Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    141s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    26/01/2024, 01:00

General

  • Target

    75f8c8d4fa0400824e20bdc998a75f0e.html

  • Size

    432B

  • MD5

    75f8c8d4fa0400824e20bdc998a75f0e

  • SHA1

    d91609e85e566d725bc4c08e6d6fcf32a07ceb5a

  • SHA256

    247686115a87385528f7e13fa78d5c1894297a660c1984606db18381a0922bf9

  • SHA512

    031d81bfff52660e2667fd861312c4e57b24594dcc96097a710c044228ceab7b9784c928ac4210d81c7b61a2b30dd9a2ccb36e06f4d02ba3a9ffce6684450d77

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 64 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\75f8c8d4fa0400824e20bdc998a75f0e.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:244
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:244 CREDAT:17410 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:3588

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\7423F88C7F265F0DEFC08EA88C3BDE45_AA1E8580D4EBC816148CE81268683776

    Filesize

    471B

    MD5

    1d7f25dc2d6699e79619c31ff8908f6c

    SHA1

    de3c1be6c3f3e7f6eadbe715ae575794e5bf1221

    SHA256

    845c8a47772a9c534cf13a177c83c40db250a6dbbd0a369401ea884b8d058d6e

    SHA512

    7a6e1765a31821e79b766ea0675ed17d735a40766d5fcd6cc305a8d33b8257d11e492d4ad8626f2909e1c2c2d93e8d04ed133effd0a3ec29324ec3ca36a22a1e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\80237EE4964FC9C409AAF55BF996A292_C0427F5F77D9B3A439FC620EDAAB6177

    Filesize

    471B

    MD5

    717db6b476a6490fe55db709af88d13c

    SHA1

    25f995df7b69b089e1954dfff2a72deeceea47f8

    SHA256

    4c2e9d6aa8fe24313f392caa5a56980ecf83bbbca7a7aef8821879c7382b49f0

    SHA512

    3ac36caa9267f70088ac773b72d7aded456a1fdf9354574c4fb95b2578144d01cfdc07c4b0ac53d250e3a51b811c7cdd96ccdd6b5f47a7a08a7dee9c162de91b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7423F88C7F265F0DEFC08EA88C3BDE45_AA1E8580D4EBC816148CE81268683776

    Filesize

    404B

    MD5

    e27bd84912991942b9121a676682a7df

    SHA1

    211b0ed2f51d922114fe68c9d2ab3f5535e31815

    SHA256

    6fbba21c763ecb51be4fdf82bbabc693d74aacf52ba9d818452d41f6712ee013

    SHA512

    1c47ec57d2734433966908804050451f2754d7fc75da0cefac6023b4e033d8fa41e8dd9b9cd78b8d58af6e3a918592b417ffe690f3b6f81d20f439265bdfe11f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\80237EE4964FC9C409AAF55BF996A292_C0427F5F77D9B3A439FC620EDAAB6177

    Filesize

    412B

    MD5

    59ae114ba5c30ce4a53222b605ffed53

    SHA1

    3ab1600ec5a81ec495d929aa56956ad96331b1d1

    SHA256

    9629e547c3d5894cf003c05082955e449963a6a38dda6ef7fddedaea76baf333

    SHA512

    97037b53a8727226c9483505a80e4a24240db02a032b373b0746acbb5967e8d00857408ec0390af22ded61c97bc787072583cac35f3cc13bf72f3265b1bf7ec5

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\E5GB8U76\www.opera[1].xml

    Filesize

    411B

    MD5

    964116c9fa51915b697df3ee083671c7

    SHA1

    0d767feaed9d62b8b4b9fdd724698306b6e7f1bb

    SHA256

    facfee743480c15a772d9e25c9ab570c4a6ff339fb15cee5a44f67fb22985fce

    SHA512

    54e522f319c77c4ecf6c571b3d0c5e6fc6020f718ee8a11464f83aba016a2e064985a96a7bd46ad530328ee4c5f8067684c99fd0ccb96025e77506108e5a090a

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\imagestore\5w2ovpd\imagestore.dat

    Filesize

    6KB

    MD5

    28e9bebae889e3c776458f19b11933c1

    SHA1

    b71f54156186b7dcf624564793c56c12dda012ff

    SHA256

    613482f39fdcfa9f472fbd06edc1c1aaeb4bb2dddc5ca7900c3428d2fbbf9df2

    SHA512

    fd3b0c2ef80883a4502949f7c788b9aa5b0140b757b5c02dfd8573a4c324697454eacb8ecc08742e5455a4b1a45eb59d48768902750f8ce57f2506a3c616856c

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\imagestore\5w2ovpd\imagestore.dat

    Filesize

    1KB

    MD5

    1a9e55b7551108b71b43bb29dd19df7c

    SHA1

    069fae9d5292f2c759dcd7fb4840f787ddd6f2c6

    SHA256

    7004eadae02f63db6bd5a4679779554be177cef7878cf43ac3083c56c9db1b0d

    SHA512

    1161f23a80d5a8c342d7fbdcae615e5228b029a1e6847c99e8ed7a02959f351f48fe708629e3301ff9517027b174040a345f8b812dd0dc9837c986439ca36695

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\58G7K3A9\opera[1].ico

    Filesize

    5KB

    MD5

    94e3b24366e3faaceae2583c84668c09

    SHA1

    ea70800d14a0d3c15fc98ac0c4b1568226d637d8

    SHA256

    07e8d69985547e670f5752809928fb887516ddd67e56d24c1323b4abc88723b3

    SHA512

    5bb08351d4e875d929aaf216af2a9a39277fdb455d7ecef7f3a68bdcd4de977ce782e59ca85a4f5406fc68b30b4c879bc949bc44ab271b61ea75c70ccf6838d6

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\OO2Q27PV\favicon[1].ico

    Filesize

    1KB

    MD5

    91abe01116ab422c598e9c8af72cf4da

    SHA1

    0f2815fe8e067d48537ad168225ab4674271fa27

    SHA256

    b1d7aef06456fe7431124129a28f0138bb5fccfa4f4161e3087de23c005e5edc

    SHA512

    a4d5b20c3014153b6b382c43404917bd2cb5bd2a59bb1e981f5a19eb7dbdec185ace288e9700428d24e5ac623e45d04905e706f0c45a1642b1aa6c091213c23c

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\OO2Q27PV\suggestions[1].en-US

    Filesize

    17KB

    MD5

    5a34cb996293fde2cb7a4ac89587393a

    SHA1

    3c96c993500690d1a77873cd62bc639b3a10653f

    SHA256

    c6a5377cbc07eece33790cfc70572e12c7a48ad8296be25c0cc805a1f384dbad

    SHA512

    e1b7d0107733f81937415104e70f68b1be6fd0ca65dccf4ff72637943d44278d3a77f704aedff59d2dbc0d56a609b2590c8ec0dd6bc48ab30f1dad0c07a0a3ee