Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    67s
  • max time network
    152s
  • platform
    windows7_x64
  • resource
    win7-20220812-en
  • resource tags

    arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
  • submitted
    22/11/2022, 09:46

General

  • Target

    http://reiseversicherung.nature-resort.at

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" http://reiseversicherung.nature-resort.at
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1440
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1440 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:856

Network

MITRE ATT&CK Enterprise v6

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    61KB

    MD5

    3dcf580a93972319e82cafbc047d34d5

    SHA1

    8528d2a1363e5de77dc3b1142850e51ead0f4b6b

    SHA256

    40810e31f1b69075c727e6d557f9614d5880112895ff6f4df1767e87ae5640d1

    SHA512

    98384be7218340f95dae88d1cb865f23a0b4e12855beb6e74a3752274c9b4c601e493864db777bca677a370d0a9dbffd68d94898a82014537f3a801cce839c42

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    f8409683fd31316246973f29ca13f11b

    SHA1

    b0cd62e00879223270284349ba9301a71bfa8616

    SHA256

    b259840b924c00be0cee8b9354a3f66e2ead52fd3bc643df20f05341b359a396

    SHA512

    b38bfa74c4bfc996e9e02d6437c9a33db3a0c11d41ea1691790a4212d683ebda7ccdf94577505f9fc3b1c4deef8a11894c3e41f17910679c2be6e0de7e67b0ca

  • C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Cookies\MGCMRTI4.txt

    Filesize

    602B

    MD5

    d49cb7dbfdf0be9b252d4bae3b15c272

    SHA1

    f4f2bead831d034f49b830f62635e4acfc886bb1

    SHA256

    9b582bad978c3aba836021a6cbb3da61b74e8922a50bb7a067c82c2dfac4c800

    SHA512

    d823729f16c9695253e9dd06d6dde3f8a3d6464d3756a19e09595c16b96874bff25afb4180b2ffb1727ff70042e7a63b1dd042a0273536afe58173b45cc7d1b1