Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    150s
  • max time network
    138s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-de
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-delocale:de-deos:windows10-2004-x64systemwindows
  • submitted
    06/09/2022, 14:31

General

  • Target

    https://1drv.ms/b/s!AqI9U4A0oe3oa3qO5bbjo-oYW-c

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 44 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 8 IoCs
  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" https://1drv.ms/b/s!AqI9U4A0oe3oa3qO5bbjo-oYW-c
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:3492
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:3492 CREDAT:17410 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:4808

Network

MITRE ATT&CK Enterprise v6

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\6BADA8974A10C4BD62CC921D13E43B18_1DC6D7385EA816C957BA2B715AC5C442

    Filesize

    1KB

    MD5

    ff10e0244690e538095dae7a74dc329e

    SHA1

    8d89cf79939d617acc394c79d9de9d81c38dbedb

    SHA256

    0b59403910c2cc1474782a47d3b15b6e217b3e3a5a5815856de900b7a6aa3327

    SHA512

    da6e2785aa4326e80217f29b5d51533fda35a70dc79727584a9732800fd054c81e1701a05dcb1e5391226845ab5ad034561ddd8100883f445ffe7ab7a78c09c2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\6BADA8974A10C4BD62CC921D13E43B18_1DC6D7385EA816C957BA2B715AC5C442

    Filesize

    416B

    MD5

    38cb9afbcc701db50c25c9574bb42fa2

    SHA1

    b52617f3809e6599a4f4e62952100cddfeb84948

    SHA256

    54d7176a960a1b8d8580915d997dd2ca23adbb4ee91605f2da0caa2dba21a8b7

    SHA512

    d7fe5a22a8f78e6b460e428702d1e358b2610248a89608fbd301601c3e07eefa45bf3510fee0d2dded2a67a44dda50f9f9c68b0815cd1ba47511b163dccdf7ca

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\imagestore\ru1r3yf\imagestore.dat

    Filesize

    8KB

    MD5

    81cf01e6322913fa93c81814b66402c7

    SHA1

    bec25832d979584dfae73a712bed2f6a8f53ac31

    SHA256

    8b86941f68afad89ef76f6800bc7cf918df14550a08716012199f31cf2c41aa0

    SHA512

    6ba8d06bce66cf40ec91ff4a9dbe8f7ef779940d82f77e2fc283af236e34462b02933f09ae90908055ae7eb7c5fcbff6c88d580010140c9aca37a8f51ff935c4