Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    146s
  • max time network
    175s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    26/12/2023, 04:51

General

  • Target

    55a7c2531bce25afc229bc3b7bfdb14a.html

  • Size

    12KB

  • MD5

    55a7c2531bce25afc229bc3b7bfdb14a

  • SHA1

    3860c736d12b2691b0658cf385cb091409d99b38

  • SHA256

    e4c2219be02141b53ecbce9337097bd876e0ba52963e0f2f9905d67aba4dd069

  • SHA512

    bbce55395cd816db1e450e8e54c874d2c785443ce1e3c1dcdcd85def7baae84c8dc7fa6302046e3e927945cb3579d3ca8bf5192160125f323890f7daebceae7e

  • SSDEEP

    192:csz7SvAYS/logOHPfUwVpJ+zuMpOpBpl000nPHb76f:cdvAY8lovHPfUopJHMpOpBpl000PHS

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 21 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs
  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\55a7c2531bce25afc229bc3b7bfdb14a.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:3384
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:3384 CREDAT:17410 /prefetch:2
      2⤵
        PID:4992

    Network

    MITRE ATT&CK Enterprise v15

    Replay Monitor

    Loading Replay Monitor...

    Downloads