Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    7s
  • max time network
    150s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    25/12/2023, 05:24

General

  • Target

    07c9421506b8dba966732690b0d9dc57.html

  • Size

    57KB

  • MD5

    07c9421506b8dba966732690b0d9dc57

  • SHA1

    ede49f3250cd7d2b3ea0af17752a17b439afb0cc

  • SHA256

    dbf3f82390982abef0f41eb1b3629147b494b030b84fd127cf8e476e2090efc1

  • SHA512

    34f713747c248b84710e2cee52a3bd32da0ec77e641b5047aeb0fb9159be24b657ca8ca960e82a7fa5d25f12ecb4d95e5bf98ac241e21d350469fcfa053a3a91

  • SSDEEP

    1536:ijEQvK8OPHdFApo2vgyHJv0owbd6zKD6CDK2RVroTYwpDK2RVy:ijnOPHdFL2vgyHJutDK2RVroTYwpDK2m

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 31 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs
  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\07c9421506b8dba966732690b0d9dc57.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2084
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2084 CREDAT:17410 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:4060

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\64E544B76338020D780BCC40A2A2B366

    Filesize

    121B

    MD5

    c8086f9faec7e702a4487409d4295ab8

    SHA1

    7665f0c64b90c3db400051b25b3f6a9f701fb13f

    SHA256

    fc05c614a8ad1ebddc9f844bebda3d52654b6fa44ad852fd893f1c482c4085e7

    SHA512

    affd8444466825490c4869a097b564cdd9d239621ea315cf3d6b22a3b5ec035dce599e2b7a893576fc146c0ce7b58fa46f80489c7b1f643eb372cfbbb6addcfa

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\HHRR1RB5\www.dailymotion[1].xml

    Filesize

    13B

    MD5

    c1ddea3ef6bbef3e7060a1a9ad89e4c5

    SHA1

    35e3224fcbd3e1af306f2b6a2c6bbea9b0867966

    SHA256

    b71e4d17274636b97179ba2d97c742735b6510eb54f22893d3a2daff2ceb28db

    SHA512

    6be8cec7c862afae5b37aa32dc5bb45912881a3276606da41bf808a4ef92c318b355e616bf45a257b995520d72b7c08752c0be445dceade5cf79f73480910fed

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\VersionManager\verCE8B.tmp

    Filesize

    15KB

    MD5

    1a545d0052b581fbb2ab4c52133846bc

    SHA1

    62f3266a9b9925cd6d98658b92adec673cbe3dd3

    SHA256

    557472aeaebf4c1c800b9df14c190f66d62cbabb011300dbedde2dcddd27a6c1

    SHA512

    bd326d111589d87cd6d019378ec725ac9ac7ad4c36f22453941f7d52f90b747ede4783a83dfff6cae1b3bb46690ad49cffa77f2afda019b22863ac485b406e8d

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\DQ2SYU15\f[1].txt

    Filesize

    21KB

    MD5

    55c1d627d63dbb3d1dac36dedcee827c

    SHA1

    375a796dddb6ab6b7b71435db6676a74a4b2b905

    SHA256

    f6c7f99882b2e430552dc8afcaeac86f6f64b78cfa661948b4ab413f42c7c808

    SHA512

    2997bf736ff93e23a53794a515c2e4264abf86fd61c1ba974af177bffdf3ff073a0281c2093a6310b5dfa9ecb0a95ce6bbd77075e0c50f64567da81d98f94e37

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\QPBAQNGM\suggestions[1].en-US

    Filesize

    17KB

    MD5

    5a34cb996293fde2cb7a4ac89587393a

    SHA1

    3c96c993500690d1a77873cd62bc639b3a10653f

    SHA256

    c6a5377cbc07eece33790cfc70572e12c7a48ad8296be25c0cc805a1f384dbad

    SHA512

    e1b7d0107733f81937415104e70f68b1be6fd0ca65dccf4ff72637943d44278d3a77f704aedff59d2dbc0d56a609b2590c8ec0dd6bc48ab30f1dad0c07a0a3ee