Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    126s
  • max time network
    155s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230915-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
  • submitted
    21/09/2023, 05:28

General

  • Target

    f32be7280d49f2c195e5c21c47bc2e58f7ce2124e758f9c15646b3cce09e4ef9.exe

  • Size

    4.0MB

  • MD5

    c95ef09b8c394712d0717d9f22c5f02b

  • SHA1

    983b2d29a43bedcd6d647bed273d40fd20057f7f

  • SHA256

    f32be7280d49f2c195e5c21c47bc2e58f7ce2124e758f9c15646b3cce09e4ef9

  • SHA512

    28f70ee5b3d9ed394efa04f75362f5551940ea6a78ea6d5343892929007290008c35831312645f07f79ccb4a1216bcd5746409777107915c92975c05c75d2761

  • SSDEEP

    49152:40N3IpkodZfdlTXKnB3nZdXarY+r5u8QeKxFOJxdb4vZKV:Z3IfZfdJXKB3nZd+KdzOJDb4v+

Score
8/10

Malware Config

Signatures

  • Downloads MZ/PE file
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\f32be7280d49f2c195e5c21c47bc2e58f7ce2124e758f9c15646b3cce09e4ef9.exe
    "C:\Users\Admin\AppData\Local\Temp\f32be7280d49f2c195e5c21c47bc2e58f7ce2124e758f9c15646b3cce09e4ef9.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:2168

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    3KB

    MD5

    19d37dc5800b5177e2fd44b51598a4e8

    SHA1

    eb32ce4b328b54c68175639a551ebb116ce826f9

    SHA256

    f01d1f1505c94f9ddd4d0c80360bd1c90f8ffef5400af0a8462d2bb2aeafeae0

    SHA512

    6335c02c35283f573a72debfb2bcdb19ee2b20acc7be86e5831d20a077f04fefd08e8b40457a39130f96a30cbab439009707d588e94c91b8786939bf3f459054

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    3KB

    MD5

    ab0df3b7a7776986f4383efd2d0178f6

    SHA1

    da2bde1f4a524312bda100a682261b1787a40d6a

    SHA256

    0d673ef255ee222d8c662c94574bbdb10f5a4025426c05c94b51f98b5e3606bb

    SHA512

    5b35aa91169c92cef9540cc6c820020d4d9b67abffc0c837fea4b331adbe3061ad660f67a479d4dfb5c697d823b297e817bd9ef0c2bac9ede363682efcf66a06

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    5KB

    MD5

    7e6e1a4d3da07e3b9ce1b0bd3bfe83e6

    SHA1

    2b37e3eaac659d9f05db4d43f00537d0e4263428

    SHA256

    5feefe819b41fe60dbf28e6256f86e09de1145f67fac5b7e370749e2bec39366

    SHA512

    8b94df8ec253c4133e1e4f2326abc000b430285c9b8a2c7687832ec9e64d56fabec21e0d2f7a805439cf6c7327eeadaa17424be49cae84ed6d0d99fe3acd3621

  • C:\Users\Admin\AppData\Roaming\Yandex\ui

    Filesize

    38B

    MD5

    484305e8d140d3501bbbd3fb3b20cf99

    SHA1

    abb8009f58dbbf41c792c68c01e05910a37c6699

    SHA256

    8c65c9f6141ce7d9f57783b8bb1a7f60361ec1acd7cccb79fc37ecb6cca92a1f

    SHA512

    3b0b10f6c494b7ea4fea58c91453ed5d5c73543a8b6732113a621636aee0d1141f603d5108c43fc64c233c9b24f1d8a5125f022392a69126ac18dd12c96e5858