Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    138s
  • max time network
    146s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231023-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231023-enlocale:en-usos:windows10-2004-x64system
  • submitted
    16/11/2023, 19:57

General

  • Target

    5927c2898ee1890537d880f35694387c909746580297f69afe0ddecf08c7ca11.exe

  • Size

    4.7MB

  • MD5

    8cdc0a799d86d74e0779963f6f3cd2a7

  • SHA1

    f4a4a7d0a70dc937c61ab637f8f88bba88607b13

  • SHA256

    5927c2898ee1890537d880f35694387c909746580297f69afe0ddecf08c7ca11

  • SHA512

    6cbba3e59442e5504a4f5e0628fd8bdd7e04bc38f6b0219e273bd15d8a26b9019ceb74c906b843772e21ee521a9022d3518b6cde53a1c0c1349c762aa247c39e

  • SSDEEP

    98304:y2XeHdZChmK2dkvDzF2CLcKdzOJDb4v+f:edZybPLwN0v+f

Score
8/10

Malware Config

Signatures

  • Downloads MZ/PE file
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\5927c2898ee1890537d880f35694387c909746580297f69afe0ddecf08c7ca11.exe
    "C:\Users\Admin\AppData\Local\Temp\5927c2898ee1890537d880f35694387c909746580297f69afe0ddecf08c7ca11.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:4924

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    1KB

    MD5

    32f32b5196d33030faf0ee3a306ee608

    SHA1

    8f22ce27e95709a89b910111e72b431b24698876

    SHA256

    9c6cca4d35b548054860ae327a1c5bcc6c86d304757118c1d0f5157903aa0631

    SHA512

    99e030fa722452ad183fda339a79f4715939f3b61137cad54d2da277114a4e3ccd8104970c166661338d1a136dbcfc06c538e91c8e8a3b118d35460f3496f034

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    6KB

    MD5

    01a0c561fb51c55602590aa2fb976aac

    SHA1

    90a52830811c3d851bb6639c8693b04005f51c3c

    SHA256

    c17715e30ec4ffab79e2cb17eb9b18a8f06cfaf9ef968b57bf0d5195a3298147

    SHA512

    985a8634eefcb8bba938c89ba1b1b3a69e3b226ecefa52ab16062055daaee5591e91eebf9cf4838581a28ea5874d7b54eff4afa798fe42279916d7b95369c66b

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    6KB

    MD5

    01a0c561fb51c55602590aa2fb976aac

    SHA1

    90a52830811c3d851bb6639c8693b04005f51c3c

    SHA256

    c17715e30ec4ffab79e2cb17eb9b18a8f06cfaf9ef968b57bf0d5195a3298147

    SHA512

    985a8634eefcb8bba938c89ba1b1b3a69e3b226ecefa52ab16062055daaee5591e91eebf9cf4838581a28ea5874d7b54eff4afa798fe42279916d7b95369c66b

  • C:\Users\Admin\AppData\Roaming\Yandex\ui

    Filesize

    38B

    MD5

    76dbed6d51f55b086e5de93c50c5c8fa

    SHA1

    2573ff000329ced3fad335a296999ca133542388

    SHA256

    f518a90e2b4ec3c72897761a8be14f4fd577d3727dc0c0829444b489036c0e0b

    SHA512

    ecb64e885f6c170110576520d3d4dddeaf3834de28f91d4f863fc8319c63aa9645598343a8502a3615a2daa797121422f7f2f6d9f2b0701e027e38222280fae9