Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Resubmissions

06/03/2023, 05:14

230306-fxgwjaac7w 10

06/03/2023, 05:07

230306-fr3aaaag68 10

06/03/2023, 05:01

230306-fnq3vaag64 10

Analysis

  • max time kernel
    104s
  • max time network
    152s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230220-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
  • submitted
    06/03/2023, 05:14

General

  • Target

    https://www.dhlindia-kyc.com

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 40 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" https://www.dhlindia-kyc.com
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:536
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:536 CREDAT:17410 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:5024

Network

MITRE ATT&CK Enterprise v6

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\7423F88C7F265F0DEFC08EA88C3BDE45_AA1E8580D4EBC816148CE81268683776

    Filesize

    471B

    MD5

    ec5b7b4a25af2f9e50c18e40a99917d9

    SHA1

    5b26065f7e5ebbc191388615ebf359090f21ecab

    SHA256

    ac831ae3816a1fb1e2575a88cc5e16e88422cbe45286945d666aec80e36e27ea

    SHA512

    af91f9da24918b6d78aefe426780cb9c9b78acb2562bce61a68dc325e6eb2d718152d95f90682d102b18f7b2483ec1ca8c3abc5c695e155e0f0bff9f5809bd58

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7423F88C7F265F0DEFC08EA88C3BDE45_AA1E8580D4EBC816148CE81268683776

    Filesize

    404B

    MD5

    ed512b75ea8fd50e716a33fbc857a7a7

    SHA1

    772da88fee0ec0375bd340f44563ec43c72e7b7e

    SHA256

    5a9bad546c28ed2404d3fb7f2862bad76444788db784fd0c0c379d28762ea4b3

    SHA512

    759bffc8d0c89a1df81e9c81f462d0154f63ac14a6fc629ad72a0e6e4d2bbc3c68dca1c853bd345998d3328ec2750caf35c21bdb828a5738579707179e3e70fd

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\imagestore\phzg4yt\imagestore.dat

    Filesize

    3KB

    MD5

    f099a53fec35300281a3a8ffa84ee82f

    SHA1

    790b763a6376c6a77e76ac6993e4c9b89f1ce2fd

    SHA256

    41e68d038329c99a37ed55be14ea2e3bc335fd137b256c5808b99bf3dfa77eed

    SHA512

    5b4fe248ea771246d25d8aca75fe5d4bdb5c98b12fe26d3b68b3df9a81853ff930bf53d780f898b5ba90c50dcd4289449b6ea9460d9a2e93ecab0b22f5426a34

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\4VT6R2QM\suggestions[1].en-US

    Filesize

    17KB

    MD5

    5a34cb996293fde2cb7a4ac89587393a

    SHA1

    3c96c993500690d1a77873cd62bc639b3a10653f

    SHA256

    c6a5377cbc07eece33790cfc70572e12c7a48ad8296be25c0cc805a1f384dbad

    SHA512

    e1b7d0107733f81937415104e70f68b1be6fd0ca65dccf4ff72637943d44278d3a77f704aedff59d2dbc0d56a609b2590c8ec0dd6bc48ab30f1dad0c07a0a3ee

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\U4IULL1L\dhlkyc-favicon[1].gif

    Filesize

    2KB

    MD5

    1db617fc614c1df23a9c90548582b8c4

    SHA1

    4a4c66238fb5235fd14c37dba698e4bc406dddf5

    SHA256

    c0c78f3f6d1032aff5be66bdedecbdf38e3e3453bf98c16013d44336e955d72f

    SHA512

    26591058b1ae7b30fe806a05c62fa6f461686d5d29a37f0dfe13430bf877e33375aca81dacd5883aa4436973d8f494cfbe7ca1ef437540230ab32a91e70e58f9