Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Resubmissions

27/01/2025, 21:03

250127-zv7tqawlbj 5

27/01/2025, 20:58

250127-zr8lvavnhv 3

Analysis

  • max time kernel
    66s
  • max time network
    67s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    27/01/2025, 21:03

General

  • Target

    .html

  • Size

    43KB

  • MD5

    3cbeccea39d014ec1da7df7c3f0d7dc3

  • SHA1

    b91d5a5522982dc9bd41f8bbf0019f27fa7e2677

  • SHA256

    e22e66417aa12ce77ad8d12858018e72dea3138e65a3ef5a5e00345347629c49

  • SHA512

    e4171b5911c4e4228e2dbbbffa383751b3911fe439412bdf3b20fea61302ae8d97d211edd2a9809bafc7e866380465af22984500022a02aaf4f86d8e42f172d5

  • SSDEEP

    768:2dBpqhYGMpevT3x8gAts0+L7G9TFXWt7aXfsW9l+X9hJYFnzOMD5QBdxaXfsW9lf:aB8hYGMpevT3x8gAts0+L7G9RC7aXfs6

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2396
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2396 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1068

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d8353be555575d9e1c92dc133f63d53d

    SHA1

    bb4ee69949e8375e87d69c423f007e79b6e67a66

    SHA256

    cba34cece10b7f8f0bfef1ee4ddc370c5e20e46862cc4e8850b99dbb0f2b90ed

    SHA512

    23565de3d7a3d630c5a0283c6d897a93b6490952f6289a774b34ad110ff93da529b1b724c84f7ca3296022f95ac4b81474af92502227300c2f6b82c11f133c95

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0482f26177e6faaa6f3c48ba8c9f2d63

    SHA1

    1195a473e4b9ec9a65abe9ee4589422af4da85b4

    SHA256

    31b058c276fb36cfe35dbefb44f35e9f3bb9afda1f55783a01abba723294b6e2

    SHA512

    b149516c6c1f21d7cfee2ff5718f63bb304063f2c77fdec9e834dc2c7f98f27adae837c9c120ef7ed5cf2aa2455e39d5dd5fcc9ff39a9f3db70099cb74032623

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6fe4b4792ebbf2f50b934875af347ecc

    SHA1

    fc347f9da9f32f9e9d64f76d9b12528f9df2e986

    SHA256

    1957f642d0b9f3ddf5621378fcc81ef4e69cf8410677c0a1f70e4df32c6701e2

    SHA512

    f6e34c6edc6b48adcf03db875d0f48e1e7d9a179a4cdba763e930facf098372d197e341318d77854601001e01c8da976826cc504f3faf4f5e9dc559dd7dfb306

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    eba82f70f01bd057013341bc0b4fe1b8

    SHA1

    4ce7c65a51d796fe8d1c018f9ca3c68f52e50fdf

    SHA256

    2a74020f022fb73016dfa60e6060692388d2e97b51f338513f5743886e80aad0

    SHA512

    ca9857a5b7d6b491bd6cbfdd01fd59071ff70ae44cf8138fe7ae556736c034a4745869721fc538cff83c78102579eb5bc826eebaa7575f9bda197559f544f245

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    76ad6355cd19fd3c0bc4196bc940e753

    SHA1

    c868e5a85d36c0ea695815250d1705ebc5d0bb3e

    SHA256

    6b429addc1abacccd8ad7a5b8c5023480641a76f9765aa2387a27bff9bea4341

    SHA512

    6689a34debd65e5660de27c2bc059a82eedef9949d03b5648b7a8118933cc19d3f3462bb0dc294ac8dc20b4d6befc2acee6fc3c4d6b256b3da780e501cd87092

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    becc1c5655223323e27e3be208150ac7

    SHA1

    ae16803bdf02953beaae6c2ae11e64b540ebbc52

    SHA256

    b4afd0555217b617aa09e1cd1e900f45d077ba3e3dc052d6cfb30186f9773c1b

    SHA512

    a42c8eecdf9d0a7af53a2f9ca56ccf9bc899b390e1b18e523a957bab8fdc686055df6fd8b9c26a9c4fd723de9d5c05c2daaf5db212510c35552ea4512002d9e0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    471e24827772f93f86b5174da8b29c7f

    SHA1

    dc5ea8ca7715c1025f83614e2c22ae02a7104570

    SHA256

    37512896d618ad0b54114918df10cca724447c452deabf5d42b890ec21279cc2

    SHA512

    5eb4760f6bdddf5d3cf8ab3e0790253a2217c1157e665b319e675c577d76d73258745753eaacafe8a7bbe152ac55fd5fdd562b4d8485e154ba2b62b592249bd4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8fa33b7edde0e53c144198e4e6354730

    SHA1

    44058e2c149cd6a88c873eaa7970d3782f88dcce

    SHA256

    dba5d3e1352492425e6a81a86c0985f92c93a85fb2d095b2dc859685c47edcb9

    SHA512

    c7adb079d1f072b3e83e4e08165c90e8e46afcf1e4638e83304030d300847562b4a457a6de0d3d4d38c4dd05797e9b20a416d1be81a9c140a4a022bdb4e3d5cd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    45fe0b794f1018ad0570f0736a761bdc

    SHA1

    290df3b9578492d0050a611b21dbc489c4a681b1

    SHA256

    78ef6404780f79ed81b8600b83245d079cff9651846c9f744df9257e5eb6c91a

    SHA512

    6680570f3d555cf47f46ed4f0e8b236d0a6497d820a4fd6beb1a8752912afed2b0483c31e022907646b3746885873861e313cfef55fc6ef086d162c010d90e22

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    53b6efdb80b842c3f98221a0b4705302

    SHA1

    4924b6e09dddbff7063ee0664fdcc0a28a27edbf

    SHA256

    ef7b0ebe70bfe03179dc14f597eb99eb6c3ee7475400551ed31d1ca4e95de4a3

    SHA512

    bb458bd83a5e813aa374e755bd6942a946356e35dd7b68844622559b7e3a0161d73cf83f1511ad8c8b088df5be0d4c1eb7708a9982d04faaf2a86ad5744097a7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3671d6482ac55bd0fb0e0dcd5c06918f

    SHA1

    350a068b45aa14a98d9776c23d8bfe00b877b0ce

    SHA256

    1404f6f36cd41baa6c7f04bb6fc4837c58fed9be1337cf73625763a8c8e96211

    SHA512

    fd8397583b53cf162b406b8be9ac83954569b9233d38a357ededac42452886c8dd3959154384eae5d5ed8e9e67e45c27b86ce422acdd25999f60eb34745c9c1f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    04d3b60022adb01a482f8456d4307751

    SHA1

    655ba37f3f424c9c53b92311d9337fd0ac877d81

    SHA256

    bf967898db2e6c6dcef612b79eadfdeef0cbcdaac30711d31ccf77fdfa992018

    SHA512

    f8d2d2701797bfa9c213201c92804f7af3e2e249673ba8fa0a8b57cd88cf6ce1cd5fbda796e036aec6b167a35e0772973d35210a7b66115970fabccb786bef7c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f16c65e7b5c479bed671b953b175ff87

    SHA1

    f8f9d42bde1e86d107f36549b8d83326aa4d4b61

    SHA256

    13f7a5a65787465dc86b7af18cd27e0972019f07c069ecf141cde51bbb13353d

    SHA512

    27935b8692a4f2584aa37ab987abfa5f191fdf046ea12c5bd6a5747fd3c407e3ebf2915d9a833bc8591e8da0535b3d81ca6f1d81f046b2b5fbb25743142294fc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    42494984c33b1ff9534d13acccad2207

    SHA1

    7367d0eeea906db4e45d7ae42328fc3f78fa006d

    SHA256

    31ad1df92ccb327ce2a8030cb18947a107e090725be66a166f849728fa69b240

    SHA512

    926f5dee428bde9595ea94ce43bcf3bd3d817adff2339e8f048b087a3d2115a0db8ec7102da85bdd411b336ffdf759ab628abc8892a8a92abac6fe374685a692

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    aee2df96b87cbadff29660a8f68e62cb

    SHA1

    2de18abbd9a18abe3d36ca85ef58cf643b2cd070

    SHA256

    24bc70629d2a280bbf7afd4e3d6d5667f1526c610299ac2720f8e83859535862

    SHA512

    c9fa981686736a65eb243c23a313237ef0dbaec2b0d680b57d739052bcd129761a3c05f6995a382ac53555df202303a1ecf42161ab90fff92c41d9d94d612b59

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c828584ce6bcff26bb48937f60951080

    SHA1

    d2b105d4703261c90713a27f66a50ab2f6d68ad2

    SHA256

    2452d28eb5b4e6d58d2198b3923c23e6201d9c7e06e4ecf68d25b687f4b18316

    SHA512

    92187b1483145bbdaa91d5e5a2b53d5864488235de6840d8018b1e8ff20d9cb1a74c742cef716ec8615c9bf65cb750582ff355662413b855930f50b55229a27a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a82b4c90bc0d98979f6df4e16229d17a

    SHA1

    d7e94fc9770e8851049c2b3e454c2e2886125208

    SHA256

    f8a782d1b91aa32e4892d2fc998b4ca145bbbcf703eacab9a4384386de62e6c9

    SHA512

    b89279495ba5ba21721f071171ebbfe3015432b6e4c10f3fbf79b34febc4d463644a52e8c3be34bbd0c48ac56b0ed74f8d0e1b80f9fd285ed612a0a31c018a85

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    517a327968ca04271b8a3ed84bfde357

    SHA1

    e8583b01fe705191a91f6971c678f56ae58f76da

    SHA256

    efe250ec1839fb4be86c8e1e0c8c83a5b5f6cc09d3909c7976b104d5be051a36

    SHA512

    dafe7e14edd910578b948027cdda484bb90e2269a49fb05a6b4a8115d7b214ff3e73a75371c5e5f56fd595e58400b09bb3b911284a859c9de3c85dc014f1471c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    002f94d643af3aa0f19f3075d9633901

    SHA1

    aec7e88ee34f294ecdc379e391c2c9a15bd3a9d9

    SHA256

    b8f4c857d6d8a23aa2a953e45a45b9dac6eeddc8ca0460b5e5470f3d12417812

    SHA512

    640d23245a01b62ce3c2bd34aaaaf81d4a1515b332d2d298fdf94e81f03a1f8e59725e0878ffa6a49ba48123b33e4ae8e467ac340ded4ab9474f01c3171ddd06

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0f76a628738702af23264feade78a53a

    SHA1

    734c4668d027eeda87992065a9dc5f24179ce1f2

    SHA256

    c4a9b5f66e8c0c8d459c2e83be5dbb9e968fe3058ae237b94ddd1d5e2fb593cb

    SHA512

    201720e03460ab13da1d1d304d3454f80a79b084cd68f08c856106362b1b8c6fc4c0309b5ca17ae84e017ac9475146c74d440b20e3345fc65d984ad579525d5e

  • C:\Users\Admin\AppData\Local\Temp\CabD617.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarD677.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b