Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Resubmissions

06/07/2023, 18:35 UTC

230706-w8fqlsdg43 7

06/07/2023, 18:32 UTC

230706-w6mfdadg35 7

06/07/2023, 18:27 UTC

230706-w34kgsdg32 7

05/07/2023, 09:21 UTC

230705-lbqjfabd66 7

05/07/2023, 08:59 UTC

230705-kxxdfach7v 7

05/07/2023, 08:41 UTC

230705-klwmrscg9y 7

05/07/2023, 07:15 UTC

230705-h3aqhscf6z 7

05/07/2023, 07:13 UTC

230705-h2e9lsba95 7

05/07/2023, 06:50 UTC

230705-hl6fvscf2t 7

Analysis

  • max time kernel
    132s
  • max time network
    103s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230703-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system
  • submitted
    05/07/2023, 08:41 UTC

General

  • Target

    changelog-ar.html

  • Size

    72KB

  • MD5

    c651bb94e9f83dc0e7c948c60eb1db60

  • SHA1

    9d982fef2dc879c8e91d9003d398de221d3ba9f3

  • SHA256

    cd0453a82a7ed5379049a5d3f3d91ab36e673761418e777d91c4c944d1912a81

  • SHA512

    3e234e7e0167967e1600dd8dbb5b3d0c119205d67eab93e09bb9d2a6bba470dc6f324edf787cd54bcf3cbfd77680eaa32b128bde7a023dbd619bc37094d952a1

  • SSDEEP

    1536:aQweFu6MydzhX0iYvTqrSFL7pGXtiEmfxZb6JOL4suMApYlvpENCdjWbFlrQ9ZLW:DBu6Mydz90TqmFL7pGdiEMxZb6JO0suP

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 24 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\changelog-ar.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2520
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2520 CREDAT:17410 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1216

Network

MITRE ATT&CK Enterprise v6

Replay Monitor

Loading Replay Monitor...

Downloads

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.