Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    55s
  • max time network
    61s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230220-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
  • submitted
    04/03/2023, 21:09

General

  • Target

    https://github.com/xiaoxiongnpu/c-sharp-console-integral-and-diferansiyel-with-polynomial-multiply/blob/master/ConsoleApp1/Program.cs

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 32 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" https://github.com/xiaoxiongnpu/c-sharp-console-integral-and-diferansiyel-with-polynomial-multiply/blob/master/ConsoleApp1/Program.cs
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1508
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1508 CREDAT:17410 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:3924

Network

MITRE ATT&CK Enterprise v6

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\7423F88C7F265F0DEFC08EA88C3BDE45_AA1E8580D4EBC816148CE81268683776

    Filesize

    471B

    MD5

    7d614bd89d2957037d60088e7268e639

    SHA1

    ea867050da5309fc99aeb73688f2f525e76907fb

    SHA256

    6e06cc16602c3e13828fe226370a57a0e55c17dcc4c63219ab3bd3bc54a8585d

    SHA512

    8fa2f538d103669735658dc7ec29fe3308086f6e95293c0ce980725469ba80f95092cd6a6fc405b906d4ccfc0113d8139807ccbe5b09169249ea5766c5673362

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7423F88C7F265F0DEFC08EA88C3BDE45_AA1E8580D4EBC816148CE81268683776

    Filesize

    434B

    MD5

    8b5f70ea8303a58c941238c9960411dc

    SHA1

    1ea9239786d4befd49d4d3a0262ae2eb578698fa

    SHA256

    6022bc7945a4188fb2e10bdc812e8a6a1a8b7d066bc5732d2bdb0dc15d126964

    SHA512

    7256555d7af5139b19e94152fc205b040a3733bdd8ed88c7cee0dd5304608f6b63d09914ef4ca012d35f641d47e052893f83fd763c57cfddfd80c58fbcbe62b4

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\imagestore\phzg4yt\imagestore.dat

    Filesize

    1KB

    MD5

    a74815f26f916539ec540a9a3c83c7fe

    SHA1

    c0b57a7eb647957b38b684c5ae36d29a09f7b049

    SHA256

    d1feee3fa440a5bada537e6dc6d09eecbcbf98c8b1f6bbadc13be1c5e9c455c7

    SHA512

    add0c3dd038cab6b6eccd34296868d4da352232eeb8230ab1a858f47b1975bbf0c555d37a1acb389fb596d58c1f658f589d30cea02d881da6db45fd1c75d8687

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\39K1WZBJ\favicon[1].png

    Filesize

    958B

    MD5

    346e09471362f2907510a31812129cd2

    SHA1

    323b99430dd424604ae57a19a91f25376e209759

    SHA256

    74cf90ac2fe6624ab1056cacea11cf7ed4f8bef54bbb0e869638013bba45bc08

    SHA512

    a62b0fcc02e671d6037725cf67935f8ca1c875f764ce39fed267420935c0b7bad69ab50d3f9f8c628e9b3cff439885ee416989e31ceaa5d32ae596dd7e5fedbd