Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    143s
  • max time network
    148s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230703-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system
  • submitted
    17/08/2023, 22:07

General

  • Target

    ccd7d5dcab9918cca7db7ae012b7265afec0bc9e184f0e25719f4fe14cf78371.exe

  • Size

    3.7MB

  • MD5

    1e2646e2740226fbeaaa274f4e03cb3d

  • SHA1

    50a2c8f52dcba98089f000d0904731ebeff92bf6

  • SHA256

    ccd7d5dcab9918cca7db7ae012b7265afec0bc9e184f0e25719f4fe14cf78371

  • SHA512

    f029f60d0a47fe7827e9a05f82c1b70239989ae5a138a2d506f1dc2ca196d09b713e50ebcdde564e318686fd24f84503f0a391486195a6b97a61b256d313863b

  • SSDEEP

    49152:d6x/NP5OJ7noS95X6mXfKezLGB+r5u8QeKxFOJxdb4vZKVH7:Udh5q7noS9h6mvDDKdzOJDb4v+H7

Score
8/10

Malware Config

Signatures

  • Downloads MZ/PE file
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\ccd7d5dcab9918cca7db7ae012b7265afec0bc9e184f0e25719f4fe14cf78371.exe
    "C:\Users\Admin\AppData\Local\Temp\ccd7d5dcab9918cca7db7ae012b7265afec0bc9e184f0e25719f4fe14cf78371.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:1496

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    4KB

    MD5

    3e1a5f29427633b40ac807fc35dbecee

    SHA1

    6d86bee9bf724a826189d564b9dc4aa0a44ef460

    SHA256

    d959ded2a4a003ac18787ce802c9696762450d936341cabe12ab89a96e866ae5

    SHA512

    97519126b16a2f8d693730feadc9f6c8b6cc0c60fecc12ccc44fc6e3beddcb59b6708b199ff2f1a9d692f9714d90baf8d775688f3606dcab7731dbdf65114346

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    4KB

    MD5

    3e1a5f29427633b40ac807fc35dbecee

    SHA1

    6d86bee9bf724a826189d564b9dc4aa0a44ef460

    SHA256

    d959ded2a4a003ac18787ce802c9696762450d936341cabe12ab89a96e866ae5

    SHA512

    97519126b16a2f8d693730feadc9f6c8b6cc0c60fecc12ccc44fc6e3beddcb59b6708b199ff2f1a9d692f9714d90baf8d775688f3606dcab7731dbdf65114346

  • C:\Users\Admin\AppData\Roaming\Yandex\ui

    Filesize

    38B

    MD5

    f0ea5771ef5ad1fb9b789d88bfc38a76

    SHA1

    fbf7afd071efa5f422299dcc7e898697d3e378b1

    SHA256

    c58a219442ce6c9eda2d37286058e08f3cc4f44c83ac8bc9cf04adb2517d392c

    SHA512

    5c8598f418876ae6494a3c3ca999c84fd612a132c82716e6dc658b1fc9bed98ee4ca013b28b7a73934d90396b845187ff5013f2af2d83fe94071001b0f6ec22f