Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    133s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    24/12/2024, 19:53

General

  • Target

    PangoCairo-1.0.html

  • Size

    1KB

  • MD5

    5343c1a8b203c162a3bf3870d9f50fd4

  • SHA1

    04b5b886c20d88b57eea6d8ff882624a4ac1e51d

  • SHA256

    dc1d54dab6ec8c00f70137927504e4f222c8395f10760b6beecfcfa94e08249f

  • SHA512

    e0f50acb6061744e825a4051765cebf23e8c489b55b190739409d8a79bb08dac8f919247a4e5f65a015ea9c57d326bbef7ea045163915129e01f316c4958d949

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\PangoCairo-1.0.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2476
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2476 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:308

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ec51c8e0d2f3c329c40c38fb33c60193

    SHA1

    a2c3b1c79b03efd7312333287d6b1e28075f351e

    SHA256

    6ac89371205b0140891aebde808064e0b923601ca890e76e81da5728e38314d3

    SHA512

    fe120009f2e11437dde0cdf6e1555a1fc52b9cef8bf1f106b7b95f75b4cddee1660b989d569a89be5b36db2ce45bb4d7f91787598cc5c08f5c019d3eb5a18abd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4fbe5bf5e625099c711636095c9f7459

    SHA1

    bf7ebe61814a42d0ccd6cc022eeaacf5b5fc56b2

    SHA256

    ab653674835548c89a52dd9f164867e94c0bade103a4f59b040a151fc6f0fac6

    SHA512

    7bba747455219120d941fe9f8a4886e81ca16c175e587bd3c70d71c7cba51d11dbdcdd06ffe86780bf8f4519c377f964f891d131f470342053b0e0e3c4940270

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    71cf7311952730197873a73da3fa8664

    SHA1

    3979efc55d00bdb4a7c94b084f0010df19fe425e

    SHA256

    426bd2b34aff5087dd066ee7e5f39345b2e35a510c0fb3fc0caeda3e63aa63bc

    SHA512

    1fe815e2f1fe6f131dae79897373b805c7d22e71f4c718bad4aae177f7a7070c67ebeb3ec79cef5d658ae16f3e5848d5d30847154d93d46496ba5b7e2b20baa8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fa73e100ac0c0fd34e66c6e285912f6f

    SHA1

    264790e3868891b6bf6c01ec2bd2f43db01c445d

    SHA256

    af61a7835cc0ae0020ed5eebe2cfa5f68462a03bfa45959d748d71b709ebce97

    SHA512

    6ceba3c02ad94cdb76942b782ac43114833ec0f0347cb9e307839772c137a4527fc1280d929d5d1d2f033ccd65bfbf3bad5838d89ff876dd7019c967df7f6d6d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8fa5a2174b4ab40677f8bc4009f1edb3

    SHA1

    f8542c6e7f447c12119f5b0fcb0bbe85206c935f

    SHA256

    f348b50f96bd19b179a8d4c96a98b702d474602802fb56754a0d1b83955086f0

    SHA512

    47fe37616abe25d1a7f27a383741c4fc8c8aa7a29be65086d52a0ab71923e8caa44c2543225cbcf3a6e2aa003aec7e9a87205de5c189e0a5862625a44407a80d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    dceb22cbacfb40d19736266de32348f2

    SHA1

    1cb1a81791e4b7bb0b8fcbf7baa7b5fce0b5b199

    SHA256

    16ac9821bfc11e73eaa72bfb0f72aee51257c28f88cc401cd3e1196cc82859fd

    SHA512

    aa9f4b73c0572f580f76c33fe9f238fdad845f70cacfd399c173ef381e24de44014c6060700bdcb16d88adc663dde409e10aa22995ec6113e3b8fed0b3ddefac

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    53aab019b0a3fe724a58a14a339cec74

    SHA1

    6ec2af49ffbdef276be124402410aacd59521dac

    SHA256

    f337c8a9b37f7dae85cc3c7c5af3d2e87a34d31413971f1e948bd261481b52d6

    SHA512

    d4f29432a68d9a0600d96113b09f722fc046aec53b3906f0d81fcd84a25e1aca2d674917514e1d48d7cc8eacb99d8a79f66e2f32d6dba5a2aa690d57130076b7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    104dfc87a0ab30952bbfa9802b22e803

    SHA1

    3747d58cf579eeecc252420a5ea67ca56c4ce1f9

    SHA256

    1add20e4b942fb0eca1d0ba014160979eadbbd593a535790a652b4ce483bf285

    SHA512

    39acc6fad2c0836a7ab477d4a449cd312df3b1bb39607331c317c5aadbe495a5543a1eec3a9562dba3b0243685c822ab2798f1ae78564be405adce20349c3f00

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    34471aa43fcfb6f66cbc0881fc5eb240

    SHA1

    157f850e0bdd4d035deb482fe7591b2948d00ef1

    SHA256

    466b81158a8939232c4347c863d45911d820dd185ab095c0eab1acc2bbb50db6

    SHA512

    c5a7678aa99b4d051438df9d2433b9d720767107c880b72157d3fd22f6d9bcaa2d5a3a451d74220f13c08fc4d3533ee2ceac9b0a06ce3a7fcc562d86f95df24e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f437bdddec53ed78e7f8269a2411216a

    SHA1

    3f5396b1678f915ce4f718785d62977c53695075

    SHA256

    37c478b18259568386d5dd85d975092f60a59b3ea1dd2f954e0be54982085d57

    SHA512

    8edea788636f41c9b384fbdd85f443970da9e21f3b11ce813cc06c2ba202c9d8f90a7f83c02437b34fbe005759d151245ba26dba0da1cd1821ab6466f5d0176b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    11e8047de32dd64d59fc09afb16b6086

    SHA1

    324fdb1657cd644490520da0d210e39d0d8ff96e

    SHA256

    0eb9ac3f4cd13c9f6e0bf6e86d53c2e4e34fda9c43d62a6971b139d4ab9c7174

    SHA512

    12b756f319c980ffac2a5f0ca66b2110b50a21965a4ac68d76118af19a0633b813197535b84c83822c342925230a987b2f7b44e7376cae0a11357f2b46b548d8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2937d60c6b2f4d73259261f7065b9204

    SHA1

    3f4f2e32899de427ab13dac86f54ad4b63af7b46

    SHA256

    6a1d6a5dc5405f56dd2a80fdc57e4a30930853cfa21b3547dd1c0591c8ec1a80

    SHA512

    706a8b3f64db53981bacc9039649bad02b9422c1f1f4035e7aa25b822df20559351d0b218215e26adfdd9a051d89fb27a594cb5255403b3073b73350739d026c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    59b281c17f841e2ce584260215e4da8d

    SHA1

    546bf465e5283166ae448e146e3f397199971562

    SHA256

    bc5cc8bfae258bc980a3e83c5db29a1f03a2a529951041718ed22c202ae50d37

    SHA512

    beae118bf4e46364448d6a45913fea979ff466794888c4141985408c0ee69f216d7a0e6bb31fc739c8702f832a9593fe0185b47b9c82212dff828a09c28bcc44

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6fb7abaea62db873b7df43e48fe056ad

    SHA1

    66f4cb48105091f534c07cd3f2810a230619d776

    SHA256

    3ddbbafd0ba8b8531405e5fa0d31feb0eb707ea91eef0dbaaf2648b4845f17d2

    SHA512

    22c094503c0e57930085039be072a297bfe548b5eb6781a62810e609a9942fc167abaa4cb5935bfe524c87c13dd6c699cea82a426080dcddac8cae695936365e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4b86c595663b5313f8c3b539df564023

    SHA1

    da34ee22747ad2e1d440837c1f219e9ad53ef901

    SHA256

    16a0c76d6aaa7fcdac9c3d7d01884cba34f00a9878cf79fc88ab749deac16d15

    SHA512

    308f00f6e8dfec961172381d59db52108bc795f1083129fe6020d77545b69a7679df80d5121aba937fc89cf3ccd787e9e81e1880d0a8bc89b569162a33d42581

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    87ddc96972a379313e0d94d70cc34dcd

    SHA1

    cf12b24bc2c715f276353d4e27f829a49c24ba6f

    SHA256

    1a2de688499d8cac67c92adf0bf3408cf173928ccb64af2629dbf49e0a9ee8bf

    SHA512

    1ef0347cfa0ffdf586aa9b519610ff0190cc1cc65f0a6c0b63cbceead46f8f2a07f6fc125f7abb6334ad771c2e04f936073abe2211ec6f67d3bc04e29224e8f1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7492c630292a9d081ca73453d4764f6c

    SHA1

    046712c92c4c6ec3a2552bee0b0c0dd4342c3d2a

    SHA256

    f5ad02274bb4102fe27359432368c33df38a21fa00fd5a069e99e3c566991837

    SHA512

    5f6df0785abc156d24b33e2a8005beb8f899e07038d38727fec429249a89ec759dfc0b92c06065d7010db85ef80a375034d3f8d5bb39b1d1bb64614b6c0af4d9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3702335c5c87ee25a1c0c9d0a84e62ca

    SHA1

    f9dcf9a36281a4ea2b96b45c87ea7c4a4bbd7ff9

    SHA256

    0092443e03460e2b40eefd81ce5eaed315947a0f7c25d68bd4d11e4607935d04

    SHA512

    f10810b6fb551c6c602a920ab388f34c69e3a0e5f7585e985ec532b53d684dc5464b080ee94618e76485a8826fff72d59d5f1743d16e56488f95ec200757bf55

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3fadf9f8bec18ff8350cc7f032761681

    SHA1

    0e649b8be1afa9662cb4f6b129e183c621cf8a82

    SHA256

    2037d6613977b1a0319082173b714b3bfa26547292ac03680f1900aa38b6b73c

    SHA512

    1d0d6645c67efc22478b96966fb06a23f21e83a961f48fba7a7df57949c1d5e0e212d792c29e724a9a9e44f0084a04fbb9f74c3e1cffdfc411686f52cc15f21f

  • C:\Users\Admin\AppData\Local\Temp\Cab9C4.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarA44.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b