Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    139s
  • max time network
    147s
  • platform
    windows7_x64
  • resource
    win7-20241010-en
  • resource tags

    arch:x64arch:x86image:win7-20241010-enlocale:en-usos:windows7-x64system
  • submitted
    31/01/2025, 16:38

General

  • Target

    LICENSES.chromium.html

  • Size

    7.9MB

  • MD5

    0e3e4362f785aff0b9e1852b1064c0f1

  • SHA1

    a42ccb51e72bdcb5bb905a62efaa28857def3a17

  • SHA256

    bd3ee49a5ab19d15ddc44b421b0bdefce587790786989ae77cf3ddf1e6a2ba8d

  • SHA512

    193b57efc5f5971fbd9e4ea1a80b34aadcc2a814ff49c4c06afe972bf327e98ff0498217a8bdef984b10fdec6e7858a6fb88c0b14936e0c6b404387a426b87f2

  • SSDEEP

    24576:dbTj6ck6f5kVWS6RqLsWN3Omfpe666A6f6X6TTHW9GqpaE:tEx/i

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\LICENSES.chromium.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2044
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2044 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2420

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3e5b66918c3883c538a802e0655aecc0

    SHA1

    c3f8408b30c5300a33e3fdd1b955d4dd9c8f3260

    SHA256

    1a4bcd1a53a36f31179bb66bd438ee776c2784db199b50364c6d09f360fca601

    SHA512

    9094f5ac4d501b1353284c54756ae87f2793af152252e90e07fea8ba84a4ce1a7a38a42834ec9c6c220f387b94498a7226ce9726d3ceb818197ac213729b03ac

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1c5bb1cf1f80eb06fcf31ae7881e9a50

    SHA1

    e4dc457134716a87cd622cb6cde430ac5235d54f

    SHA256

    8d512ad65e99f432462edececc00432abd685605292c09196df77af701880b77

    SHA512

    e4afa584b29e5c96ebd47985f12d58232218f8d0a8a9ca2546d958dee43efabdd9be20a5d26cf78dc1a7c201c02f37825b15e3f4ffa2457295e23fb93456fc3b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9c0a77a34b5cd637b4ecf9f0d73e59d4

    SHA1

    16e015fecaf7d0e7ef727d4cdb26dee71aeb10ee

    SHA256

    d623d0551c2b21df33c754194b823d9f8119f65144917330984c8bc2a975c4c8

    SHA512

    cf92290e2225810dc9ff3643dc51dd9286235ea5b0b5677be98a9e8b3bf3878a1f6340e12dd7ecc4dba9b5668238ce207f3c72c40d2730caff915382de3e9383

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b7e2642434460110938121f695068ed6

    SHA1

    1bff896f6c9188de313dea80a31bfd0f98c6ba7d

    SHA256

    93b496c1fa0e34c167d969e2b65c6ca94741f6f32604576c1bee881b88cdcc67

    SHA512

    958ce2a3f43d3dfe6de62140892571c6c103119e457b722fa8fbc5d05fa02e75bca40fd5339829151f0873bc2521ba9275a11b0c58449b9d51f0d46ccdc3342d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    908c03f7a69d77d89a62719591f91ac6

    SHA1

    b1b432f3c66d03434b8c41119221102725ecef10

    SHA256

    15860c758a446a8025614b46f8ab7a8e735178388dc7539be2673fe569fbc94b

    SHA512

    ca8615005b3f4212f046327d6320b2c5cbfda843d5b8720026bf64cb26267723f9026a2dc567c6150b82612049362f6852964f371ccf8f24804f00a0f34d2d62

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3bec361b796908799ec5aabbf430d4ca

    SHA1

    41f3c4a51566304596632d8f9f3b179fc933851d

    SHA256

    74d667e9b1ab1abcc1863887c34e12e7b1de43ef4acdfccc4c6e232fbf20dcd4

    SHA512

    b21cd5f73652e18daf76bab3419c0230404b1b5d585b64a03330761cbea882888e94e7283ea729c05a289fbe1e13c76ec2d4c24846f427083a07f22b6e2818c9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e0240675eedb30db3daadc4e0b994e53

    SHA1

    a607da86afd14fb3a45c77782393548f63370aab

    SHA256

    3bf1c614ae3f1fe7e70c39152907591d3282105f0559ddca1c2b21fb21ffe7c6

    SHA512

    c672e63bb60691240c3ef4a998ffdb97daa577176e05d693b7b9e1436aed1dd44930b021ae5ea415e37bf387be6c8dcd88c26860e5a99cac314f354b456e2172

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e4bf013597143f3e2015ea24d52163ef

    SHA1

    74b070962398b43e737cec4ed619001e8fdda531

    SHA256

    eed926639d12bb3faf81e53e968118a7bc87538473c1ac4ad54691a806fb0f1d

    SHA512

    6575cb7ca481da3be490544a29adb8786018bf9f8db3187e71be6c4d48a4903e3bef10f51f814976c799308612942e22423e434f50839077dfc698325b1344ec

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ab7d8c4264311887db37f76cd1a12063

    SHA1

    a799c3a06ff9b6593637c1b28c4b8df0bbb6f474

    SHA256

    773d7688007b88cc44ce82887a98752cb921480dabc913bbff334634259d7ba4

    SHA512

    f2f5ec7a0eb82ece0ff8f1d64580cc2e094165e016fa696436fcfc040652d1d126cbf203c3f27e278c1bbb747afda048e90dd1498bce03d372631fd413914478

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    737e45ca809391fcc694b01e01442203

    SHA1

    7f34630b598d3d63ffe4379e9be4cc948ccc201b

    SHA256

    4a303928b6bd1a3d403324c45fdb6fc804cb4e3a06df017a2b4dcb037faab4c0

    SHA512

    aef44dbc22459f5c75135ca4401e91a75358cb7f6b61349cf134bca78da4b5c75b388b4e47f5f4dd7da367f3ef42881d73223de150a84eb224970500db6cc181

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    47839fa86940b5db23c0b6276fdc6fe2

    SHA1

    9c7f0b90c168c18aa277b981c8613c2f99a0bac7

    SHA256

    8bf04308b58ba6ae8528446eed9f3fa28b424836d63dce6cc784f04c8ab4e6a3

    SHA512

    745c4237c7741b1c20ac33e80e3d077b18a4e2aff08fce502cc1c5cea247966af4074e7dc3bcab45804fef776b4824d6e8a7ee55e6cb891eb47e853679a70819

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a1f479f5971934a929d88826625f926e

    SHA1

    a7596a13541490166a2af1b7a17c56992434aa0e

    SHA256

    fa2a59da72c4fe0d9e3cbf35e02674100a12e7ed4ca6b00773f9ef31923986a6

    SHA512

    7acdc6da4123dfd86dbb8e158cb20c1858e4cc81228b5bc7a2bd8a1876f206a03ff93c55d18b4ab2712a1040bbca9165b5ce7e48cea18533b45933e781125fdc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    dd5478cd4630994761dc912deeb91b27

    SHA1

    555c79057a71f96ebb1b4018a4c849834ccff3dc

    SHA256

    9a67f1394648fed1048fac0cc9779c31e807fe3e01b0c64958c2652c4b0a7993

    SHA512

    12b2a224057006b7951a2cb8245986d7fae757593be510fad5fc2d2b2305e1b78ca3a5e1c96dfe74fade85c74e6194cd1382c8590f671379fdf9204c1b19e70a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8b3a8c999ee243eafb900b7565f1e811

    SHA1

    2d4c906cef96f48a5249762962e455e093f3ec6d

    SHA256

    99211920f504c2f0c3eecaad35407f816b8668d0796f8ee29e173688b2cd88c4

    SHA512

    8696c5ca05ff2fafbcc7875712cd926fbf2f92180a5481cff915922e6107e0f61565531bfbf2cf16a601839dc26f5a59f46a078595c8dfa834fa0fe21ccbdc18

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4389be7a16176139bb25f6d02e16dc18

    SHA1

    cf979ba62095987395475984dff315d51f74cfe4

    SHA256

    d73579ec0bc1565cf2a024f29dc35d4cab1e1f18a827cc86450d0ff3b1bb30d3

    SHA512

    42908f70e3f6f6ba1cc8952813e01b28eb58974a05bf679c02793a788de2fd85790a9a76b83b1ee52e9cfe061f2f2a626d06510e73acb77e20e8f73cb7a2e5fa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    009e8ee6c9054923bf1340105a6d1f3c

    SHA1

    8ca777d1210382ba3e86837e8c301a6f6f2056b0

    SHA256

    d23275463cf601486b7a53d9d6bbbb4905885d6fe93fd45a27a06796f8c8a462

    SHA512

    f490b82a052e31fb168c28e89463a0141b235b614fa43801afabba3fb59c15df0b06eb6eeb7f36a143ef8d1fe4bb5cb797f599285322d324b76deb9b96736f0b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b13db2c8fd5441b6d7de6dece6608b7b

    SHA1

    d2c1960f60fc4a23c3788dd0fec6284dd53ad0c6

    SHA256

    de995634b45bb391b15d5e74483c5570fc7890092ee8ce7230deda07be9c93cc

    SHA512

    08fbed7ab57e4b24074940c6082077c3f51b9bb2b70a722013a7e7f5349451af47fe395ffc60f2eb4576c1a3f76048bdcc160c0f5f804b5f2c7bb44daa6caade

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    94ba220365add11536874b7466fc4445

    SHA1

    f142c69112686e486d56fde8c46c1839d26d312c

    SHA256

    2588007c5ccc115a8e2e7a5c7fca151ee3cfb624fddab9f2013146380b586285

    SHA512

    9c64c150dca840c43e254539b707fe7bd039bb7ded840ae066c3c0e4aa158d88b8215a9b43984b82f7ffd398a329740c074261e0fe2bd474cf6d5792a74db48a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a8f1946b99539015e25fb0bd4f57aede

    SHA1

    cd7f55ea9f19a05b01c5502992985a24aaec3ab3

    SHA256

    12ac3d51fba48b8e6fa3e55d38f797292cc2da53c790d232efd4f46a69a8d99e

    SHA512

    ce71cc7ff7b2d1566d21ad6828b697d86ba18ac756c079dbb44dc9d4d3ab2bdc2c348c3da93928b543ac480c89648479e5ee08413861ca4eb6ed575fe297294e

  • C:\Users\Admin\AppData\Local\Temp\CabEFED.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarF0BB.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b