Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

3

e2d75e8f42...6a.exe

windows7-x64

8

e2d75e8f42...6a.exe

windows10-2004-x64

8

Analysis

  • max time kernel
    143s
  • max time network
    152s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231127-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231127-enlocale:en-usos:windows10-2004-x64system
  • submitted
    27/11/2023, 20:58

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    e2d75e8f42bcf395c04329218b89ce8e4f7932a78a652ec10840cd5e57a3d56a.exe

  • Size

    5.1MB

  • MD5

    e1dc0c2cf3d931b31bf1c8adf5ccd1b8

  • SHA1

    ba57a921d6911916a38156420367ee8d490d67a1

  • SHA256

    e2d75e8f42bcf395c04329218b89ce8e4f7932a78a652ec10840cd5e57a3d56a

  • SHA512

    da4e5c501b24b840b65a32338429a1ffe389194f47bdaa7ec60f1d1afc814f0f9201811ba3ec489b9f098adf584eb6005c3b14bb716fc707d3f0a617514acda0

  • SSDEEP

    98304:Tu6wCUb2ZLddnXEJiDEWo5KG0uaQ5bzOJDb4v+h:TG2d65ZHTGN0v+

Score
8/10

Malware Config

Signatures

  • Downloads MZ/PE file
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\e2d75e8f42bcf395c04329218b89ce8e4f7932a78a652ec10840cd5e57a3d56a.exe
    "C:\Users\Admin\AppData\Local\Temp\e2d75e8f42bcf395c04329218b89ce8e4f7932a78a652ec10840cd5e57a3d56a.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:1244

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log
    Filesize

    1KB

    MD5

    2bf730f42054c2bb15866370c2878b73

    SHA1

    7b1e9f171c549120e4ca8d90acd18c555d910a80

    SHA256

    1ec2bf45d8701cc8a59ee720f4add646bc6f94347c59c21aa8e8e054167ee62a

    SHA512

    e12c6fc13ba1622023e7864d01c882a3950138b97a620162b8496c1a54c49ccb06680f9b40db3aa2577ccc3a08ea06ddefb267eccff590b29e989dee23aec6b4

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log
    Filesize

    3KB

    MD5

    20b1c56bfe01070209f1f31ef400c6b8

    SHA1

    7a9adbbe37b2410d403f7d8580bb233299e0f96f

    SHA256

    f8316f7721babe9e4f03044298669608eefa0c38a2c79cac65cd601f0127da61

    SHA512

    ff95cc71fb33c0dc14f2de92a2df12ab80630e55751912214ca0a75c42d8d6364646de7fbb4398a6f8765e2370ac4c2da384d47293d70b24c99d1c96ef9b2042

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log
    Filesize

    3KB

    MD5

    473573213d83252ddfb5945304ac5e68

    SHA1

    b88e5613bd72ce163417e27654d14f644e6a0c5f

    SHA256

    515dfc2e4123a0888cab261d15b08c2428ba6a39ac482a7bc189de687f9c09e6

    SHA512

    ac10254307865d9c5258017d605115c3b23974dd20a4df9219f6804f8cc231fbd1115eb04c9bbfa1108c67b69b48bff4e36852a30633e83f87126f3016e9bf7f

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log
    Filesize

    4KB

    MD5

    a29ffb9e10f0f997f92683c514410600

    SHA1

    28ff282c88cdc13fe588410b024b4e0c4d0ceda2

    SHA256

    47201eddafe0ff31de8eef835d73b486046dc89ca38d65ca1eee5543f3b2b2cc

    SHA512

    b116dcb5e711f9d908e7374dbd8c2d679815906f1ff4bdb72addb2afdcb290767fa0460252e6ec1b7ef1d6b4a050a6074d77106361b57086f3d0936ba95fe24f

    Download Submit

  • C:\Users\Admin\AppData\Roaming\Yandex\ui
    Filesize

    38B

    MD5

    f5a7b9e28db1a5d358b9a54991cd50c0

    SHA1

    dac2cdc1f2095b9f57bc8d7d5e3559d5a49b6f1e

    SHA256

    8a70ccab757b42edcd42f5d481a5fb0cccc3dbcfc1e2d0cf35a869ba41dd9472

    SHA512

    27e47e9283fb147f2142b44e30af3f5fa692d467c260d6ee242a63d1d0ac0f14c8b05ae363d701d5497b5db913625609b8073ddcbd3fd26b4184b606e04a2cfd

    Download Submit