Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

1

test.url

windows11-21h2-x64

1

test.vbs

windows11-21h2-x64

3

Analysis

  • max time kernel
    226s
  • max time network
    246s
  • platform
    windows11-21h2_x64
  • resource
    win11-20231215-en
  • resource tags

    arch:x64arch:x86image:win11-20231215-enlocale:en-usos:windows11-21h2-x64system
  • submitted
    19/12/2023, 14:08

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    test.url

  • Size

    51B

  • MD5

    663d7dda68b0d7c6b4ca4b34579c65b6

  • SHA1

    94ac701bdcfe7e79979680a6f11fb0db9d9aeb3a

  • SHA256

    e20030aee4f45bdd8c594c81ab62dc7bff859f2c303c03ae00cbdcb54acdcf20

  • SHA512

    a722b3aadb27e6662feeec45fd534725c3462b2703440c1430948e7f44cba7b617ad979dcf6355d22c5dbf2c7bd7b140486e7fac5efba0228e9e6b706b8a7d8d

Score
1/10

Malware Config

Signatures

  • Modifies registry class 1 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Windows\System32\rundll32.exe
    "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL C:\Users\Admin\AppData\Local\Temp\test.url
    1⤵
      PID:5152
    • C:\Windows\System32\rundll32.exe
      C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
      1⤵
        PID:1760
      • C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\MiniSearchHost.exe
        "C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\MiniSearchHost.exe" -ServerName:MiniSearchUI.AppXj3y73at8fy1htwztzxs68sxx1v7cksp7.mca
        1⤵
        • Modifies registry class
        • Suspicious use of SetWindowsHookEx
        PID:5708

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • C:\Users\Admin\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\TempState\SearchHoverUnifiedTileModelCache.dat
        Filesize

        10KB

        MD5

        13c38447563f07e8747fe1e081358a10

        SHA1

        22451a7b9b11c942de2764fd33fa29f4f65d406f

        SHA256

        27b75d953fcd05a8bc14424a7cc0ec9d6353c139ef6809f2ba5c7879185598aa

        SHA512

        5481dc399f41f94c608f94573fa7ef51ea75d0ce1bf11781f833a1d51a79d2aa9875aa4bc242989c8dac3cb46ffd890944e4ea92c892c605a4ff045d9e26d748

        Download Submit

      • C:\Users\Admin\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\TempState\SearchHoverUnifiedTileModelCache.dat
        Filesize

        10KB

        MD5

        c0c4f05856a10074f608a714492246ea

        SHA1

        9b35af2a0a7643b4a54c5cd60eb241f6a4fdc178

        SHA256

        8d2b159b1a0f9f3762ab27367f63e46ff51d5167e4d176fed2ac34990abf77b4

        SHA512

        805b797e0076c9da85a2340a52bbab808520883d62bdb2fc4c84b5db901df8a06d80bdf811f47dd9c5ef4cc490f524a909523ef7ec5366ad26cd4e22442d7adb

        Download Submit