d6e3d60d17b94d184c563afb303d8c11eba4

    SHA256

    c35582c80abe0aa743c15e2cdd2a1750539d2f6c7f46f3da66c7b434a4fb933a

    SHA512

    b48fbd8665018083ea554387c42645631df5add608ddd25894c72d39a64f16974b719557d606201780cca7a019da441e5c3ed1fb61d0cfe3a14f05486c39d9fe

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    134acb7bb6459a7cf737de449b0c9ede

    SHA1

    32370a64f324e263a52841cee58b670ffa98a5db

    SHA256

    0d13c22bdc11500ec3294900d202ab62f422283d9ecdade0a04554122151cb88

    SHA512

    dcbd6238585ca1f68693af9a2bf477570118173fdab0c441e590ba3e0c7615cf2b127426625575b52ecbbcd0e8c0195b69d094b559526ab202f462618c666604

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1b3799ef73278434c458e7810cbf4221

    SHA1

    9b733b4c4569cdc2aed2cc0f91dc34f172598718

    SHA256

    926d2a5838875dfecd53fc4794b62e8369c23b1fca8762b580558d91f72fc31c

    SHA512

    0a862b19fa6219e4657f7b9aa33be0386a8972a75d4c05300d70af1f0d39ba08e84f592936283386afce5ee114944fcb1189f073e9f9a6e58d5ce408ac69b077

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7bb873f53300ba89b3da12c417f23ea9

    SHA1

    04e4480aa3f77651b0ca6ddc17d3739311081466

    SHA256

    f5c73af694ec3b9412be71308ffea885f200a0db305fc097aab4723a72665d90

    SHA512

    b1d731ac9c220edb17baf4081b53ee5f1f020418e5253d944c5a2ccc6bed1837459b1e5c92aff2191f137505523f6048fee165d8f14d5abcf2adc62940ca83ca

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    49b1f731985f3de25571fa428a5ef043

    SHA1

    2f9a7383ae78ff3794ffb2cbecb8867feb274ef2

    SHA256

    72a152f13aea1d66e374841d0491841adc3deb603d64a29f221d765eef32e42b

    SHA512

    df6a820a0114d0b4cc5808c9cad9b2e1fafa2a76bb4d115437e97ee8cd4cc36c2ae4c2f8881103a50507d4fa6292569e9b17778ebf702376c41d9f5b156028a3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    617f7d7f9db4af4b4f0b4481f12865e4

    SHA1

    38e43d967d6a1c702bd7acb8fc46054823c28f8d

    SHA256

    af592acff458c96e27782747fc6eb0339c5ad016599a77454c9826105d7d38db

    SHA512

    8694a61a6054016a351bb6545ac56a165b3ec7b6f9279b24c081d2be7f379f1eb5bf54007da5cd1ef00605b633e5f5aa8a717c46e566b3fbe795acbbfc49f4f7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1b9a0b7fa39a62d37f879f02b3096384

    SHA1

    e10ce4b372afae8858ed7df3e9c7f4886448f4e3

    SHA256

    5b14dfca02e3827498a135e713539a94a407648b3f6047fa3d77f17524e227f3

    SHA512

    1831933fd39455113b10a27e7c8905c96e102d535f5fa656475a87a4c96026f73f3261393c8f6a942e5371101864199f1886fdc13cccdc54f9a52621eeb4eda8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    50bb27b016bcdeaf68e87013f78c0c3a

    SHA1

    c95c9da6231c4dc497283c9a1ebe2b7a0d69afc0

    SHA256

    a2572cc4cadfbff606c8a24ca15f49438be94112d2695153d327664281b81396

    SHA512

    922b11bc60a1378fe76547e41d382f22c6b59856940ecea63255b247e65e848ec1a2f6cdc9b9c4a74657b1e3cf0f2acc5fccdadb0338d8311714bae2c480b0d2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    733f9d64b6b4607d3439a3866d60bf4c

    SHA1

    7db9a35f38da9459069b6649d6328609108a841c

    SHA256

    8c40c97f59854eb80fd3f2a1eb849b438046d05a081bd4d8cc6c59f3be8bf873

    SHA512

    6a032585d53b2aca0b87bdb1326da749d9fe0f961ce9dd89885abbb60f273be7687859dca1acae1cdfc1ec9200d7bb1719298711a12509e23f420f16db257331

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f6f212ce8e33e7c80ee64014adc1db5e

    SHA1

    600457d7108c9aa9ab7e4a5aacb275fb150ea0e7

    SHA256

    6e7061fbf1a7e2f9ea214ace42aebbcf57b5245f876a19ad006d37e6cde3608a

    SHA512

    96379f7f3a66d9c23de8e86b1c2fb213ef9b80a40493284f29a72c48ea1cfbbd7da40cf1978b0c5f9d688a6444fd9ff5b4d80b8ed9dbaaf6d31b44701b1c32bd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f3cf94545ea7aa96d05b105f4d783e94

    SHA1

    f274f9af698aa2afe7e1e18858f1f3d3cc521b28

    SHA256

    0f328ed85a3ce3e3b36dd2eb9b21802a95df8aa454d6833809ceaca3863829f3

    SHA512

    8c7acd92595edfc4ab1176d2fb4c1278d682289e07df5c366e4636c799b95f00aae31800fe7156dde5406a7fb111e0eb888f00212fd2886912cc8878fd18b565

  • C:\Users\Admin\AppData\Local\Temp\CabCA33.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarCA94.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b