Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    140s
  • max time network
    165s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    04/02/2024, 15:30

General

  • Target

    8f81de63167341a336103a100c462e53.html

  • Size

    89KB

  • MD5

    8f81de63167341a336103a100c462e53

  • SHA1

    fd81cd8491dd1e8961cc60486fba48ef18a76b46

  • SHA256

    e192bdb9b39c6040e0669d19b57657aec79ea175066ce431c0ecd8d5244a1742

  • SHA512

    0721e5eb6c7da88b700384e293b91d7f16f54e267a37b3c6a870ebaaca4e503417772e38815cc0a3ef1648e0a68ee910b508aeca9c0d02d9f0389bc757a9fc72

  • SSDEEP

    1536:gQZBCCOdC0IxCz50O9PKYmNBkPIQNFhDvndJpemZtCAGNF1DLYE4ZBgqNULaSGEx:gk2o0IxP3Pd

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 52 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\8f81de63167341a336103a100c462e53.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1380
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1380 CREDAT:17410 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:3228

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\7423F88C7F265F0DEFC08EA88C3BDE45_AA1E8580D4EBC816148CE81268683776

    Filesize

    471B

    MD5

    7bde92ff965b73dc76190e608c2fbb93

    SHA1

    95547789d183bbf9ea20ef6ba4c6b2f0249fb30d

    SHA256

    821420f187b512f853c8b73d9439e940e6e04c499532561343a739717a9a76ee

    SHA512

    21406b04613e8be9f2036f5057d6d3de568ec1aa4eb6471cd457e70e6ddadfc3b988d5f4c2d316e548b21b2850944a78d75a44ec3bf929e71fe61fb6b0de4ec6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7423F88C7F265F0DEFC08EA88C3BDE45_AA1E8580D4EBC816148CE81268683776

    Filesize

    404B

    MD5

    ab4dadeb1c06975e4f413aab9047824d

    SHA1

    1f1a860f320c7fe63f73641ee54a8f5055590a05

    SHA256

    2f5fac634cb86ec760c9113ba5b8c746b59faf42134736ae46a30c036c88e9de

    SHA512

    04ee849ed0548607d5630b145cc97316ed6225fa0062bffb32cdc1d181399dc6aec7e50400a4fa5b351ebd815251f29af21125dbeb81baad0f53c049aa4f990e

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\imagestore\mtw0pfb\imagestore.dat

    Filesize

    1KB

    MD5

    8467206a6272911b8c40fcd364ab6450

    SHA1

    4ca48d12028413ac62b565131c95606cbfd737eb

    SHA256

    6848d27d69c39466dd613abdeb8fe36dd285490a51765744d909d1a391117b33

    SHA512

    2fa9870623b1eceb84d6de844d1557472c5df64a32bb820baaefadb2e519e58f022d74143647fdbb402ff05e5fac6b555bebdf13b29db16c60b1b8abebef1772

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\8PO8IKDM\js-loader[1].js

    Filesize

    650B

    MD5

    ea5a5798612df63ab0532174aaf62634

    SHA1

    0f4713eef39ab07510d3703ef201885475ef0b42

    SHA256

    ee44a690e6d7ba27656d9a013b7803d69461a19444d834c918d16c1c56598a31

    SHA512

    8cfd3dc5eb7f2ab4f27abf80bea6955a00112b84ba074cfb8a1bce0207c36f6f12e2f3e90b8ebb8fedd56a5520a4a0d09397af9e6f4885addd890df7bf3b8907

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\AAZL0E9Q\suggestions[1].en-US

    Filesize

    17KB

    MD5

    5a34cb996293fde2cb7a4ac89587393a

    SHA1

    3c96c993500690d1a77873cd62bc639b3a10653f

    SHA256

    c6a5377cbc07eece33790cfc70572e12c7a48ad8296be25c0cc805a1f384dbad

    SHA512

    e1b7d0107733f81937415104e70f68b1be6fd0ca65dccf4ff72637943d44278d3a77f704aedff59d2dbc0d56a609b2590c8ec0dd6bc48ab30f1dad0c07a0a3ee

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\CCM17AA0\favicon[1].ico

    Filesize

    2KB

    MD5

    cb546f0ce2ca2505cbc9088d8a4592e5

    SHA1

    d87b70b1a34f4313d085de80da3aa4e8845af904

    SHA256

    0c3851f8f6d7b9dc63645a68b0db991edc9162620b9d757684a4a20206c458fb

    SHA512

    b6fcd078f43082daf299a49646280ac3a30b91d10dcfaf8e9fb9e8317af417e34d45ae7397af9507d4101b7bcc58169c2f64adcaa253fc08204b98020b20b551

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\CCM17AA0\layout[1].css

    Filesize

    42KB

    MD5

    e57c81f3a17073a78a7c3c865f74f89a

    SHA1

    587d7c955432f1e5a87460ecbf9086ae2589346f

    SHA256

    e36f1f796e538f826beb42510edc0354133c61c7f711b827def7f91d3f7c8bda

    SHA512

    630aa9dba2aee1125103954b093af8b24907d98761e1a9b93fb6f6c43abfec3afdf53825e3f12fc3cf87fa14855daadfdbc90b1e49b503fb2917599dd77daf52

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\PG47MANB\recaptcha__en[1].js

    Filesize

    488KB

    MD5

    16cb1c02d3183e1026b4ca6b3eb3d509

    SHA1

    156c9649e7a6e78b8fd974cf29ecdfc8c0fe3929

    SHA256

    689c72d7718868395eaf4bbe26e9f52e92f16daaa1d5486b53ae3744a996f1e2

    SHA512

    aea879561c737bb7ce6784f0178b429a19c3b854415d30342db41184ee356cc6f7e138dfd1d7212ae7dbee3a2aae3a32ca2880cdc8132da06def9fb562cc5b37