Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    119s
  • max time network
    126s
  • platform
    windows7_x64
  • resource
    win7-20230831-en
  • resource tags

    arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
  • submitted
    11/10/2023, 05:27

General

  • Target

    a758d858c7c169cb44934c30f0aac54df87d54150656f7a029fa927d66d82d55.exe

  • Size

    4.6MB

  • MD5

    83f80683ad5861f91ee9153302463c89

  • SHA1

    0d1cb5700bd1ce32a2269f152bcb3548a7a9cdca

  • SHA256

    a758d858c7c169cb44934c30f0aac54df87d54150656f7a029fa927d66d82d55

  • SHA512

    9db7b107f49fd33e1cf6522d0ee59ed4fc51b00f321f9f8749755496400bd2e1570c2dd1777d7351e8d8e506732019ea002613a14e41a4f415cf1c9acf279597

  • SSDEEP

    98304:WG1c5g+Wm3n0tQLCcvITqy9KdzOJDb4v+:KgALCoITqzwN0v+

Score
8/10

Malware Config

Signatures

  • Downloads MZ/PE file
  • Loads dropped DLL 2 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\a758d858c7c169cb44934c30f0aac54df87d54150656f7a029fa927d66d82d55.exe
    "C:\Users\Admin\AppData\Local\Temp\a758d858c7c169cb44934c30f0aac54df87d54150656f7a029fa927d66d82d55.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2416

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    1KB

    MD5

    0aa61aa59cf7b9e31d1be2f260475eaa

    SHA1

    e609eb61256f90ff6657d98279bee262745e53f6

    SHA256

    fe495d662ba722ec1597174a5723d5200f53c2c5fe6685157827c4a3813ec26d

    SHA512

    5e0fe89ba22bf0de7aeaea4784d669e9b2c68742dd429e7831725cb454201bd15031c535d573be822ddb59f99cd4323936aacbb0486eb43b937acdcfbd00268a

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    3KB

    MD5

    cb534192166c13fe70e242a9cacba534

    SHA1

    353410e30f47d2a7a9349df2880d4da43f5fabc0

    SHA256

    974a090fab571cce3abf391e36ff8ab5ae053c89814bb422eeaf5f02cc4cfc5b

    SHA512

    775643f2177d5d89dbd3e10d4236a2ae9abd5491b4cad55fd4173aa729b85beb9965088d234793cf38a781fceef8ec59cc493438b8fbed5a5dd00c065f0750d0

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    8KB

    MD5

    d1626f6c2f617d96802294c9dbf5e18d

    SHA1

    a2b0f5589651d71c2e741f695938b0ed34eae5d8

    SHA256

    2c9fbdd71f635076931a0851a49b68d8e37ef53d24de3cc54d4b8a3c0542b434

    SHA512

    df57a8d630265fc6645773b35d188fc2397e5e404664cce16d9fa2392c22920337b7eab64810be416a29c78fb9215a04bcb72199883d8ec3038f16b994eca65a

  • C:\Users\Admin\AppData\Roaming\Yandex\ui

    Filesize

    38B

    MD5

    52a5750a6c8b2c5d772e5b86abe045a5

    SHA1

    51a34c0ac78d69d3ca30d41fc1daefe48958b7a0

    SHA256

    ab7fe5545e5844a6ed597593c61ef54953277caca06c72d339f09f4b387b25d3

    SHA512

    ca3172aa03711384b9a4d79319c05850af96b7360c0fd60ae7b31c53c3f7c3450c6f69f97d225d6dc5dded0ba8f7c99ce00b5ca578b55b49491b45f3756f2ffd

  • \Users\Admin\AppData\Local\Temp\yb6E9B.tmp

    Filesize

    140.4MB

    MD5

    4cb143fdad968165c2dbe48ba8950bb1

    SHA1

    cb0faa0650fba759a596663382cc6692dd8a727a

    SHA256

    4daab0bcf0af280b939c6b52df6d7b98bdad5d062b65fc4318e44f948f43103c

    SHA512

    a6613467737f9ad3a554a97e71053451eac5ba966550708b77b4b1ae1a0c1aab1845ff94563701a1ff1cad27cfef59d8f733838871d139c4599ae72a104ea821

  • \Users\Admin\AppData\Local\Temp\yb6E9B.tmp

    Filesize

    140.4MB

    MD5

    4cb143fdad968165c2dbe48ba8950bb1

    SHA1

    cb0faa0650fba759a596663382cc6692dd8a727a

    SHA256

    4daab0bcf0af280b939c6b52df6d7b98bdad5d062b65fc4318e44f948f43103c

    SHA512

    a6613467737f9ad3a554a97e71053451eac5ba966550708b77b4b1ae1a0c1aab1845ff94563701a1ff1cad27cfef59d8f733838871d139c4599ae72a104ea821