Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    142s
  • max time network
    155s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    27/01/2024, 07:14

General

  • Target

    799a4ef46ab32c099f6d5faeed09a0db.html

  • Size

    432B

  • MD5

    799a4ef46ab32c099f6d5faeed09a0db

  • SHA1

    8dda448c920ee6467511289bd5daee2e6f97c7fc

  • SHA256

    2c739d3280029b5c95493549309e4bd6402bca2533c08bc4d7be2fc7b5d0fe2c

  • SHA512

    42f43a772b96e1e878c52644467c5eed33a00de9edcbaa58d4e97c38d14299a28438664e5ffd1f37755ab60464e0e35de9519e4019a901cee1530ef32a9c957f

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 64 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\799a4ef46ab32c099f6d5faeed09a0db.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:3068
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:3068 CREDAT:17410 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2532

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\7423F88C7F265F0DEFC08EA88C3BDE45_AA1E8580D4EBC816148CE81268683776

    Filesize

    471B

    MD5

    b610bd5c61e2121914699e4b6cb9f7f4

    SHA1

    514f5ad7770f18e1c5b62253d95d6aa3c63c83ee

    SHA256

    3a418958f81aae04aa13719238c42d24adc5258b95246b3df0b32a1bf7676b51

    SHA512

    9ebb50a5b4942dfbf1a037e8a1b6308502d5bd337abaf90cca0d44f3a88001b25c6f82787f13b2d5a6f2bcb81209f831c16422d4c1a6cb6e07d55e8dccd7b3b5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\80237EE4964FC9C409AAF55BF996A292_C0427F5F77D9B3A439FC620EDAAB6177

    Filesize

    471B

    MD5

    9f5540fa83ac3004c50dad6a76a16e51

    SHA1

    914ee022e5f338429f4a1093658b3b829fdccfec

    SHA256

    04166d4a2f47f9af1ccfe9c568dc2c115b284f9ecfdccbd8828eba42b74897f0

    SHA512

    a19cc56cd1061cec272d9b2a33b361494a0162c52df03c0a28ef7b6cd194dd574f6cc96cb7577a00dadc54a14149ca507c447c32cb0909a47422d2861598024a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7423F88C7F265F0DEFC08EA88C3BDE45_AA1E8580D4EBC816148CE81268683776

    Filesize

    404B

    MD5

    3a83c35baa94754181859754a499affa

    SHA1

    62f59f17da05d5a13b88a6df31ee06aab58e5c39

    SHA256

    50a2a48200c7b7cf8b066405bcd75c32742d7746e87132ec2d80ac3d77345b5f

    SHA512

    b8969beaaa338b97aa9c53b4f728b92980dbff601497e20c4aabac3b0ee9fd63507cf3a8b55eee1b53b3d65be9314a73937b0f7b5cfde255b71db585eeebe41f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\80237EE4964FC9C409AAF55BF996A292_C0427F5F77D9B3A439FC620EDAAB6177

    Filesize

    412B

    MD5

    a87d7136830a9ec57858ecd46ed27a96

    SHA1

    eb8ccb62e3c8a154d7cb172e50763442df7dcca7

    SHA256

    3b83a2d1c3cefafd4399c0532b23f767f86b211723d789e3614e2d6c53c49e4e

    SHA512

    e2bf61f49e3fb2ba1661719c49032e2116594f88b69691fa9d72101be5c3265ffec5bafc3045a5ea439110c057d6e3912f15df0a20dd0471934bd75b13239dcd

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\imagestore\wx7tnv0\imagestore.dat

    Filesize

    6KB

    MD5

    f2c7c30fbe2247164eb13856c78e4ed1

    SHA1

    6997cff702057666687d23eae9a85ddae8019708

    SHA256

    c473aaf2c60bacf8fdd9c10b00420b19572a1b30b30b4bc10042ccd1111c472e

    SHA512

    3a531eaff9b0f8dedafa9dcd48d7204039d76b1e0514f858c918af023c0079131eeb44b51f6cdf92d938901d2ff334504ba951c0a3f1160669ce153a6e1d2d3d

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\imagestore\wx7tnv0\imagestore.dat

    Filesize

    1KB

    MD5

    42788b3cfac9064eb795ea6bd1a3b30a

    SHA1

    7c1d7d31d5e85928e50e868e984ffa3b932518cc

    SHA256

    46cc241e534a84277c38359896c833f40b09c1fad4b7837d241d28dacc53f830

    SHA512

    6eb104cc6a6d96c99e966b365f42fffc8c5e18c375aaf5c1c3a9207dc42184085eaca6a309c2362f09dbb2965be18f7c26f36aa7c4727c14917aaffeb881ce91

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\L3T8W3B4\opera[1].ico

    Filesize

    5KB

    MD5

    94e3b24366e3faaceae2583c84668c09

    SHA1

    ea70800d14a0d3c15fc98ac0c4b1568226d637d8

    SHA256

    07e8d69985547e670f5752809928fb887516ddd67e56d24c1323b4abc88723b3

    SHA512

    5bb08351d4e875d929aaf216af2a9a39277fdb455d7ecef7f3a68bdcd4de977ce782e59ca85a4f5406fc68b30b4c879bc949bc44ab271b61ea75c70ccf6838d6

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\M8F18HYR\favicon[1].ico

    Filesize

    1KB

    MD5

    91abe01116ab422c598e9c8af72cf4da

    SHA1

    0f2815fe8e067d48537ad168225ab4674271fa27

    SHA256

    b1d7aef06456fe7431124129a28f0138bb5fccfa4f4161e3087de23c005e5edc

    SHA512

    a4d5b20c3014153b6b382c43404917bd2cb5bd2a59bb1e981f5a19eb7dbdec185ace288e9700428d24e5ac623e45d04905e706f0c45a1642b1aa6c091213c23c

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\WHUIQOC9\suggestions[1].en-US

    Filesize

    17KB

    MD5

    5a34cb996293fde2cb7a4ac89587393a

    SHA1

    3c96c993500690d1a77873cd62bc639b3a10653f

    SHA256

    c6a5377cbc07eece33790cfc70572e12c7a48ad8296be25c0cc805a1f384dbad

    SHA512

    e1b7d0107733f81937415104e70f68b1be6fd0ca65dccf4ff72637943d44278d3a77f704aedff59d2dbc0d56a609b2590c8ec0dd6bc48ab30f1dad0c07a0a3ee