Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    139s
  • max time network
    142s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230220-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
  • submitted
    03/05/2023, 14:35

General

  • Target

    https://hubble.witco.app/news/event/fkWBHkHvWhjawvghx?condo=zDyAYp6QYoGtprw39

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Modifies registry class 1 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" https://hubble.witco.app/news/event/fkWBHkHvWhjawvghx?condo=zDyAYp6QYoGtprw39
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:4460
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:4460 CREDAT:17410 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Modifies registry class
      • Suspicious use of SetWindowsHookEx
      PID:1392

Network

MITRE ATT&CK Enterprise v6

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\FOO8751J\m.stripe[1].xml

    Filesize

    17B

    MD5

    3ff4d575d1d04c3b54f67a6310f2fc95

    SHA1

    1308937c1a46e6c331d5456bcd4b2182dc444040

    SHA256

    021a5868b6c9e8beba07848ba30586c693f87ac02ee2ccaa0f26b7163c0c6b44

    SHA512

    2b26501c4bf86ed66e941735c49ac445d683ad49ed94c5d87cc96228081ae2c8f4a8f44a2a5276b9f4b0962decfce6b9eeee38e42262ce8d865d5df0df7ec3d6

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\imagestore\9afmek3\imagestore.dat

    Filesize

    9KB

    MD5

    3513df399fd8fcb3d8bf28b4b5a513eb

    SHA1

    f37c5a4e04642d1fbe90aa46203189292635a7c5

    SHA256

    eb5a2001fa617c0659e45503e6fc25d8b0ca1538116df6c4a8106588eadc9782

    SHA512

    3ab5168b16d57f8514240b4ba4f72d1dc9153bf3f70a509f23604cb264611fc2094687e3a0b0f8624a0d5028c95c2f747b0dc2c94093e28375596e0d849bcd20

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\0P80TOLA\favicon-32x32[1].htm

    Filesize

    4KB

    MD5

    a658d6fcfde26ad90f358e3c2e518119

    SHA1

    bd3f630ba76ec364832f348a18b4392b36fcef3f

    SHA256

    2204e580c9a4619f48c73ff1a9aec9eb7eeaf01e289f22bc827e0f8b702d32d7

    SHA512

    009ea7dcabc72a50403da2ab0486a4959ff8c4ccab5df5a21ac5f99c8468df87b61383dc1563c93dbbe0afcc6de24e77e0e44a2f9e448e5ba1eaa977479d36e0

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\0P80TOLA\favicon[1].ico

    Filesize

    9KB

    MD5

    0b2fd6b18bec72720c172c21b712f6e1

    SHA1

    5add6fca9dacff0d513b2def7530399c2080b1eb

    SHA256

    59b00ddbf33159acb976b515214b2b969deb8f7a77421386628812bbfb74e31d

    SHA512

    d401e0d1676b85ba66ededec0de3172ca90b0d85be6c80a1f319c0190c46ffffbb06b3288a346deaec6b82983be0dac031192705bcffeba969e31a044532559d

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\G1ORIWBN\suggestions[1].en-US

    Filesize

    17KB

    MD5

    5a34cb996293fde2cb7a4ac89587393a

    SHA1

    3c96c993500690d1a77873cd62bc639b3a10653f

    SHA256

    c6a5377cbc07eece33790cfc70572e12c7a48ad8296be25c0cc805a1f384dbad

    SHA512

    e1b7d0107733f81937415104e70f68b1be6fd0ca65dccf4ff72637943d44278d3a77f704aedff59d2dbc0d56a609b2590c8ec0dd6bc48ab30f1dad0c07a0a3ee