Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    147s
  • max time network
    156s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    30/12/2023, 12:53

General

  • Target

    191fc9fa51aedc3d1c62398835b3d5a6.html

  • Size

    183KB

  • MD5

    191fc9fa51aedc3d1c62398835b3d5a6

  • SHA1

    8d9dc33a3a3b2da8a054d55d1b236b509ceb746e

  • SHA256

    e955ce4fc65314f703279e736fc2439e3b250ecda8b44de6f027ad0a7a6347cd

  • SHA512

    739ea7e2626e59eb9d73f9bea6053934a3dfc5d2d000b963b6843b49ca3edcc61b2ca770a959aeb5bff5ae759ff1bda811f2bba3e777c91adfe097fd4d74842a

  • SSDEEP

    3072:SZvfpARmJHt4GfVA47ySWmUO3BCyTPj4Cd3kGbB4GzN28y5pYTaOiHLOykfL2dcK:Soctt4GfVA47ySWmUO3BCyTPj4Cd3kGI

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 30 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\191fc9fa51aedc3d1c62398835b3d5a6.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:3272
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:3272 CREDAT:17410 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:3340

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\L3T8W3B4\f[1].txt

    Filesize

    34KB

    MD5

    94baeae5a431d3f4b6a82c4a91f59511

    SHA1

    42afc199c30c4adf7d69bb10cc1b7674102cad6e

    SHA256

    df5d165b5af8ba63c3b606253a8c73dbdc132bc66153c867b4acbe47efa55f0b

    SHA512

    866c5064e7a88ff99696a64ef6cb3a770db74ae99d773754613422f6fc4d850eb32945d57aabcd0cbdbb9bec74ab2627a7d7a0cd14bd465086db0083756f0017

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\M8F18HYR\suggestions[1].en-US

    Filesize

    17KB

    MD5

    5a34cb996293fde2cb7a4ac89587393a

    SHA1

    3c96c993500690d1a77873cd62bc639b3a10653f

    SHA256

    c6a5377cbc07eece33790cfc70572e12c7a48ad8296be25c0cc805a1f384dbad

    SHA512

    e1b7d0107733f81937415104e70f68b1be6fd0ca65dccf4ff72637943d44278d3a77f704aedff59d2dbc0d56a609b2590c8ec0dd6bc48ab30f1dad0c07a0a3ee