Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

3

38d01f31f5...a3.exe

windows7-x64

8

38d01f31f5...a3.exe

windows10-2004-x64

8

Analysis

  • max time kernel
    138s
  • max time network
    122s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    22/12/2023, 13:49

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    38d01f31f5848c1867dd1eae774fe99db06bbed13d35096bc65d456b30da84a3.exe

  • Size

    4.7MB

  • MD5

    f358cef8566acc32bada93a9cecef20c

  • SHA1

    00bcbe72815f04e7e8d7259894b7961e136f58fd

  • SHA256

    38d01f31f5848c1867dd1eae774fe99db06bbed13d35096bc65d456b30da84a3

  • SHA512

    b568ebbc3bc728252a2ca9d1dbc1742d914a162b6504bb4658aa39373ca18bb0d5e89e57b18feb4a344d043748f25fba3157969b2a5b84747a3269b9c56b3702

  • SSDEEP

    98304:ZhIHjWibmorLobjYE08GKdzOJDb4v+zlz:GWibmoZmwN0v+R

Score
8/10

Malware Config

Signatures

  • Downloads MZ/PE file
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\38d01f31f5848c1867dd1eae774fe99db06bbed13d35096bc65d456b30da84a3.exe
    "C:\Users\Admin\AppData\Local\Temp\38d01f31f5848c1867dd1eae774fe99db06bbed13d35096bc65d456b30da84a3.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:1240

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log
    Filesize

    3KB

    MD5

    ce1da216c2a270ecf9d215ec1b0d5a24

    SHA1

    9dd334ce3bb0f7cfd6a00cf804383a5b7c44c606

    SHA256

    a0fc03ef8aea8334f1df32be66783e332610036350f095b21e8aac0ea46ab218

    SHA512

    7538d0bdcf4a8f8cd98dcbafe6f75b754bdfc3fbfda1a849d0f9a8e215048cec3cbea66435c72cc97f5b9fe44feec9b75da6b792ab76c0dce7f55f02df5f4775

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log
    Filesize

    4KB

    MD5

    774782a3d5ec82acc4823a736d2cb1dc

    SHA1

    f290334e034f9f2ebaf417eebe6685e630167cdc

    SHA256

    804fd4145559a5c138652b315f8907237c91b60fb34706aaf735eb3a13a50fef

    SHA512

    18b2163d6816a7491d1bf682f199fbdecf792b68b743420a53d107d6f67b945fa17ea8b7e8f40cad91b8cac010051e4ee49188716e84f1927ebf0577cc548573

    Download Submit

  • C:\Users\Admin\AppData\Roaming\Yandex\ui
    Filesize

    38B

    MD5

    78af10ca82a64325a9fe2347fc12140a

    SHA1

    0cf7f126a74fd6b377cebc913da471a7b2c3fcf8

    SHA256

    aea5f81325c5a62ac29c87ff19c9d449b8ba3dda615a4ee6d28d989c792803fa

    SHA512

    acc4e05666006dd1f1af6a907542f40dfa310c070ee2facfb47bbd7b413aaf839d3af2cda41a3d2b4b4e0455353a1233b0380ac39ff6503755e6e86b1a26eb41

    Download Submit