Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    141s
  • max time network
    153s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230703-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system
  • submitted
    15/08/2023, 06:15

General

  • Target

    04348f7603022e9475feeefcca7e134d1be837df54ad7d5893b6756ff7b8b244.exe

  • Size

    4.2MB

  • MD5

    4e544ed6b8f241e1f72ee058e746e152

  • SHA1

    ccc11ec15a05b675d9a490e623d362b3d716c0de

  • SHA256

    04348f7603022e9475feeefcca7e134d1be837df54ad7d5893b6756ff7b8b244

  • SHA512

    4e133577ba36f37b434332d89cd00bd4d5d233fe42e8ff46b7156fa2c88c52aa50c03d80b55158cfe4e70c80f46ba6da6b446fb157f51cdbfaa3fd1faa733f0c

  • SSDEEP

    98304:1dh5q7noS9h6mvD1PfTLWKdzOJDb4v+q7:1ZqNJPLLlwN0v+

Score
8/10

Malware Config

Signatures

  • Downloads MZ/PE file
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\04348f7603022e9475feeefcca7e134d1be837df54ad7d5893b6756ff7b8b244.exe
    "C:\Users\Admin\AppData\Local\Temp\04348f7603022e9475feeefcca7e134d1be837df54ad7d5893b6756ff7b8b244.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:3128

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    2KB

    MD5

    9e36871848baffbaec77d9f34dd0f49c

    SHA1

    a536ac6b501cc2a44799bafe83d9891b6465ce84

    SHA256

    6cefc9c092914c5e06308ded8f22229a54da16d1c7e65fb560e10535ccccdfaf

    SHA512

    dd264d5a4a79906bc65dffc26417da708be634fed24891b81dfb9a23c71c872ef5f66f7d3ebfb0349d09deedbefc24abb21bd376d7e99a316a4571425b1d9341

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    7KB

    MD5

    f9f80a6759676f001b5665f50af6bbbc

    SHA1

    8ef591880bc84343dacba017c6675e93e8c8aa6f

    SHA256

    c7b378556b056e1f9fadfd49a8c999d977cec4f22b0452b9c44702c6dc28e1cd

    SHA512

    88f0b93657b03f633bd08d85a828bfe971963e30b5867c3e9e6b661ed22ce76bf20c4e35938746cf42d6c4e35883227869b47d24f36983a427d3b9480dc79cb4

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    7KB

    MD5

    f9f80a6759676f001b5665f50af6bbbc

    SHA1

    8ef591880bc84343dacba017c6675e93e8c8aa6f

    SHA256

    c7b378556b056e1f9fadfd49a8c999d977cec4f22b0452b9c44702c6dc28e1cd

    SHA512

    88f0b93657b03f633bd08d85a828bfe971963e30b5867c3e9e6b661ed22ce76bf20c4e35938746cf42d6c4e35883227869b47d24f36983a427d3b9480dc79cb4

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    7KB

    MD5

    94c3ae9b49fe0381e173235785718a4c

    SHA1

    febf69813350797a64e2f7f7fd15b759caa25096

    SHA256

    188a9ac2c8c0dc0a83fcaf3e6ca28a1091def3f63a9ce70a16c8d3b2d13eaa27

    SHA512

    fd0277c336a89ca38fe5b4e2572e0c1beebd78b9e5da0d8e3786f9b1118e1878a87b9149c3df1ae3228a52b7526a5df66e6ebf2c04c1b5bfd7ada09563f78333

  • C:\Users\Admin\AppData\Roaming\Yandex\ui

    Filesize

    38B

    MD5

    149079e0d00fdb381a28abac93010286

    SHA1

    6b15e6c8e2d6d996e1d6bfe56044425eddf621a8

    SHA256

    3790e81b5383608f34f7b9a0881a50b7fbaadc46b664428a2958d41d2c4d655c

    SHA512

    48ad570e7a4205efc5eab9886e4589160c414840d6d0d57bb59bcedceb507808e7346b72db6ab02951c75e934bc9164424aa0eaeeee4335fdf6c3914fed9b5e9