Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    59s
  • max time network
    64s
  • platform
    windows7_x64
  • resource
    win7-20221111-es
  • resource tags

    arch:x64arch:x86image:win7-20221111-eslocale:es-esos:windows7-x64systemwindows
  • submitted
    27/12/2022, 17:52

General

  • Target

    LauncherFenix-Minecraft-v7.exe

  • Size

    397KB

  • MD5

    d99bb55b57712065bc88be297c1da38c

  • SHA1

    fb6662dd31e8e5be380fbd7a33a50a45953fe1e7

  • SHA256

    122bfbb9f67e355340991deeacb167be9c12ad726b5a7c5779448dd0cc4af0cb

  • SHA512

    3eb5d57faea4c0146c2af40102deaac18235b379f5e81fe35a977b642e3edf70704c8cedd835e94f27b04c8413968f7469fccf82c1c9339066d38d3387c71b17

  • SSDEEP

    3072:puzvch1rugYc4wqYSRR756K7ItBjgXHUYCnlK:Wch1aIqYSRVM+unlK

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 40 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 14 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\LauncherFenix-Minecraft-v7.exe
    "C:\Users\Admin\AppData\Local\Temp\LauncherFenix-Minecraft-v7.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:1904
    • C:\Program Files\Java\jre7\bin\javaw.exe
      "C:\Program Files\Java\jre7\bin\javaw.exe" -jar "C:\Users\Admin\AppData\Local\Temp\LauncherFenix-Minecraft-v7.exe"
      2⤵
      • Suspicious use of SetWindowsHookEx
      • Suspicious use of WriteProcessMemory
      PID:972
      • C:\Program Files\Internet Explorer\iexplore.exe
        "C:\Program Files\Internet Explorer\iexplore.exe" https://launcherfenix.com.ar/wope/register/
        3⤵
        • Modifies Internet Explorer settings
        • Suspicious use of FindShellTrayWindow
        • Suspicious use of SetWindowsHookEx
        • Suspicious use of WriteProcessMemory
        PID:712
        • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
          "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:712 CREDAT:275457 /prefetch:2
          4⤵
          • Modifies Internet Explorer settings
          • Suspicious use of SetWindowsHookEx
          PID:360

Network

MITRE ATT&CK Enterprise v6

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\imagestore\mlf2v8h\imagestore.dat

    Filesize

    9KB

    MD5

    6488da668bf3ebb82ca0cc4bcfc720aa

    SHA1

    422d2e69c912eb2d8bfbb3034d90afaa43c81c52

    SHA256

    8e5e1bc4f8b15f2036375023ecacc2227426b142a85085cd5b8d300cc561194a

    SHA512

    2218692fc4eae50434ee54429c9f4c8e5482fc87c7a2e2b74b1be194781bad97cfcd80c9a03f563586f3ee7f918197f942bfa22dba7f4aed27f79412e133f818

  • memory/972-71-0x0000000001E70000-0x0000000001E7A000-memory.dmp

    Filesize

    40KB

  • memory/972-56-0x000007FEFBA01000-0x000007FEFBA03000-memory.dmp

    Filesize

    8KB

  • memory/972-68-0x0000000002070000-0x0000000005070000-memory.dmp

    Filesize

    48.0MB

  • memory/972-70-0x0000000000380000-0x000000000038A000-memory.dmp

    Filesize

    40KB

  • memory/972-69-0x0000000000380000-0x000000000038A000-memory.dmp

    Filesize

    40KB

  • memory/972-73-0x0000000001E70000-0x0000000001E7A000-memory.dmp

    Filesize

    40KB

  • memory/972-74-0x0000000001E70000-0x0000000001E7A000-memory.dmp

    Filesize

    40KB

  • memory/972-76-0x0000000002070000-0x0000000005070000-memory.dmp

    Filesize

    48.0MB

  • memory/972-78-0x0000000000380000-0x000000000038A000-memory.dmp

    Filesize

    40KB

  • memory/972-77-0x0000000000380000-0x000000000038A000-memory.dmp

    Filesize

    40KB

  • memory/1904-54-0x0000000075FB1000-0x0000000075FB3000-memory.dmp

    Filesize

    8KB