Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    71s
  • max time network
    77s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230221-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230221-enlocale:en-usos:windows10-2004-x64system
  • submitted
    23/04/2023, 15:45

General

  • Target

    https://cursed-beta.blogspot.com/2022/11/cursed.html

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 39 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" https://cursed-beta.blogspot.com/2022/11/cursed.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1756
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1756 CREDAT:17410 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2304

Network

MITRE ATT&CK Enterprise v6

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\7423F88C7F265F0DEFC08EA88C3BDE45_AA1E8580D4EBC816148CE81268683776

    Filesize

    471B

    MD5

    173a79e136330a70b71832e4563d1b42

    SHA1

    28b14a7bbe8a20fb082b36a9d2651e13fd1d14fe

    SHA256

    b3a892deb1113445e59cd3ef9ac10f02a8792652c30a2effe4cdc060bd71a03e

    SHA512

    b50efc28fb0d1731a9e337b531660c20c0d4046f2ed81e8085f5a9ca1c44b9960577fa558d729b48c8d3328f2599d1e27a19c4e59ed97125deee6a638fa2e880

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7423F88C7F265F0DEFC08EA88C3BDE45_AA1E8580D4EBC816148CE81268683776

    Filesize

    434B

    MD5

    0dbdc60b2a003932cca19e9bf4b014a6

    SHA1

    9b46add18426104114232adb85412eed345de83f

    SHA256

    3713c3cd59c08705d6670dad0a3e767d9312c825db877ca9190a919d3fec4d78

    SHA512

    5472ca09e0264e640df12ceea52472a7503a17c4137972c41603ff5db6acf4fa25367dc7e405cec4f4c3d52c8271372e6c8d67d03531b1a4f5e12b790f4d7b9e

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\imagestore\cz9baam\imagestore.dat

    Filesize

    3KB

    MD5

    70d25d2c52c04a9c678d56c420dd062a

    SHA1

    6c1927317a065a660e71fcb7588b4be52052449c

    SHA256

    827a32acc471dfad3e4ae1dedf0b82595651ff6e399ca8db590f3a267a87491d

    SHA512

    2f1a1d9e043f7189d0524da322b08fd7ac385c769671181527a1e338ff6acf10858433af537ef50b8983b9e2ebb3a70bb6c2f98f2afcf216a6aea35e25721dfa

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\RPW4GWWI\analytics[1].js

    Filesize

    49KB

    MD5

    54e51056211dda674100cc5b323a58ad

    SHA1

    26dc5034cb6c7f3bbe061edd37c7fc6006cb835b

    SHA256

    5971b095cff574a66d35ada016d4c077c86e2dea62e9c0f14cf7c94b258619de

    SHA512

    e305d190287c28ca0cc2e45b909a304194175bb08351ad3f22825b1d632b1a217fb4b90dfd395637932307a8e0cc01da2f47831fa4eda91a18e49efe6685b74b

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\RPW4GWWI\suggestions[1].en-US

    Filesize

    17KB

    MD5

    5a34cb996293fde2cb7a4ac89587393a

    SHA1

    3c96c993500690d1a77873cd62bc639b3a10653f

    SHA256

    c6a5377cbc07eece33790cfc70572e12c7a48ad8296be25c0cc805a1f384dbad

    SHA512

    e1b7d0107733f81937415104e70f68b1be6fd0ca65dccf4ff72637943d44278d3a77f704aedff59d2dbc0d56a609b2590c8ec0dd6bc48ab30f1dad0c07a0a3ee

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\RUOQG7D6\favicon[1].ico

    Filesize

    3KB

    MD5

    59a0c7b6e4848ccdabcea0636efda02b

    SHA1

    30ef5c54b8bbc3487ea2b4c45cd11ea2932e4340

    SHA256

    a1495da3cf3db37bf105a12658636ff628fee7b73975b9200049af7747e60b1f

    SHA512

    bcfebb2ca5af53031c636d5485125a1405ca8414d0bc8a5d34dd3b3feb4c7425be02cf4848867d91cf6d021d08630294f47bdc69d6cd04a1051972735b0f04d4