Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    143s
  • max time network
    149s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230915-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
  • submitted
    03/10/2023, 23:48

General

  • Target

    fb26dd689e3d1135ee0ec75cc269796a99c71535f110ad285fb19c4ed41b5377.exe

  • Size

    4.1MB

  • MD5

    fb758a7a020ed86f366c54ed9ade22d9

  • SHA1

    00de8ea41531acde20b51fbe70e5b061c9784cd8

  • SHA256

    fb26dd689e3d1135ee0ec75cc269796a99c71535f110ad285fb19c4ed41b5377

  • SHA512

    27fd2c6844ee49cf9bfc323606a0a700e0b7f5a23df9242c762c20dcb2af4b9a313b2249b0cd4ccc93c872126b87cc9cc26d87e0e2bf20cb44a785077c7cc5db

  • SSDEEP

    49152:uJG1P05g+Wzi3n0txevRVyY+r5u8QeKxFOJxdb4vZKV:2G1c5g+Wm3n0tfKdzOJDb4v+

Score
8/10

Malware Config

Signatures

  • Downloads MZ/PE file
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\fb26dd689e3d1135ee0ec75cc269796a99c71535f110ad285fb19c4ed41b5377.exe
    "C:\Users\Admin\AppData\Local\Temp\fb26dd689e3d1135ee0ec75cc269796a99c71535f110ad285fb19c4ed41b5377.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:4680

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    4KB

    MD5

    bc5d2b2c3baf2638177ea16c9f0ec088

    SHA1

    2944a48610a39d1e056b00e09fbe2d52832ef246

    SHA256

    82b640d7ed94f7fa91887c98b016f61c11ac58fa9bf9dd70dce640ae6bdc9e3d

    SHA512

    571920b94744a73b003ce19908813750298c11a79e035ea83d6046e1f71530442bf4b02e0673f895259d776a4cc495942497ff9ab2af134f6d877f5053a13f7a

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    5KB

    MD5

    ae505e1cbbc7b53ccfbc00be1773a212

    SHA1

    9174f64f87a9bdafebb66b6c75fd6886a2c05ee1

    SHA256

    e098acae2df7d24d45d138d659d1002a4ddc99470d5eb23e5d8f0da00ee0714a

    SHA512

    c21755f25fd8eda213016f6ed7de0d06fdb35f4e1cd98305191b7b448023d516ee63750a1728703aea15db7d3a9eff3086d2e3dbf8db8219448f94b48fcbeb1d

  • C:\Users\Admin\AppData\Roaming\Yandex\ui

    Filesize

    38B

    MD5

    63aa0a717c1c1d21787854d8aa004aee

    SHA1

    b82b49ed26b16f386696cb049afb156f2c88eef5

    SHA256

    46634a965cee91dfe7b5f4bd0d138d366ccec75817c674fb76fa35c526d57520

    SHA512

    862ba05766367b7cec05194295925f6e32f9cba3c7c7573fda4e49b2a6a610709ad039eb86709d3ebc08f3d4dbe248be43202808ffb0e7a69bebe3b6ad3c7f17