Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    79s
  • max time network
    143s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20221111-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
  • submitted
    03/01/2023, 08:44

General

  • Target

    https://bit.ly/3vyFJXC

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 35 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" https://bit.ly/3vyFJXC
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:628
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:628 CREDAT:17410 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2052

Network

MITRE ATT&CK Enterprise v6

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\7423F88C7F265F0DEFC08EA88C3BDE45_AA1E8580D4EBC816148CE81268683776

    Filesize

    471B

    MD5

    7f86d57ec9b88be134e3cfa85ecf7275

    SHA1

    f07afd49f66b446f51930dcb0971d0f2a432fc55

    SHA256

    1d4bab5d07ad03fc4fd60c26afc0906ab99ad01fac40a9e1d324fda5b4809a90

    SHA512

    0d5764c1468c9020ecdc1e68166a71ef9ab6715f8d6c1e31faec3e35ebd16f5b8dffd9b0d54fd84c36cce90fd11a8edbff448c295f561aa0ddadc3110d2ee38c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7423F88C7F265F0DEFC08EA88C3BDE45_AA1E8580D4EBC816148CE81268683776

    Filesize

    434B

    MD5

    678d76592c17a1f2beb676e059d9d535

    SHA1

    612b11786c3b0a8eb1bd3eaeeabc3483fe05eb99

    SHA256

    ff7f7443c4485e5ca0b97c141ec7a257247d8217fa1bc87dec62c051040fa8c5

    SHA512

    8d0135d269960e6a7d32cd481f515f98bb05a30ae26f6ba053d391cc2a2c9a8a09ba336624e3004c8ccccb854a3c0d45d106bb3e438447040a5430a1156e5c41