Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    148s
  • max time network
    150s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    22/12/2023, 15:40

General

  • Target

    dcee69edaea3abb5771670b92326661a.html

  • Size

    45KB

  • MD5

    dcee69edaea3abb5771670b92326661a

  • SHA1

    c7ac0cda9fcfb9dae31e27b184de8a6e77120557

  • SHA256

    8c2c6260b9cc78fe7e60df8a243ce9e8f4cc7dae21e0b5ec184cd8aef8cb3d33

  • SHA512

    6e3585ec2b996453d0f1745500ff162bc6a44ea1c3bc8cafbd95ca9cfadf40ebfd292d38535d78b7791d43593a44e3c249cc428ffb66a49d211a2741a14f30f0

  • SSDEEP

    768:GIRIOITIwIgIiKZgNDfIwIGI5IVJ7SqIRIOITIwIgIiKZgNDfIwIGI5IVJ7SZZFn:GIRIOITIwIgIiKZgNDfIwIGI5IVJ7Sq+

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 64 IoCs
  • Modifies registry class 1 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\dcee69edaea3abb5771670b92326661a.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1256
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1256 CREDAT:17410 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Modifies registry class
      • Suspicious use of SetWindowsHookEx
      PID:4180

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\8AD1JUGD\www.youtube[1].xml

    Filesize

    229B

    MD5

    a61fd5b648beaa6cc2e7424ff309be4d

    SHA1

    caa26377f40e1f834828bd6b411913d823e49ee0

    SHA256

    7db25489789d90f0129cfbda12531378afda7a2c505b57f48bc866387879694e

    SHA512

    07af2780e60f61566ecc953359cc66c1544160984e312e2da6f3b34f4ed26a2cd52c8cf29a97ddc2e3b79c2bdcd7bc0eed35792eb9927372210814ca42cda378

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\8AD1JUGD\www.youtube[1].xml

    Filesize

    229B

    MD5

    f346ed445ac072d8f36ed0d92d2b7b55

    SHA1

    808de6a2cc90ecdeabc7b9b1edf8784a25642341

    SHA256

    7c6b685a120da4c11a3a498285f95da58065dbefb6780cb11dbc8cf7cefd305b

    SHA512

    7c4dfe584fded1163a301f0f65729187774efb54fa2ad9fc8eaa9449b0560a7b43f244e438c141ea0f1c545249982cabe45b1fd160bfaa05850f5fe1be56e16a

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\8AD1JUGD\www.youtube[1].xml

    Filesize

    641B

    MD5

    475f6d9382726cf9c1daaa299f642cb8

    SHA1

    22aad892b0795a122c318ca6929dce8f62d1d747

    SHA256

    1be9ee44b9c9a01534ca6089a3c1dea588bfd98f7ddd3207368c68c90c641a0b

    SHA512

    b486f2c29a684cb5ad9f9e945616b22ad161c5d04cccb89d5b93cc046ccaca42f4699fc05130e80e3c73f60964f5ac49ab99732f23def5dffa1610aca6b8eb58

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\8AD1JUGD\www.youtube[1].xml

    Filesize

    50KB

    MD5

    6a0c648bac89d4d739596fc537c5f4b3

    SHA1

    efe6c6fb1a06e2320e598cf2d591b495edc0328d

    SHA256

    e24cc1a37fd3f0fa8fccafd1d9ec68f3c3223f7c8909953da06793af0e8cf176

    SHA512

    23613810109b23e36a5b269e69fcea42a9cd63216f47f7ba845571c319f84edac544899e80bfa2ea2d2fc2fff3451a8963325fec00514e853d8698bf34d14e4c

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\8AD1JUGD\www.youtube[1].xml

    Filesize

    13B

    MD5

    c1ddea3ef6bbef3e7060a1a9ad89e4c5

    SHA1

    35e3224fcbd3e1af306f2b6a2c6bbea9b0867966

    SHA256

    b71e4d17274636b97179ba2d97c742735b6510eb54f22893d3a2daff2ceb28db

    SHA512

    6be8cec7c862afae5b37aa32dc5bb45912881a3276606da41bf808a4ef92c318b355e616bf45a257b995520d72b7c08752c0be445dceade5cf79f73480910fed

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\VersionManager\verCC29.tmp

    Filesize

    15KB

    MD5

    1a545d0052b581fbb2ab4c52133846bc

    SHA1

    62f3266a9b9925cd6d98658b92adec673cbe3dd3

    SHA256

    557472aeaebf4c1c800b9df14c190f66d62cbabb011300dbedde2dcddd27a6c1

    SHA512

    bd326d111589d87cd6d019378ec725ac9ac7ad4c36f22453941f7d52f90b747ede4783a83dfff6cae1b3bb46690ad49cffa77f2afda019b22863ac485b406e8d

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\1RIAF1U2\suggestions[1].en-US

    Filesize

    17KB

    MD5

    5a34cb996293fde2cb7a4ac89587393a

    SHA1

    3c96c993500690d1a77873cd62bc639b3a10653f

    SHA256

    c6a5377cbc07eece33790cfc70572e12c7a48ad8296be25c0cc805a1f384dbad

    SHA512

    e1b7d0107733f81937415104e70f68b1be6fd0ca65dccf4ff72637943d44278d3a77f704aedff59d2dbc0d56a609b2590c8ec0dd6bc48ab30f1dad0c07a0a3ee