Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    133s
  • max time network
    145s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    01/10/2022, 15:26

General

  • Target

    https://wa.me/qr/LXELUZ7L77UAK1

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 39 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" https://wa.me/qr/LXELUZ7L77UAK1
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:4964
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:4964 CREDAT:17410 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:4936

Network

MITRE ATT&CK Enterprise v6

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\7423F88C7F265F0DEFC08EA88C3BDE45_AA1E8580D4EBC816148CE81268683776

    Filesize

    471B

    MD5

    f525b778e6901e8c416e2920e4e3dc0b

    SHA1

    917ce8ae6d64bdd4dd438488176253022c57a083

    SHA256

    c9eee793aa4aa79f35d393f9f1d863483aaf4004dea6ac19bda868e92a71f8bd

    SHA512

    f6f47a4935c09769b8df316e1b459c7b153ed26ac409d4bf2ce62a1635dba4eaf7ce77de5ce83100d6f3ce7aadffed7591fb7cee7ac10a0c081a2d3c613f1ad8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7423F88C7F265F0DEFC08EA88C3BDE45_AA1E8580D4EBC816148CE81268683776

    Filesize

    404B

    MD5

    50857a08717e5a933210d096a8319b1d

    SHA1

    6d4043cfb24974f3614c67541c573f9701a6c2bd

    SHA256

    cf86c9595ecc2bdf94b9e1eadcb70ed18e0a70d15cef24018d27bef1f7f2dcab

    SHA512

    32f20d68693212aa9d5df6878431b26c94727b2d2e7e206d97bb74cf9b521ace83c194c966f490b7a08ff0d723b0a0e063943acf532c6cdb4ad2744d958d5312

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\imagestore\z2evvp3\imagestore.dat

    Filesize

    2KB

    MD5

    a9f89db77a8617eb9da202c36f149cad

    SHA1

    ad4ee61e5a5e655c5b6555b928226f557d2b290f

    SHA256

    848f9d17d83ba6ca5bf8758312a228f192b72e6c50f7dbc5134f5c7f4105dd9e

    SHA512

    09756c0967631bc8a7ab66405856edd3cfdfdac0dd50fba097b4bf5a6109e9a94be908ec0727528c383e2dc7e1f086cdcf32bd86cd445a910f23a9bb3a4f2e6f