Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    142s
  • max time network
    154s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231020-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231020-enlocale:en-usos:windows10-2004-x64system
  • submitted
    24/10/2023, 14:32

General

  • Target

    67f7f30df104041392cb51eabf0570d3511bacce173a88a2a1ced61bb947c0a0.exe

  • Size

    4.8MB

  • MD5

    cb40b51c30ff365d1247dac437aed0b8

  • SHA1

    f16d8454ec703ea01acb0fc10c2dbf8ab263f86d

  • SHA256

    67f7f30df104041392cb51eabf0570d3511bacce173a88a2a1ced61bb947c0a0

  • SHA512

    9605c806c605a91efc33188485d7d7ff938a0955b350a436972190efbf370aaff4fde6031a19dc825f14ee1d666adc4a10e72fcde79fba44a18f064982cd60ff

  • SSDEEP

    98304:7TVlYQiFIUueAAu2PkcCO3LUKdzOJDb4v+es:NlY02PkcFwN0v+es

Score
8/10

Malware Config

Signatures

  • Downloads MZ/PE file
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\67f7f30df104041392cb51eabf0570d3511bacce173a88a2a1ced61bb947c0a0.exe
    "C:\Users\Admin\AppData\Local\Temp\67f7f30df104041392cb51eabf0570d3511bacce173a88a2a1ced61bb947c0a0.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:764

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    1KB

    MD5

    6a0b3af172d980d6f95d9638fb9b3c21

    SHA1

    c28e6d7135c51f36de3f62737d018833bd1cca39

    SHA256

    eb4d42c81a9aff18a633d5c751f1a24461a7fabda872d7e8c1a5b3089a548127

    SHA512

    d56819d3e9fa9f39b9e15de63035588ea65eaf95e870b68f66d688be3aca4b742724c7b3b142fce116571ec6b676911404d3b4442ea271270243bb442912f51c

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    3KB

    MD5

    64cd3f630a9d67c715e15db8b7abd89c

    SHA1

    33f7928b89095a113147db226634511758449965

    SHA256

    f5913f37193005ee121f086c1cd310962ba3b9bebbe5e9518eb83ebda9d543f9

    SHA512

    24a2f2a0365dc9cfa7b90eeafc3e4451f4adbea8bb535cfde39b0d8f6f0a39f77d1097df593a807115ca3315bca8401245ffe3645d59a3a74824c6ad5e2bf351

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    7KB

    MD5

    9d9fd0382c26222781624a7127ca43cf

    SHA1

    ba3ecd50de3e91166178edd48535efe989893d28

    SHA256

    fda760618ce87ba346b68db3e50a3bc5500703c319bee9d39516d2b639e46746

    SHA512

    9e1546902e777ae45d2c023549a46a66055e610d52d926254ebb6f8502b1eacf934966a0155d0dfe2506443b227c0cd39dbea315a0f67346394c8f1582787fe0

  • C:\Users\Admin\AppData\Roaming\Yandex\ui

    Filesize

    38B

    MD5

    fb7d63926c132f21d91018aba1056933

    SHA1

    c55cd45944c15f952da6bf3c0eba52ec0bdae362

    SHA256

    9f6e305d6bd3be6e728364f5addfee1d6fe08bbcc2e00acd65120e5436a3315d

    SHA512

    4ec1b8dcd8715ca6184d5ec635d375c371dc4843fd694a5ace0fb48a101469161a9183e1d7fce6726297adc21ec3dd08e70bb4019757248d81d73d397aa2df61