Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    142s
  • max time network
    147s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230915-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
  • submitted
    06/10/2023, 22:55

General

  • Target

    90248c221d60146a78d753ea9265e766c8f6a7a491b34e3f81a486c81f86a5b8.exe

  • Size

    4.6MB

  • MD5

    53fee56097a94af10246c1dad2f49fc7

  • SHA1

    bd953b08c411c7d96f12d5b7e76f3bd17f4e9923

  • SHA256

    90248c221d60146a78d753ea9265e766c8f6a7a491b34e3f81a486c81f86a5b8

  • SHA512

    97d78da5551193172ee9128feef74cb35f315cc73ab3875b6aded4d3bfe4eed65e1a039fec295f7877b90cb034638a8b8a5525f1b2667c8fb151a3402e8f76c0

  • SSDEEP

    98304:IG1c5g+Wm3n0tzGoFrnoNspKdzOJDb4v+:UgjGoFrn4wN0v+

Score
8/10

Malware Config

Signatures

  • Downloads MZ/PE file
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\90248c221d60146a78d753ea9265e766c8f6a7a491b34e3f81a486c81f86a5b8.exe
    "C:\Users\Admin\AppData\Local\Temp\90248c221d60146a78d753ea9265e766c8f6a7a491b34e3f81a486c81f86a5b8.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:800

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    2KB

    MD5

    76573cd0ecbbc1177e9ec6bf24f06146

    SHA1

    7eef7ba326cfdd549fad828f561ec37a30d8753f

    SHA256

    0931eb836cd7f490ed9f7f4954f92037ffe2c42786334c9d5e7b825db2bea4c4

    SHA512

    fb2aa81d0516a35f47652d67adb177db98bf1e9172ef0d2184fb4fc0dd34be860544541eaeb39eb055a3ef5e572edc37957335e0cb025d32d7a14d47123d1504

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    6KB

    MD5

    5adc13c0a8bcc2b4bbe70c522dd1ae2c

    SHA1

    25be85f3fe6e2c8e1c56bb96b10c368fe23bb11f

    SHA256

    7554a9704a7ec613d2edfd97cf9c4db252f548960dfc3112a3fe34287036ce3f

    SHA512

    111c6eb98efe9445206eace6b28600584d7fe6edfcf66e8cee2af70a078c85d675fb5532c9067545dd4b265f7709830dbe575f8ba0ac4b70e6668244564d8440

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    6KB

    MD5

    59fdb5f726f97529aa90aeec6c6c152f

    SHA1

    bc6c566dbe46f5c2054fec81bc01d985886e1708

    SHA256

    286cc64db64c314c43a1cbba63ab914ec526efa7dba8ff4954e9be7c6d823d9c

    SHA512

    7e6f4f38aecfe49d24838f528f535d86810ed52261345aa158e6c751a1431f23ceb37d19489164975bea27c538c483627854ff6872784e0a4703134106af782a

  • C:\Users\Admin\AppData\Roaming\Yandex\ui

    Filesize

    38B

    MD5

    50a5b4447abfa0c0154ba02c5cadc2ba

    SHA1

    2e0cfdf560ac06a7be3c879823ac51a3240b79fd

    SHA256

    26bd6c48515512eae9d945ba6448b52bff9ec3592f3378a8dae1f5d15ae0dde9

    SHA512

    834966bec6ee1318b8b815e0b0387faadd937bfe6346cac9f62032f19765815d1922d65dd971db164ad5c137da87378ede3d03c3016f2757294b0d0a0908444a