Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    74s
  • max time network
    139s
  • platform
    windows7_x64
  • resource
    win7-20220812-en
  • resource tags

    arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
  • submitted
    22/11/2022, 00:13

General

  • Target

    72106086aafc7ab204a8c86c66628469565eb75e1b79361cb5e55f53232715dd.html

  • Size

    213KB

  • MD5

    344393e41e341d3cd23353fa06b6f032

  • SHA1

    647a27a37e37e2cb797ffb5e074490552ae8cf2f

  • SHA256

    72106086aafc7ab204a8c86c66628469565eb75e1b79361cb5e55f53232715dd

  • SHA512

    c31f92ae263e62eeb25ddee062c509d867fc7673d97caaf836fbda942b315206810d6ca6480634ff679c5dea1fc7079e801582f1cd9fcabf34ffea5e968415cf

  • SSDEEP

    6144:0JacMXV4L5NMDsof6X32LypcRzH3ZAOaKr56kuEP3KX8yYsBYlJY:0Jac44NNmsm6XAypkzHKOV7sn

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\72106086aafc7ab204a8c86c66628469565eb75e1b79361cb5e55f53232715dd.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1736
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1736 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1112

Network

MITRE ATT&CK Enterprise v6

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Cookies\S0G8YPEM.txt

    Filesize

    600B

    MD5

    3dcad5b6aecab8a816ab5db1729a8055

    SHA1

    ec3e5e36fcecd268aae0b663afbd385c408e627a

    SHA256

    f5a4c4b3a4e177b7d7a6941d05ed0e4843c56d766cfbf23702794eb965a5ecd4

    SHA512

    cc70f724859b08387dfabecc6cbf92b4b960a0003a9ad3173274f0d4151f594437337c5eaf7f312b26a02c5c2ebad100f2c4e415c9a7322dd53da1b44c8cec7e