Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

1

Static

static

1

1Iq9ockBvT...9.html

windows7-x64

1

1Iq9ockBvT...9.html

windows10-2004-x64

1

Analysis

  • max time kernel
    0s
  • max time network
    3s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240221-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240221-enlocale:en-usos:windows10-2004-x64system
  • submitted
    22/02/2024, 18:56

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    1Iq9ockBvTkzd9zebQQFH9.html

  • Size

    117KB

  • MD5

    33ee6d249e2c55aebc7e7b25d29c6268

  • SHA1

    4e49652b9ca0ca38f8599bdf9ae30396e7ea5da3

  • SHA256

    0467bc99b89bb70b1f508d95662dee42605606c3bd8f5bf6cfc38ca6d5233816

  • SHA512

    1f0352d74b32433339c2d4c580f8bb32fa28aebd41210ead2b0c4c5da31953fb346390bc73dc44958fa55dd04adc88cb4e5c35d2d98f1ad5e7e120b0d895dd9a

  • SSDEEP

    768:sg/46eTOz8JA8/r4Jm2Bh8JonsZhlJIovrFrp0sCx6e4hwZg0WhSo7jVauzZV0Ti:sf/Ym2BWJIovrD0txj5i0u9UJc

Score
1/10

Malware Config

Signatures

  • Suspicious use of WriteProcessMemory 2 IoCs

Processes

  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\1Iq9ockBvTkzd9zebQQFH9.html
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:4220
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x100,0x104,0x108,0xfc,0x10c,0x7ff86f8446f8,0x7ff86f844708,0x7ff86f844718
      2⤵
        PID:3884
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2072,7160666157720798957,181128530411791184,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2092 /prefetch:2
        2⤵
          PID:5032
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2072,7160666157720798957,181128530411791184,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2336 /prefetch:3
          2⤵
            PID:2932
          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2072,7160666157720798957,181128530411791184,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2808 /prefetch:8
            2⤵
              PID:3612
            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,7160666157720798957,181128530411791184,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3340 /prefetch:1
              2⤵
                PID:4676
              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,7160666157720798957,181128530411791184,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3292 /prefetch:1
                2⤵
                  PID:3332
              • C:\Windows\System32\CompPkgSrv.exe
                C:\Windows\System32\CompPkgSrv.exe -Embedding
                1⤵
                  PID:848
                • C:\Windows\System32\CompPkgSrv.exe
                  C:\Windows\System32\CompPkgSrv.exe -Embedding
                  1⤵
                    PID:2616

                  Network

                  MITRE ATT&CK Matrix

                  Replay Monitor

                  Loading Replay Monitor...

                  Downloads

                  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F59A01A8B782D93EA6991BC172CEFFB1
                    Filesize

                    867B

                    MD5

                    c5dfb849ca051355ee2dba1ac33eb028

                    SHA1

                    d69b561148f01c77c54578c10926df5b856976ad

                    SHA256

                    cbb522d7b7f127ad6a0113865bdf1cd4102e7d0759af635a7cf4720dc963c53b

                    SHA512

                    88289cdd2c2dd1f5f4c13ab2cf9bc601fc634b5945309bedf9fc5b96bf21697b4cd6da2f383497825e02272816befbac4f44955282ffbbd4dd0ddc52281082da

                    Download Submit

                  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F59A01A8B782D93EA6991BC172CEFFB1
                    Filesize

                    242B

                    MD5

                    c000bb58039eb9fe4c5b011248ab7ec5

                    SHA1

                    889652488be258ac3e2e7103827b9482313a7542

                    SHA256

                    ea1f3ee5a508a775a32cf8d251b3a2b85bd71c59ca1613f480fe6d4b26e7b3a0

                    SHA512

                    62c853354a5d06812da5c2ba9056d829923bbcd7d0272f04f5f134bcd6affe7e147b9c9852bb2b4abe3edc3d9078bdd2b21ff4c2f4aa9419a2aa31aec6d09d55

                    Download Submit

                  • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                    Filesize

                    152B

                    MD5

                    1af9fbc1d4655baf2df9e8948103d616

                    SHA1

                    c58d5c208d0d5aab5b6979b64102b0086799b0bf

                    SHA256

                    e83daa7b2af963dbb884d82919710164e2337f0f9f5e5c56ee4b7129d160c135

                    SHA512

                    714d0ff527a8a24ec5d32a0a2b74e402ee933ea86e42d3e2fb5615c8345e6c09aa1c2ddf2dea53d71c5a666483a3b494b894326fea0cc1d8a06d3b32ec9397d3

                    Download Submit

                  • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                    Filesize

                    152B

                    MD5

                    aa6f46176fbc19ccf3e361dc1135ece0

                    SHA1

                    cb1f8c693b88331e9513b77efe47be9e43c43b12

                    SHA256

                    2f5ba493c7c4192e9310cea3a96cfec4fd14c6285af6e3659627ab177e560819

                    SHA512

                    5d26fdffebeb1eb5adde9f7da19fe7069e364d3f68670013cb0cc3e2b40bf1fbcb9bdebbfe999747caf141c88ccd53bd4acf2074283e4bde46b8c28fbae296f5

                    Download Submit

                  • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                    Filesize

                    6KB

                    MD5

                    19b1a1c7781bb5020a5b9227ac0f6d9f

                    SHA1

                    7771473477700e4315bb140b99c5f2418fb1164a

                    SHA256

                    1c2c0e3f2df95d15190456293ab2f05fb6d34e2d018dfc7a6d08e774a26911a8

                    SHA512

                    8fc5b7028b68f412cf976c4ef5cee314fdb51b6f40b82e60f1e81f247ecabc5570fc2aa2db24c85bd096ca1f1a66e710678dfa7f2fef240808e26a04d00a6cb3

                    Download Submit