Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    142s
  • max time network
    150s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230703-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system
  • submitted
    29/08/2023, 14:18

General

  • Target

    8dc6e0959190d3402bd994f9c575e836401d41437a757c931c7c389c66a83ebf.exe

  • Size

    3.7MB

  • MD5

    8cbbe99b38ba7afe9ca01f8daf6c4928

  • SHA1

    82a9825365d1ae31408d950d5b04d0d8091878aa

  • SHA256

    8dc6e0959190d3402bd994f9c575e836401d41437a757c931c7c389c66a83ebf

  • SHA512

    8a10933f124d61f2930dcb8d2f4f4f6d231ee69bce72cc9b7b7b540cfda8ba9d1490c975535d4f0306fd823e2b225e514ba57f39a369aa9a3e16d94c103b7322

  • SSDEEP

    49152:WhQ8lPzRnZp4y5C6mB0j4KTB+r5u8QeKxFOJxdb4vZKV8:SllLRnZp4yE6mdVKdzOJDb4v+8

Score
8/10

Malware Config

Signatures

  • Downloads MZ/PE file
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\8dc6e0959190d3402bd994f9c575e836401d41437a757c931c7c389c66a83ebf.exe
    "C:\Users\Admin\AppData\Local\Temp\8dc6e0959190d3402bd994f9c575e836401d41437a757c931c7c389c66a83ebf.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:2948

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    2KB

    MD5

    3fb1eb0a997c0df18dca190d484588ce

    SHA1

    53e01480a14cb6e24d686a1b09347350a4da489c

    SHA256

    1cbeba575de741ba7681f3f22c1ba85ee686984d3cb0b546a567943c59a8531e

    SHA512

    8a8187631b93c1a188b8754da2cb0a4883642f140ce93c2a7300dd31cf8e4a17ced4910911816dd13f557f0b57234b7ec165c2c1df1ad2d27311dc8be1bc9436

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    5KB

    MD5

    619fc115b83765403e9f61ff8d1fc701

    SHA1

    d3d52bfeaae64b0bbe90b9f24c4621d9d27dfe31

    SHA256

    d0efad2c1fdd1875e48f1e6f8666b1665226e9ac7802056592ded3086eb8a0ad

    SHA512

    ed1351b2c6502438434f3d2acfce80129b7f4a135aa15ae6fe992d1ba1d28b86f9c87429b087a919d674339e835afc477d1b8c7cbbc2aed34e5bc5161bf6bfff

  • C:\Users\Admin\AppData\Roaming\Yandex\ui

    Filesize

    38B

    MD5

    31eb78021964cd412382d4ad32ad0110

    SHA1

    9d6662a5bed4867276b02befaaccdd176ac8a24c

    SHA256

    5b0d8c11d63479aa958de157a1892b99f3a37226adeeb9be8fa6ab720b4bc055

    SHA512

    47df4358d14747f0b49404040f042b87665acb173e239121bd0d3b72fa0092fb32ae221e0557cf6f47f9e95e9b66bae69f1ae07c05db39595e446d0d2bb801e0