Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    91s
  • max time network
    148s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220901-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
  • submitted
    01/12/2022, 11:08

General

  • Target

    fc56c581b4366c21867e535828817609f450155468b00beb6bf09470835615e4.html

  • Size

    13KB

  • MD5

    11373a45c7b1d2964ca0d40f2b1713f1

  • SHA1

    7d12e462a08a70b76317f7901f72c61094acf617

  • SHA256

    fc56c581b4366c21867e535828817609f450155468b00beb6bf09470835615e4

  • SHA512

    db1b484ac8103a0753680ee0db0bd38d683c23fb3be706440d2d36df5442d9548301063d1f36eac134313d315b9373e6f94cc75e03db398b698233111ccd4171

  • SSDEEP

    192:CSHzbawgP9cAL8DwgP9/LzwLTFSxVpjH2Oui2s1u4tiDfNvawFcg8q8HwF/E8q1u:fMPbMl4wVpjWJW2XFiMFFkFqA+

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 44 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\fc56c581b4366c21867e535828817609f450155468b00beb6bf09470835615e4.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:4764
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:4764 CREDAT:17410 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:4168

Network

MITRE ATT&CK Enterprise v6

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\7423F88C7F265F0DEFC08EA88C3BDE45_AA1E8580D4EBC816148CE81268683776

    Filesize

    471B

    MD5

    0ff2da8bfc83bec6bce38ba6a3f7bf58

    SHA1

    84c37df7bed08d69f040c289676735c49a9564eb

    SHA256

    91026f24711c435d99a44884c7239ed1265cd17c0259a6c5885f69e4309421ea

    SHA512

    78afdc44d7557b2f14444182085252e8456c91289511d6f2abfd1d7273d05baba9a94206d370add716b9fc30dc326a1a2e1c78f642e926759d962cf216c3a489

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7423F88C7F265F0DEFC08EA88C3BDE45_AA1E8580D4EBC816148CE81268683776

    Filesize

    434B

    MD5

    722982184c34b930d20d51bcb70ad45e

    SHA1

    39d6f931e62e7be10bffba31a10dc6779d86fc40

    SHA256

    ceb80be3b098d2c28cb64c2cba37eb204b21fca45b40870b89bcfc182781cb08

    SHA512

    81ba7e57cba49fb1ccfac7d134bb0c45e7b00be320aaaf382ed7afa04f1e96f76b1746bf5cca1d1a5322e4530daf545dd0a4ff4b5fd63bef981a7fc395073ec0