Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    142s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    04/02/2024, 16:23

General

  • Target

    8f9ce4fcc7a7d93e8329e077302c6cf6.html

  • Size

    432B

  • MD5

    8f9ce4fcc7a7d93e8329e077302c6cf6

  • SHA1

    04bc6d6a8daf087c2e6eff2cab78113da25f5467

  • SHA256

    d7b7f365e852f97d5f8024a50d2cd2f951daf8efeed0ad9c401d578506c5e5b1

  • SHA512

    7ed2d3a5aed49cfd07d76c057fb70523210f2a4cb27aff6bf47dc81824d8fec7e8197d6581d59189f1db0d8aa62a9af1ecc04460ed0de27f4363bcaa1c3de2ec

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 44 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\8f9ce4fcc7a7d93e8329e077302c6cf6.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1844
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1844 CREDAT:17410 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:4824

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\7423F88C7F265F0DEFC08EA88C3BDE45_AA1E8580D4EBC816148CE81268683776

    Filesize

    471B

    MD5

    7bde92ff965b73dc76190e608c2fbb93

    SHA1

    95547789d183bbf9ea20ef6ba4c6b2f0249fb30d

    SHA256

    821420f187b512f853c8b73d9439e940e6e04c499532561343a739717a9a76ee

    SHA512

    21406b04613e8be9f2036f5057d6d3de568ec1aa4eb6471cd457e70e6ddadfc3b988d5f4c2d316e548b21b2850944a78d75a44ec3bf929e71fe61fb6b0de4ec6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7423F88C7F265F0DEFC08EA88C3BDE45_AA1E8580D4EBC816148CE81268683776

    Filesize

    404B

    MD5

    d3e46f30885f6e00d9250b15075d6194

    SHA1

    a6ae8c818baa93446e82e485466f50c2aa6cc133

    SHA256

    2399eb2fff6de0d93e1c506543133cf9d52fc5ab0adb9563460211247b480c51

    SHA512

    f2590ccd96484e64c851e6db27bd7f0ef8e9375765f6c1664e786421fed23559615e3e770916360089b7d15596b403e6ee19b8864d56b83084b97134ab592e3f

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\imagestore\z99pgii\imagestore.dat

    Filesize

    1KB

    MD5

    753b7ae0e4f63f62007205408d37820b

    SHA1

    35d589f03e6645a88c6d4bec352ae848f72682b8

    SHA256

    565ad9cda93227c47db3fef88b8e1ae5930ffd9fce7190b250756a7e52b93e88

    SHA512

    9ad35c722adcc4ff3f01249dc094e38b7799e0a39d97390f0e86b639578571b548a308e7f04dd5d04df7e910b8f58cde8811f685be2f2e2d7dfa68759743bf68

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\imagestore\z99pgii\imagestore.dat

    Filesize

    6KB

    MD5

    a273e0b5a219b3b45f28ec31c93198b2

    SHA1

    72c6d0cf320792be2a674136eb549b1164c24083

    SHA256

    5746dfc06cadc6b2b717329a1bf591372cdc25dda81edf04d0c627916f5c47be

    SHA512

    924d2f08fb66e887a63ce84361653a3d263cfbd85c1cb5146fd32d74ce5550db37df717a03bf12c4f501405a1e7e8eeb950f091186f9276fe804e3bda3bc77b2

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\6AXLYU2E\favicon[1].ico

    Filesize

    1KB

    MD5

    91abe01116ab422c598e9c8af72cf4da

    SHA1

    0f2815fe8e067d48537ad168225ab4674271fa27

    SHA256

    b1d7aef06456fe7431124129a28f0138bb5fccfa4f4161e3087de23c005e5edc

    SHA512

    a4d5b20c3014153b6b382c43404917bd2cb5bd2a59bb1e981f5a19eb7dbdec185ace288e9700428d24e5ac623e45d04905e706f0c45a1642b1aa6c091213c23c

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\BP0ZYM9B\suggestions[1].en-US

    Filesize

    17KB

    MD5

    5a34cb996293fde2cb7a4ac89587393a

    SHA1

    3c96c993500690d1a77873cd62bc639b3a10653f

    SHA256

    c6a5377cbc07eece33790cfc70572e12c7a48ad8296be25c0cc805a1f384dbad

    SHA512

    e1b7d0107733f81937415104e70f68b1be6fd0ca65dccf4ff72637943d44278d3a77f704aedff59d2dbc0d56a609b2590c8ec0dd6bc48ab30f1dad0c07a0a3ee

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\Q9YQXK50\favicon[1].ico

    Filesize

    5KB

    MD5

    f3418a443e7d841097c714d69ec4bcb8

    SHA1

    49263695f6b0cdd72f45cf1b775e660fdc36c606

    SHA256

    6da5620880159634213e197fafca1dde0272153be3e4590818533fab8d040770

    SHA512

    82d017c4b7ec8e0c46e8b75da0ca6a52fd8bce7fcf4e556cbdf16b49fc81be9953fe7e25a05f63ecd41c7272e8bb0a9fd9aedf0ac06cb6032330b096b3702563