Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    96s
  • max time network
    150s
  • platform
    windows7_x64
  • resource
    win7-20220812-en
  • resource tags

    arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
  • submitted
    08/02/2023, 23:53

General

  • Target

    http:///root/sample/3da3ea3be257483f9f1daad14a58799d7c800e7e

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 34 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" http:///root/sample/3da3ea3be257483f9f1daad14a58799d7c800e7e
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:752
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:752 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1060

Network

MITRE ATT&CK Enterprise v6

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Cookies\92HZT3WT.txt

    Filesize

    603B

    MD5

    1ce52a01d2c52ede10c27c20631db2b5

    SHA1

    4de3bd7f0fc0f96a8b558ff32e432c942fb0f040

    SHA256

    101c1f8c4d380d031eeb2f9fc4e0c69551da3ba5995f2ad74e383485457e45fe

    SHA512

    840581db29d2257c4a703f9bfc00955b1e548cbd0a49bcc0d6fceab5a312895760813fcb9f5913fac4545654ccbd20264ec3f34e3744a90649f18b533429dbf7