Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    142s
  • max time network
    206s
  • platform
    windows7_x64
  • resource
    win7-20221111-en
  • resource tags

    arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system
  • submitted
    09/02/2023, 03:41

General

  • Target

    http:///root/sample/bd8ec5b77342fb17c1b8e2102e9f39bbbf9d3a8a

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" http:///root/sample/bd8ec5b77342fb17c1b8e2102e9f39bbbf9d3a8a
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1508
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1508 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:864

Network

MITRE ATT&CK Enterprise v6

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Cookies\W9RSVRME.txt

    Filesize

    601B

    MD5

    db45604c6765d1b59287cbc8aa4768f2

    SHA1

    2f343908086c0b34c87a4ba22ef2ae8f8250f80d

    SHA256

    add97985c18173953f9fe8c92fa7fb9557f3244ff23c2da64fcdbc303867b492

    SHA512

    ae6bf8c17875d2c42eb9c1b580c2dde809abb5c64aee1234a31d80de942deda95ad7295dc6d2a73b182332d0649bc41bb0027c16b980c0e862968cceebc8769f