Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

3

d4b928bd5f...f6.exe

windows7-x64

8

d4b928bd5f...f6.exe

windows10-2004-x64

8

Analysis

  • max time kernel
    151s
  • max time network
    157s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231020-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231020-enlocale:en-usos:windows10-2004-x64system
  • submitted
    28/10/2023, 18:31

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    d4b928bd5f66f4956427287c96a8d96c941dca139af388e8eca3c2d5f1733af6.exe

  • Size

    4.8MB

  • MD5

    45d69a3673f95b8fe96738c364b2d3d9

  • SHA1

    abdbfe0350b951ac98ccfcf7601272c5723a115f

  • SHA256

    d4b928bd5f66f4956427287c96a8d96c941dca139af388e8eca3c2d5f1733af6

  • SHA512

    2bf555ff3e7983e28e9b8c01b773bf4787e698981b5566958f351549a4d9a368c6a9e1fa15fe736cdd0145551146f00ce0549d01ff399317718e893cc01efe71

  • SSDEEP

    98304:7TVlYQiFIUueAAu2PkcCO3LUKdzOJDb4v+es:NlY02PkcFwN0v+es

Score
8/10

Malware Config

Signatures

  • Downloads MZ/PE file
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\d4b928bd5f66f4956427287c96a8d96c941dca139af388e8eca3c2d5f1733af6.exe
    "C:\Users\Admin\AppData\Local\Temp\d4b928bd5f66f4956427287c96a8d96c941dca139af388e8eca3c2d5f1733af6.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:2008

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log
    Filesize

    1KB

    MD5

    940fe7fa14b04986e8ef0dc697e42968

    SHA1

    05bc46eaf4ccd1648cb184106db8c59be21d7cfe

    SHA256

    092d13b0199d1740fbeb1a898f290a8c3cda9b4c849f4c1b84bcfa9b5736d5ad

    SHA512

    1c1ea4c3faf1022f0e3ade6eb776cc13d4df5527c4edaaf946adcd51b756a4b57cfd76d7d207377d863d438f105f431652d4c33e23877d2ef93f3c5554078a93

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log
    Filesize

    3KB

    MD5

    f842a44349a259d5b46f16aa6dedc57d

    SHA1

    091dad930cdb1b1aa188d3b4fffee3d2239fd326

    SHA256

    19bc9640f6e81bca8e8b0a4e0e5e81ddd2d8b97d6f6345f8e154b6a0ea10e10f

    SHA512

    6ec84d7e7937ccf205e366b9281ef633efb4d268ed0dba9e56ea65c90042c1e50cefead2d8fd2b64ef289fd3bf6356c2f2a380c9ab8ce568a406536206fed0ab

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log
    Filesize

    4KB

    MD5

    1e7e1df2d7e56a04dd88cce9582cfdd5

    SHA1

    70ba3a3129cc891e50fbf0cff1314dc764e01955

    SHA256

    e131a95d5d56bc0c910c216300f2af28af94ef9e900b12646ed899d838d004f2

    SHA512

    73f4797ca944e221f86de6f1cac67e9545d3c39bbac640b58ea90373af30d77bd62a3375db5d586d32a07ec4d299b37bcb6417bc0aad837d892f13822160a5b1

    Download Submit

  • C:\Users\Admin\AppData\Roaming\Yandex\ui
    Filesize

    38B

    MD5

    d8ae44a3726555176d823dc261e720ff

    SHA1

    c4c0b402e979c29403efdd3da20721db1fa642df

    SHA256

    4e0c388ccb3871ae4114f621bb86773fb6e4c683e7dee19fa955c35e1ed5ad9e

    SHA512

    d0fae2bea535ab92e3685ec9f0190c2430c7bbd36587c490479f81baaaef9b85b77c412d05f7302a0e25205f52b379198ced32b8abd3081205c6fd5fe69a6b00

    Download Submit