Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    142s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230831-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230831-enlocale:en-usos:windows10-2004-x64system
  • submitted
    03/09/2023, 17:37

General

  • Target

    ccc132e7ba2814b15014c92b771219ba2310aeb141c0b29bed115f3423803ae9.exe

  • Size

    3.7MB

  • MD5

    688b619aac203bb145188c421011bad5

  • SHA1

    d38d639c4c11b1963c06acb81281c1651691c3a0

  • SHA256

    ccc132e7ba2814b15014c92b771219ba2310aeb141c0b29bed115f3423803ae9

  • SHA512

    102496323e3760886052e3f9f27c35d2c65d7b2930a1cc684311261100c309c29a9a268bd49fc81f9e289aa7c60a697550ae0598b3c55f47f057de5b248cf753

  • SSDEEP

    49152:WhQ8lPzRnZp4y5C6mB0j4KTB+r5u8QeKxFOJxdb4vZKV8:SllLRnZp4yE6mdVKdzOJDb4v+8

Score
8/10

Malware Config

Signatures

  • Downloads MZ/PE file
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\ccc132e7ba2814b15014c92b771219ba2310aeb141c0b29bed115f3423803ae9.exe
    "C:\Users\Admin\AppData\Local\Temp\ccc132e7ba2814b15014c92b771219ba2310aeb141c0b29bed115f3423803ae9.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:3192

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    3KB

    MD5

    bf4d4bba5df0abc8fe041005b25fc917

    SHA1

    146474782a97e7c1fe2e82ce6932644cdaa2dea6

    SHA256

    c5973451a816c6215cc0ee42e26916c3f1ef912866a1be4bbc005cb8f20d432c

    SHA512

    0adc46bfad3d027712cc7ee13e81e83bf1a0d3d1c5639d7de37ae31426aa10874e92003860fa97aac950eab3fe382a267384a0d70f2fdd5b252a76eef56d3664

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    3KB

    MD5

    96155234ad55b23c8b5441248bc088b1

    SHA1

    a33914666a38e999a1a8a3150d3a6dbba8aabad7

    SHA256

    c000424c8a50229fb85c7dfe27a92e3f3d3c1aea10efa7bc0e4474693574fdd5

    SHA512

    9784949abc9fd307b3a681c4a6fe183ff9dd60a4ad2e88e8ffde9625a884428f17c341a696acfb8f8e1993921604c5f2a84f48ecda0d2822d3dae7bdd462c2f2

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    4KB

    MD5

    a67e79304c36a9fd7a0dcd0bdda43f47

    SHA1

    6486d15e1395db95086b16c46f00eebb9e031387

    SHA256

    a4561b5cdccc241917ba1727776286dc4a4dc3d021637c2825a2bad53c9f6129

    SHA512

    231d730da6e442036eff021d27a83a42fc37f843985afc3c78b5ab01f822e77d9876c054aa8ffb79d1d8d2be7848fd8aa3ccbf50eec33eff854736dba53e393a

  • C:\Users\Admin\AppData\Roaming\Yandex\ui

    Filesize

    38B

    MD5

    2034a8536a32f67b5e3632bb98d5968d

    SHA1

    48e534e55859f0b9fbf28a4ff2697a64b873d9fd

    SHA256

    cd071c7f1a5d1f0d0facd1089e5cee05b1ad70b37927f0be060e8c97ab7bcef1

    SHA512

    f5b7e8c17ed96519c21f23d6dd4cbdcf5073dde194c45c2b5c56ee6007eff97e2b179db4ea0c90b19909dd2c609c2191a9eed0702f440f4f33b3b8179f2e4a0c