Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    138s
  • max time network
    147s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230915-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
  • submitted
    12/10/2023, 15:51

General

  • Target

    321e2219c474298815d3c38561e644b18635b1df8086a81ebe46a97ab75349e8.exe

  • Size

    3.8MB

  • MD5

    6234ea5f0f8930440d7e970707f128d5

  • SHA1

    c4d260306a8539a949828bd19683df6442895797

  • SHA256

    321e2219c474298815d3c38561e644b18635b1df8086a81ebe46a97ab75349e8

  • SHA512

    6bf547fe98a8dbe3882f59275fca26a8379792a9e8b827f0cfbdce9d5342747adc729708aaf5462f3b1fe4c725240faac24ce8f172d0ebdfa1a04fae224ec045

  • SSDEEP

    49152:PyOjNMqkoakIOoq6K2t+GbzwIUFpzB+r5u8QeKxFOJxdb4vZKV:qcOxoa2orK2t+GwiKdzOJDb4v+

Score
8/10

Malware Config

Signatures

  • Downloads MZ/PE file
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\321e2219c474298815d3c38561e644b18635b1df8086a81ebe46a97ab75349e8.exe
    "C:\Users\Admin\AppData\Local\Temp\321e2219c474298815d3c38561e644b18635b1df8086a81ebe46a97ab75349e8.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:4928

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    1KB

    MD5

    dfa44a09e4fbc8eb8f3d4fa399f1cff1

    SHA1

    81b1fc138fe30346a5d3f602d55cb6b7b5d84418

    SHA256

    09404f5f3c733b687869e79372259ccf6ca55c39093d8f8ec14bd7d73778de9e

    SHA512

    3f848f7d70100f4f0985f413e2132dc291c752cc7cd30e486827e497ec60c088f85d92064a66afef84d087a822eb974e2c9f427546071a321d11529732b969ba

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    5KB

    MD5

    1b84f29ab36923f715c1a7c1394c8697

    SHA1

    f4e378bfe143b23b89c057191506d942e61b111e

    SHA256

    089f76b9e66da087e31f35f3993dadeebefbe11426e1433706535c5d4eab2b3a

    SHA512

    9d32d088368e6bb43cf0c8c6feb9934153c6f88e236c36c8d9d31a0c5c6c394c333c1cd662d98949aab52cb0f32ac1d186451c46e67861ec2d970453d3e6554a

  • C:\Users\Admin\AppData\Roaming\Yandex\ui

    Filesize

    38B

    MD5

    587629c7de7c92e9f65fa5fb16e3f886

    SHA1

    5787bde36a304dd85cad297a9053c348520512b4

    SHA256

    6f6a2114f1555756d8d360f1202c422739b3e2f83bb4bdc2365f74e8112cc258

    SHA512

    9c7c014d5f9cc5e7b5859b4a7b05e65c08b13283ae30379acaea6d65cf9851d9bc921541d66b21039cda0794a32316cdc3e7b90a9a72efb4583f241718b08490