Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    144s
  • max time network
    147s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231222-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system
  • submitted
    02/02/2024, 12:26

General

  • Target

    8982281737f6ef1b0734d7b4c281e266.html

  • Size

    895B

  • MD5

    8982281737f6ef1b0734d7b4c281e266

  • SHA1

    1740704d0c439828d14b3d4a21a03f17b83ed6a9

  • SHA256

    2ce8c55d658eae9836b45c5a97eb0ce70db474a0bab508e6c3ed2b5297bee2fb

  • SHA512

    7c95ce87f22b3275903d8ffbfe2a48951355b99dbab8975da531bb4f724be3f31a070c8eb761fbfefe42665be6df5b030ce645c1044f39c1a5b9d9b31f16ae43

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 44 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\8982281737f6ef1b0734d7b4c281e266.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:4736
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:4736 CREDAT:17410 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2192

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\7423F88C7F265F0DEFC08EA88C3BDE45_AA1E8580D4EBC816148CE81268683776

    Filesize

    471B

    MD5

    cb99b6d5040641081530ef8f6049f1aa

    SHA1

    3fa9e3148cbee0e561da3787919043483ee5e5c0

    SHA256

    3e1607026f332ae19539f0621c8b18c820245d196febf8bf258253667ebc94d8

    SHA512

    13cdc5995fa4741d474c00491ea55b26101a88ee3495327950249e8bef1e16de29f46d0c1ffef3682eac0e041f0b06545d51ef8152a33606f0e13fe35e6a1d83

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7423F88C7F265F0DEFC08EA88C3BDE45_AA1E8580D4EBC816148CE81268683776

    Filesize

    404B

    MD5

    8d4bd58c4a73967211b13a3a867956a6

    SHA1

    ac1e07cb3b40a6a398c7cf6e33f54809c7740726

    SHA256

    49c4027edba3ce102af7e41ecc3f5d3947f5fbae1182c6049433e09fcae9216a

    SHA512

    39cc7368e3919c961c5bf7b71d7c3d8eef4fd86829bcdefbd3befa451b5126988031ae537f232683880d10e265a486a5d16a7f37ee92d956c111ac2cc915b64f

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\imagestore\flj0k7l\imagestore.dat

    Filesize

    1KB

    MD5

    23a4d6fbc40572ecc9a047225879e168

    SHA1

    ee1cc64ebf681ecb87ca6720310e56bc1d32ac01

    SHA256

    f5f94434cb9c980f3c3f179e2e96fcdcd51abb02cc8340000d78da1adeb03bf7

    SHA512

    8add54a9d31de9cd918cd2049848ae17feb74784797770a41573eeed0543e3aef9a9737edd038055412cefdfcf083a253cce1672f8132846da89d50d3cf1e567

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\BJCNBC62\suggestions[1].en-US

    Filesize

    17KB

    MD5

    5a34cb996293fde2cb7a4ac89587393a

    SHA1

    3c96c993500690d1a77873cd62bc639b3a10653f

    SHA256

    c6a5377cbc07eece33790cfc70572e12c7a48ad8296be25c0cc805a1f384dbad

    SHA512

    e1b7d0107733f81937415104e70f68b1be6fd0ca65dccf4ff72637943d44278d3a77f704aedff59d2dbc0d56a609b2590c8ec0dd6bc48ab30f1dad0c07a0a3ee

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\NSWVVUXL\favicon[1].ico

    Filesize

    1KB

    MD5

    91abe01116ab422c598e9c8af72cf4da

    SHA1

    0f2815fe8e067d48537ad168225ab4674271fa27

    SHA256

    b1d7aef06456fe7431124129a28f0138bb5fccfa4f4161e3087de23c005e5edc

    SHA512

    a4d5b20c3014153b6b382c43404917bd2cb5bd2a59bb1e981f5a19eb7dbdec185ace288e9700428d24e5ac623e45d04905e706f0c45a1642b1aa6c091213c23c