Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    93s
  • max time network
    146s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220901-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
  • submitted
    31/10/2022, 16:52

General

  • Target

    https://l.e.allegiant.com/rts/go2.aspx?h=157506&tp=i-16EB-Fu-4wd-B5EDi3-1o-70Wp2-1c-qCzy-l7ndr2xLVk-6wL0Q&x=7xc.neoeduca.cl/LG#amFtZXNAZmJjZW50cmFsb2hpby5jb20=

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 35 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" https://l.e.allegiant.com/rts/go2.aspx?h=157506&tp=i-16EB-Fu-4wd-B5EDi3-1o-70Wp2-1c-qCzy-l7ndr2xLVk-6wL0Q&x=7xc.neoeduca.cl/LG#amFtZXNAZmJjZW50cmFsb2hpby5jb20=
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2836
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2836 CREDAT:17410 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1660

Network

MITRE ATT&CK Enterprise v6

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\7423F88C7F265F0DEFC08EA88C3BDE45_AA1E8580D4EBC816148CE81268683776

    Filesize

    471B

    MD5

    deabbdcb221537d48aed54816739f367

    SHA1

    9ce0f0d21d9bd08823732047e19edbbd909396bc

    SHA256

    494de69d83714780f68a1e6871716f3a4a10835e90b4f96e48610c3e8f39e9cf

    SHA512

    95a80c34ddb83e74e51e5d0884dc7433de78b956db8fb2b1fb54e0f158283991edacafd3e7653161767a69f25f9cf537cc1a654d20e3f27bbc54588b3b4bf5e8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7423F88C7F265F0DEFC08EA88C3BDE45_AA1E8580D4EBC816148CE81268683776

    Filesize

    434B

    MD5

    81e5af26afb931330e614ec0cdee543d

    SHA1

    7c3ebdff3ad487f59d24c07657ec5198f080cd3a

    SHA256

    2dc53b2b21707d3578104afa50fb38de9578cf3000ec8c66773b7be83e2b50e4

    SHA512

    2afc8155007e93e67e133540544c86c8265e4216d90610d98b9e57b36316a54800518fa391edd540b16280c09a25b929ce2b31a7c8c6b4e0af74173ea499dc59