Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    142s
  • max time network
    154s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230831-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230831-enlocale:en-usos:windows10-2004-x64system
  • submitted
    04/09/2023, 11:34

General

  • Target

    95231d0bb122a1fcb57e7b0da3a3525e147b4a4216927b0715e780277aa05177.exe

  • Size

    3.7MB

  • MD5

    67b2742b658a0e74d4c8e05bd28e8cad

  • SHA1

    11cf62276abf83bab0cc02566c6559dbeaea6183

  • SHA256

    95231d0bb122a1fcb57e7b0da3a3525e147b4a4216927b0715e780277aa05177

  • SHA512

    7c08bb2ed48ae9ece11a9794556e7a6e0b821622db74ff5dee6b4bbc5b37e17be1954f152074bbe0ba37db2598ed3d59abf4d6c7e2e68c557b39a91e60686713

  • SSDEEP

    49152:WhQ8lPzRnZp4y5C6mB0j4KTB+r5u8QeKxFOJxdb4vZKV8:SllLRnZp4yE6mdVKdzOJDb4v+8

Score
8/10

Malware Config

Signatures

  • Downloads MZ/PE file
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\95231d0bb122a1fcb57e7b0da3a3525e147b4a4216927b0715e780277aa05177.exe
    "C:\Users\Admin\AppData\Local\Temp\95231d0bb122a1fcb57e7b0da3a3525e147b4a4216927b0715e780277aa05177.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:4100

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    1KB

    MD5

    4a1c9c8620a7570688950873c95f5cee

    SHA1

    82b71f8fd45bcc5624b5b41220cf79c1449bd968

    SHA256

    f82e6cd0c979b774d87072088f2d178c9ebef8ff711d353d9345fea401b6c393

    SHA512

    e3d3d5019d2e568654f5986620e3c0b29295104ef0fa18384ff32fc0c406e2569f663d62e0864d9365fe8a4efcb435c2ed5203b7607f3510ffc2f29e1763e6ba

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    5KB

    MD5

    09ad8c7ed997f1dcbbbb76c8db987d8d

    SHA1

    bce421710d589f7657ddac0cb85b566cbcc7da0d

    SHA256

    06220a0b505b95e41bc8eed3ea43c4b931ca6babb5f5d21f8dee6c9b2e41d8e7

    SHA512

    bab397f2218c1b04bdfa13e4c19c192cdba9b1be8c520c4aab63a082f4eb929c1035f694c3dbbd48793163cc678891c4dc61965227352630ee37adfcebedf484

  • C:\Users\Admin\AppData\Roaming\Yandex\ui

    Filesize

    38B

    MD5

    cc9458d7d574722e05ec1685db77c522

    SHA1

    c862d12ab139e8ce6098d013f514d9ef17d9ccda

    SHA256

    cd759bbf179b40aed37c2358424e487cee5a3d559f427e290b9eb7530fa3a5bc

    SHA512

    6db91d3f608f71432dee40f25510d674302d573f73184ef5dc1eeb42e9ec728584fc6f3a3a7c16650cf6437bb1b0121a89516f26453e1d2484474531a8e841db