Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    135s
  • max time network
    145s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230221-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230221-enlocale:en-usos:windows10-2004-x64system
  • submitted
    31/05/2023, 14:40

General

  • Target

    https://stratevent.shop/

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 37 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" https://stratevent.shop/
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:956
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:956 CREDAT:17410 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:3460

Network

MITRE ATT&CK Enterprise v6

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\7423F88C7F265F0DEFC08EA88C3BDE45_AA1E8580D4EBC816148CE81268683776

    Filesize

    471B

    MD5

    080320bb3fe7e7f860019942e6f77f9c

    SHA1

    2d6f3813b1ed7972c01df6330eb3b0c30339eda9

    SHA256

    9eb11d5a62c35054e50d193211638a08c9b94d5b360f943df4124e28ab793a6f

    SHA512

    9def7fa57fc58af72dc374f0ca010107585a355ffcb3c1d3b99064a455acf3fe8ed7d42052234fe2d042b5ccda8af4ba16a8b2dd882b01f0be7edb8cf7aa8944

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7423F88C7F265F0DEFC08EA88C3BDE45_AA1E8580D4EBC816148CE81268683776

    Filesize

    404B

    MD5

    73cefe9c6f381bd4f8197468e1071c7b

    SHA1

    11f64989a3af238025adf26044c8a3a2160a3825

    SHA256

    6f7f98f004d6b9b62d7a87f07ee01a10bb0f34a06ccb6bbcdfa7bb7d33659a40

    SHA512

    9b28d16e00ecf6802d0f7f158bd9c175dac38208a6f2b97c8491a1f9aa8f7fe2ae4541c9738707e3a8105d5453aaf6bd7eefa575c813316297654279567cbb06

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\GPVLIKPI\api[1].js

    Filesize

    15KB

    MD5

    2a1262ba5cd32899831d483322a28dd7

    SHA1

    3805876db8773ed5820043e1f39b0b6c049f61b2

    SHA256

    2e1e45b1d429b2d703676139932fe97b7ffc7986e6d0221653a7404e4c3032f0

    SHA512

    1f269018c161de8f3cddae1720a4eebcf0109179d628f9ef347a7c7bfd94b96037c1d97ff6a513827bebe1be5958c879826dfcbde802256d8fff46a30c7ecbc9

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\GPVLIKPI\challenges[1].css

    Filesize

    6KB

    MD5

    2c78b7f8fa496092bf41d5edd51611e7

    SHA1

    8b0b1b276e8194b0a5497db478ec2ea9b4f83c42

    SHA256

    2b0bd09c1cc7119d27e45353a59bf6c2721563e1689853ff704057a7439508d2

    SHA512

    53a7750ea46082968c2ec557857ad3975cddb0b45595259f0f3e9fc16360b87c5f257e058489ecaf80e61a97f92f1c5e34fa2f6fcfe922f4ae22392ffd75b4da

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\RP56V4OA\transparent[2].gif

    Filesize

    42B

    MD5

    d89746888da2d9510b64a9f031eaecd5

    SHA1

    d5fceb6532643d0d84ffe09c40c481ecdf59e15a

    SHA256

    ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629

    SHA512

    d5da26b5d496edb0221df1a4057a8b0285d15592a8f8dc7016a294df37ed335f3fde6a2252962e0df38b62847f8b771463a0124ef3f84299f262ed9d9d3cee4c

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\RPW4GWWI\v1[2].js

    Filesize

    151KB

    MD5

    4f67ff33603e9f215d5655fb521b81c3

    SHA1

    6af889c321599440b5b30afaa853fc996ee69d5f

    SHA256

    6065249d69c1c82896d0d6f3200b13d1a11f2333f8000fdf957d26c4a9dcd4dd

    SHA512

    e8d1167b05b0fec995f38e27cfd3f9033f136fa01301fcb257602e90622621fc44a6a55803a15cc6e99bd81b9bbda429892f90994a10d0f4af48c47429e13d4b

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\RUOQG7D6\suggestions[1].en-US

    Filesize

    17KB

    MD5

    5a34cb996293fde2cb7a4ac89587393a

    SHA1

    3c96c993500690d1a77873cd62bc639b3a10653f

    SHA256

    c6a5377cbc07eece33790cfc70572e12c7a48ad8296be25c0cc805a1f384dbad

    SHA512

    e1b7d0107733f81937415104e70f68b1be6fd0ca65dccf4ff72637943d44278d3a77f704aedff59d2dbc0d56a609b2590c8ec0dd6bc48ab30f1dad0c07a0a3ee