Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    119s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    24/06/2024, 03:50

General

  • Target

    ced6371aac85ee62849719b70ed6c1f60d1bec609bb9771e469338f757493235.exe

  • Size

    200KB

  • MD5

    d162fda6d6ecff4890c177ab4297454d

  • SHA1

    64fa25f03c7388f4552271d3215ba028720e1663

  • SHA256

    ced6371aac85ee62849719b70ed6c1f60d1bec609bb9771e469338f757493235

  • SHA512

    f1e2f0250b378b344c1eee1c43f59d057aeb48c882bfbf0c386be6b77a07ccf99d82292ac0b81cf08dc93e418f7c66374afecc46b241360c8b199bafc4dbfd5b

  • SSDEEP

    3072:W2WswjN0wXOmxAHZiB6C+7btgPljtKS6I9JN8VfVft+7jF19KAmYR7:W2Wswh76tgPlsg9JCkjF7Ka

Score
3/10

Malware Config

Signatures

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Modifies Internet Explorer settings 1 TTPs 34 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 7 IoCs
  • Suspicious use of WriteProcessMemory 8 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\ced6371aac85ee62849719b70ed6c1f60d1bec609bb9771e469338f757493235.exe
    "C:\Users\Admin\AppData\Local\Temp\ced6371aac85ee62849719b70ed6c1f60d1bec609bb9771e469338f757493235.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2140
    • C:\Program Files\Internet Explorer\iexplore.exe
      "C:\Program Files\Internet Explorer\iexplore.exe" http://www.linziai.com/
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of SetWindowsHookEx
      • Suspicious use of WriteProcessMemory
      PID:2360
      • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
        "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2360 CREDAT:275457 /prefetch:2
        3⤵
        • Modifies Internet Explorer settings
        • Suspicious use of SetWindowsHookEx
        PID:2628

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads