Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    0s
  • max time network
    147s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    06/01/2024, 02:46

General

  • Target

    45126256a4e6a78d781dc0269e4b920c.html

  • Size

    432B

  • MD5

    45126256a4e6a78d781dc0269e4b920c

  • SHA1

    f1cc645c1cfdc115dd0fb9e2ed985a490892d173

  • SHA256

    f4a73019dca1ae3d5678dfcd6d4dd4d52ba046873e63d0e97c3c7c50c12b74f4

  • SHA512

    3055a8adde6561f1c270aacd7a79868e860ef63ec94d6d6a79e0599accf1ce75a5e2ab7b274567f06dbaa618998be062c3b7ed3741b3e21279f85f74372b0a81

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 18 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\45126256a4e6a78d781dc0269e4b920c.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2936
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2936 CREDAT:275457 /prefetch:2
      2⤵
        PID:1992

    Network

    MITRE ATT&CK Enterprise v15

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

      Filesize

      344B

      MD5

      1a58cf6f7707837f7a5178c08c1b5c4d

      SHA1

      6b556d075cc80dcf5a35def239e9753ef701e431

      SHA256

      c99d8a2ee408496b29558434ff23de1e9e70ff8bdcc48daffcdc84009e487772

      SHA512

      12f7866504d7a29861dcdfcfa430806dc51c4e7a2986d661f41e3924b54071daea1f6a5dd639e8a0c99c13f7c7e7a28c1cf1dd15cc8ba74cf28e1d93f77205cf

    • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\imagestore\n7bgnbu\imagestore.dat

      Filesize

      1KB

      MD5

      243095024b993fd673ed42e8e2fdf5b3

      SHA1

      52ff0d2dd7d993e11cc364bc79025e6688bc871a

      SHA256

      5d87d8a1cff7161f277d82477130a18fd614232ade6edfc98f0a376740d726c8

      SHA512

      f759154baef6a05aae80e9eb66cba6bb635d751ebc426c3daf5e1cc2cc69ba760b42d77ce03bd625da24319e65503e865e6c9c6c31983b0846d1cbdf936d5c71

    • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\7UB8YJJK\favicon[1].ico

      Filesize

      1KB

      MD5

      91abe01116ab422c598e9c8af72cf4da

      SHA1

      0f2815fe8e067d48537ad168225ab4674271fa27

      SHA256

      b1d7aef06456fe7431124129a28f0138bb5fccfa4f4161e3087de23c005e5edc

      SHA512

      a4d5b20c3014153b6b382c43404917bd2cb5bd2a59bb1e981f5a19eb7dbdec185ace288e9700428d24e5ac623e45d04905e706f0c45a1642b1aa6c091213c23c