Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    145s
  • max time network
    146s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231222-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system
  • submitted
    28/01/2024, 18:13

General

  • Target

    7daaa8378bfdf3c272ae8c1b807d2636.html

  • Size

    5KB

  • MD5

    7daaa8378bfdf3c272ae8c1b807d2636

  • SHA1

    b99f54f1f818b9df5a10194a2bc282820aefd5f9

  • SHA256

    f809dc0b84d57eed45712d6ee93f891bbc17955e516a64c4735eb1c156d0d628

  • SHA512

    2b951755b5fbfc2ec573c3bfd55990db0a74e616c35cddb424866adb03dd52fb7a1b406b9544f091e811e567ec5b9f7f1e643f529ea81e72b69bacfdaf3a8a78

  • SSDEEP

    96:uC0GgVpueWZMxKMPl9L3g9pMI59yqoujFNHoPz5StwAGITGrefnh6Z8qh/sr6Vso:OGubD59L3g3HyxujIPz8wMTGrefuJhf9

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 60 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\7daaa8378bfdf3c272ae8c1b807d2636.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:4908
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:4908 CREDAT:17410 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2924

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\7423F88C7F265F0DEFC08EA88C3BDE45_AA1E8580D4EBC816148CE81268683776

    Filesize

    471B

    MD5

    23c885d47568a0c8ec78d6dcc163d3e6

    SHA1

    5784bd843fecdfcdfdd6c213c092c65613d1f6b4

    SHA256

    c682f97f831992d9fc18392f30e050457a49b6e15de26a1af4459541c2866d80

    SHA512

    329f656e73d533712901b9dd168555670fa8ca2d89aaffbc5e446f734af2eb409c54cbbcfc72b9173a65d413bafc4f74c47d6985ce15767890719c36f6e15fa1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7423F88C7F265F0DEFC08EA88C3BDE45_AA1E8580D4EBC816148CE81268683776

    Filesize

    404B

    MD5

    489c2a808688e19798a8963583a17fdb

    SHA1

    7ba898de96a0f470bf6543ee85dc90c0e02db2d7

    SHA256

    9bf969afc43fda1c3750967575b96c2a95067809ee9d65203cccd521442eb676

    SHA512

    3cbd80a7e3cbb4516197ccfc11810aa201d8fc51a8f3ffc7d3e79ca3defcf58d1547ce59cf98d114f026e1a25b999e0926277285e780c9c93fc92834960b8963

  • C:\Users\Admin\AppData\LocalLow\Microsoft\Internet Explorer\Services\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico

    Filesize

    4KB

    MD5

    da597791be3b6e732f0bc8b20e38ee62

    SHA1

    1125c45d285c360542027d7554a5c442288974de

    SHA256

    5b2c34b3c4e8dd898b664dba6c3786e2ff9869eff55d673aa48361f11325ed07

    SHA512

    d8dc8358727590a1ed74dc70356aedc0499552c2dc0cd4f7a01853dd85ceb3aead5fbdc7c75d7da36db6af2448ce5abdff64cebdca3533ecad953c061a9b338e

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\8D1Z5HG5\suggestions[1].en-US

    Filesize

    17KB

    MD5

    5a34cb996293fde2cb7a4ac89587393a

    SHA1

    3c96c993500690d1a77873cd62bc639b3a10653f

    SHA256

    c6a5377cbc07eece33790cfc70572e12c7a48ad8296be25c0cc805a1f384dbad

    SHA512

    e1b7d0107733f81937415104e70f68b1be6fd0ca65dccf4ff72637943d44278d3a77f704aedff59d2dbc0d56a609b2590c8ec0dd6bc48ab30f1dad0c07a0a3ee