Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    146s
  • max time network
    152s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230915-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
  • submitted
    07/10/2023, 00:03

General

  • Target

    23e9d92db46c5aaceb0ed33c56c942e456cf0157df11c5b45124b1c4c6850562.exe

  • Size

    4.1MB

  • MD5

    a224fa977ad9fc5272e43b677f9c6aaa

  • SHA1

    8608722ce52dc9befbd4e71d9c558ba32c6d338d

  • SHA256

    23e9d92db46c5aaceb0ed33c56c942e456cf0157df11c5b45124b1c4c6850562

  • SHA512

    7f743f235e6cb8dcec634264f3160cd4fd7b307f7c359c3fc08fff4829ffde157eb436157fbf2e42b206a511e264c9db1a3acfa619f7fdaaccc2ed1f23d0a24e

  • SSDEEP

    49152:uJG1P05g+Wzi3n0txevRVyY+r5u8QeKxFOJxdb4vZKV:2G1c5g+Wm3n0tfKdzOJDb4v+

Score
8/10

Malware Config

Signatures

  • Downloads MZ/PE file
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\23e9d92db46c5aaceb0ed33c56c942e456cf0157df11c5b45124b1c4c6850562.exe
    "C:\Users\Admin\AppData\Local\Temp\23e9d92db46c5aaceb0ed33c56c942e456cf0157df11c5b45124b1c4c6850562.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:2144

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    1KB

    MD5

    e00f6fdfa716ee0ee55234f9eb061c34

    SHA1

    0f6c5acb96a553de69c4c8f19012432d57c653f9

    SHA256

    3199793b94577662308000cf0ca392b532a09d08b677aeadf2cfac12e446aa88

    SHA512

    4331c2f8bf1174fbcbd499bc1a916cb0a94281984d5df318b5f5b67cbe9a6a4a140d73ecad078a98dd15934cd3983f36f6cd4f113c59263a706bba193c71eef5

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    5KB

    MD5

    048c2cbe935506bbe53a00e5336162ed

    SHA1

    e7b48f47d82ddf99d078354b2f6f205e34d44b5c

    SHA256

    a856698986e441324fda9dfdeace8b2786cb897627284cc6a127b219fcf391f1

    SHA512

    291088e7a76964fe7fe527798cb1ea5dede702ef81720db6155a37d216bb2d23324a6355b0d184ce888fbc2fb35e63547a86063997cb5d40d183dac4308177ec

  • C:\Users\Admin\AppData\Roaming\Yandex\ui

    Filesize

    38B

    MD5

    3d988e4b3006fc15a0cbc2f39468c4ba

    SHA1

    7e4d42231dbc2dbb9a52268a864dbce8a1e233ae

    SHA256

    e4e0ccd1d8f2d2ece373145a2d4ee5e30e87c9a4f30a6f042acec89550e55577

    SHA512

    7263d8c3f5dc63c9563990fe018b34f6bec9635cf11895d9a86c0b12cd578742aabe180cb875a581588abf7ad521a5c66ce453e2985aaf5f546c243e0d840fdc