Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    77s
  • max time network
    81s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230703-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system
  • submitted
    01/08/2023, 16:21

General

  • Target

    Yandex.exe

  • Size

    4.2MB

  • MD5

    9c1f089e63a7795e61600713330783b3

  • SHA1

    8ec4c99d5e0e487ef23d3a130f99f66ec6869557

  • SHA256

    e147eabe55bc2f544641dd78f3fe2ecf4a8227c4e0e5c8bf1c5103f95417ebca

  • SHA512

    3a9b7e372d8b5b128054d1ff4841296bebd73a851f0c8b77da5a4d39ecd8936041dbf3d58b238f63aa2ea7e0939b7ad64e7bfff90412297be133b958bc244f0b

  • SSDEEP

    98304:T5wxWzZowQos6myn7WZPUsVigOKdzOJDb4v+:VSWFoCQPUV8wN0v+

Score
8/10

Malware Config

Signatures

  • Downloads MZ/PE file
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Yandex.exe
    "C:\Users\Admin\AppData\Local\Temp\Yandex.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:4272

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    3KB

    MD5

    9638e972b0eeeea3b889f75936055c22

    SHA1

    195f1a811288fc888d6d0ad99e0643a154dc18c9

    SHA256

    67fb1ac1256f0d7b6a897261afafd63bbe24045ea6f23a666ec1b5e7c730cb8e

    SHA512

    2f3dc53d6cbcc5f2a1c8b817bdb301697be5c6f98dca71119a21017c73b3a190a454bc105ee8d7b725f4b7dd975d4f5a5bea19528cf3bfa38fce1c9ad7b5ae2c

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    5KB

    MD5

    aa154e0e7538cc47e233eb925f940c78

    SHA1

    d740679d71346019a8e80d66540d6b17062ebf7e

    SHA256

    0e90e04d1340e93ccb3fa29c40c33458febe34a59acdc7adf321f1b667fffb3c

    SHA512

    8d328d9e9767e85fa4d62deeae54cb29e3fd24fe08801924907bab334d0913311ec74cb89f96ec86f1a534b3110d1ba663689ac213c550aa327c221b9fef9eb8

  • C:\Users\Admin\AppData\Roaming\Yandex\ui

    Filesize

    38B

    MD5

    073f40ebe42b83b6a2b044f9c9452cb0

    SHA1

    936012db646e633a469b6dc7ce9bb1f68b45af72

    SHA256

    9a5527f1e4de214dd812489bd8ce6f03c4ac1d27de3b5b98e0e3ec3835894c83

    SHA512

    4bd172cd90c33a5ab73aaa9f25ceef49b1358abcf3a2e50b454e8cb280c68545161c4dcc24dfdf4033be210f46d7a091564577e2fe52bf4d9fcdf9fa20973f15