Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    160s
  • max time network
    176s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20221111-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
  • submitted
    11/02/2023, 12:18

General

  • Target

    http:///root/sample/94983e143b7ac18bb9a54c2bb1ff9e8ad241f8b3

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 38 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" http:///root/sample/94983e143b7ac18bb9a54c2bb1ff9e8ad241f8b3
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:4504
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:4504 CREDAT:17410 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:4368

Network

MITRE ATT&CK Enterprise v6

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\7423F88C7F265F0DEFC08EA88C3BDE45_AA1E8580D4EBC816148CE81268683776

    Filesize

    471B

    MD5

    54d6253214f843b2b958ccc313c9d824

    SHA1

    6458fc1969c53f40b83d11149811cc0acf952a12

    SHA256

    9452ca2937559277d5c065011cc3f080eab643950189b27605bca71c12e6f10d

    SHA512

    be04dfda0020d0d907e1f0f0ddc86d4793a27029ac950524333aa37defae511a739af51bf77e51a742f50d73dc03b33771d417b69ea0272da0f02f233f665d52

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\57C8EDB95DF3F0AD4EE2DC2B8CFD4157

    Filesize

    340B

    MD5

    21f4e60473f010d971db969f7ae85c3f

    SHA1

    658af1e22d7c5dfb3b5cd539b1534e526071bcab

    SHA256

    1ac1acd3cedb98e2e2c897523239e857aef6011d0daf81b294874edf2433fa88

    SHA512

    c800f8d26f61601c02a5ae82b5225b95b85bcb36ee7e91ed6a3feb6f78d3ee0957258e7aaa1eecfe2fdef14eaea1292fb3b322bfd2a46c8749120b6baba97fe7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7423F88C7F265F0DEFC08EA88C3BDE45_AA1E8580D4EBC816148CE81268683776

    Filesize

    434B

    MD5

    664cf2a5a423ab94648692bb84a05aa5

    SHA1

    40d085e6d7b85d0e659dde63990d2f6eb66a6b24

    SHA256

    74daf1d7689d60ec1f61063ad3c1d343b53a50796c7de42607f2b38cf43a09c6

    SHA512

    e9a4d57d5cf4c00e9f426cc5139ed0ab3b646d6389fb191eb3796a5b99b7f9a5eadcab5002c8b3396b51f60998cd10a3b937e2f0c035f826968cb72cca3da6f5