Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    118s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    07/07/2024, 05:34

General

  • Target

    春秋犬舍1024论坛 v1.1/Default.htm

  • Size

    1KB

  • MD5

    5d6c98111b28acd142eefeacd2e44fd2

  • SHA1

    7a8545277319a635f3fc3414ad939022f4eb0efb

  • SHA256

    eb7269858df190b5d79238eda9c9ac4d99f0e1ae3037d94a46be18e098c63e37

  • SHA512

    ae329e94ca19d7f5032f275c0ae10d7b9f166ce3734c69e5c646f73d2218697ec8077e09d2d6a1bf2bd49572ae54bf168e5ab64b6fb479086dc70496503a8f89

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" "C:\Users\Admin\AppData\Local\Temp\春秋犬舍1024论坛 v1.1\Default.htm"
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:3068
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:3068 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2808

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads