Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    32s
  • max time network
    34s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230621-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230621-enlocale:en-usos:windows10-2004-x64system
  • submitted
    02/07/2023, 03:11

General

  • Target

    https://workink.co/4I6/arcanv2

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 25 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" https://workink.co/4I6/arcanv2
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:3564
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:3564 CREDAT:17410 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1496

Network

MITRE ATT&CK Enterprise v6

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\7423F88C7F265F0DEFC08EA88C3BDE45_AA1E8580D4EBC816148CE81268683776

    Filesize

    471B

    MD5

    42b28ee2017bd7c4d7a394ddfd2d2bd9

    SHA1

    c7818f9f00bd728729fd0b6214469e0682103d18

    SHA256

    b25e5ebac7e3a33c0d22fca2bf341f619823c15e630d57794fa92ffc9aecaa86

    SHA512

    36b38aeba5406d73b550fb9e0d6860969dfeba29016bb0f76323c503dbd7fea5208ec679f39a27e7c3dc71268c45624b64ff698055a95dde0a5a64838ca0e70b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7423F88C7F265F0DEFC08EA88C3BDE45_AA1E8580D4EBC816148CE81268683776

    Filesize

    404B

    MD5

    2a0e81c9ecc3309cdcfd97b0eab78dea

    SHA1

    6d0966d7cc1bdea095050fc68087b46657bc58a5

    SHA256

    e38903a03733fafa95800a66ab33f530a425ab248f30da99356f82ba4b3fd2be

    SHA512

    72b2d87978c9cd3b8becbb14e40a23866db1aa8f55c91e357e9f28efcbac8e5340b2a5649de910e91e49b7b752ed575e4e8e4863a7d220ce8f9080052004f777

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\imagestore\boznf1h\imagestore.dat

    Filesize

    66KB

    MD5

    74dad3712be91c40cc7a480dbb4742ab

    SHA1

    8e68e526c93767c7320f4c1dc15c09d46cceb633

    SHA256

    4e2d900ae3140f8f1e0d15d6662472d37255077c9b262d874506fea7fca3f292

    SHA512

    327a3aa9314d1e09914318e5b70d5454013ae6c79d92837c18095ff7be269b71663ac3e6e83a7bfadbc2f5d025e889ca7c0a582afd106e0813fa7874d8e59dcb

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\97XIF11T\favicon[1].ico

    Filesize

    66KB

    MD5

    afa017d3bae1d7539d939babd2d8fd67

    SHA1

    16ecbf50426dba05f7020acd46029894d4148737

    SHA256

    68cca3dd30e521ceec8d25007ef10349c4483343dcb8de14c3ea533ea8b53948

    SHA512

    6697ae0eeb7bf0c2cbc85b3e38312d2715cac6a4ebe8b294de10fedf305f10693c1036e1189f2327c8010fdee5a098f2cac39a0ccb1ee021b03cf74e46b18b36