Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    81s
  • max time network
    122s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230220-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
  • submitted
    16/03/2023, 21:39

General

  • Target

    https://md-wade.itch.io/hotline-miami-3d-text-generator

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 50 IoCs
  • Modifies registry class 1 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" https://md-wade.itch.io/hotline-miami-3d-text-generator
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:3756
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:3756 CREDAT:17410 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Modifies registry class
      • Suspicious use of SetWindowsHookEx
      PID:3784

Network

MITRE ATT&CK Enterprise v6

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\7423F88C7F265F0DEFC08EA88C3BDE45_AA1E8580D4EBC816148CE81268683776

    Filesize

    471B

    MD5

    427938c5b1da8b8d0bc4de0c875b84c7

    SHA1

    d3c81769ba2d97528997c00d58d7a79103611746

    SHA256

    8793c8936f2d56c5023b6495513c17dce7ef6d28f3d62c2efeb9f36faed69087

    SHA512

    02d39e4bb6b933ef1810e9b433ce26e4e67a565781400935bd3a781575ee8c00923f02cb22c42bad7da3e4624b1cad261b5371d54c6b0ed9bf5729f92975c8b2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7423F88C7F265F0DEFC08EA88C3BDE45_AA1E8580D4EBC816148CE81268683776

    Filesize

    434B

    MD5

    c0a2eda46ded70999f7b66182377f726

    SHA1

    2fdfc7688567157352c2abd7e6903a96b6b779f8

    SHA256

    e2db715892cb95a5c11f4596d95bf2adb957215e74cefc879a7773d97e47893f

    SHA512

    42195852fca4d5e0649cf3cff7e76bf4e2d6f580ded2c1519b24772bd5418b9523e4f4cf4aa9beffde4790740d669ef35d4865fdcb13ddaf2ea6916581c8144c

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\5PV1W6QG\m.stripe[1].xml

    Filesize

    13B

    MD5

    c1ddea3ef6bbef3e7060a1a9ad89e4c5

    SHA1

    35e3224fcbd3e1af306f2b6a2c6bbea9b0867966

    SHA256

    b71e4d17274636b97179ba2d97c742735b6510eb54f22893d3a2daff2ceb28db

    SHA512

    6be8cec7c862afae5b37aa32dc5bb45912881a3276606da41bf808a4ef92c318b355e616bf45a257b995520d72b7c08752c0be445dceade5cf79f73480910fed

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\VersionManager\ver2470.tmp

    Filesize

    15KB

    MD5

    1a545d0052b581fbb2ab4c52133846bc

    SHA1

    62f3266a9b9925cd6d98658b92adec673cbe3dd3

    SHA256

    557472aeaebf4c1c800b9df14c190f66d62cbabb011300dbedde2dcddd27a6c1

    SHA512

    bd326d111589d87cd6d019378ec725ac9ac7ad4c36f22453941f7d52f90b747ede4783a83dfff6cae1b3bb46690ad49cffa77f2afda019b22863ac485b406e8d

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\imagestore\phzg4yt\imagestore.dat

    Filesize

    1KB

    MD5

    94a1deec3edfe99e5703ab9b9d0eb3fd

    SHA1

    e3f0ed4f092904f845d34a082c625cdb1aba9286

    SHA256

    bcaa1243c041176d188be232b0e5270a08bd0f25f2b804f91d702473ead5493b

    SHA512

    e21e1ca4fb8653fcd9668e02c0e7d84ae1ed6643bb656af31894f3edae7d4e9cd86fee24ed23be65fbe555c24466452ed82e04be8f65c843118f9bd5cb0f702c

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\4VT6R2QM\MW0u35[1].png

    Filesize

    1KB

    MD5

    ea5657156708b1a7b2359ac019189dc2

    SHA1

    a803b7f9f64b3e18af0deed79927754bbdd9b50f

    SHA256

    30c782058f7c7cc481ae14eb281b4c66c732a0a0e7c5e24851ff59d9b63dce10

    SHA512

    20b8d15152fc2131c170d3627464fb3fe6a7d2bde8aaa8c20a6230b1317e6964ed902996c54ecc56dc315e4d65c6b6b90948873bc375959191c8623ca3e86bc7

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\4VT6R2QM\suggestions[1].en-US

    Filesize

    17KB

    MD5

    5a34cb996293fde2cb7a4ac89587393a

    SHA1

    3c96c993500690d1a77873cd62bc639b3a10653f

    SHA256

    c6a5377cbc07eece33790cfc70572e12c7a48ad8296be25c0cc805a1f384dbad

    SHA512

    e1b7d0107733f81937415104e70f68b1be6fd0ca65dccf4ff72637943d44278d3a77f704aedff59d2dbc0d56a609b2590c8ec0dd6bc48ab30f1dad0c07a0a3ee