Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    141s
  • max time network
    149s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    28/01/2024, 05:02

General

  • Target

    7c38c5e92d8218292e9b67ae5e639a09.html

  • Size

    432B

  • MD5

    7c38c5e92d8218292e9b67ae5e639a09

  • SHA1

    b6b835df13eedc5ab8507087ee439d6bb8fabe1c

  • SHA256

    a860c104458b5cf48e352583eb6c841165059126b266c864a9608aa091d5d2eb

  • SHA512

    4fd9321adf53bea8bd3a71838f35ae15281bd436a927746da06997f951a0b3592a2f8286ec8b978e4f561d599f12eb28db34ec28fb618ae627149272db69897a

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 63 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\7c38c5e92d8218292e9b67ae5e639a09.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:3704
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:3704 CREDAT:17410 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1312

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\7423F88C7F265F0DEFC08EA88C3BDE45_AA1E8580D4EBC816148CE81268683776

    Filesize

    471B

    MD5

    55adff48fbcd7763c70a0d51d485d24f

    SHA1

    8ba66cb09d8e16d22c35931083d443155d3a04fa

    SHA256

    801c05af90120efdf31e4dfdcc5e7f2b76b9ca0e0746f58fdf12bf99287d8aca

    SHA512

    a3151d562469fd2412c237bb5646bb214a9a9f8664be4eb48fdf704d9710872e41947669f770ac74d9d1eb5d6ea5953e40cc5a85d57e56fc82708341154eee7b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\80237EE4964FC9C409AAF55BF996A292_C0427F5F77D9B3A439FC620EDAAB6177

    Filesize

    471B

    MD5

    f239c28141b9e3b11b4bc748e3bf36d4

    SHA1

    1dc5e4f48366f9d21d1c7541b1f284437376297f

    SHA256

    0413ce38a5e1f42e8c3593851485cd7f0f1f0401411c7704f6c161d1b2e462fe

    SHA512

    31034739ec7eb3beea34c22dc6b808d42bd7497aa7bab49126991f9eb7e02a1dce67d12230b0d63d417974246929f87d5b70a3531c77a8da91c04499165af475

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7423F88C7F265F0DEFC08EA88C3BDE45_AA1E8580D4EBC816148CE81268683776

    Filesize

    404B

    MD5

    67ad315b3b983440b32a29abba707527

    SHA1

    8fe519b5570897ed193f058a3e607c3123ccdcea

    SHA256

    7ef02f3df66c4dbb48421b9b3d36a5fc27886be574fcf987dde055033bfb3383

    SHA512

    4827f9bac67467d9c74fe9826c62dc1d54818e82a9d7e5f48b2941fe49faf75642be98b82ed8b1faca61586185307d169825d8f857fac5d395fd35cdff8ea14c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\80237EE4964FC9C409AAF55BF996A292_C0427F5F77D9B3A439FC620EDAAB6177

    Filesize

    412B

    MD5

    07d71de7c7f993b48f7e9b117a885536

    SHA1

    cb44cee61a2f5fc3c90bb944a608e852a50c62ee

    SHA256

    c3001e29f3e9a1e6f911a4b500b91dc4ee511e38bfab70e6e5c32efc0c1058a7

    SHA512

    6569caa31498657502fd36f5893c846666a26c0bf15b3a755133a6fd4d7f9672b6c5d8e310cd05f9a5f00216013366ad1b32eba20b90fa70ae812096fbd59cb4

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\NNZ8SYVX\www.opera[1].xml

    Filesize

    411B

    MD5

    e50a05b344d39b51ca7e30256eb03752

    SHA1

    abd679397c917d1c39ec7f4c72da96d495053142

    SHA256

    415c6459de28946ecd17990d1365147d714e0bc01cb40057c211863c916497a7

    SHA512

    52e02e351aa71c4c32dc6ba510f74d39f94cbba1e7a92eada15551ff4466fc9a9881063338b0e82ebf07c4893441cba2223e9f0056d70e69dc094dfdf9d3d9ea

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\imagestore\iay4xvb\imagestore.dat

    Filesize

    6KB

    MD5

    272ac95a43ce5d742032d0050c305ead

    SHA1

    2cb5e3cf05c263293bf16d15d9eba4c9c778f2ff

    SHA256

    ce3c3b5e378c166029417ca0734ef294443fc2cba3e2c4066bfecff1f44bd10e

    SHA512

    d797d495a837395624c746b2aff4ebc4faac7a18eae161dc0406067c385573a27a26bbd42379efee9e5b2579133920d2e9d940a989672e0a86c459f4b26946c7

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\imagestore\iay4xvb\imagestore.dat

    Filesize

    1KB

    MD5

    5b2f00ba4e61e9c0b8af32bdca47347b

    SHA1

    3e761087e74d1d2473def9b7a3e51b373a0095ab

    SHA256

    6c1948f39720cd0363a7b4785837cd07defe75a48e4216e8c33e93be0d4e5675

    SHA512

    fed24d975ef911111d514817da5e76bf05fadb4a0b09a40c6e2498645e5a060641332b4ca9478105ef31129890f8aff2bc30deacb60ee5361f797af5f9577b5b

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\43O0UZKG\opera[1].ico

    Filesize

    5KB

    MD5

    94e3b24366e3faaceae2583c84668c09

    SHA1

    ea70800d14a0d3c15fc98ac0c4b1568226d637d8

    SHA256

    07e8d69985547e670f5752809928fb887516ddd67e56d24c1323b4abc88723b3

    SHA512

    5bb08351d4e875d929aaf216af2a9a39277fdb455d7ecef7f3a68bdcd4de977ce782e59ca85a4f5406fc68b30b4c879bc949bc44ab271b61ea75c70ccf6838d6

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\VH4I14XV\favicon[1].ico

    Filesize

    1KB

    MD5

    91abe01116ab422c598e9c8af72cf4da

    SHA1

    0f2815fe8e067d48537ad168225ab4674271fa27

    SHA256

    b1d7aef06456fe7431124129a28f0138bb5fccfa4f4161e3087de23c005e5edc

    SHA512

    a4d5b20c3014153b6b382c43404917bd2cb5bd2a59bb1e981f5a19eb7dbdec185ace288e9700428d24e5ac623e45d04905e706f0c45a1642b1aa6c091213c23c

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\VH4I14XV\suggestions[1].en-US

    Filesize

    17KB

    MD5

    5a34cb996293fde2cb7a4ac89587393a

    SHA1

    3c96c993500690d1a77873cd62bc639b3a10653f

    SHA256

    c6a5377cbc07eece33790cfc70572e12c7a48ad8296be25c0cc805a1f384dbad

    SHA512

    e1b7d0107733f81937415104e70f68b1be6fd0ca65dccf4ff72637943d44278d3a77f704aedff59d2dbc0d56a609b2590c8ec0dd6bc48ab30f1dad0c07a0a3ee