Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    102s
  • max time network
    142s
  • platform
    windows7_x64
  • resource
    win7-20230220-en
  • resource tags

    arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system
  • submitted
    11/06/2023, 18:57

General

  • Target

    alexmods.html

  • Size

    745B

  • MD5

    0476768f5038570fa7b56ba4915b1b0d

  • SHA1

    65ded33f1ebf397801fb8f9aca1312ab24da011b

  • SHA256

    69c8f03902206ef8bc08fab244bf30c4243a75e119a5b14e9a1f36ce60e6437a

  • SHA512

    4b5a6425f072e7af9f10886a9fedbaf2380d192817c2f266692135b0aa05eefda4be682ecbd704fc5fd5acbe53c6a52efe9974bb12ae41fc9f1b98424569161d

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 38 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\alexmods.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1344
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1344 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1168

Network

MITRE ATT&CK Enterprise v6

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    62KB

    MD5

    3ac860860707baaf32469fa7cc7c0192

    SHA1

    c33c2acdaba0e6fa41fd2f00f186804722477639

    SHA256

    d015145d551ecd14916270efad773bbc9fd57fad2228d2c24559f696c961d904

    SHA512

    d62ad2408c969a95550fb87efda50f988770ba5e39972041bf85924275baf156b8bec309ecc6409e5acdd37ec175dea40eff921ab58933b5b5b5d35a6147567c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f12af2d0e21c8c53a14db3f3d6e753c2

    SHA1

    595d16cb88bcc1fdfb0e9e7102164432b405d53b

    SHA256

    180cc81a415d12a2ae739f295bf45c0cfc8b79a5742476c70a53057c013b3257

    SHA512

    f688ea1aae19feba0bfe48bb091b38a00fcc4f05d161801d309b93715fb43326a193cdb51038c7e772922d87c4e18f21622b114b6ae2616c4bad0b19ec143f37

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6ccb2294953e3c4cf2b3a4bff45b6d08

    SHA1

    4c01ad0bed30fae01e9a4c869ea0925d9a66ef49

    SHA256

    2b17b7b2eb086603ace80ddabd34d5cdcf2f5b0c449151a054d27aeacf907ea5

    SHA512

    164b671867b4168282303645db4528bbdcac52275751b5b1c0f1833933edab1a8658e4986e49af8fdadc5ed41d024a6be6bb9da786de6970d507cadc3a1a79d5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    df6685c217abf4009f6ec32503a1c835

    SHA1

    15e33601a86bdbc180a10ee11374b68c35ff582e

    SHA256

    8ad891a20a605230005c3225459082c73ce8572492ba6c0e14055080555eb82e

    SHA512

    2e3b6fa9f46579729e3769201524540e7f370eadf07b476015715fb4efce504548c533b6cb4d6575979c69d83a3c3eecc8cf2dfa50d3dfa61e86415aedb92348

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b396916b4622bac2515c3707dc72d2fb

    SHA1

    e6579a196cd147df0b084a6930c6440273653ff5

    SHA256

    648b14cc50f79a89592d5d78de7e586fdb79eff2dd295937be2ea70d440892b7

    SHA512

    315f3b3b4706dd58e97e383c70ae31ffa2e65eb66f0ad461c922e48b1ee621aecf81df4f54242d28033a24fa9031cf8db6f05c82b2475c12f81bb34efcd2ddf4

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\QHKTFKHM\suggestions[1].en-US

    Filesize

    17KB

    MD5

    5a34cb996293fde2cb7a4ac89587393a

    SHA1

    3c96c993500690d1a77873cd62bc639b3a10653f

    SHA256

    c6a5377cbc07eece33790cfc70572e12c7a48ad8296be25c0cc805a1f384dbad

    SHA512

    e1b7d0107733f81937415104e70f68b1be6fd0ca65dccf4ff72637943d44278d3a77f704aedff59d2dbc0d56a609b2590c8ec0dd6bc48ab30f1dad0c07a0a3ee

  • C:\Users\Admin\AppData\Local\Temp\Tar69B4.tmp

    Filesize

    164KB

    MD5

    4ff65ad929cd9a367680e0e5b1c08166

    SHA1

    c0af0d4396bd1f15c45f39d3b849ba444233b3a2

    SHA256

    c8733c93cc5aaf5ca206d06af22ee8dbdec764fb5085019a6a9181feb9dfdee6

    SHA512

    f530dc0d024a5a3b8903ffaaa41b608a5ccdd6da4ba1949f2c2e55a9fca475fec5c8d2119b5763cabe7ef1c3788fb9dcac621869db51d65b1d83cfe404fb4c27

  • C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Cookies\GPU23RTE.txt

    Filesize

    608B

    MD5

    2a5801de8e079eb4537613746f92f20a

    SHA1

    abdf9fb745bea4757f435ecb17a29d3dc23e37ed

    SHA256

    eaada521be11a87d0d4a7b8182f234634acf3c1e5488e080dd6687afae5ebc8b

    SHA512

    8aea5e355d9d1dc584124a011503ab3f5451380f5398867442e3fd98acb66cbbc6473c3e1d31a5e4da5f08648c69f69b88096391186617454a14f4cb0e87833c