Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    139s
  • max time network
    150s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231023-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231023-enlocale:en-usos:windows10-2004-x64system
  • submitted
    27/11/2023, 02:58

General

  • Target

    cbe0696505aa6bc05bda466c99e034961f0657fb24c84c9675523c20d2210842.exe

  • Size

    4.1MB

  • MD5

    c411743afe0aec18ccbf9a63b0152620

  • SHA1

    f219f2f421e5ecb5a117535d9448f1aa17275a27

  • SHA256

    cbe0696505aa6bc05bda466c99e034961f0657fb24c84c9675523c20d2210842

  • SHA512

    e379fa5a21304c088ee4f60fc87d0d5efb51a2e0dccaf8ec646182961c474356f433c70df976fad9d583f2a348f7bcc871740ff7cd17788bf0cd756b270382e7

  • SSDEEP

    49152:JFu0DxJ7eN9Fd8iz2prAbjf+Bh35+r5u8QeKxFOJxdb4vZKV:fDxJifFR2pEbjfNKdzOJDb4v+

Score
8/10

Malware Config

Signatures

  • Downloads MZ/PE file
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\cbe0696505aa6bc05bda466c99e034961f0657fb24c84c9675523c20d2210842.exe
    "C:\Users\Admin\AppData\Local\Temp\cbe0696505aa6bc05bda466c99e034961f0657fb24c84c9675523c20d2210842.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:3408

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    1KB

    MD5

    badd5c79b49240c4a23d68a7ca7e2086

    SHA1

    e7777010be2b2fd8277fd6bb7a299aea0b2f1aff

    SHA256

    85f08b4f563e4f73b73e87f33d3c88c29292cc3cac98ce964e8f45d5c55f1ddb

    SHA512

    96c21ef40c812eb3f02329e4d05af56f5b79f8dd7ff57fbe8c8c10aa1d8fef7e9517325dc82c2d51721103b7f0947dbae631b685f4e44e7a8b8b061bd1bf10bc

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    4KB

    MD5

    1640256ffea0b11abb4ae01f0a9de1ae

    SHA1

    cc9f85e486b59a336d971a3f4d1c41bf0920428d

    SHA256

    751feb0f63481dd55da5f5b5449ca8574113c370d8016a0ffbb4f94a536752d7

    SHA512

    8d029ff1109e8a80b4ba51b305409e5f3ddf7a32c52ddf29f08abd62221f4bf63420fd50f7e42048caa2b16a67eabc7f4a1386ab9168e2057d25bf92122510dc

  • C:\Users\Admin\AppData\Roaming\Yandex\ui

    Filesize

    38B

    MD5

    ca882f30ecebc25f06cc894f24b33c2f

    SHA1

    28ff8504829b58ba8432fdda55ecf85c0a071654

    SHA256

    e944efc4854903f49d5686f4753c5a27659ce8e427721625a718230c597c35d3

    SHA512

    ad69cb563341e08227924018b80e9bd6ec6400c1df2d5c101f4e330d38aad11b1f254cc443c39fe6027b739ef71e3effe91e6cdcf3697a989ea898a6fd930dd0