Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    138s
  • max time network
    147s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231023-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231023-enlocale:en-usos:windows10-2004-x64system
  • submitted
    25/11/2023, 13:59

General

  • Target

    1fe48feee5c3453f5782c54a759abe92782213d009c7ecc3370729c539f73698.exe

  • Size

    4.7MB

  • MD5

    3e6c79d1396100353ae1a1be4f33f176

  • SHA1

    06295d786f4d002570c7f0731f858f58d0c98113

  • SHA256

    1fe48feee5c3453f5782c54a759abe92782213d009c7ecc3370729c539f73698

  • SHA512

    7bb54770c1efe672cc6e6d52ccaf9abca82a52107f8cc1362eb5a7c57310a82d5f33afd00903e8dfa9eaf25e27a8ca053b78002d17a5b8180ca193c99290a01b

  • SSDEEP

    49152:pFu0DxJ7eN9Fd8iz2prAbjf+yh2HZvj1Jf5QpSX95+r5u8QeKxFOJxdb4vZKVI:/DxJifFR2pEbjf4hHRQvKdzOJDb4v+

Score
8/10

Malware Config

Signatures

  • Downloads MZ/PE file
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\1fe48feee5c3453f5782c54a759abe92782213d009c7ecc3370729c539f73698.exe
    "C:\Users\Admin\AppData\Local\Temp\1fe48feee5c3453f5782c54a759abe92782213d009c7ecc3370729c539f73698.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:1036

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    1KB

    MD5

    cdf95fe3e900c76af8db69ce8a451e8a

    SHA1

    2cb78136108f79f30b4d4f562efedbfef1b19755

    SHA256

    12e6c5bc22125940d8aba3261ca262a4045d9bb5df421a4a2621ecab0a46738e

    SHA512

    a5a373f0878555e2596179cc201c06b0b7088e8ec421efce9328ab962e71c6b494bc8abc859d415b36487b565b7bd2f5f01b84b9d70767769fdd42713bbca88c

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    6KB

    MD5

    0f23255b0f5d293765643167b4e96010

    SHA1

    661dee9e0229bd0a1ff634020e1f1b1cfcb13687

    SHA256

    2c3f8605fdfcfe9ce1947ae166fb6ad41b08fff6a67f9dabf748b87d50d9621a

    SHA512

    1f4c305019fe0f415e9dad27ef4196bb6efb19fddc6662d11d874ddf9c1e17d7a4f69d84d4f15e08e801d74101863ee2e66dab9a32cccf2b85c63acba5d4d922

  • C:\Users\Admin\AppData\Roaming\Yandex\ui

    Filesize

    38B

    MD5

    ef057a27842cdd9cf337b5b76d626213

    SHA1

    5edac7fbca04dd582a9214fade8f3f9bbcb5e619

    SHA256

    9e99ded311a01b892015eea8fea504c9c7192d29e73b2a8fab7993ddb156adfc

    SHA512

    280bddf90d972f3ec8c58f811aef488ad875c2cacad913869d4c3c7386c68c3331a36cab3519936e96fbdfb3af339fc49e855fb353747ff58598b552def87e6b