Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    81s
  • max time network
    82s
  • platform
    windows7_x64
  • resource
    win7-20220901-en
  • resource tags

    arch:x64arch:x86image:win7-20220901-enlocale:en-usos:windows7-x64system
  • submitted
    09/01/2023, 06:37

General

  • Target

    https://147training.com/quick-share/quick-share/receive/57a46237-b74f-499d-8d51-92c5b6945780

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" https://147training.com/quick-share/quick-share/receive/57a46237-b74f-499d-8d51-92c5b6945780
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1324
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1324 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1464

Network

MITRE ATT&CK Enterprise v6

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    61KB

    MD5

    fc4666cbca561e864e7fdf883a9e6661

    SHA1

    2f8d6094c7a34bf12ea0bbf0d51ee9c5bb7939a5

    SHA256

    10f3deb6c452d749a7451b5d065f4c0449737e5ee8a44f4d15844b503141e65b

    SHA512

    c71f54b571e01f247f072be4bbebdf5d8410b67eb79a61e7e0d9853fe857ab9bd12f53e6af3394b935560178107291fc4be351b27deb388eba90ba949633d57d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4df733a12c1daa2146a32d68f78a0168

    SHA1

    669c06f9136a443fffe26046dc007af37e388103

    SHA256

    0a9c6f6927110f6bc3dc2120d58a80f4d9fe4441bafc00bb2c83e436e61f325d

    SHA512

    54a5a74e456849b6f61c2d7d04e56dbfa710fcb5454306e508bbc35d5f4195a8b9d9d44fb04245ced7fa525e5706d83142fcdd6e1353f5c7e89e882b25663504

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\imagestore\309axvf\imagestore.dat

    Filesize

    5KB

    MD5

    84beefb32bd7cd3357556fbd6b7f4bde

    SHA1

    8a5c0f0f409392063988176eb111e4fdadac55be

    SHA256

    2750ab17ccca69692ebf7f327a5296671c55aae2cc6e1824a781d8bca05b205a

    SHA512

    af0945e9a158df4a7c080113a263b33a2667ff51023b0e01a9fd662ae243a8b5f3db363a3b248225cf04a2985218cb0fcd83cedf10e18d9fe2098d58ad0bb7f6

  • C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Cookies\2BK08LU3.txt

    Filesize

    608B

    MD5

    ff873c69d83918d9a91bf1eb4c3c4adb

    SHA1

    f222d17427a0cd32b46168ce41aa1d8b33341230

    SHA256

    1db5c7d50bfe7648ebf590b0633eefe7fc1c95e15037feebcd0deda55aa6afea

    SHA512

    3d9a17759ea02af6edab09f0b5d859d0a679ce8e70863a7353c1f9eb3a8fd07aef94385f19de60dc2a891dc9afeb017d3e6eb2e4b62de031e95fddc8b472c50f