Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    141s
  • max time network
    146s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230915-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
  • submitted
    19/09/2023, 18:02

General

  • Target

    d307f9f341913d3dcd93f7140a209155e77eca1d9479265a8e1fa616cd0c08e9.exe

  • Size

    4.6MB

  • MD5

    4d08e51e39c96e9cd9d6735b8ed56b8b

  • SHA1

    6e840fc7d7ec4d226c342d021133e913bb64ce18

  • SHA256

    d307f9f341913d3dcd93f7140a209155e77eca1d9479265a8e1fa616cd0c08e9

  • SHA512

    98963d6c2d6c9e7811dbf264605232bd076c27fa6e1f20dc6b1cd797b6affcd7c8c804984e4241be891bd405d5769afce05f218f747b46e472f758835c57b2f4

  • SSDEEP

    98304:fcOxoa2orK2t+Gwo2xaWJWRzSKdzOJDb4v+:Tos2oWJWRzxwN0v+

Score
8/10

Malware Config

Signatures

  • Downloads MZ/PE file
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\d307f9f341913d3dcd93f7140a209155e77eca1d9479265a8e1fa616cd0c08e9.exe
    "C:\Users\Admin\AppData\Local\Temp\d307f9f341913d3dcd93f7140a209155e77eca1d9479265a8e1fa616cd0c08e9.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:32

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    1KB

    MD5

    4fe04b9ab404476760f538365fa3c8c9

    SHA1

    5130766a5ec6b6758715ac420cfefd5b505dd043

    SHA256

    bef9b676806315aa3bc633f8a69dff0e26b5f86158033a8184eb2f2e06a38fb7

    SHA512

    63d86efcc3887efa6637683298ff2706712705b2f2929f26dedfa6e791fe11280e81bebe22eb05d5d4a05172fb1164971222c9f0c401176d598bc2495f0cd79d

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    6KB

    MD5

    7a4bc7f355622102f2690d134adb08cd

    SHA1

    3220ab81763459c55590d1cc565ae7e479b31ddf

    SHA256

    91cd7b0685cb9290eb714d42f589ed514cc10bb1584bcefd3eb2e1193cedc0be

    SHA512

    da3fada4a312d48e5ef19900e9c29d6bb8de421e6acc79a4309a0e0c8577d04c7cba994504975225b0e5de3e4dbeee75d248229c02a56f5cc22405ed598f4318

  • C:\Users\Admin\AppData\Roaming\Yandex\ui

    Filesize

    38B

    MD5

    68109f86662ef01ce5e1554c6614855f

    SHA1

    27a8cdde2c11452e99a8a6b3e9abd87aa1c18fe1

    SHA256

    32772802e4dbc095c9da6d9effae3118fb2a3960eb59a1ed0dac3300d5544141

    SHA512

    14f8a5200fff20ceb30b6f92684c9e93f8ce687fc401c3cdf5b5e410dcc8df42745501c9370c618ddcf37e1a5bd5d50f23177430208b572c0df5cf789ff2b0cc