Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    45s
  • max time network
    47s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230220-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
  • submitted
    27/03/2023, 14:28

General

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 37 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 12 IoCs
  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" https://amardeepeng.in//new/back/Hmlgroup/[email protected]
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2900
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2900 CREDAT:17410 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:3004

Network

MITRE ATT&CK Enterprise v6

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\7423F88C7F265F0DEFC08EA88C3BDE45_AA1E8580D4EBC816148CE81268683776

    Filesize

    471B

    MD5

    bb4cd9db319e8007cd72aa17af4b76a0

    SHA1

    8951973b028c09c71a792feff54e3096454a8c42

    SHA256

    aca8049efb96040e2124d06db9c9b2f3c5ce4166c831dabaa421e14cb5da1295

    SHA512

    6187a2b310a672f9080b9865115f44ea827a4f013f791105efc1f7641f11f9759877d61f5c50140fcf892b95318f1276eace9f78161dbcaf6e011f31e34f0729

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7423F88C7F265F0DEFC08EA88C3BDE45_AA1E8580D4EBC816148CE81268683776

    Filesize

    434B

    MD5

    98aeeab92982d0621ae089029cad5220

    SHA1

    a0dcac34090db34902659f871e394dea6cee7864

    SHA256

    27c7d52585002749c9c8687af5b6ed1f3b459d186cc0f7bba3621cb6914d869a

    SHA512

    0094c795f7c57b74fe4706691ba425162dd0e397d6dd5e6bf3b3b1c712f8478dccda6478ae225ecd67fe17207dcc94914e56b6c3867bf998d0a9a1ddf77b906b

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\imagestore\dcpq11e\imagestore.dat

    Filesize

    16KB

    MD5

    542a5e1277db194d8c3ad626431e0a8b

    SHA1

    c011606fd3678048bfc8c5d4992e1f289da282aa

    SHA256

    f19fce2b9e84f2bc208f8aa31b82cebc841ad44c2794a3efaa337f7e1f71f9d3

    SHA512

    04f60559726177401d318188459b96572f25ff386ce98cb1a06a0826720bca220c287370af7ac72bca7020421dc461a443c671b26bad1795222b2d3f7f2b0169

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\LZ0AI98S\hcaptcha[1].js

    Filesize

    284KB

    MD5

    1b19ece4bc1697ad18d6142566652f4f

    SHA1

    15d414b60020f1f841b2ac3d7f9b61f776cf930e

    SHA256

    fa567ea63c532d43e2f5e3e3962ff8b5fa0366f3c62ee0585fa6fe4be4c70f60

    SHA512

    196f7f13a531f708e0f98df4fe012762a005d9f0d2e4d7c7458678851ddf4e6e9e40bfebfa5464a6335d9262e5cf6b4bc066ba8eb7a56ed96887912c98ca2044

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\S64KWKX9\favicon[1].ico

    Filesize

    16KB

    MD5

    22fd81d8d80e3bb056855fc5f31a88b9

    SHA1

    3dfc5ae3a44ffa8697d591fff2a46c1a53b4fa8e

    SHA256

    f6940d43a7e4439af73544560f97368fa60e76018d26b15ff259f7b341699ad1

    SHA512

    ba0a71221a2279a2f48a3a162e6f311320a873922a81925fbe60b481a2c1b0fe4798fa333390d4d1afdd3b065e84dafe738a8e34d49f5afa036d245779b1f365