Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    73s
  • max time network
    143s
  • platform
    windows7_x64
  • resource
    win7-20221111-en
  • resource tags

    arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system
  • submitted
    28/12/2022, 03:29

General

  • Target

    Minecraft Launcher.exe

  • Size

    4.4MB

  • MD5

    62da1cde5869df964fc628ab9d226fb4

  • SHA1

    6b4ebcd1685180d4e4477f5a7e9c36138e2e9aed

  • SHA256

    51a8d363bee48c41e89fc5ff6b9659d93d9521d94b824df9cf907588c2246f44

  • SHA512

    d29dc55c6ef957e624f445ca746db1e0bc4ba543df6e4aea4dc2f0ed8284bab80ff6268dc834722d695044cd1bb32cd6ca2086327aee22312b3d33bbd6b33d97

  • SSDEEP

    98304:9Gz4kB1F8O+ZJpzMkqvc+tymgjSnm2Mwp3CTua:9YBcO+P2kqvchunHMwp3CTua

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 38 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 11 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Minecraft Launcher.exe
    "C:\Users\Admin\AppData\Local\Temp\Minecraft Launcher.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:1204
    • C:\Program Files\Internet Explorer\iexplore.exe
      "C:\Program Files\Internet Explorer\iexplore.exe" https://adoptium.net/
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of SetWindowsHookEx
      • Suspicious use of WriteProcessMemory
      PID:1100
      • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
        "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1100 CREDAT:275457 /prefetch:2
        3⤵
        • Modifies Internet Explorer settings
        • Suspicious use of SetWindowsHookEx
        PID:1404

Network

MITRE ATT&CK Enterprise v6

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    61KB

    MD5

    fc4666cbca561e864e7fdf883a9e6661

    SHA1

    2f8d6094c7a34bf12ea0bbf0d51ee9c5bb7939a5

    SHA256

    10f3deb6c452d749a7451b5d065f4c0449737e5ee8a44f4d15844b503141e65b

    SHA512

    c71f54b571e01f247f072be4bbebdf5d8410b67eb79a61e7e0d9853fe857ab9bd12f53e6af3394b935560178107291fc4be351b27deb388eba90ba949633d57d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5e35eb0d02084dfa56bd0cc6bc0faaeb

    SHA1

    ff60312fc4f25ec7cf3b4d4caa4d7c405f627ee8

    SHA256

    056d16f4533f2845ad893d7c5ca73dfba7d30f9262e844b367d0b52c34c37a91

    SHA512

    4290319705494989f792b4a85239d6d453b514d40e2014c81dce1535edcd7dfe175cfd227739f34fd1c46e9948415d77b0bc1a05abf9e883c14a0f9298ae71c7

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\imagestore\mlf2v8h\imagestore.dat

    Filesize

    2KB

    MD5

    069e886e862a8e8898b2438e45311ea1

    SHA1

    40514b0396b38795ada3c80e088fc84029866e09

    SHA256

    5831711a6829d6cb0aed1e740a2f9045ab0d4f65f8b8a69e970c00880ddf2e4f

    SHA512

    17eb12b5f91ff0ec93b1d78ec5e155c4afa8c76bae29741a0aee99489ddd6683f234a3f7b2bce1734286d41d20b484dd56f7006ae7bdde4e23188b6294a32222

  • C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Cookies\4PS3XPDW.txt

    Filesize

    601B

    MD5

    76bdc0797bc2e473216a53cdd5856b3d

    SHA1

    c3d16c9a6b77a1d31caa30c6400b9bb0e04cba88

    SHA256

    a7639f8a598b0a0baf3762465cfb781322992344a39fa72e242e1a3ce6298a66

    SHA512

    dc12881a45951dc837da8b2b50a5ac4c9aeb1fbf02a403e1fc8f325ebeca88578e487bf9d7a0439386946e432a64702158fc20c5fa3a8af8e0ac5874e463dacc

  • memory/1204-54-0x0000000076391000-0x0000000076393000-memory.dmp

    Filesize

    8KB