Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    105s
  • max time network
    109s
  • platform
    windows7_x64
  • resource
    win7-20220901-en
  • resource tags

    arch:x64arch:x86image:win7-20220901-enlocale:en-usos:windows7-x64system
  • submitted
    10/02/2023, 14:01

General

  • Target

    http:///root/sample/79e79d0fcb01eeb03acf5ce67109cf817349e0b5

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 34 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" http:///root/sample/79e79d0fcb01eeb03acf5ce67109cf817349e0b5
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1720
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1720 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1148

Network

MITRE ATT&CK Enterprise v6

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Cookies\DRC5LBCD.txt

    Filesize

    603B

    MD5

    60ba1fc30630f80997e27f5d4cbc3449

    SHA1

    ee32977d6c53e1a031d03493270ebc8cc8c547dc

    SHA256

    2cfb0d12aed493218a1ef62b5957da7cfcceced175e5f497c91e991b1cd83b74

    SHA512

    3347d46e59a6efb1fe91c1fb8f0ee1da8343297534abd2ee74147771df8add230215ca3d7d450e2dabe0ebca104b23d8c53787edfb71a156107b963dcf903c35