Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    148s
  • max time network
    155s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230915-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
  • submitted
    04/10/2023, 20:07

General

  • Target

    82e87b1763cb6ca9d424d490ff203864c086d1e3ac107a836cd2894167c80026.exe

  • Size

    4.9MB

  • MD5

    87a5a74da37b2ef8b506dcf3e59ada8f

  • SHA1

    ca92a898de33745e899e655912e5bceb57ab3dbd

  • SHA256

    82e87b1763cb6ca9d424d490ff203864c086d1e3ac107a836cd2894167c80026

  • SHA512

    a81247d72cf08ebb188f789ed9d9c9a6cf123fee0472f436c83b2c415597c54f7ee507d6d2f15f1f94e4735e7e462a5cc395bce6ad66cb36c26c45936d20d332

  • SSDEEP

    98304:tTP0EZ36bjYOrtYtsRXIov2vRKdzOJDb4v+a:10EEYtaE8wN0v+a

Score
8/10

Malware Config

Signatures

  • Downloads MZ/PE file
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\82e87b1763cb6ca9d424d490ff203864c086d1e3ac107a836cd2894167c80026.exe
    "C:\Users\Admin\AppData\Local\Temp\82e87b1763cb6ca9d424d490ff203864c086d1e3ac107a836cd2894167c80026.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:888

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    1KB

    MD5

    93910ce1e0284fb2f5d42cb5653c5abf

    SHA1

    8585278ff5dd08381874983e32812ef79cadc862

    SHA256

    a58a3988e6590bbb3dcc8e3f79a7c1a17b4b8b79fe4c8a446e4a8778453e18ac

    SHA512

    e38bdfbcaa047dfca8685ab5996bdfa821dc52702acb1ffe1261b2e2f70aca83e1fca609215ae20900f198654102079048f48a72fa97dff8b57023bb5e483393

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    6KB

    MD5

    49eb77da916d317905170707cf52c4db

    SHA1

    156b4aabe456748109ede3d0d8d6f29bfc5368ce

    SHA256

    e913e136425ebe6dc798572505f773631678692e1011a6d556ffc64a088fae12

    SHA512

    5046a7cba9ab22aba2252d2f2ef321e36cfe7dabc0375356a014e2652f3be1abd93cfedee35bd6e93f0e4833cdf831a83ce96abef3ea15fedcc2b09688c13366

  • C:\Users\Admin\AppData\Roaming\Yandex\ui

    Filesize

    38B

    MD5

    eacdbc6615491654b7c31998ecc925f2

    SHA1

    f5196964008858ffe4e91235b756cdbf1448856e

    SHA256

    b2bf3692f24053b95fbe5272e37ccd3389a98f51c75e9ea7215f6b0c6d14e03a

    SHA512

    dcf4388ebfcc5f6fe861b2d0466829319608d35a1a3f71fb93c143518dce81162401ac07210fc7dfa25a4fb45d83ac152043fb33d219dc834a58222395c4aa27