Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    90s
  • max time network
    156s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220901-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
  • submitted
    27/11/2022, 11:36

General

  • Target

    95e8b8cd1cdd92a2b66b296fc6268b1e055d91be28721aa0a32042c666a82d33.html

  • Size

    302B

  • MD5

    5660cddf9f94f816778d536e924950b2

  • SHA1

    e3f1107d632a0d95e2f56ac1cf4a35da13b1a0ba

  • SHA256

    95e8b8cd1cdd92a2b66b296fc6268b1e055d91be28721aa0a32042c666a82d33

  • SHA512

    b996320e70d4e15f13df9c9c9c11772ebdaf36a0b8c93fd7902cb6c4db1331ea98a87970dd5ba47ec60479faa19003d7dcfb26ee539f1ac059a944539b92dfb0

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 42 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\95e8b8cd1cdd92a2b66b296fc6268b1e055d91be28721aa0a32042c666a82d33.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:4980
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:4980 CREDAT:17410 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:812

Network

MITRE ATT&CK Enterprise v6

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\7423F88C7F265F0DEFC08EA88C3BDE45_AA1E8580D4EBC816148CE81268683776

    Filesize

    471B

    MD5

    3bc8595d0a469edc8b7a071a3befe724

    SHA1

    f7e4b53b01d31626ab7965b267fea4457d798a91

    SHA256

    33c4b30d18fa3eeeed676831973cf8dd8c9a9145e7edcb689efeec0647d685d4

    SHA512

    4969ab6d2239a94d1dfb6105d9a329588ad0e3366ab4af874e033b853adfcadf808eced3466823136221e110accd2bcd5b25b0474b11947aab510f0b92d397d8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7423F88C7F265F0DEFC08EA88C3BDE45_AA1E8580D4EBC816148CE81268683776

    Filesize

    434B

    MD5

    ae5e4d9b46a4399d3a27fba523f9da27

    SHA1

    0cf4b2ef41cfec63bfbc9b1a058814823c22e7dc

    SHA256

    3d82731fec4c89976ab115678b1deb0962b1b40409f26e4e43b0e59bd4742408

    SHA512

    9b118d4efa0565678c20f324c639623729e1435118ae87c32d8738cd20d6d44f1fd159aa6f18689d469220863d4210c510f279832cf18f3d72a6e173e906efe9