Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

3

a2f2612da7...18.exe

windows7-x64

8

a2f2612da7...18.exe

windows10-2004-x64

8

Analysis

  • max time kernel
    118s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20230831-en
  • resource tags

    arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
  • submitted
    11/10/2023, 06:12

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    a2f2612da731822b703dd2ef6d6ac60c6b9929762ddddd8ae02f994e45607b18.exe

  • Size

    6.2MB

  • MD5

    0371424029fe6c4528d7fcda6b0eb7d9

  • SHA1

    3d035f63336b1dbc2323da79990b4e9ec13bdad2

  • SHA256

    a2f2612da731822b703dd2ef6d6ac60c6b9929762ddddd8ae02f994e45607b18

  • SHA512

    24b2685ccd9c32e5a57dfcd533725118105adda7a57f8d50ebc5e3c50361d925b0745f0b7f315ce9ade3591d4a6aaaa028830c51e3b809c73641971c60c398dd

  • SSDEEP

    98304:TwdXBZ2/5fbjORDfIOXo55uwHruHhuDloKdzOJDb4v+2h:ikALY5zruHmJwN0v+

Score
8/10

Malware Config

Signatures

  • Downloads MZ/PE file
  • Loads dropped DLL 2 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\a2f2612da731822b703dd2ef6d6ac60c6b9929762ddddd8ae02f994e45607b18.exe
    "C:\Users\Admin\AppData\Local\Temp\a2f2612da731822b703dd2ef6d6ac60c6b9929762ddddd8ae02f994e45607b18.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1076

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log
    Filesize

    1KB

    MD5

    b5695be44cd318b52c92ad79a7c9451e

    SHA1

    5ea0a86cbddc603874253516d59005b33e9dbba8

    SHA256

    622740111ce223b95bedecc0d9329c83e8e968363b9c60151880630829ff0c34

    SHA512

    1e183cfe0cc538e4daa8d25db7213bd5fc3af32ac957ce45d874e5374e528b36db71cbb74f30da8afca29c7b6dc364723b4e171bee39886cd555f2e5b9c97707

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log
    Filesize

    5KB

    MD5

    3542bf6fb3781ad0f44c178839af1b05

    SHA1

    89128925fdd51247e3c299acda88fb7f591a12e6

    SHA256

    d7a9be47ce5087072ca180e2871030f88127e2435520caf2b0c813115a18db52

    SHA512

    38b81cd1a9e7da0cb3d74cc67267ab1482bc6298e112edf5a5deecc6120304dbb57f22ecf8c2c37800f4dee708eb91b5a490427f122c0c8b1dfe0bc90eaa2af7

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log
    Filesize

    6KB

    MD5

    554ddc9c5894a72640956eb67cf0a1ce

    SHA1

    5ad165d6c3d633b59789c860c2b081c75a7819d4

    SHA256

    537844a2ebcf13cae4496abbb096cee44ce183a8fe2f875d7dac59481944129e

    SHA512

    f463115ed5d7f71759b65afda7202b9d824ccc4c7762232d85cebdd9e23d9ac15cf61ebcf88742fec2e9de4ae8965a0509d6de2dfb2e856564ca57ea2c21acd5

    Download Submit

  • C:\Users\Admin\AppData\Roaming\Yandex\ui
    Filesize

    38B

    MD5

    940b5aa3deb3c15ca3342aedc8a77672

    SHA1

    1071b2e6d20f416cc8252b9d4e661a6f840747f1

    SHA256

    4170482f3f0bc216c00c6c0ad466055512081ec948b030dcc29ab59658fec06b

    SHA512

    71628aff0ca442e5a4100660fa830877199c753226ad5eed5d193e7b240cd57d539a403ee43faa07060e2c06d04eee9a4e175bcd37201a0034bc49eb032e7917

    Download Submit

  • \Users\Admin\AppData\Local\Temp\yb8C96.tmp
    Filesize

    143.1MB

    MD5

    64ab3ce8df581e1e0dd5691d2e6248de

    SHA1

    ca1b4b7baf7a70393b257a0c552449af43c59d3a

    SHA256

    05065f7ecb1c7d2d85fadeb213663587830e297f5b19b3bb087189393fe25591

    SHA512

    5214e153ef0e40151ba9dc415f7d0fc043ed01db8aac62f1421d688f2315de3ff96cebfb921e1436a168abc7929f601a6cb042ac24bc982b22953ec4e59715ad

    Download Submit

  • \Users\Admin\AppData\Local\Temp\yb8C96.tmp
    Filesize

    143.1MB

    MD5

    64ab3ce8df581e1e0dd5691d2e6248de

    SHA1

    ca1b4b7baf7a70393b257a0c552449af43c59d3a

    SHA256

    05065f7ecb1c7d2d85fadeb213663587830e297f5b19b3bb087189393fe25591

    SHA512

    5214e153ef0e40151ba9dc415f7d0fc043ed01db8aac62f1421d688f2315de3ff96cebfb921e1436a168abc7929f601a6cb042ac24bc982b22953ec4e59715ad

    Download Submit