Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

3

3e27b70079...a9.exe

windows7-x64

8

3e27b70079...a9.exe

windows10-2004-x64

8

Analysis

  • max time kernel
    142s
  • max time network
    147s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230703-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system
  • submitted
    16/08/2023, 10:07

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    3e27b700795ceb40bcf3de5028816460efdf306d14504e10d0e50169723f87a9.exe

  • Size

    4.4MB

  • MD5

    c6df58e9cbf576845b547040379cc411

  • SHA1

    d3c440086ad0956afdf2ca61fcab1b53c03ce475

  • SHA256

    3e27b700795ceb40bcf3de5028816460efdf306d14504e10d0e50169723f87a9

  • SHA512

    5ac4f3972caca8a7cc9ec60fa80c4a5bff9a6c0668784c0240dc0c2b1110e7fb2d06f5b9cff38a6eed930e1b0be828140e36f53967181acec32249ffdc73c283

  • SSDEEP

    98304:F95xjBWDLaMaG0Or4sniiqG92KdzOJDb4v+g:TfWEOmiq4wN0v+

Score
8/10

Malware Config

Signatures

  • Downloads MZ/PE file
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\3e27b700795ceb40bcf3de5028816460efdf306d14504e10d0e50169723f87a9.exe
    "C:\Users\Admin\AppData\Local\Temp\3e27b700795ceb40bcf3de5028816460efdf306d14504e10d0e50169723f87a9.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:4476

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log
    Filesize

    4KB

    MD5

    19689eddd95e04c63ccf9d7de2eb155f

    SHA1

    3b61ac0c40e91e0f4ffa63f22f2961c03e357181

    SHA256

    57f9bc9e6a3d89995588dea4459b2cab14291e31d10839a1f6c5d99bc96eca7f

    SHA512

    ef5b4280ee24d88625f7b9660ea54a991c952186908c75b345175cb0d199f63bb7a2f3bec1502b18405b225fabdc885860cbc260083ba09e4e962479fb24536f

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log
    Filesize

    4KB

    MD5

    19689eddd95e04c63ccf9d7de2eb155f

    SHA1

    3b61ac0c40e91e0f4ffa63f22f2961c03e357181

    SHA256

    57f9bc9e6a3d89995588dea4459b2cab14291e31d10839a1f6c5d99bc96eca7f

    SHA512

    ef5b4280ee24d88625f7b9660ea54a991c952186908c75b345175cb0d199f63bb7a2f3bec1502b18405b225fabdc885860cbc260083ba09e4e962479fb24536f

    Download Submit

  • C:\Users\Admin\AppData\Roaming\Yandex\ui
    Filesize

    38B

    MD5

    2815b9eb7c90235672be9b17fb2a00d3

    SHA1

    730eb3920c1e898c76e872c98462c47827fdd08b

    SHA256

    2986f0e40873002cc250e73a384c1840eeea6f79d79011da3d4a50025f687a5b

    SHA512

    b5045f1c61ed538c4db6aa2855c071426234ebd41d60733a39f18a994cf6f2eed3a2d97b4510c67cd042866c4e94fb41a9e0a45aad0fac592b11ae9c3d54f6c3

    Download Submit