Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    149s
  • max time network
    143s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20221111-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
  • submitted
    11/01/2023, 10:52

General

  • Target

    http://youtubepi.com

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 35 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" http://youtubepi.com
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:4372
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:4372 CREDAT:17410 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:3536

Network

MITRE ATT&CK Enterprise v6

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\7423F88C7F265F0DEFC08EA88C3BDE45_AA1E8580D4EBC816148CE81268683776

    Filesize

    471B

    MD5

    03c43ce055f8989a6508481c8acb6608

    SHA1

    3dc33276158435396c4272531a62707a18a4a875

    SHA256

    1e977bad400e43c86966889b895bbf3b00b929b4bf497c791ad0ed2a0749fd3e

    SHA512

    fb69a674b2c2aa697a7c1fc94490298949831762d9d9612266314727ea85f84035df089f62e1aec24474caa1fc52fc94ea704d161335d37c1cf746c72af1f8ab

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\82CB34DD3343FE727DF8890D352E0D8F

    Filesize

    7KB

    MD5

    1c358f86d45925009966b470052c602c

    SHA1

    c13422dfcf63b1405f9d75d8ba8548cb28aae1f6

    SHA256

    f122fb43f7121c486980bee80555d36a9b9460da8991edebd1d4822324efca4b

    SHA512

    f4e574d15c61b0c36c458a2015bcba77f86019d7a144d64adf9e29e9469a8ec2f4de226748a6fcc98653e757caeda483269e70f4c9b1cfce5d5b45564a1b979d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7423F88C7F265F0DEFC08EA88C3BDE45_AA1E8580D4EBC816148CE81268683776

    Filesize

    404B

    MD5

    79210f7ba15dc04b4087c9bd1266e8d5

    SHA1

    36461e737bb7af8c77803dc6ea8ec00bebf86cee

    SHA256

    151cbf5834a778df6fc7e69ec31493396d3054c28c5da83aa443252e2fc8c903

    SHA512

    3a06e2e124b5b24150ab4e3bddb2d1031dc07c47a29e1d73bc2656cd655b4194276eda45459b43dd94d044c07cc2ebf4e881a93422da2979defe2930f54ef1b0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\82CB34DD3343FE727DF8890D352E0D8F

    Filesize

    232B

    MD5

    5885af0b41548ae5f913e8f4353fc26d

    SHA1

    99ca2c57130ec78c9ecdbbc8355b2591761b4c81

    SHA256

    a5363420cd7b0f792f4152853e0ad41d37ecb520cf9fff18ac03c18bacd05f84

    SHA512

    9da215e6c458eb930a19a42a90ee26447943043c568cf3b3e57dc03347495440970152a746206d4eeffe6b3d7dec38e29b08f7e3dfd8e56236f6127ddc04ea41