Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    149s
  • max time network
    146s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230220-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
  • submitted
    14/05/2023, 04:03

General

  • Target

    http://thepiratebay.org

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 56 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" http://thepiratebay.org
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2072
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2072 CREDAT:17410 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1384

Network

MITRE ATT&CK Enterprise v6

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\7423F88C7F265F0DEFC08EA88C3BDE45_AA1E8580D4EBC816148CE81268683776

    Filesize

    471B

    MD5

    d215e8f258878362467ca56e881e503c

    SHA1

    bde8ed9da4b8297b2efeae31e307b3a724cf6c26

    SHA256

    00898cb46fa389fc4fbb5965b2d5a4a19a7fdec1988491a7d6b66a45e2032770

    SHA512

    241daebdf2a192eb34b69b36af731f78fa241e030633777d4a3ec37d6ff994e2e7f646d9aecaa7ab8a9fa91c4db135ad22c7ff585b0f9d52231bbb22245b7144

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7423F88C7F265F0DEFC08EA88C3BDE45_AA1E8580D4EBC816148CE81268683776

    Filesize

    434B

    MD5

    99069bcc5a5282b64ef899d50a39fff7

    SHA1

    b3dc84de8e03d7180a438c6162c08c7c0db078e0

    SHA256

    056bfc23c5794da4f9add71677e1c01cec17fa30fbf71a76f4cbdc79f5b5057d

    SHA512

    7255c35e16f289916f26f42ee3708b12ccefe81d8ed3a13cf6d6b6ca5121e14c5dba165a643da1614cdb4f5a6d07fa18788fcc35b00f241e82dcd1580c08421b

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\7QPF6GK6\thepiratebay[1].xml

    Filesize

    17B

    MD5

    3ff4d575d1d04c3b54f67a6310f2fc95

    SHA1

    1308937c1a46e6c331d5456bcd4b2182dc444040

    SHA256

    021a5868b6c9e8beba07848ba30586c693f87ac02ee2ccaa0f26b7163c0c6b44

    SHA512

    2b26501c4bf86ed66e941735c49ac445d683ad49ed94c5d87cc96228081ae2c8f4a8f44a2a5276b9f4b0962decfce6b9eeee38e42262ce8d865d5df0df7ec3d6

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\7QPF6GK6\thepiratebay[1].xml

    Filesize

    286B

    MD5

    cddc5948fc3e7d6be5d98687b0198573

    SHA1

    051e2f60e582eb51f2ad2243081dfb34f28601f6

    SHA256

    736c705bba854064df58e08031d1067efd4b1ea37726fe347cb50621aab7ce7a

    SHA512

    ea17ffb3be3c09f99028b7474651609ee512bb3c44713f4384a8b6b97e6d91b1c12eb45c81838d9e550466d996d29cb8f6078b48496eae3ea62aca959594b813

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\imagestore\phzg4yt\imagestore.dat

    Filesize

    942B

    MD5

    7dc0b082fa3e60825622b981f93d1093

    SHA1

    32100f02f409897d1d71b7830d982cf21ec397c7

    SHA256

    5de464825e39ec8cc8f42c56f2e031fbd92d6363fbb86c3d17f85663b5b8abf2

    SHA512

    31aafa2dabe3735090092c366d3e7bc96d9ec58fe198cbf1595dce574a66729b9a2f8008dfd61686f877245ba1c3b764e9b81b2bed9a285a9c6d30c1a8b2e898

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\4VT6R2QM\favicon[1].ico

    Filesize

    824B

    MD5

    b407e86e0a33574c3079d83fe36e1da6

    SHA1

    fc0e3d17c0d17865a24f3bbb3afd8a1ed0bbea83

    SHA256

    fab9c76a90a2be44b10dfc214c044b7105fd02ac545b322ae3f1ac3a4c697ac3

    SHA512

    ad31f356e489007702798dc83c359b6fce8a41a20ac28e73bf6153e38896211036791b14d3f6826c27c8c2ba359e1cd4367907d068e9788697a657939ed41064

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\EY3KXMB3\suggestions[1].en-US

    Filesize

    17KB

    MD5

    5a34cb996293fde2cb7a4ac89587393a

    SHA1

    3c96c993500690d1a77873cd62bc639b3a10653f

    SHA256

    c6a5377cbc07eece33790cfc70572e12c7a48ad8296be25c0cc805a1f384dbad

    SHA512

    e1b7d0107733f81937415104e70f68b1be6fd0ca65dccf4ff72637943d44278d3a77f704aedff59d2dbc0d56a609b2590c8ec0dd6bc48ab30f1dad0c07a0a3ee