Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    124s
  • max time network
    149s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231222-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system
  • submitted
    29/01/2024, 10:04

General

  • Target

    7f8ef821f0bd7a0d776e164e4eda5f06.html

  • Size

    32KB

  • MD5

    7f8ef821f0bd7a0d776e164e4eda5f06

  • SHA1

    6f09b1af2439af20b193ed19d396fcb20b7466cb

  • SHA256

    6b90369c2253f42ca0eade78930da00459b1b082ca252d03af1b79b51e1078b6

  • SHA512

    a8a084b0c123e8073adc2788ce59694182ac48a22242c7107ac8501cbb649d58ca6b7d297c3e266385fc324bf092ba7458e26962c424c4989f7dd8bdebc997dc

  • SSDEEP

    768:RRIRIOITIwIgIiKZgNDfIwIGI5IVJ7SqIRIOITIwIgIiKZgNDfIwIGI5IVJ7SZNV:fIRIOITIwIgIiKZgNDfIwIGI5IVJ7Sqw

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 57 IoCs
  • Modifies registry class 1 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\7f8ef821f0bd7a0d776e164e4eda5f06.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2688
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2688 CREDAT:17410 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Modifies registry class
      • Suspicious use of SetWindowsHookEx
      PID:2828

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\7423F88C7F265F0DEFC08EA88C3BDE45_AA1E8580D4EBC816148CE81268683776

    Filesize

    471B

    MD5

    23c885d47568a0c8ec78d6dcc163d3e6

    SHA1

    5784bd843fecdfcdfdd6c213c092c65613d1f6b4

    SHA256

    c682f97f831992d9fc18392f30e050457a49b6e15de26a1af4459541c2866d80

    SHA512

    329f656e73d533712901b9dd168555670fa8ca2d89aaffbc5e446f734af2eb409c54cbbcfc72b9173a65d413bafc4f74c47d6985ce15767890719c36f6e15fa1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7423F88C7F265F0DEFC08EA88C3BDE45_AA1E8580D4EBC816148CE81268683776

    Filesize

    404B

    MD5

    ca03daa502ba2e10384c9bca4f656c60

    SHA1

    b4799454b12723c2c29c223219af1e70776eefa0

    SHA256

    d5f950cf7dcc58f1073a718bc0d1be0ac522bad0aafe2348333b1b7102e3b6fa

    SHA512

    a2b9d6ed690cc15e0103853e916c99ddec063f2ffc18a56ec84e55ac8491a32dd4eeb6b1d476409dd4b7ffe205997d76442970b69d796e72877d849b253dc900

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\DSRQGDWJ\www.youtube[1].xml

    Filesize

    578B

    MD5

    e34e4896ebe3c48b97011d71f86c766a

    SHA1

    ef711fdfd9eecd1753edf684fa24e78b3dcff6cb

    SHA256

    54d5a554c07b5087e33d51707440e5f56f7f44c44174997c0064fc6f3099d59b

    SHA512

    0185bd4c21b91bcc8b881f511d397cc19e76667d84c15f78330a04579b0eea364020fcfd2983d99024374917854f4cd25be3878415f62b281f2c4d73d722c2eb

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\DSRQGDWJ\www.youtube[1].xml

    Filesize

    13B

    MD5

    c1ddea3ef6bbef3e7060a1a9ad89e4c5

    SHA1

    35e3224fcbd3e1af306f2b6a2c6bbea9b0867966

    SHA256

    b71e4d17274636b97179ba2d97c742735b6510eb54f22893d3a2daff2ceb28db

    SHA512

    6be8cec7c862afae5b37aa32dc5bb45912881a3276606da41bf808a4ef92c318b355e616bf45a257b995520d72b7c08752c0be445dceade5cf79f73480910fed

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\DSRQGDWJ\www.youtube[1].xml

    Filesize

    229B

    MD5

    e3aef09a928e23de27a38eee7c3a6732

    SHA1

    df6ebb32c609bcc78197b0a3645232f081f64218

    SHA256

    5b62792a208fe77ac08fba1bf561c9c15f485a19fb7f03e8727fb6ee527753e0

    SHA512

    1ab9ea3dc03d15280c16e5badcf5627d8f302a20dce9028d1eb859707429133a9b35e49657c08a470d34eace8afb0c2152183933e1d9f8496e4ec5cbe78d473e

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\DSRQGDWJ\www.youtube[1].xml

    Filesize

    24KB

    MD5

    1d029563bbb54a4ab41e9180be489c94

    SHA1

    d2084250fa8c9ae579e6bd4ee243fc0ad9456b89

    SHA256

    1d74bc28ff2fceebe2a8688a8761c24869b3869845f87ca8b2c1b763fd3d1687

    SHA512

    2c5c251a058b512c3e7881866d09dac6fbf9d2626d205bef85f4b9958d09c84235d0d60c960659a2ec19a69cd42ed926741aa0000692eb1d675cf99837848808

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\QSO8CY24\suggestions[1].en-US

    Filesize

    17KB

    MD5

    5a34cb996293fde2cb7a4ac89587393a

    SHA1

    3c96c993500690d1a77873cd62bc639b3a10653f

    SHA256

    c6a5377cbc07eece33790cfc70572e12c7a48ad8296be25c0cc805a1f384dbad

    SHA512

    e1b7d0107733f81937415104e70f68b1be6fd0ca65dccf4ff72637943d44278d3a77f704aedff59d2dbc0d56a609b2590c8ec0dd6bc48ab30f1dad0c07a0a3ee