Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    134s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    02/02/2025, 12:53

General

  • Target

    qs.html

  • Size

    1KB

  • MD5

    40d00fa24b9cc44fbf2d724842808473

  • SHA1

    c0852aa2fb916c051652a8b2142ffb9d8c7ac87a

  • SHA256

    35b0f1bb808e1623ad534fbc1e72cea25ac28f71340e9c543f01d1bfdd094035

  • SHA512

    9eb750e08ca9750988290626ae8ed32a2ecfa7c8ca021b3e26b3da0a94de952b991a9a6a0ad5729d7d5ccf7b3b36fb36fd24047f705d0468ad04908ba8a7154c

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\qs.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1328
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1328 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:452

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    98fd3f1edf41f79d5835b3a452e58c53

    SHA1

    2e9df0a39c68a5bdbe08603c7c9d74be595742b9

    SHA256

    87b07f9c3ef8fb596b7302c63d87b77d28169c0c1c5c0a26ea6787a3363d6858

    SHA512

    6df95007c44b11eba4ebb22dedb1dbc6af9401b2e23cd55d95b8d45e5baaddb37a011e623f60f33eb8662bff6e3b55dd06b799d48c2ef99a8f177311920d3854

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7f74692d3c242e2a1ae27500c97a132f

    SHA1

    9d54b74d9b3f64d70a0e48c3219eda833d01084f

    SHA256

    b0cf7a02ea9e45679f7d66c8fa30d95a9e7f0b30718eae5db7102b6f287e5940

    SHA512

    4b232090dd048e2f470d0ee78515d7d341aa0e254cf4aa0d1b6adc4f14fb9dbd1138702a0e754089b7f5a16342f72387ec904adbfa4018283430dd758b361f74

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    190faf4db8e202b1ddd5a92448d83b6b

    SHA1

    1cc5db2735549f04b996fa5e2f42ee3b5c35dd36

    SHA256

    36d49d4807cc011f6eb4918af1238faa9356b6b589b54b6fcd91f60b9a4d5be1

    SHA512

    eae375206c84d0f7b00278f0c918435b3cd4792f5307319fe4e755a73244884f8e30e831988aff505c18dff848662a7bd65c774e1ff2b69eb9a152ed4d80fc33

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    278367c9332a5a08fca7e0a4e9d558eb

    SHA1

    22f7eeb52d3707b49bd4249c093edf046b27bf0f

    SHA256

    dc1b6e98aad19531fbe2d967c254d9c1b441315682b8f510067c01558d86d9a2

    SHA512

    57822d6a452794e12d542c848e5e132706d8c03221e455db80833be83cd08937cae44fe5a0047cffe4f678a8b5b0effcc1fbe1a5734a82121986e8f88e75d031

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bda48b8e626b868894021d69e98e5aac

    SHA1

    fb424c95a9f2424c4241b05d745fa14da1ced493

    SHA256

    5340be7a37c8188473a608ffaf05fb0221c59cabb929ece5baf2e3a2fd0d5cce

    SHA512

    b59e74361e152f222f190e4ca167fc0eac07d1e41c5a2f601b87f3206ad7dc859bf3bdcec24f03e66df504d990d4804170fb9b3f207f2b930a84cb8360bd0cfe

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d5866e0ea415aa50cbbdc3104b81abb0

    SHA1

    87a688b7c016b04d381639b67f69a48230021401

    SHA256

    294bb4c75c5c1b8c55bcf024523ce17e49a2345eb8752d970972b4ff6a13a8f6

    SHA512

    3fb06287d5a7f569fa9a51454bcf2d7c15ace5ab1a159f3ae1e33d18f6a7ce27aa994593d1002f6c5131f18be5f7fad1094b787760efa36dbca772bcfcf874b0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    40ddc927bf04ce109f2beec5ce8e4cda

    SHA1

    bd0fc6ec5e089ab558e618ba64598d0987c681c0

    SHA256

    60353254ab1bfb140fd4737f68d6fce4a755b915ea09a9cadb2f890411aa2c2b

    SHA512

    d163503324fddda23bf2003f897500134a8985eac11dbfb0126e36d875b90a76bd05f08d730820d372a057b7f3c9db45a483ed3192088de8b92050939b2f1448

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    67188ad5cc59d45fafbb9bf2f8a68c50

    SHA1

    b24d927946ceb6a8f94724ca3c9b04050847753f

    SHA256

    e3c83610e420aa56251ba7b303b8d7f51fcdd1ed66568d26c2833b7b3dc361f8

    SHA512

    7d5d22e710f422f955a91cbfb2fda9522232794474d41a76d4bd67615757932975d94bf919442b5641d7dc9950f6860ce55bf106c72496a32d4e12cd600288da

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    58eed9383a7f55446b44d1b0c1d4b3df

    SHA1

    bc19dcd7c6bec3464d5744cd21be1f0e71c9568c

    SHA256

    c88d5101e92eccdbdf50d34d87547705534a689ae4394b0ac6c1c1d23923c5d1

    SHA512

    35df847e4edf078ea835c8d016d3a693ca9e8badc80dc2c707daf8b76a75560629651182a10a0940f20c6dffabd4b914b7ad32fe7c98b054982648d9a5e0dbbe

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    aff1b0bafd6aeedad41f91ced96d647f

    SHA1

    557b9b283aedb36453a10123668a6564b8f23245

    SHA256

    747c65b48411d47d842b1e9e8b92a8886a1691791e100554201bb1d83bcf9024

    SHA512

    67410d6828826642912151436a5d797d3650e669b7a0b6dfb912f8d4148e82c2607cc5a11c1dbad9701cce5d86846bee8c24ae10c310ee0f01d5c231829b449b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    527055f48fb6f6e05321b5172a959401

    SHA1

    9a04d36be29c51320690e686a71de4979c1ed18a

    SHA256

    6d70205cc9ea2b1f6a9645ab949b5920b94c9c058a96db9a87545e36f61fa3db

    SHA512

    510747f8761a28cedc9b2bd4b95ac5ccfd0cb2998d12fee745b186f494b0a0b6df23f51e86fc8c460ce7c61be28752deff094e9e10f9cc135752417d2068a332

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0f351962ec03e09f0b6abfc2ee19e8a1

    SHA1

    6ecdad1294a1c821273734351add08ab627fe05a

    SHA256

    e405183294734637b04e574e8fe2a88117db5564b4079746c47961a750a09ce5

    SHA512

    3d5c6a7ae0afd22d14de257514b8db40a6f44c67e1eaf8c08e21679e4a3992b46a5ad5f1c8f7277e967096d5156e32bac2fc06f0aa8daa5a912516d4368a7060

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e7f0887dce682187972eea71989bc466

    SHA1

    e2a6c8715e7a285836561b2a85fe2966487d6a06

    SHA256

    c90b9c1ff68084d0e8f8e6769e2b190c5bd55c9f0cc9da61eb87feedd0b8fa9d

    SHA512

    bcc79a61da50449a80e87039b975d1c2cfdf6f36722f43d4d9910dbba5cade59d129a8cbd72ef5823a81ca59cbb52f3bd9ef2029f946624018ce2fc1589f9838

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8a73c6843ea9b3887862110dedcfee3b

    SHA1

    456763238693e3d0a1decd3275abdb8394c7378d

    SHA256

    a67c5eb70733ad454291f9df89e7a7f5709ac6d3459c437f3dfdf0b692bd0ad4

    SHA512

    9a4081414d5aaf959ada64430a5a9e392ca92384b02a3782390dc225f4599204601aa4b0f1de48296449f8544a32d1f502061622050ea53f643608aa8ad9bc6c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2e726056de64a7f11bcf8979823e84b4

    SHA1

    20787c0fadb693ce2f1a055c5e243d43ced5d7ac

    SHA256

    ef4fb2eb17ae70ddb60d57b59c43097da88c7d63f4f58a7423a900b844dbbe67

    SHA512

    f489e77c6c4a12912a0483b97ad08956326a1895382bf610aa26a16cc0d3ec4de0880a2041ee5baab83b0d281c655c3352a6884b5456070e603369998be8b0f2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    04ae0ae97a3733eaec764efc57c8dd0d

    SHA1

    e51d6d6e2ba3b67af837d0883f9a4ca36fda20c8

    SHA256

    e7b56e7bbf502ec332c0aafe115aa29425140a7c9aa65cb55aa8aa726bf2dc76

    SHA512

    af85a5684542fe536c60c9cbe9d4a4c51ec2d68e42397f1c90f8434044af8929829b1d8ea3959fd2a1dccf53c77d76b9a4b5c032c97ff87f277bfc994d944610

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d6bbea4744d4de208e69d5a8dee0e566

    SHA1

    6dc2cd0557a7361eb425c59906960ff7390756bb

    SHA256

    85814d94faa7af4724c65a3ef2494d36fa0071fd434b4252a7b604a877ea388e

    SHA512

    f52dfe58f3ccecf7193fe65c9669f685b1a6773fb23e7a5f618b02451a66cb82a3499b00ead10456e27ebeac78132e44f039a032a413b1b4c725e11a8720cde4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5f26d6498e2cab65c4fd7a33e7fb5df5

    SHA1

    e0736e93a0eb726f4de3ef718b9d8ec34447417a

    SHA256

    05fde93f0d38706521eff546853f7cfe000407cd176c348e6602d286f53d3078

    SHA512

    849633adcdd08695022e819a9b579c26448b295658c58bf8dfab711f22070bf1494d7936c9a6eb161a944f818b4b87028a731d308145a5e0f6b7939e85a8f7e0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7df6eedd95b9295ad56aa3e31d31999e

    SHA1

    81ca195d02c7e28165ac67fbeda8297a255282af

    SHA256

    2bea3790df17d5ec962d4365a3842dcdd3f4fddbb21f69ceed82911e3cb03ef7

    SHA512

    8aa116ddcd09a0c962981d7a52204b27f15cb8578418ddb173cd8422734aa0a22e2aa7692edfae6eba61821e19eb22be64931a6d7d82b9805d559f85ac9e8290

  • C:\Users\Admin\AppData\Local\Temp\CabE17B.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarE24A.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b