Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    90s
  • max time network
    152s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220901-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
  • submitted
    03/11/2022, 12:25

General

  • Target

    https://xVq0CM9mYCDLx90iwWhPh?domain=webmial.platfrom.bar

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 35 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" https://xVq0CM9mYCDLx90iwWhPh?domain=webmial.platfrom.bar
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:5060
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:5060 CREDAT:17410 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2160

Network

MITRE ATT&CK Enterprise v6

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\7423F88C7F265F0DEFC08EA88C3BDE45_AA1E8580D4EBC816148CE81268683776

    Filesize

    471B

    MD5

    d84d4b6ec3847b0778e7d3d4f5aefe44

    SHA1

    fd32f06a99845a434b5bc3c497e5145b7a59953a

    SHA256

    239d44ce5ec4f3a6a64710b589d80e24a0df32ffee440c9cd48920332b79ab70

    SHA512

    3902a4938872f305c780bcf0a7a5dd7c7e33e935f6c98b27d1b6e6ba9d329f03ff016dd481b3fc4e39170ac527b546c1772610e3e7733c927d08a9b9300abceb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7423F88C7F265F0DEFC08EA88C3BDE45_AA1E8580D4EBC816148CE81268683776

    Filesize

    434B

    MD5

    52f2505933008d922a4c48602c40e938

    SHA1

    9348282d00bc456688a535d517f353e48cd09b32

    SHA256

    40c4c9b70b5b745affc422c7f53c62f30ab61b9d1dbef64c31e7324452dd69a0

    SHA512

    dfa2bc5b6df6948702cb0da9d33c6ae280e6f86d7f63eaf9c5b7a46efc34049e99760c4c311056fb7848c83685834d0ba763472fef0f16ab049cffe09b5fbd11