Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    137s
  • max time network
    153s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230220-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
  • submitted
    14/03/2023, 04:06

General

  • Target

    https://fastspring.com/docs/set-up-transfers/

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 50 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" https://fastspring.com/docs/set-up-transfers/
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:4544
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:4544 CREDAT:17410 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:4440

Network

MITRE ATT&CK Enterprise v6

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\imagestore\feo4h2u\imagestore.dat

    Filesize

    817B

    MD5

    8430f8990900393bb1873ec660284719

    SHA1

    dde50ca26d99accdbeb435fc173f2f26284aa948

    SHA256

    0f0ffb6865c159eb3e0e5340829c8246c6f0e577ed8845cb6870e47678dd16b2

    SHA512

    979b11ccc49297f712d7e9344b9214a414009ca67d5e9f8f7c958de5591373d007b6e37b1c751d8637cd10df8f54ff1f31adba43ff916b489469d3d286a55dc7

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\6K3GJRJ1\js[2].js

    Filesize

    112KB

    MD5

    6565ac182db6a9d26a0297ee1b3c5cf2

    SHA1

    05afdffa0de011fbdddc60fc81e34ce01f505716

    SHA256

    b72417903fd1d348b3b57138eb869860615b9e6cd260d846880e05a19f62a31a

    SHA512

    8530f0a5b641d9c6f0191bb8fd326810aa2650b27842786820f3213a901bb4f03a71fb16221fd3629c91f606f692013eaa66ed6fc1221ca8a7dc1693987d6d44

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\6K3GJRJ1\suggestions[1].en-US

    Filesize

    17KB

    MD5

    5a34cb996293fde2cb7a4ac89587393a

    SHA1

    3c96c993500690d1a77873cd62bc639b3a10653f

    SHA256

    c6a5377cbc07eece33790cfc70572e12c7a48ad8296be25c0cc805a1f384dbad

    SHA512

    e1b7d0107733f81937415104e70f68b1be6fd0ca65dccf4ff72637943d44278d3a77f704aedff59d2dbc0d56a609b2590c8ec0dd6bc48ab30f1dad0c07a0a3ee

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\UUIKWEAJ\favicon-32x32[1].png

    Filesize

    561B

    MD5

    906af9a6032e8918162b2e1b5d7b89ed

    SHA1

    6ec2da416cd962eee80070e1ce2f62c8d106027b

    SHA256

    da3200f88ca7d0dec1f0256137409a0af766ad688496e4a6220c934c281bc74a

    SHA512

    b01b403477c5085f1b18555e793177a291c132672de6443ad1cb7a8007cd5dc8c1b42a98fdfbf9922802cadeac5e4dd0a2e98205f80db1a25613b74c830983ab