Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    132s
  • max time network
    144s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    21/09/2022, 20:55

General

  • Target

    https://neu-displaycatalogrp.frontdoor.bigcatalog.commerce.microsoft.com/

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 35 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" https://neu-displaycatalogrp.frontdoor.bigcatalog.commerce.microsoft.com/
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:4260
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:4260 CREDAT:17410 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:3132

Network

MITRE ATT&CK Enterprise v6

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\7423F88C7F265F0DEFC08EA88C3BDE45_AA1E8580D4EBC816148CE81268683776

    Filesize

    471B

    MD5

    d14b9c4a71b011283a7239928b10e260

    SHA1

    c3f38526e947757575ca772545e075dd635c3071

    SHA256

    78d4cef801fe6323727e41c33367444e77746b09ebe8e6ac3c20c11e8eb18465

    SHA512

    db9f93308da52ee4d1a4fd352e872a0ee1dcc16b829f1a82a34609e0a84bfe316adb2a3d53607e4e707914873d2465a19e453aede57c549ce47d6ab6f0163033

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7423F88C7F265F0DEFC08EA88C3BDE45_AA1E8580D4EBC816148CE81268683776

    Filesize

    404B

    MD5

    6ee5b680ba24f9715c32a81e1103a10e

    SHA1

    a81e4753a21d7e075bef221c8d228ce726864f83

    SHA256

    e8c7ed4bfe15d4b60a4bb711916ccccb32b784ed4305694356f23cf277b37b68

    SHA512

    fd47cbfda40cfa66271085e338cd671a02d0e05ac6bf9333df162a2d44fff1e4fcb9803c5cfeb00b2d56373caf47dc25c92f848566f369f9f1dfd52f36868304