Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    149s
  • max time network
    150s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    25/12/2023, 03:34

General

  • Target

    0359d85285117ea6c456564358b878b8.html

  • Size

    72KB

  • MD5

    0359d85285117ea6c456564358b878b8

  • SHA1

    7fe62bbcb11a2eb37c778a8f8a76a436c9c4a0d4

  • SHA256

    364e0ffd85e9aa746b8a6b50233957c051ddbc3cc6122f85934b97e0166ac7ff

  • SHA512

    98e1fba8114cd07ea8939df8d96ad4f2e594e30f775b233655ea782426716d02072f49e97e920a277f68b953b64a84b0c0f1b578568e4ef945ed878d0597c838

  • SSDEEP

    768:Q1hBwks4x4CGhB8hMUPVcPa0+9rxb2ksoNUPBUPVSGn6v28saNNUPOjNUPEshBUU:QuToTUIEUIYxUIGUImUIbUIxoot

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 34 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
    "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1384 CREDAT:275457 /prefetch:2
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of SetWindowsHookEx
    PID:2076
  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\0359d85285117ea6c456564358b878b8.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1384

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b02830a31578113bebdec664c1034502

    SHA1

    6e6eca838fcde772d8a2cd35c053656a36d5ef77

    SHA256

    000a6e09acecc5cb58cb6892c7b5060c1f098852f5c91ce8589eb08826091acd

    SHA512

    b3f8b9a070648549ccecf6b300f16ea8a27087513a6e294e4c864f4e568fe49bed6843e52800fba1989f0a87873dc4594d6b8bdef55aa472ec94de03f730439b