Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    16s
  • max time network
    18s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230703-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system
  • submitted
    05/07/2023, 08:07

General

  • Target

    nkrk.html

  • Size

    124B

  • MD5

    369859a199530f1ee0141bffec632138

  • SHA1

    1550def794294b96adf8f8926f7b13c752f87c47

  • SHA256

    d0d36947c6eb2116ad8bef6dd26ecc1f67e6aabcba560ba68291136362decee2

  • SHA512

    dbc13082ab3ac98070bfd6c6afd00cac56e53b3c7b6dfbc851477b53d71817c440f9fcb670b7ead238a548864506524cd7ef828df0ccb8c27aac78658b462dbc

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 32 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\nkrk.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1200
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1200 CREDAT:17410 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:4796

Network

MITRE ATT&CK Enterprise v6

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\imagestore\5amy22j\imagestore.dat

    Filesize

    1KB

    MD5

    64d3ef56ecff9ae5125d7179c7202f35

    SHA1

    03ad01302e51593a0e2933191b4bfdd6d268ab5f

    SHA256

    1e99473dda0f22f01afb0d30b86cc34f1203cc55a8dcc849b25d4335244e750c

    SHA512

    53774399f64e3ade3725dfbc3a97de9b839e2495b2b610e9bb3a1293ce70361eee66d9c418dcf0f0b8a855c3c8b7a762a4b41cbbb544014a38bad4b4b241d3df

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\PQKW7621\favicon[1].ico

    Filesize

    1KB

    MD5

    f2a495d85735b9a0ac65deb19c129985

    SHA1

    f2e22853e5da3e1017d5e1e319eeefe4f622e8c8

    SHA256

    8bb1d0fa43a17436d59dd546f6f74c76dc44735def7522c22d8031166db8911d

    SHA512

    6ca6a89de3fa98ca1efcf0b19b8a80420e023f38ed00f4496dc0f821cea23d24fb0992cee58c6d089f093fdefca42b60bb3a0a0b16c97b9862d75b269ae8463b

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\PQKW7621\favicon[1].ico

    Filesize

    1KB

    MD5

    f2a495d85735b9a0ac65deb19c129985

    SHA1

    f2e22853e5da3e1017d5e1e319eeefe4f622e8c8

    SHA256

    8bb1d0fa43a17436d59dd546f6f74c76dc44735def7522c22d8031166db8911d

    SHA512

    6ca6a89de3fa98ca1efcf0b19b8a80420e023f38ed00f4496dc0f821cea23d24fb0992cee58c6d089f093fdefca42b60bb3a0a0b16c97b9862d75b269ae8463b