Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    174s
  • max time network
    182s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230915-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
  • submitted
    11/10/2023, 23:22

General

  • Target

    00f96fc974cf24b1cc959d71942b5028bfbbc64107bb12e5f87f54edf0c25559.exe

  • Size

    4.6MB

  • MD5

    81bd760725af8d1b8251d89e6cd42e9a

  • SHA1

    350a8d6be0624076eb7320601a043b62d3c8f44c

  • SHA256

    00f96fc974cf24b1cc959d71942b5028bfbbc64107bb12e5f87f54edf0c25559

  • SHA512

    96c60bd18be5513c13b88f342a6426c648ba75cdefdfd78bc12d3ef9454d00324f1ba7086bdbf9431bb99cf5085ec2e6ea05a51935b06d44eea938cfecaaba1d

  • SSDEEP

    98304:fcOxoa2orK2t+Gwo2xaWJWRzSKdzOJDb4v+:Tos2oWJWRzxwN0v+

Score
8/10

Malware Config

Signatures

  • Downloads MZ/PE file
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\00f96fc974cf24b1cc959d71942b5028bfbbc64107bb12e5f87f54edf0c25559.exe
    "C:\Users\Admin\AppData\Local\Temp\00f96fc974cf24b1cc959d71942b5028bfbbc64107bb12e5f87f54edf0c25559.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:812

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    1KB

    MD5

    908dee18ca10d5163e5f2fb28fed3305

    SHA1

    8bddbeafb0c34953e622697482cef62690074680

    SHA256

    aeb059d8356f7a522d5222cd9166ec844aa063d74eeeaafee6838f00b00115b7

    SHA512

    7b336a689f9ef02518e12087e5f8c00084f5220a369d1d4736ff29a093682ab7ad2ca94ed4239c16fa0fcafc7498d9d42517a7f3b24a20c776b4ae463d9f56b9

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    5KB

    MD5

    18746555402c4af31fad3be44f13c8c4

    SHA1

    f917f82ce3178bb9146e51724a1139b9f02754f6

    SHA256

    85dcc1db737fc808c14e84739d4d2ae8ce05ca64dbaa603c89d363961f486d69

    SHA512

    c48b1a4d802121f9ea97b16854466576320b71346e2b067d4dfa5bbcead9a2da0f7037c47648cc287b8cde3e1e9ab5dc01304bc1b80efbef9c16655c6f5e4919

  • C:\Users\Admin\AppData\Roaming\Yandex\ui

    Filesize

    38B

    MD5

    1a25d2023f8668c5dd07714986dcdc51

    SHA1

    2aa43a4be429681d47fb2c0502a9e5f60b23b2a4

    SHA256

    46c4a080edc278d89aa50b56d615b39f34e10d1a7a14e42aaeb7abcca2ef9704

    SHA512

    b402f79a3301d4742611e897d3e80fcd0aa77be91f06c74931810f855bb3ab6c70f9c72ff58702e4a7e33970cce6d793e49429a867e04452b304c66e27f34741