Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    76s
  • max time network
    151s
  • platform
    windows7_x64
  • resource
    win7-20220812-en
  • resource tags

    arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
  • submitted
    11/02/2023, 05:10

General

  • Target

    http:///root/sample/4b7179a358d3303bcc0a43468ca5139f5f6d01c1

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 34 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" http:///root/sample/4b7179a358d3303bcc0a43468ca5139f5f6d01c1
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1880
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1880 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1744

Network

MITRE ATT&CK Enterprise v6

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Cookies\4OHXXUMC.txt

    Filesize

    603B

    MD5

    8cbe777ac6b9b91ee5cab00e02e24749

    SHA1

    ae2b919fe41d80a434451b0a85b1ebd1443ab3af

    SHA256

    22b12f42725d7f9fe8ab8e3fca15e91b1c0a498711d666ce612e1c173dcf81e6

    SHA512

    4e48c77efa7035e53dbd58e31095cba1bf38175a93f576d541379821456b801471e649fd81a4ce95bdd334fb1c0dfe03c4726e7bc0dd099460b948d3f23a6b80