Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

3

0cfd202d5a...ea.exe

windows7-x64

1

0cfd202d5a...ea.exe

windows10-2004-x64

8

Analysis

  • max time kernel
    121s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20231020-en
  • resource tags

    arch:x64arch:x86image:win7-20231020-enlocale:en-usos:windows7-x64system
  • submitted
    27/11/2023, 23:58

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    0cfd202d5ad56c634502841f24cd002f2d820096ba445eea275a0f0f085f3aea.exe

  • Size

    4.7MB

  • MD5

    b41c4cb595ec438a70a9aad8650fff19

  • SHA1

    299556f5082ba71816281ad4607b0de24d9dcdda

  • SHA256

    0cfd202d5ad56c634502841f24cd002f2d820096ba445eea275a0f0f085f3aea

  • SHA512

    6d822e96560775b402d4c3f9310083f6986d2209dcf87b4ee4fdcc438313cde79802f0d962e9b10a153d2534ed431e475f2686e44bc5e9c224e7a9fafa5a22a5

  • SSDEEP

    98304:Q2XeHdZChmK2dCzyicP21FqKdzOJDb4v+A:EdZ0+ilpwN0v+A

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\0cfd202d5ad56c634502841f24cd002f2d820096ba445eea275a0f0f085f3aea.exe
    "C:\Users\Admin\AppData\Local\Temp\0cfd202d5ad56c634502841f24cd002f2d820096ba445eea275a0f0f085f3aea.exe"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1936

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log
    Filesize

    7KB

    MD5

    71e293f888f4a4fda82f4cce291aa0de

    SHA1

    d0a01b97a88c85a8b885d999d24de9e9331efd18

    SHA256

    8b6ff0708f3d49d053a1dd08dc8a4d0c87986378f20e31055905b47a39a1c100

    SHA512

    8807818c9d34d88e96069eb59c41447f5d9a92b303964f90737b30eb5eb3bae7b8390f7a1f4c064272af8d9af05ed320790d20f13a09f54b38b1f48242d24088

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log
    Filesize

    1KB

    MD5

    ce999888253cb7f26b02931643419b08

    SHA1

    c40915736851d8e8ca7fa0f4f92ad7ec5fa00d46

    SHA256

    ef6f957374537864787489dfde80e1614311b00d8dc7503851cc7f9808a07f98

    SHA512

    7179d9d45e1f91193ba666dcf90dfad7a591e2451a575a6d79b2b451b5be56be8b868dd974ecf9f444330a1802300c63f16737b8b4e69a243cc9281c1dc4b121

    Download Submit

  • C:\Users\Admin\AppData\Roaming\Yandex\ui
    Filesize

    38B

    MD5

    8dd8f77502e07df286e2212419571ed4

    SHA1

    aa76da548fd64219bb1b990adf1882e6e961244f

    SHA256

    3f8b43de143ab20798a9572f787c5dd93b5fc7639edb0cfdca69c07c36338254

    SHA512

    84f767393d99199e150194ca41910db8dbc78adf6ec67fc53d2d810b2a0b3299a085b9489f059540e7caed10f85315f920dbcdc44e0c924024af81142c1d2972

    Download Submit