Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    127s
  • max time network
    138s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231020-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231020-enlocale:en-usos:windows10-2004-x64system
  • submitted
    30/10/2023, 12:29

General

  • Target

    6a43e61d45db8b1608a2d51dc99a824fa15666dda7274e53d04d81fcfce645e8.exe

  • Size

    4.8MB

  • MD5

    db12ad4b9b13d0222d7edbf20023735b

  • SHA1

    c76a13029399a1a1dfa18f688d3802a429f0af62

  • SHA256

    6a43e61d45db8b1608a2d51dc99a824fa15666dda7274e53d04d81fcfce645e8

  • SHA512

    a7611f5a383a11201a4a2c16bd48808593a95683a7e97bc4e6ce899b6ded5ffa129645c600728d41b6b6b5f1cb9f5c5d916ff50d92fd8ba16cc4b91285302d45

  • SSDEEP

    98304:7TVlYQiFIUueAAu2PkcCO3LUKdzOJDb4v+es:NlY02PkcFwN0v+es

Score
8/10

Malware Config

Signatures

  • Downloads MZ/PE file
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\6a43e61d45db8b1608a2d51dc99a824fa15666dda7274e53d04d81fcfce645e8.exe
    "C:\Users\Admin\AppData\Local\Temp\6a43e61d45db8b1608a2d51dc99a824fa15666dda7274e53d04d81fcfce645e8.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:228

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    3KB

    MD5

    6e0fa8ae1c34aea1aad39afcc09ced46

    SHA1

    59970430086fcb35109ee05bb52271ed5e710beb

    SHA256

    bc0c8f54537180d2d94434d140f93a623995946e1630a1a0adbd469e8bce0bb2

    SHA512

    69e3fe643fa19b2ce20733987a5bf161568e95659c1f5833593b9816b9a55151978dcfec046252fd839bd122ea976496364862054a4400024ec5047eb618cdf2

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    7KB

    MD5

    40a3ca4e73d60a0344fca4da0abdae93

    SHA1

    5579019e02a5a6ff0938eda132e96040f2215916

    SHA256

    bcc3a5aec9b5f12fe0dfd588c1801c3ac66238be3b35409ae99281d13a319305

    SHA512

    b9b037cd4691095460865f0785849aa5e3cfec084cf9af4079866c77736bc9a3920e6a1547b9b51559789630cd019519d0cb00b84306576c01703b1e1ab2cded

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    7KB

    MD5

    40a3ca4e73d60a0344fca4da0abdae93

    SHA1

    5579019e02a5a6ff0938eda132e96040f2215916

    SHA256

    bcc3a5aec9b5f12fe0dfd588c1801c3ac66238be3b35409ae99281d13a319305

    SHA512

    b9b037cd4691095460865f0785849aa5e3cfec084cf9af4079866c77736bc9a3920e6a1547b9b51559789630cd019519d0cb00b84306576c01703b1e1ab2cded

  • C:\Users\Admin\AppData\Roaming\Yandex\ui

    Filesize

    38B

    MD5

    891282f3a7cb5bc88eeb7da16d3c4d7a

    SHA1

    9ead3c946c32983f422937861f35aa9a9f0fedf8

    SHA256

    bbb4c2416eec146a369ca8f7b2607d8792568f40d33910ddf5fafd967056137b

    SHA512

    dcb274639b42289d59f4b7df741d54b4c4e63cbc0707fd28ba7b764c5cc0066651315530e80dd082d7b58feedd39f358ede0b2d5d18b14ea7d818f5d7fd5ca50