Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    7s
  • max time network
    64s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    24/12/2023, 23:40

General

  • Target

    1a47393834255d8c7004f3a8edbb43b1.html

  • Size

    6KB

  • MD5

    1a47393834255d8c7004f3a8edbb43b1

  • SHA1

    0df510f478b48a32392a744003aa7f8c030271c9

  • SHA256

    e9b3239073461a6ba3df2ba769ec87390e74e841884e23f00d6de9dd8994d9d6

  • SHA512

    86d1f91ce8056b2565f4dc51384c02d5f088db7833a1c0626ceb2dd0378d888dae53c4f81cc4b15d2b6c5511d077d3957b22f59ad53f8b58222f75049daf14fc

  • SSDEEP

    96:uzVs+ux7kzLLY1k9o84d12ef7CSTUnLcEZ7ru7f:csz7kzAYS/Mb76f

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 6 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs
  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\1a47393834255d8c7004f3a8edbb43b1.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:3188
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:3188 CREDAT:17410 /prefetch:2
      2⤵
        PID:4512

    Network

    MITRE ATT&CK Enterprise v15

    Replay Monitor

    Loading Replay Monitor...

    Downloads