Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    141s
  • max time network
    147s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230703-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system
  • submitted
    25/08/2023, 07:51

General

  • Target

    934e01e5eebcf843a6556c5bde7b7404f199f999261d54c72c602bc65992b35d.exe

  • Size

    4.2MB

  • MD5

    caf0903d97bab68125fe4e825483afb6

  • SHA1

    5f9f17cecc4c4e3b6fd4328cad579d7f2c9d24b8

  • SHA256

    934e01e5eebcf843a6556c5bde7b7404f199f999261d54c72c602bc65992b35d

  • SHA512

    ab117b932528a40e35d78cc8235e8868ac5830aeea6fd365dbc4d5bbabaada03a856ba0d5ec8be2f825c1df0dadc5261a5767443da3282dde3be610015a6aa8c

  • SSDEEP

    98304:ydh5q7noS9h6mvDrQqBZm5LJKdzOJDb4v+y7:yZqNvQk+L0wN0v+

Score
8/10

Malware Config

Signatures

  • Downloads MZ/PE file
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\934e01e5eebcf843a6556c5bde7b7404f199f999261d54c72c602bc65992b35d.exe
    "C:\Users\Admin\AppData\Local\Temp\934e01e5eebcf843a6556c5bde7b7404f199f999261d54c72c602bc65992b35d.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:1720

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    2KB

    MD5

    cf2d4188a25a5c257fdca470c909951f

    SHA1

    dffd0328fcbdf480cbcf972da4974072f0ffbc61

    SHA256

    6ae05afab2edf3ea9838f8717aeb19b3d13806b16acc039f70bb3d7407cba319

    SHA512

    e7acf09348501195ffff17a5e87dfaa738c53a27ac6035e04dbf0984da854c38b35965946c456e171e9fb155707e9721f99535d4132c3b465a8c472e1807f9cc

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    4KB

    MD5

    1f6d840dd8108f9cfd7e353e83324f32

    SHA1

    68404e341e6100e925019336274492f8d546a30a

    SHA256

    9c9223dadbe2436a39a3c29cfb62883590dd36ca41224e2c771181a6a60fd82c

    SHA512

    8f5376a789dce440f469327f0bbfb4f9757adbdde92060471afdd0db3b86f9bac5cbea95e38a47f56962aad9217f9d956ca760447d600f6f4824dfed91909e38

  • C:\Users\Admin\AppData\Roaming\Yandex\ui

    Filesize

    38B

    MD5

    21950b926fa1f4b12ec75b86981b3fc1

    SHA1

    967963bbfa3de7a118bdafc683f1f78dd1affb16

    SHA256

    d6b5708a53c2cd60554f8d6fef3f0c3e4d97f26fa16d9025f08cf89c148f9a14

    SHA512

    c52d7d745937ec60149ef0ba92d145c1d112fa615d543b61749df5ea2da3421ea5a51ae7769837ead71e3adb8c7082d401e8561521f0f922cb5806c5444b4847