Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    217s
  • max time network
    322s
  • platform
    windows7_x64
  • resource
    win7-20221111-en
  • resource tags

    arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system
  • submitted
    24/11/2022, 05:47

General

  • Target

    9fe856ed41b81bbc093cd957d95998897bf35973d9bb7d7801c9da5885f57917.html

  • Size

    257KB

  • MD5

    24155dc7b696f2b25ef5c1e9d24cc7a7

  • SHA1

    510e94c02c2af13346a226d553e8972d8f4de9eb

  • SHA256

    9fe856ed41b81bbc093cd957d95998897bf35973d9bb7d7801c9da5885f57917

  • SHA512

    5ac2eed83e563dfe3a84489528730bd561a5cae9b138fcda914a34ba6790d0c0600bcc014fa48f0be567d2795be184647dc5d22ed3d36987f6f6da9474b37bff

  • SSDEEP

    3072:zUr1XBA6GuGatorhB9CyHxX7Be7iAvtLPbAwuBNKifXTJzZ:zk1XBA6GuGatwz9VxLY7iAVLTBQJlzZ

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 56 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\9fe856ed41b81bbc093cd957d95998897bf35973d9bb7d7801c9da5885f57917.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:576
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:576 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1744

Network

MITRE ATT&CK Enterprise v6

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fe05c8391fb61499b6f394f328fcaa23

    SHA1

    0f4f2deb521e23e60fe8cb3f5526b32a01b22237

    SHA256

    79e67069c7be70eb0324c6a636a54f1193fe353fb7f0b88ebf0c666df92bd08a

    SHA512

    6ee2ee17e677d3391a94896a68da832da474148a8343c6900d092b9f3c30d7b6537b02babdcf87d4af2c50b67915724e07be596072915d1088ce59f2cb8b3975

  • C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Cookies\GYHNG7OZ.txt

    Filesize

    608B

    MD5

    75cb6584ed8d2eaf9d0efa99e475054b

    SHA1

    41577992a7eb9bfa4e0f22d6ed7c3bf96fc5cea5

    SHA256

    9b40f0ec9e94e16e3b9c9581632cfa817b160805f64cb87450adcd9bf22793d9

    SHA512

    17f5a56bfaea099cc6f82299a6f80403dba03cfbcd10b3fe4fce394ec31adb6de66c18d7bfa3f8b7b0e723a72f5f8f79ecfe120a0e7a21aa568aa597d86ba354