Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    106s
  • max time network
    143s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220901-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
  • submitted
    30/12/2022, 20:18

General

  • Target

    http://eu.static.mega.co.nz

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 47 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" http://eu.static.mega.co.nz
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2532
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2532 CREDAT:17410 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:4064

Network

MITRE ATT&CK Enterprise v6

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\7423F88C7F265F0DEFC08EA88C3BDE45_AA1E8580D4EBC816148CE81268683776

    Filesize

    471B

    MD5

    d81f3875febda0bcd89884b3a7374181

    SHA1

    5b2aac021606158ee2a91b32ae012afa9124ef6b

    SHA256

    24a0648858b4c866c3dd80d7591b345abc0f61a9692dc91633121a18bc44168c

    SHA512

    3887474406ce5f39f8d73f0094c97b5152b4cf3b9ddd23898fe8e0aa9f34053ec74fe7c7e3816473b5bffded6483170bd3e247a54c3b5a701a6bca428004caa5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7423F88C7F265F0DEFC08EA88C3BDE45_AA1E8580D4EBC816148CE81268683776

    Filesize

    434B

    MD5

    32d6f510b74409be30ccecd0e16f17f3

    SHA1

    9c8a1c41fe3baeece00fd3951df93385262f2361

    SHA256

    3ddb180bc7067b2d65296ebd5c5419952ab8e8743b11d9f6a154dfd98ed20d51

    SHA512

    110166ba5c4a58720764c4998de9759da524ddbf9e94b94f175f7ca3af4ff2b418ce280fb87f277435580badbbb6497a841387176899a81f78ce4e4881ca03ed

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\imagestore\ckj4gk4\imagestore.dat

    Filesize

    6KB

    MD5

    317b70e6280742b05df8960a5022797b

    SHA1

    96f86cafee4576c153fedfaa066ea8347e4d0998

    SHA256

    b5c548e8f9f2a95bd0a8e4ad8bc5eec4bf6e7fcce5b755ee29b59dd6df938a45

    SHA512

    43c925b17252717d0040f13091ba2538c7d2037a7c7a6912170e695c0434ee3b998daccd0cefee2ebf598b7cd66d53e75ed287e4bc0d1b50e07290c6b0bf4090