Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Resubmissions

16/09/2022, 17:26

220916-vz93esgce7 1

16/09/2022, 17:23

220916-vyevwsgce6 1

Analysis

  • max time kernel
    91s
  • max time network
    194s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    16/09/2022, 17:26

General

  • Target

    http://beatsandmodels.com/ne/teoaaciqacteciu

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 39 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" http://beatsandmodels.com/ne/teoaaciqacteciu
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2672
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2672 CREDAT:17410 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:4068

Network

MITRE ATT&CK Enterprise v6

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\7423F88C7F265F0DEFC08EA88C3BDE45_AA1E8580D4EBC816148CE81268683776

    Filesize

    471B

    MD5

    0708e559410e8dc68f3dd1a7622ccf08

    SHA1

    ab4cfa91b39bd11461edbf133d889f04789afa1e

    SHA256

    ab31d03e4e5401bd3df1c339982d79631980777a9d7d4d49c694ee6385a5b30c

    SHA512

    76f45998ef092b990edca0b010c37f213571eeed419393055bb8fbbfe11818b45b2de1719436a6236e0b8a2bcec1bcb8b1cfa621b74e7e6088db2219afa66b78

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7423F88C7F265F0DEFC08EA88C3BDE45_AA1E8580D4EBC816148CE81268683776

    Filesize

    404B

    MD5

    6f64d0d49ea09422c719db2fe71807f7

    SHA1

    474e3e21ad609731e3ade0ad7a824aa4316ec6f8

    SHA256

    5c84b5582b2ebb6848802ef1676495c15dfe7324879bd80c231c6811a6c35411

    SHA512

    2bc8b7d513fb5fdb4b04cc86bb1bbc6f920f489be5f5213f919016c57f24c465098a2174763182f5a570db86ce01d1fac495e085908b72294bdb2dbb5cd24e3e

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\imagestore\ru1r3yf\imagestore.dat

    Filesize

    942B

    MD5

    2feb21d5093c1b0c48d8f653a32d7364

    SHA1

    82fe45336fae3e98c7829082ffd3cd9ffdca5e69

    SHA256

    0f32d4d087adf03d2e533d79c9828e901b4915e38f411303c576cff71e09fd3d

    SHA512

    d13201003e4afcda4166c76dcb640e420ae375962277b528b91b489357843a00ca14a3f314e6df652de6099712ea77abc9ff9ad63aae7404db74507df6e37720