Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    82s
  • max time network
    150s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    30/09/2022, 13:00

General

  • Target

    https://milliken.iad1.qualtrics.com/jfe/form/SV_cT5tsyGlFTkQjXg?Q_DL=5PyYlOCvhkLM7Zp_cT5tsyGlFTkQjXg_CGC_hC9IhnlyfoSAk1L&Q_CHL=email

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" https://milliken.iad1.qualtrics.com/jfe/form/SV_cT5tsyGlFTkQjXg?Q_DL=5PyYlOCvhkLM7Zp_cT5tsyGlFTkQjXg_CGC_hC9IhnlyfoSAk1L&Q_CHL=email
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:5112
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:5112 CREDAT:17410 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:3404

Network

MITRE ATT&CK Enterprise v6

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\imagestore\ru1r3yf\imagestore.dat

    Filesize

    15KB

    MD5

    1b2287e1c1fa0edc16e5be2a12ff0b58

    SHA1

    fbf4f12a35c610f7164f1282842f24edcff7b120

    SHA256

    00998cac0445a611bdda36e53c38480a8a1a1b1a8dc4e4143f40126d43c5a176

    SHA512

    76650b6aa1b4d76e6aa0a173ff40a7e71f3a924d0dc7693545c51ebcb9cdb3e278f7c1bb47f800f3a686f11704911e36e13cd17f5064c09257777450469f1a0f

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\G9LDH5FK\favicon[1].ico

    Filesize

    14KB

    MD5

    521269841ff7f01a1772f3856e636d01

    SHA1

    7deb793c8e6cb57c23cb3ad1da6ceaca9982adb2

    SHA256

    65e99ee3b805f7b1c8b08159161e3ad53960640a2c3f952d282af4900d1ae572

    SHA512

    d72849a984866c1ad66b88d3aaae7cff27cac05ece4a491cd7afd8d31a05557e726f502f4223802d10212a1cf8f769c1484263cc20ee1064e3ac2b0be7ad9d67