Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    147s
  • max time network
    155s
  • platform
    windows11-21h2_x64
  • resource
    win11-20240802-en
  • resource tags

    arch:x64arch:x86image:win11-20240802-enlocale:en-usos:windows11-21h2-x64system
  • submitted
    30/09/2024, 08:51

General

  • Target

    vehicles/S60gradingBucket/S60gradingBucket.xml

  • Size

    9KB

  • MD5

    cdd7c1ef7f735cc5e0325d188f4e3fdc

  • SHA1

    5e8e198402f033d8b8aa6cc41593ae0102d33b11

  • SHA256

    177d0bfea9ff3c2a12a1cd1233fe9e3269e0cfd148b021268ac6a2ab64574db7

  • SHA512

    5467c78be0e1c14d718fff6b23b51cbb6fa6edad2cd9907478a201c1f7896eb92b14a84191c15740550a9660c35649fb6683f75681914099895c01f110a4fb4d

  • SSDEEP

    192:BfySHd0+1FgVt185rk/RDKM88soXbRNuA9kfUhybepKz8JQ7QdeXKFW/YF83cZOM:BKSHdR1F0185rk/RDF88soLRsA+fsyqb

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 29 IoCs
  • Suspicious use of WriteProcessMemory 2 IoCs

Processes

  • C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE
    "C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE" /verb open "C:\Users\Admin\AppData\Local\Temp\vehicles\S60gradingBucket\S60gradingBucket.xml"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:240
    • C:\Program Files\Internet Explorer\iexplore.exe
      "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\vehicles\S60gradingBucket\S60gradingBucket.xml
      2⤵
      • Modifies Internet Explorer settings
      PID:2732

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/240-0-0x00007FFE08730000-0x00007FFE08740000-memory.dmp

    Filesize

    64KB

  • memory/240-3-0x00007FFE08730000-0x00007FFE08740000-memory.dmp

    Filesize

    64KB

  • memory/240-2-0x00007FFE08730000-0x00007FFE08740000-memory.dmp

    Filesize

    64KB

  • memory/240-4-0x00007FFE08730000-0x00007FFE08740000-memory.dmp

    Filesize

    64KB

  • memory/240-1-0x00007FFE48743000-0x00007FFE48744000-memory.dmp

    Filesize

    4KB

  • memory/240-5-0x00007FFE486A0000-0x00007FFE488A9000-memory.dmp

    Filesize

    2.0MB

  • memory/240-6-0x00007FFE486A0000-0x00007FFE488A9000-memory.dmp

    Filesize

    2.0MB

  • memory/240-10-0x00007FFE486A0000-0x00007FFE488A9000-memory.dmp

    Filesize

    2.0MB

  • memory/240-9-0x00007FFE486A0000-0x00007FFE488A9000-memory.dmp

    Filesize

    2.0MB

  • memory/240-12-0x00007FFE486A0000-0x00007FFE488A9000-memory.dmp

    Filesize

    2.0MB

  • memory/240-14-0x00007FFE486A0000-0x00007FFE488A9000-memory.dmp

    Filesize

    2.0MB

  • memory/240-13-0x00007FFE486A0000-0x00007FFE488A9000-memory.dmp

    Filesize

    2.0MB

  • memory/240-11-0x00007FFE486A0000-0x00007FFE488A9000-memory.dmp

    Filesize

    2.0MB

  • memory/240-16-0x00007FFE486A0000-0x00007FFE488A9000-memory.dmp

    Filesize

    2.0MB

  • memory/240-17-0x00007FFE486A0000-0x00007FFE488A9000-memory.dmp

    Filesize

    2.0MB

  • memory/240-15-0x00007FFE486A0000-0x00007FFE488A9000-memory.dmp

    Filesize

    2.0MB

  • memory/240-18-0x00007FFE486A0000-0x00007FFE488A9000-memory.dmp

    Filesize

    2.0MB

  • memory/240-19-0x00007FFE486A0000-0x00007FFE488A9000-memory.dmp

    Filesize

    2.0MB

  • memory/240-20-0x00007FFE486A0000-0x00007FFE488A9000-memory.dmp

    Filesize

    2.0MB

  • memory/240-8-0x00007FFE486A0000-0x00007FFE488A9000-memory.dmp

    Filesize

    2.0MB

  • memory/240-7-0x00007FFE08730000-0x00007FFE08740000-memory.dmp

    Filesize

    64KB

  • memory/240-24-0x00007FFE08730000-0x00007FFE08740000-memory.dmp

    Filesize

    64KB

  • memory/240-23-0x00007FFE08730000-0x00007FFE08740000-memory.dmp

    Filesize

    64KB

  • memory/240-25-0x00007FFE486A0000-0x00007FFE488A9000-memory.dmp

    Filesize

    2.0MB

  • memory/240-22-0x00007FFE08730000-0x00007FFE08740000-memory.dmp

    Filesize

    64KB

  • memory/240-21-0x00007FFE08730000-0x00007FFE08740000-memory.dmp

    Filesize

    64KB