Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    121s
  • max time network
    128s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    30/12/2023, 05:00

General

  • Target

    0f5fc17cbf3c156bf31caa24a415feba.html

  • Size

    432B

  • MD5

    0f5fc17cbf3c156bf31caa24a415feba

  • SHA1

    2146ee2b23364775463b8cd959cb518994b5aa8f

  • SHA256

    170f61a49f18093e55395788476804e4bd5b131ef5cbde994d751bc0c533960a

  • SHA512

    2ce4dfc1ad039a0472074f9fc330c981096054bead93c0ef58eb43f36d46ec076feeaa758bd491adb52035f746ddc6b2878299ed6c10d8c3fff0bb052fe71be6

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 44 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\0f5fc17cbf3c156bf31caa24a415feba.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:4420
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:4420 CREDAT:17410 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2932

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\imagestore\buhspo8\imagestore.dat

    Filesize

    4KB

    MD5

    ae1137d81c184b20d9d282a982d23861

    SHA1

    44d8a4ba73c468c1c1c449a4b8466c29b0ddde88

    SHA256

    ca3c403d891c282a892764509a0d0b568498c20002f07562ffff4a922fadf2a6

    SHA512

    d4d07da9091d8f1c615def051e76c06e064663e09422abe2748a34f581b57f05b39a78a7bb5054ac38610ff831351c3c64cda9669ba8cb290ef60bfbe5f4f3cf

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\imagestore\buhspo8\imagestore.dat

    Filesize

    2KB

    MD5

    263107673b76ea5171957533a18309f6

    SHA1

    94c0f2243fd7f14b0ccef146c18a0dd2cacb8174

    SHA256

    3c0c256e1339f6f5a44603701815f92d93a27d821494d5f41d8c1af726b6f49d

    SHA512

    4ae54663d1c9ef8b850c17ab3341ff85617acef385ae8d32acdce450821c113ab0dcdd0efe2790f3610075d4802b875ad98667230c438eb5d7ba20657588b061

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\0SGFK56Z\suggestions[1].en-US

    Filesize

    17KB

    MD5

    5a34cb996293fde2cb7a4ac89587393a

    SHA1

    3c96c993500690d1a77873cd62bc639b3a10653f

    SHA256

    c6a5377cbc07eece33790cfc70572e12c7a48ad8296be25c0cc805a1f384dbad

    SHA512

    e1b7d0107733f81937415104e70f68b1be6fd0ca65dccf4ff72637943d44278d3a77f704aedff59d2dbc0d56a609b2590c8ec0dd6bc48ab30f1dad0c07a0a3ee

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\BMK4G1YN\icons8-casino-64[1].png

    Filesize

    1KB

    MD5

    6401c879e687886187c9929843c46016

    SHA1

    105978fc9843ee49f25f91e9df0f30682c182d07

    SHA256

    a34a4cdcad1f681974d8ffcefa66ac58adc5e2cafb623bbe9e90beb533b28b4b

    SHA512

    e03691d17c4f0587065ed5a2097572acefd902f4a80be2ba52f401f5bdc913371508bca5dd05cd161d452a3b3fe64a1ec68c83cb8a88e43ce126e3db533861bc

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\ISEWAASI\favicon[1].ico

    Filesize

    1KB

    MD5

    91abe01116ab422c598e9c8af72cf4da

    SHA1

    0f2815fe8e067d48537ad168225ab4674271fa27

    SHA256

    b1d7aef06456fe7431124129a28f0138bb5fccfa4f4161e3087de23c005e5edc

    SHA512

    a4d5b20c3014153b6b382c43404917bd2cb5bd2a59bb1e981f5a19eb7dbdec185ace288e9700428d24e5ac623e45d04905e706f0c45a1642b1aa6c091213c23c