Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    138s
  • max time network
    145s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230915-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
  • submitted
    12/10/2023, 16:44

General

  • Target

    eeff2cc1b0601b504b0edc003c6bf5b541e6ee1129e0008710ecf14a5e23ca1f.exe

  • Size

    3.7MB

  • MD5

    84b6f0407d779ad2bc76bdd9620f206a

  • SHA1

    1a5b561f2b35f73983e487c06bc5d564a6d522db

  • SHA256

    eeff2cc1b0601b504b0edc003c6bf5b541e6ee1129e0008710ecf14a5e23ca1f

  • SHA512

    ea252bf11bfdfdc9bf43c4588df1d5f2d99bf6b70e21d1a4af77f4ed2f292b8344fab78221e967cf2f4061893801e7a1c3eef3c448edc4259102666563368f36

  • SSDEEP

    49152:iDCLomiK+15C6mBPtS3FpAB+r5u8QeKxFOJxdb4vZKVx6:cootK+1k6mLYKdzOJDb4v+x

Score
8/10

Malware Config

Signatures

  • Downloads MZ/PE file
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\eeff2cc1b0601b504b0edc003c6bf5b541e6ee1129e0008710ecf14a5e23ca1f.exe
    "C:\Users\Admin\AppData\Local\Temp\eeff2cc1b0601b504b0edc003c6bf5b541e6ee1129e0008710ecf14a5e23ca1f.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:1940

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    1KB

    MD5

    59f3defdd514b6c7dcf78182643aab83

    SHA1

    706e600361131ece75931b1edb8cebee88890f73

    SHA256

    1b64107e8c361a9d10c9ea4497359d5acea437be8dc360355c21a3322ab71d83

    SHA512

    be15b09f935b941cec2f0408b9383bea2326eccbfa53ec0d6debe2462d494c051c0e02c2f297330cd76bcbcf69f4b94e836399f47a7f55808d8e21dd4840f6ec

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    5KB

    MD5

    17d37f578de5a53a4b3dff6220055a25

    SHA1

    b05d0b796c3bf00044a7fb3551acff1094b12408

    SHA256

    e34099979b937b62cb9f619a4af503ef7b106e95df1f2e63bb0cca18cf3c5f34

    SHA512

    3c03ddf42bf4e6cdb4b71fe3605d3316f800b2a47a4796ed668964d3afbab569efc6533c24390fa630b7800dd6466866dce5208c13e9bd94fb7c5d92791de48b

  • C:\Users\Admin\AppData\Roaming\Yandex\ui

    Filesize

    38B

    MD5

    25a9c9aea05a11273ca7b72222dff850

    SHA1

    dc9cae0c8a498e76b21380f51e7291497b0e09c3

    SHA256

    33d9a34441ec058f4254c097c08d4ee4b3c02c67e6c4244fff3c4ff8f36c9e46

    SHA512

    cb1b01b5f505e1254589f2a17265a4c2e6b5a0ee2ee58e6e4e147f3573578aadc218ef36dcc1070349bf53bd1b81b47270e79821c8801eadcadbc60e0c42938e