Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    0s
  • max time network
    140s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    24/12/2023, 23:54

General

  • Target

    1b0092620cc61387c3422c37db072f34.html

  • Size

    89KB

  • MD5

    1b0092620cc61387c3422c37db072f34

  • SHA1

    64cef739b463a2fac878781493939e782e5e6a6c

  • SHA256

    8239f8a181482c3eaa562c1eb8428a5651f4f2e49f06ad925edaf317b657d56c

  • SHA512

    87ba8e7752cfb61a08a7d0fa9d3000b1637d5e9f9603742fbd8c4d2903bafc2da8ab75d5d9a2894db56c0ed8bf48ec983a96a28f1a33eea06032d3c316296bf2

  • SSDEEP

    1536:/ezIZ5vpeeNuzcHs+8lC9FvDbMVp16ezIRzl3cA/KscXmNRSu4suq13r/XNLqyQL:DCO7kp165RpMZscXmNRSu6q13r/9ec6n

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 18 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\1b0092620cc61387c3422c37db072f34.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2660
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2660 CREDAT:275457 /prefetch:2
      2⤵
        PID:2240

    Network

    MITRE ATT&CK Enterprise v15

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

      Filesize

      65KB

      MD5

      ac05d27423a85adc1622c714f2cb6184

      SHA1

      b0fe2b1abddb97837ea0195be70ab2ff14d43198

      SHA256

      c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

      SHA512

      6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

    • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

      Filesize

      1KB

      MD5

      a266bb7dcc38a562631361bbf61dd11b

      SHA1

      3b1efd3a66ea28b16697394703a72ca340a05bd5

      SHA256

      df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

      SHA512

      0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

    • C:\Users\Admin\AppData\Local\Temp\TarC55.tmp

      Filesize

      96KB

      MD5

      0e5876e69cb79f4ba1a5473a34bfe6b6

      SHA1

      964a3b002e884f10c4888eadc33423f6158cb8e7

      SHA256

      f9951d337844ca146a0592ce4be540201333a36331115500633366db4ee439ae

      SHA512

      e84fbadc86eb7beb4376f12181db6837504bb024da5af7c1bcf8780331226b357fe3f0683de53d962bb188af7baba58553635129ebe531e4bacbc7dea73e3528