Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    68s
  • max time network
    70s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230220-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
  • submitted
    08/05/2023, 06:10

General

  • Target

    http://ideaon.de

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 37 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" http://ideaon.de
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1000
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1000 CREDAT:17410 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2236

Network

MITRE ATT&CK Enterprise v6

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\imagestore\osplltc\imagestore.dat

    Filesize

    7KB

    MD5

    f85a4cd9fffafd05c7cce1e05277c280

    SHA1

    23651d63242c72e2853045db8e662709da962d62

    SHA256

    0d2a1b0058ab026e15d121fcefa9ec3a3718e8698de49521d523e229d92147fb

    SHA512

    46a44c4f547bc5248eb8e13ec243b2ded27f02a6c6e9a1d7fb0c493620f191d014687111fc29b6d0ac58b826382254d5620e8d6879b2ac11c6758fd8c3cd2678

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\imagestore\osplltc\imagestore.dat

    Filesize

    8KB

    MD5

    7424d11df9180f7235c5894af9e48bae

    SHA1

    0b31c84b6b2f0b645c2444017a85588efa91887b

    SHA256

    ce288175f369b1234cc68897919b50e2b5d1593acd2ec2e4978127d7f1d36c8d

    SHA512

    8c93ae6aaf7427993bb7fa3905a122226d570cbce52c93847bbadf861662ac6c1853b99f19995cd624071253aeb893f84637c2421b69cc3a4153afe60b432447

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\1IYUAPIF\favicon[1].ico

    Filesize

    1KB

    MD5

    53242aff93812db0d61349838620fcec

    SHA1

    02bd56732a23b33f6f8391fb8f879a1e08c4d01d

    SHA256

    404ce8f85a785a6949424271a30b333d35c3d031925f07537ede058da9a684c2

    SHA512

    71c3330bf3f1818647dc22d2e459776a8f36990e2066d652698e31de07c7e05661065d57ccacc32f8eead793caf8d2805ad20187bc9ff41db86f92023719211e

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\S1Q31HZS\suggestions[1].en-US

    Filesize

    17KB

    MD5

    5a34cb996293fde2cb7a4ac89587393a

    SHA1

    3c96c993500690d1a77873cd62bc639b3a10653f

    SHA256

    c6a5377cbc07eece33790cfc70572e12c7a48ad8296be25c0cc805a1f384dbad

    SHA512

    e1b7d0107733f81937415104e70f68b1be6fd0ca65dccf4ff72637943d44278d3a77f704aedff59d2dbc0d56a609b2590c8ec0dd6bc48ab30f1dad0c07a0a3ee

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\YYL8D8JJ\favicon[1].ico

    Filesize

    7KB

    MD5

    40eb4ffd48c93baf112e066f62108616

    SHA1

    c49fb3956c9c51ae645f6ddd567de0c02dca3db4

    SHA256

    5b910f8369fc6cf04503c24748de67ce38b01d95acca02c730e47abca4226e76

    SHA512

    14845408558752a45ec23ac6abb57b0ec60bb98a29a8f28e347044445e172e4082b0ef3b110354214174c8f35d5fbf35844ddff496d0e1a708d84f5e0bcc6d51

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\YYL8D8JJ\favicon[1].ico

    Filesize

    7KB

    MD5

    40eb4ffd48c93baf112e066f62108616

    SHA1

    c49fb3956c9c51ae645f6ddd567de0c02dca3db4

    SHA256

    5b910f8369fc6cf04503c24748de67ce38b01d95acca02c730e47abca4226e76

    SHA512

    14845408558752a45ec23ac6abb57b0ec60bb98a29a8f28e347044445e172e4082b0ef3b110354214174c8f35d5fbf35844ddff496d0e1a708d84f5e0bcc6d51