Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    133s
  • max time network
    150s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    29/12/2022, 04:39

General

  • Target

    https://links.twiliocdn.com/ls/click?upn=3kZIcBV84MSbPEonqfrF6dGb3PJ6jbldw7J3yS57HqemXns2WYta3RoHKq8W8aC7dpcuZO6hV88bATZHBHyDHuPY8Ti9l76WpI7y7y0-2B0tfTn8Gz7zrrkV-2FqxZGEI1pUggRA5KvZyNDlgUTGzsSR5rFfvu49i4FzNZBEDTmqSXLz-2BjS-2Bjf-2BB5X3MM28mG5mqN33bPAsfcGzJkVOBS-2Bi77lmHW-2BqyMM4w6s-2FBmRYFZJwc-2FQSdBAtKYDuQNtode72oF-2BMITl51YnqWhGyvO20o-2FgKHYhn9uVuvlSoek2hZYtD-2B-2F98Mu5Xm2Tz0-2FUIItjKvjtsY_25yE1MSaF2t4Ef21OWLU937Q4MctB958zt48B7-2Fz705AW6RPC1OO-2FOtHRBOPrp0ftlhcq-2BLLFeNMaPZXnmJezAwWAADYQPilh7PUkufv4oX2kmmZMGJZwP0NkmL3tftxzrvioCtYHhFT5OcI-2B5qPyVtyW8fDgQSZO9erPYFlO0AHul9Xpt-2FWygFIiS53ZNxpeJ5UNjr9umOoL6SJIQm9UyWN4XZEiSLudEkLt5B4UgsRiyvqO4REK4RvVC8zu7xv

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 39 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" https://links.twiliocdn.com/ls/click?upn=3kZIcBV84MSbPEonqfrF6dGb3PJ6jbldw7J3yS57HqemXns2WYta3RoHKq8W8aC7dpcuZO6hV88bATZHBHyDHuPY8Ti9l76WpI7y7y0-2B0tfTn8Gz7zrrkV-2FqxZGEI1pUggRA5KvZyNDlgUTGzsSR5rFfvu49i4FzNZBEDTmqSXLz-2BjS-2Bjf-2BB5X3MM28mG5mqN33bPAsfcGzJkVOBS-2Bi77lmHW-2BqyMM4w6s-2FBmRYFZJwc-2FQSdBAtKYDuQNtode72oF-2BMITl51YnqWhGyvO20o-2FgKHYhn9uVuvlSoek2hZYtD-2B-2F98Mu5Xm2Tz0-2FUIItjKvjtsY_25yE1MSaF2t4Ef21OWLU937Q4MctB958zt48B7-2Fz705AW6RPC1OO-2FOtHRBOPrp0ftlhcq-2BLLFeNMaPZXnmJezAwWAADYQPilh7PUkufv4oX2kmmZMGJZwP0NkmL3tftxzrvioCtYHhFT5OcI-2B5qPyVtyW8fDgQSZO9erPYFlO0AHul9Xpt-2FWygFIiS53ZNxpeJ5UNjr9umOoL6SJIQm9UyWN4XZEiSLudEkLt5B4UgsRiyvqO4REK4RvVC8zu7xv
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:3464
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:3464 CREDAT:17410 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:4204

Network

MITRE ATT&CK Enterprise v6

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\7423F88C7F265F0DEFC08EA88C3BDE45_AA1E8580D4EBC816148CE81268683776

    Filesize

    471B

    MD5

    f7b6855beb7fde6cdb1a2a9ba9fa6bcd

    SHA1

    fd947696cabb78e309ad669dff0b980b17818567

    SHA256

    f1630debcf83e724c695443316dc8ad1abfb9d422e1450edbd3fc87b23f0649d

    SHA512

    e21c7570af2e3a77ce35f0f4ea4bef6b2a96bb7910a5c84eab60cba45a653b428c92def96f3d9bf393a156ccb901eb9f131eee2b71b91c20c38bf50b9ebe554e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7423F88C7F265F0DEFC08EA88C3BDE45_AA1E8580D4EBC816148CE81268683776

    Filesize

    404B

    MD5

    09922210cebf270bcd296cf5c46e8cd0

    SHA1

    f0a52edb80137e740756c0e1abfb9216cd0553c8

    SHA256

    68022ca2ffd039fce3ee06271d5cc9e5f1c541ed770b31f9a19c92a6b2d91882

    SHA512

    481d72eea93369cfc134f09d73639bbe02bbe3befbef00e3dbe1726db6dd421605bb22fe22d08b5e1237c06dca3e57c7ab0a549b1cc2b3eee904c2267b4b05e9

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\imagestore\dqptnfu\imagestore.dat

    Filesize

    1KB

    MD5

    cad17a0d7b491a83b52b9524339a0817

    SHA1

    76a4f523b1789a50778ddb3e7a71446688a56e94

    SHA256

    7e44a1526af5fed456d46f13a5ab996aa6caa0c77983d06df76e9ff2b3741c85

    SHA512

    f565a7f773b80626e82cfbca5a1bc58980d383fe2950b38be5e476966f194fc267ecc2b236666b027488151831cbb31dd77b295521a2b98caf1261cdb3bfa627