Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    73s
  • max time network
    144s
  • platform
    windows7_x64
  • resource
    win7-20220901-en
  • resource tags

    arch:x64arch:x86image:win7-20220901-enlocale:en-usos:windows7-x64system
  • submitted
    11/02/2023, 10:07 UTC

General

  • Target

    http:///root/sample/90c4ce24c2a14ca3e2fe9d586162cfc001a3bdcf

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 34 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" http:///root/sample/90c4ce24c2a14ca3e2fe9d586162cfc001a3bdcf
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1300
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1300 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:616

Network

    No results found
  • 117.18.237.29:80
    46 B
    40 B
    1
    1
  • 117.18.237.29:80
    46 B
    40 B
    1
    1
  • 204.79.197.200:443
    ieonline.microsoft.com
    tls
    iexplore.exe
    707 B
    7.6kB
    8
    11
No results found

MITRE ATT&CK Enterprise v6

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Cookies\V8DHF24S.txt

    Filesize

    603B

    MD5

    02d47dd74b2e919800d0ad21e99e67ca

    SHA1

    9b8c68c59917513b285dfa38289b4cea5ef9fd51

    SHA256

    3d0f22c1e35cfad7d3aa7a226974a5b51a483b54a1fd527a3274949b9224ab78

    SHA512

    31bfaeb473c08715f044e48429cb08b8ea1050b73c14f36662af8320fbf6dd4b1033a328a565c26b4a782aec455bab1d693169fb1d880cf238d02d4e20b5f528

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.