Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    134s
  • max time network
    138s
  • platform
    windows7_x64
  • resource
    win7-20220812-en
  • resource tags

    arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
  • submitted
    11/02/2023, 07:01

General

  • Target

    http:///root/sample/5ac2c1092be4908d2d11571e0b3b6c652ece8164

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 34 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" http:///root/sample/5ac2c1092be4908d2d11571e0b3b6c652ece8164
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1808
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1808 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1648

Network

MITRE ATT&CK Enterprise v6

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Cookies\UI8LE08W.txt

    Filesize

    608B

    MD5

    26e436e570634d60e13d50dcee0a106b

    SHA1

    baf6da01ee5bec5be43a6ba028d0d0b68f5ece20

    SHA256

    d5b674f3a6c259bd32d297ab5e10a4c15335b416e60a1f4e9aa739cd42f378bf

    SHA512

    5beed43e765b493fe0bb3e86bfc5e66a8172db4925ce886a42e5c89a51584bb1dbea7f153d5e90c709b06dc65bf64ef8f177b39cc98f8093d4c69e16b7987984