Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    90s
  • max time network
    149s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220901-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
  • submitted
    09/02/2023, 15:26 UTC

General

  • Target

    http:///root/sample/cf413cd1e098b7c5ab4bda9ed50b07da9cbca7ae

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 35 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" http:///root/sample/cf413cd1e098b7c5ab4bda9ed50b07da9cbca7ae
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:4512
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:4512 CREDAT:17410 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:5072

Network

    No results found
  • 13.78.111.198:443
    322 B
    7
  • 8.238.110.126:80
    322 B
    7
  • 88.221.25.155:80
    322 B
    7
  • 88.221.25.155:80
    322 B
    7
  • 8.238.110.126:80
    322 B
    7
  • 204.79.197.200:443
    ieonline.microsoft.com
    tls, http2
    iexplore.exe
    1.2kB
    8.1kB
    15
    14
  • 8.247.211.254:80
    322 B
    7
  • 204.79.197.203:80
    322 B
    7
  • 8.238.110.126:80
    46 B
    40 B
    1
    1
  • 8.238.110.126:80
    46 B
    40 B
    1
    1
No results found

MITRE ATT&CK Enterprise v6

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\7423F88C7F265F0DEFC08EA88C3BDE45_AA1E8580D4EBC816148CE81268683776

    Filesize

    471B

    MD5

    f60b261fa864803670980251960b8d45

    SHA1

    0423aa6407d944a6f826e8ff197014a75114572b

    SHA256

    e55b79fb46ab833b600da6bcc39eedf6650e6dc890485c85e41e14d11ccd0055

    SHA512

    2e8ba8c5e37d8fa0d26237bac4c47928a28762959bb2873269721c7d9be7b66b10e6d058d9c855486948ee8eb591e5fd3a57fb091e44e4ad16436af74b4da357

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7423F88C7F265F0DEFC08EA88C3BDE45_AA1E8580D4EBC816148CE81268683776

    Filesize

    434B

    MD5

    1f3b1b1220732f0a27329ec994e86c29

    SHA1

    8b3486c3068780706fcff6a1c9b6dc86f352c463

    SHA256

    6e7c3851147a86e6783a1948fb60e8eb627e6d7ebd2422da1e5fbd99f3e0b90f

    SHA512

    c088cb57ecc12a03e34822a074c3152bda6b427f493bc90465056d8e712eb1294c1219f28f7c54263d92a9b50cde46a9a8f6d9e1cfbf9f596a8b0f8a663c2fdd

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.