Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    144s
  • max time network
    157s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231020-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231020-enlocale:en-usos:windows10-2004-x64system
  • submitted
    12/11/2023, 16:46

General

  • Target

    5b787156be4d5f3a968c812da8688154a2704ca77f23b4dcf754ee1c35911380.exe

  • Size

    4.0MB

  • MD5

    3b034c30a55762709d6bf80c1a5cb1b8

  • SHA1

    11752e47e87e3044711571084710b2821f06e90b

  • SHA256

    5b787156be4d5f3a968c812da8688154a2704ca77f23b4dcf754ee1c35911380

  • SHA512

    2d621d8f9019bfb9c5abc5d78999b0d5abb03a41a0a1803987919f575d62dd027ac241e80e51a469b01936ed236b1c13cf9c50efb9a802f74bd883e87549e60b

  • SSDEEP

    49152:6ub3nCuhEBygPHQK2FWK9w8Y+r5u8QeKxFOJxdb4vZKVx:hb3CuhEcgYK2FhKdzOJDb4v+x

Score
8/10

Malware Config

Signatures

  • Downloads MZ/PE file
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\5b787156be4d5f3a968c812da8688154a2704ca77f23b4dcf754ee1c35911380.exe
    "C:\Users\Admin\AppData\Local\Temp\5b787156be4d5f3a968c812da8688154a2704ca77f23b4dcf754ee1c35911380.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:2204

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    5KB

    MD5

    1c7274b237e79e5917b4c644f7da20ce

    SHA1

    88236f9a64acf5cfe30d35d551d4929479aabc0a

    SHA256

    43d558afef6c06c8dc416d1c5bdd3f77d151db3c9751a4bc9b1157a32d35b518

    SHA512

    ec7cae90c20c7a7f3eb631acb9c2ac8a2b4b5d47099448ecb1a715be0e9bf700a1309207668eac18c254b3143974621474fae4f9fb8711e9f3b61d13c1e7e2e2

  • C:\Users\Admin\AppData\Roaming\Yandex\ui

    Filesize

    38B

    MD5

    d51c3908a75818d2b18b200d8bfa4e6d

    SHA1

    6cfe3185d7266cd355218431dbb5b96b0db45826

    SHA256

    0810cc05ff3db8abd17d5e7b985a23e5ca08e9f91909e0d68d6880f7d60ef9e1

    SHA512

    a40ceb36dea77a42d58b13c985c39ff568b0ced50889ae02397655d78f567abeaf5eceaa106d7583daea0611df34584f1db6710abcbfddd2110f37fddbbe3199