Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    142s
  • max time network
    154s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230703-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system
  • submitted
    16/08/2023, 15:37

General

  • Target

    47f372c41daaf7bae9a1169eec9b26514f016ea6132ae1f2feb23094bea1e920.exe

  • Size

    4.4MB

  • MD5

    8cc69f9f6d522c306acdced8a84d2300

  • SHA1

    bacd2ca709fcf5a5d1262ddab4427c61af7f77c0

  • SHA256

    47f372c41daaf7bae9a1169eec9b26514f016ea6132ae1f2feb23094bea1e920

  • SHA512

    7106a407c9517304366418546b5e1794a4172b8f9be20ab51365b0971f6423dc47cae1b2146a78d974656d72f7504fb46e495ab7dfa63a6dea6b34ea6a20b6d1

  • SSDEEP

    98304:F95xjBWDLaMaG0Or4sniiqG92KdzOJDb4v+g:TfWEOmiq4wN0v+

Score
8/10

Malware Config

Signatures

  • Downloads MZ/PE file
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\47f372c41daaf7bae9a1169eec9b26514f016ea6132ae1f2feb23094bea1e920.exe
    "C:\Users\Admin\AppData\Local\Temp\47f372c41daaf7bae9a1169eec9b26514f016ea6132ae1f2feb23094bea1e920.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:4068

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    1KB

    MD5

    d3c11ceb0009d562fabee15e095a5ae4

    SHA1

    bcf70cf5056e298ca09c8e0758fe319910129353

    SHA256

    b8625931ad3568f1e6e2e8f3f0feb0155d7ba663ef2347e730528e7bd56a9b2d

    SHA512

    b845d9cd08d3f0bfd65120dbc48dbc12532703f57837cd4f4522e864e661efdfed6f7a4b542e863e17a7f94276c92ef953e5eaa988dda1c0773c1d74cc17fcfc

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    3KB

    MD5

    dc3ee018ba14f5ef344f50656185ccc1

    SHA1

    57c0acfac7bd2b944cc52187408937e3b4149362

    SHA256

    61ee87aece7f29676c40522a75b190dbdc1101ea35bf9dc1e33b4e28c3e8c411

    SHA512

    8b7372ddee19255f274d829d2bf401253266d5c9a4b4e843eccd68230dae73d34e9641702fb32d3debbccfc7cf04a18c81b193b74dcf2dec96be09584d3d1b1b

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    7KB

    MD5

    4e90d2a7ac58746480f8709b9d62864f

    SHA1

    107c9279036c982f7ff84d609070529d3a497b74

    SHA256

    091c9d1a6108f995d6ec0ea50f27145a8eb0ab7851deac6fe427da9fbd187187

    SHA512

    048972320f5475acec337e005a687b24551c611ddc4c28bb2244966e0ab66e79cac3f20d352118ff194e732b858f83797f6924036015c2ff573e709d739b0325

  • C:\Users\Admin\AppData\Roaming\Yandex\ui

    Filesize

    38B

    MD5

    829e81a28f854f2ffeb8b006e93591c1

    SHA1

    bcb1af1ce79355d3d4e878cec2a4a2f3a9a2c3aa

    SHA256

    a4d7f54f364fcea6cf3a316746416f29af43d50f82177db3ee552cd755408273

    SHA512

    35588d5991704fe9aeb329163e6b62c67f7a6aa18a04c676fbf40f56d9b6a08613ce35a11a32535bd2af8f088af89bfed9d49230a3ae1f9232889c56c6e75401