Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    149s
  • max time network
    151s
  • platform
    windows7_x64
  • resource
    win7-20220812-en
  • resource tags

    arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
  • submitted
    14/09/2022, 02:41

General

  • Target

    https://www.seppic.com/en/emogreentm-hp-40?utm_source=3Dgmail&utm_medium3Dbannersignature&utm_campaign=3Dincosmetics_latam_0922

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 47 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" https://www.seppic.com/en/emogreentm-hp-40?utm_source=3Dgmail&utm_medium3Dbannersignature&utm_campaign=3Dincosmetics_latam_0922
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1048
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1048 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1212

Network

MITRE ATT&CK Enterprise v6

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    60KB

    MD5

    6c6a24456559f305308cb1fb6c5486b3

    SHA1

    3273ac27d78572f16c3316732b9756ebc22cb6ed

    SHA256

    efc3c579bd619ceab040c4b8c1b821b2d82c64fddd9e80a00ec0d7f6577ed973

    SHA512

    587d4a9175a6aa82cd8bb1c11ca6508f95cd218f76ac322ddbd1bc7146a0e25f8937ee426a6fb0fb0bb045cedb24d8c8a9edfe9f654112f293d8701220f726b4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fe744778b24ad9971bba10d58e2c038a

    SHA1

    e53781c45379c64359792d58fec0590bb39109ad

    SHA256

    c4d7b6de8ee017422a0d9fbb9024e1b21076e0280252cbbe5b4f33a5738f6ae8

    SHA512

    cccc493cd5e7fdd3613e9fad93fc0ace05970981f1c9bac95ff1b5017ba96dd2a9b58d9e4f6a916925321e871308cd8f9d764f83833616c2f181a2307ba41d05

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\3XPFXPM5\favicon[2].ico

    Filesize

    849B

    MD5

    2ae75c62f81c118e9ded0dd4e91010f4

    SHA1

    a8588d4d5d59916a0f6d5f939bc1ac14093817ac

    SHA256

    a594f13018e507040153273afca435a6f1b3d627dbdc88fd691c2a6c1c886721

    SHA512

    3e74c582b5f55a6040f80cc7ddf1700586dd0d856c8f7bfcf0d46ff4a6d62cf78565038ee4980895f66baee342468364378cadbf5fc729e554c464304ab2f05f

  • C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Cookies\M3WDMMAS.txt

    Filesize

    607B

    MD5

    672cf2c99f5d4c5a8563b51b9126b908

    SHA1

    e47ca1bb3551a2a89581de2686a28089d74a1c44

    SHA256

    574a76316dd5328a7ee59b59346c738170c57370670562c0e5ecb5c9ca3d8ea8

    SHA512

    9c51139fa353f144b62124e3c3a95633cda3b4fa8e14e1a374f051dcf813109513f10c89e4ae4fc2c693d11bdc23100c646751ca5f41b7b0d4e17055eff0a45a