Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    142s
  • max time network
    150s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231025-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231025-enlocale:en-usos:windows10-2004-x64system
  • submitted
    14/11/2023, 18:46

General

  • Target

    07a34ca74bf172c1c8dca3b1e5cada30ae61d9f831a90fe8587552a4ca1a2b9d.exe

  • Size

    4.6MB

  • MD5

    a8537087808e529170804a8ae9c28919

  • SHA1

    cb58a0d4cd11537f7785d4e3ada74a8f52ad05bf

  • SHA256

    07a34ca74bf172c1c8dca3b1e5cada30ae61d9f831a90fe8587552a4ca1a2b9d

  • SHA512

    0b97ea97978aea73c2a45259212e6348ef96abf4e60537264f124a7db70a76943c1b87d6270340e2b685b0851040668ffee064c32b5748df982f198a1deb3b12

  • SSDEEP

    49152:Xub3nCuhEBygPHQK2FW99w6DvoVSY+r5u8QeKxFOJxdb4vZKVX:eb3CuhEcgYK2F+DzKdzOJDb4v+X

Score
8/10

Malware Config

Signatures

  • Downloads MZ/PE file
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\07a34ca74bf172c1c8dca3b1e5cada30ae61d9f831a90fe8587552a4ca1a2b9d.exe
    "C:\Users\Admin\AppData\Local\Temp\07a34ca74bf172c1c8dca3b1e5cada30ae61d9f831a90fe8587552a4ca1a2b9d.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:4460

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    6KB

    MD5

    5b009c3e31b48b1d72186c46dfff1098

    SHA1

    01bfbfc7a43e435898261a0982bd0436780b57d8

    SHA256

    5bee8111fe2841ea4f3f4eb8502f3a666f54a5474ac90ef00adfeb0f27490d0e

    SHA512

    0ed402e23e986808324910045e412d1493c217db41daae88d7b8b606efccb8bd0876a30aad195aa6dc7ee397540340c0a524f391dcdfb0a543d90dbf0320c7c6

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    7KB

    MD5

    937ca07c572dba59c466b5dd44329f30

    SHA1

    d14a6ecf0a2577d880e6092b71fadb01a2d6178b

    SHA256

    9641723c5ed242e50104926d9800d222548d72afdcb90ec19ea71e67e145e781

    SHA512

    9a70ec1eef2c054ad3e34f17a4076845384dcbc24cc94948f7b4f2851d258392d3a1b6e2f829f15c61dfc2d2102d1d41436b675d41c9b60b33366ac2180ed364

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    7KB

    MD5

    937ca07c572dba59c466b5dd44329f30

    SHA1

    d14a6ecf0a2577d880e6092b71fadb01a2d6178b

    SHA256

    9641723c5ed242e50104926d9800d222548d72afdcb90ec19ea71e67e145e781

    SHA512

    9a70ec1eef2c054ad3e34f17a4076845384dcbc24cc94948f7b4f2851d258392d3a1b6e2f829f15c61dfc2d2102d1d41436b675d41c9b60b33366ac2180ed364

  • C:\Users\Admin\AppData\Roaming\Yandex\ui

    Filesize

    38B

    MD5

    ad62916b15fe441b7aa83ef808c3bff9

    SHA1

    6e50ddb05ccd93c2a2b21ec394e556d916b6f933

    SHA256

    ee0deeb395f0588bf4664cdddd1c6e980773b0a37674dca76bdabd91832f19f4

    SHA512

    5aa5962e3fa905d2d38cb12a8615c9672a20575c6856c79ac2a6757db1f9b787bb9ab8731e70114543bffac01160fa280f4c67ae62fdf5b2e10b3da972a705f8