Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    120s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    04/01/2025, 10:34

General

  • Target

    About/eulaLic.html

  • Size

    8KB

  • MD5

    a729d63514511766fcdd2de19cdbd017

  • SHA1

    737827e5c0ab0adc287d3b3bb16d26a9a42f0939

  • SHA256

    6dda16414ec5a7f6908f6088ea5edb7c67b024c3f695fbf7048ab823bcfee728

  • SHA512

    ad6bc65c950a94383f3f1d987508d22167343db632412b74d4734482916a7c18981dc8d84c57109f0882f6c5c6f280db876bafd24837f06996614d1bb9ce6ee2

  • SSDEEP

    192:HLFjO9B8eBfDX/Ek8IFyMlgy/RVr1YGrtsk2whjPYwWkpeFWlMddhTdLVxFl/:HLFjO9B8eBfDXoIFyLw1YGZsk2whjPYL

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\About\eulaLic.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2168
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2168 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2552

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8af0980200f67a7a0191af7b44d96a54

    SHA1

    2eb42dc077a37c5fdbc3b1d30c14820fc61b5eea

    SHA256

    a2449a1bcc2b186fcf77c95ff45971e04f3e53fe7e2ef08284133b9f2cfcb928

    SHA512

    10e81102a372ab8b30d4180f86d9cdd7e7c585e4e8c599907ae15380c0211d520f61fd1c1e339aac3fbb50bec794ef670566adece8b06080f2c9308bb211e995

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bcfdd4d5ed21dd117aeaef3f2b894d12

    SHA1

    3bc6bf2ab646b5d403817aecff0cdced7717eac9

    SHA256

    f3d877e1c6620856372863768a29e4dbfd1d390344936a4605724dca5b0a0e6e

    SHA512

    773509b47c5acdfb282acafcdcc78d496f9bc053c12741743c1a3fdedd9ede05630befd83e3b87ef7fabd699b4e84e39ab7d779c3e4250e1cd515d3d11c1e4f7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    74cfbea9ea90e80840ef49b52f5e6612

    SHA1

    34b30e38c3d43291bbb34c736d11888c2ff46ce1

    SHA256

    f48f47240d433800a193df7230b30e58c12671bb2a0c3ecae4bb4b6e9c075ae8

    SHA512

    6e96b44ecc3ec2b8f8c67b211e19309b4cef100ae14256acf9b760412aeb57ef457532e1e1a60daa760a840e906a1e52922de1c56f17a910ff3fb1e897927159

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8362892af35a22f8165cd58b34509e31

    SHA1

    3064e63b8bc95067f567076d46ad986f712d4d03

    SHA256

    db157c43713f92e0fa42beb45bda64bf03ea009dff6e10d19fa2eb40274f9fb6

    SHA512

    c00aa8ddbca59ef8013378a297e2a9cf19361949772c0f06e63132a017d4b75cf6eabc879158b8ad41badd716b4779094c743128c2a55079a74ba348f31c36c5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    73bfda3453362954de5f226927bcf751

    SHA1

    5ee1c277f415d0535f8969270b9d3c1a23afb42e

    SHA256

    9e52d79fae8730f1f9e2991a9b3d2d08c14fd4fdfdf0009a49c70d0d754e8dd6

    SHA512

    fb46f0bcd46c0b34d1d050d116ba7e0a2bfd202352370144b462146acefaba3130ed76b795b1e90c2057d79b7e55b302da686b7f236a720e74b63ba050c60e68

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d145b13a8ded68fb2ac9cba3d50a31bc

    SHA1

    599373b489dedf48df2e3720bdbe6359107b29d1

    SHA256

    77be336c0fff78c4585cd472ee874ea78358333f63cdbdb45b6e8904528e119f

    SHA512

    5d8e43ae952dc8288dcd0fa7c5c4687c776a1095a291b4b78ddd6fb7a60f8d386deb753161d655daec0b9274dc2a7870699dabaa41da2c5371bb4d04aade234b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8e3ba36b15a90f6dd24a5ea3e7ce6598

    SHA1

    b2332fea3781168388ae44bcbda9cf9532a18a52

    SHA256

    ac82387aadda515bf96cec6ffa7c40a315853579dfeb7a2309d497341bd50b5d

    SHA512

    b5172bc400da52328dcc0838b61bff0874992834342368e8cd4b8b6705567d07392ab400b5786f1305b7397db5fc33c3a8d691a135c4d051e9194d14cbf8ada7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    79bcae06ec342b0fe1b9f4b4d500cf53

    SHA1

    d8456c3c221defe3a7eef87e0cadc000d6d0ae15

    SHA256

    b2d1ee5024bff2c7d0847a6a0d75308e1251b6469d8d7c10165b1442e44d550c

    SHA512

    19b3ba3667e8e89fe9921eb5ac89c39134e8d04a186d62b39070bfc9d74ae329603e31b90b34b0b622eb9cb3727d49c5f2abf0980e738cbc03a0013038722729

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7071e1424e3777df8f7f26ce4fc1ed6f

    SHA1

    149a3df144c38b45127d990b7b5a18cfe0756469

    SHA256

    5e2db994fe35c9eeeac9571e2b73d540b461dfa23a51b84ac22fbc7cecb66d22

    SHA512

    9392462031d0d269aa4024312633fb13d82067770cf70520e1eecb33677edf134a466adbf10f6406417502845f12f4bcb560ced9f6539fdb0eb700f73482f948

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1f6d437bcc8224fef183f2979ba2c4af

    SHA1

    e6bc337556d51295c507587f04e577d98b37937c

    SHA256

    371454f42f079da0fa8ffabdbc6a69d046f42cd834b8141c8aa7fb435ffd5319

    SHA512

    1dfa58799f9ba005609c9ce80716fecd0945d63403646a28ddabf084d6db3187ab4f317a815b80fa2f584d6ac000e32d5d95e44b446ef8ed94eb2141f26a035e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    85934de602565fd5adebbef1fe89f2a2

    SHA1

    d25e944d58f49c41339a8e2fe8f417d9e08327a1

    SHA256

    fbd6f4727ed75f4521cfae10784d70ea3bc6a8b105120e72a190e3a4ba86151a

    SHA512

    33f499d29267276c576b298f3d2ff70eeffabd7e4e367d6d732fcc9941d7ea117f547b26aec0f24e9dd671c24a5b96cf11041accc6fc8d80fc60f32d15e478d5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7949edd64620b0fb7a2de8cb6ff16d6b

    SHA1

    e823640c73af6f155de26e0b6b8eebeed3d18537

    SHA256

    684efb2f64b9f25cbd940bdbbb8010cc8d09e395e7ca10ffbd9e70cdaa9d31e1

    SHA512

    cb385f24428bd4b0528ecaa4ba25a6d07c0f3b68d6ce06ec5163568732d8d262d999597b505c103a807bfe2ffdede63aa2af947e9dae255f02c7b912fbb4991d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6f173c2582a497f2633c644aff6fb472

    SHA1

    516608db4d2eb67daee41591215f69ef9cdf1ec6

    SHA256

    6bc532478b680c566d1b76927a1f133f2b9db539aaab23db42e6effada61fe18

    SHA512

    218ce1e9320c47dbed564d519dbdfcdf7062626773fbea5acd8210c9bf165ded316ab74a7c4e7adbef6c751c828d076f417d79205b744b3969aa2efa269869eb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f40db819e15150f80e46e4ea7084865f

    SHA1

    50f68d147883105917026a5d6d23680d5c296342

    SHA256

    fc88f8f38fec481d8daad7f65e22a3597a252fd95f09810387539cd4d2d0633e

    SHA512

    d83038f67c06ea2c308482bd38312e2809a2e95d8a3da5226f408d0da3c4710d0c5f381cf3565cb0fe7d5120591863e26a3abdfb124472c79e099e7e90deaa9f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9656bead6a2b18271edb0e2f70692583

    SHA1

    d0417816aeae8fc43864cedccc63b8e300c75adc

    SHA256

    1189c372bac187f45dfca0c36d4a1a11d9400f7b0feabc32562f2d420f494c7e

    SHA512

    41bb9a072ddcb7dd4df849851459525f083f42b7620298c9a0c6b85791b2db6d536405c1af9ab3cd24a1c4a3355a9aec9bfbf7d68a71c7e96ee202ec1a7b3da6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f7bd456ac46980b13dec5f6a42b70079

    SHA1

    751b1c1fcb3e8d060d5397e84af3441a2fc66a14

    SHA256

    4c8a27bc3418db49dc0a87e6325e71c487caae54179874b1f932d0af723b2ece

    SHA512

    6506a356d7c5d0bb841b47c6305fd155a063eea4bb3416bbcd7610d30cc1f79e5e5035b693390054341137165342d091caf3800521695facf126f98bf8de8836

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    62fa00e690cd73eabe11fba798288424

    SHA1

    ff426908031debfe8546ac737ad9304715124c4c

    SHA256

    57f044faa47238a6e0c6a8f7002c58f5e8467a42b8fd39416006304896b37011

    SHA512

    cc16b35fba7a2dc783840be79c9bfb98f9e8883ec9eaa63b6f03a9ef3c8d718375cdfe05a4523565571fdf5501fc4b2d09b7d85b50451dc3e6629276fccdce07

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    00c733cdbc809f99cdf9054261cfe937

    SHA1

    463a8265cee98c57e37d785e9f8f93349618046a

    SHA256

    37f87c8326327eeb7154aa27b180f047090475ae474f86e676ed940c06586075

    SHA512

    ff4a2ecac905f507ed01b17d2c4d84c576b3a99154f348ad4932001c14978fe391c7cd466e8bdbbc42d9f417bccd76b217f29f7c74488ffb4d447a25ce2fa95c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    af8a82318df1476004a255de0894ced2

    SHA1

    a78088f6c7fc6889ca5a8326f29fddce5f252503

    SHA256

    8d13a7c634e17a0f4137b0795fb545778353f294ab25a02c77ca9179d7249f88

    SHA512

    08ca9705a148c7e91a847d60baa4d104ca0c63c5b98fca7546e53cb8d7710bf663a037c97323f5a53b3559da0b2c94c36b3c8facba252f1fc0775aa5d36d2e97

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8fc61047fc5c16ba48da9c3fc0cdd68b

    SHA1

    5b51b730f75472406e158eca3de425925075a8d0

    SHA256

    0509493ca2d1f33a954942d8cbffc334e3598ebb14bd409f32853e1a287b678c

    SHA512

    836501c591b2db420aed2aaf3a52e4d9ddfeb128ae7aeaeb6decba003c44f678f3e2f9e083063334fb3f2bf47886ebd9d7c270dfaa98ba72804bc2a361b0d1c5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b17b55eb746838152c4ce8b82112997b

    SHA1

    b6b2c4492af4ba039ab4165448bd54f69e2c7571

    SHA256

    3375f554b153b571eeaabeeed2b1bf906b7c43e2c525e022557e755b21d7d6da

    SHA512

    1ac899fec1e969f22b0d83d4b0e0d936bfc16ac943dd7d07b530103d840d3d909d7f8a6fdabe44b0cfe15468687d5d4d3f55e3aa7d820ed51214996241bb66c2

  • C:\Users\Admin\AppData\Local\Temp\CabDB91.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarDBF3.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b