Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    41s
  • max time network
    52s
  • platform
    windows7_x64
  • resource
    win7-20220812-en
  • resource tags

    arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
  • submitted
    14/10/2022, 17:44

General

  • Target

    srv.html

  • Size

    12KB

  • MD5

    7d02a4656feaf477fe181096c8537030

  • SHA1

    a7eddf9d0e79d0820621ce35e91ac3180b220d5a

  • SHA256

    ae774d29cb04152971f0ee8f3f06d6f5b8b77f84bd776366dad4685cd4567a68

  • SHA512

    5a512563b18cb08805eb396931c3611c9390bc87dba76cbafdfcd4d9aec1265400689b47fa422a9cb749543e48f2a1496ef56c29ef59410b505bc04dfbd7b40d

  • SSDEEP

    384:4Xwxzh/MNiHxCHv97Q5qh0bbtiZ5nF9bWzrPdy41E:4XcHU65ou0Z5nFFWzrPdy41E

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 31 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\srv.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:752
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:752 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1048

Network

MITRE ATT&CK Enterprise v6

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\imagestore\tcz8fqz\imagestore.dat

    Filesize

    12KB

    MD5

    cf8558b952fa51f4fb3ba49331a03625

    SHA1

    30d0eb2f1839c86e9451a4600850522b56879b67

    SHA256

    613818645c5feee0f43b95f16d5c9a8e557bf0a3c920bd03acf8c11e1b3bce32

    SHA512

    62a004b4b91d9050fb6ab0a767dc2022d6a42b34648bf7f4862f84a94b421632ee9d3d1bac5534ab095e86dc0a17bd68e6aad0eb446ce308e640aca6659b5db6

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\I9NA5QYV\favicon[2].ico

    Filesize

    14KB

    MD5

    08688ec246caa64b55f284a348008c48

    SHA1

    9d7196c2fdf65c05dbab8ab74c593a581d2f09b0

    SHA256

    fac5680d7feb5d6b0a4f4caa95868bf3b7a26c85699b2fc9ace6f96f40ab1dc1

    SHA512

    2f0e9a07a3ab5693438845895cb9ffbbfa4dce01e9340cf929d5ef4fdef25c3001bb264503a21b51fd4030da39f3857e2071c1c477cf888b6b9eb7f07b06e7d0