Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    141s
  • max time network
    148s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230915-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
  • submitted
    13/10/2023, 17:10

General

  • Target

    88b2815a525f0f3004fd9eeb0f0dc0c127fe77600c09e41693566a03b3903d95.exe

  • Size

    4.6MB

  • MD5

    dd64e359c4fa21905acaab47d6e883e8

  • SHA1

    10e0477c586d3d9e49ec20a3893f33a21b25f66b

  • SHA256

    88b2815a525f0f3004fd9eeb0f0dc0c127fe77600c09e41693566a03b3903d95

  • SHA512

    f64b639a61b17f440ef3edd721ac9e7836746c6b9057c9919e07c2884de2f6f498c6f5e54a6c1ae50630a38d73760040ce54e144c7505c1aed3b4e368d74987e

  • SSDEEP

    49152:NDnaVVMzMvkMUzM3n5x/fJ+OeJWLmVrY+r5u8QeKxFOJxdb4vZKV:taVizMvkMUg3n5xLmVnKdzOJDb4v+

Score
8/10

Malware Config

Signatures

  • Downloads MZ/PE file
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\88b2815a525f0f3004fd9eeb0f0dc0c127fe77600c09e41693566a03b3903d95.exe
    "C:\Users\Admin\AppData\Local\Temp\88b2815a525f0f3004fd9eeb0f0dc0c127fe77600c09e41693566a03b3903d95.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:1504

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    1KB

    MD5

    de189ba4f47c162b4ce353e1189e7319

    SHA1

    67bf5e5437ac574d0d3dc3528a276d3d974b9204

    SHA256

    e7c51e22f85c1522e7c1ef7de78b323b88c98d55b57a35cfaab3dfb348c9134a

    SHA512

    6a7013b93bff48868b92c99db6ef60fe468adcfa01448909164079fcb64a47ef86a68ee322c83cacac52b78e0cef080f6d2e0a1de7ed38f5a1bd53652cf56ea7

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    6KB

    MD5

    2a3675263921ce3097967443f9f5fab2

    SHA1

    0aa9ed85179a7024f909e9ebf72e7cf4af63673d

    SHA256

    7f518a374c4a9f25b1b88b4e3469a459124cc9671b567ccc9c5338a6e248a341

    SHA512

    8c0c2fbd79cf8aa092df036fe6642d9131a50a643b9a44beec7c207bdb9d9c8957cb33b7c1eb071dee6a37b428ac190e51739c7c5247196e1de19c0e77f94a60

  • C:\Users\Admin\AppData\Roaming\Yandex\ui

    Filesize

    38B

    MD5

    41e8245da1965d1dd394711640608a0e

    SHA1

    b30703c8bd3ac82f08ddf3253fa6ce1aa8717523

    SHA256

    6d737e390189eb65c677e4b4cce893dff97592f2adfa70bbed7b70f97a9221f9

    SHA512

    022abe1480a71a966bc172e9bf58e2584b88f753287b81b399a55bc143cd05f697d5195c70f562814bf8bcca126bb5d153735798c275dfc03096629d8a8a468b