Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    122s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20231023-en
  • resource tags

    arch:x64arch:x86image:win7-20231023-enlocale:en-usos:windows7-x64system
  • submitted
    22/11/2023, 18:04

General

  • Target

    7b31e53e385f34ab0d4669cc50ba40564b5fb5e249a0efc7e025f3b25c189c3f.exe

  • Size

    4.7MB

  • MD5

    621625ed18b35daa3d7346b187fb78b8

  • SHA1

    201ed7514d2f7594407edc7a41f6df8678d7fca4

  • SHA256

    7b31e53e385f34ab0d4669cc50ba40564b5fb5e249a0efc7e025f3b25c189c3f

  • SHA512

    a442485c258a151911cd7dbf9e1d36d15aa71bfef1e82da034b2470899663442ea1510322919f25e6b7911d75369a424bc6d8f4c583f3ed658ecf3df346d6b1a

  • SSDEEP

    98304:d2XeHdZChmK2dhsD6F3Y+IUKdzOJDb4v+k:BdZL3jIDwN0v+k

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\7b31e53e385f34ab0d4669cc50ba40564b5fb5e249a0efc7e025f3b25c189c3f.exe
    "C:\Users\Admin\AppData\Local\Temp\7b31e53e385f34ab0d4669cc50ba40564b5fb5e249a0efc7e025f3b25c189c3f.exe"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:304

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    1KB

    MD5

    3f75d5c61dda0e21dbb500aa5bb69daa

    SHA1

    496bdeb2c1257b8bf96d3c746cd14e9ad4f76475

    SHA256

    4dfd5480b8977bfe7d54cea4e104592696270ab857ca8eb9ac69bfb3f7866bef

    SHA512

    cd7cc92ad6c0385fd84ba5cd2288cec27a80e7fabb60257de29d784ebd481e40a20dd6e8d71cf6bbf5e65b016b13c2cd22cc0a2bb1fafec139e3380b1619d656

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    8KB

    MD5

    76d910ec4fc3827c7554b0518de036a1

    SHA1

    253cddb8701871301ab2180ee054451c213acc9f

    SHA256

    c0b853b2ace7cde51ca3390dd5cb2ba1935cc53abb8d71693634c93130ba65a9

    SHA512

    065c1199d985bd5d473087ce4f0579a58658620c57d26ea8c0199b5ddfa14d36548923ed8acde98d1efbcfed464f4f67e265c799fee3a6b5712c48ae41530abc

  • C:\Users\Admin\AppData\Roaming\Yandex\ui

    Filesize

    38B

    MD5

    0e61b2240edec07ef98da35052196c81

    SHA1

    29781ca5cbdc53dd5af4dcf36a85b5a686455a9a

    SHA256

    54d7b49c1d404cee0ac362a60bc93fbc2e95f8f3f8be6f40f0ad01c6b14652a2

    SHA512

    37ae769e327b1bfcd07e2cb85f1096aefdcb8352d40a53c47a4d6902da3c5fe3423cfb99b43ecbec303d447e7c0964fd236ad44c1dd9107eb3af1d53bcd6fcef