Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    146s
  • max time network
    162s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    23/12/2023, 16:49

General

  • Target

    ade9aec838f00a7f048ddfd186566d5cfc1810d27edddee920edb3586bd85b63.exe

  • Size

    4.7MB

  • MD5

    e6e7fcf7e22cf01dcc5459d76715d21b

  • SHA1

    6410904afaffc1ed55b258efda9c95891bbea979

  • SHA256

    ade9aec838f00a7f048ddfd186566d5cfc1810d27edddee920edb3586bd85b63

  • SHA512

    d0cab3354da543b9cff887c99d0e83ab4533ae8fc2f994cfcfac95bf8cbcb93363c0d2c3a04baa325c9c84b1e336338f3a7d49391f16dd93cc116c098c5d311d

  • SSDEEP

    98304:shIHjWibmorLobjYXzZpvF1Ff7PKdzOJDb4v+8lz:vWibmoFzZpF7SwN0v++

Score
8/10

Malware Config

Signatures

  • Downloads MZ/PE file
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\ade9aec838f00a7f048ddfd186566d5cfc1810d27edddee920edb3586bd85b63.exe
    "C:\Users\Admin\AppData\Local\Temp\ade9aec838f00a7f048ddfd186566d5cfc1810d27edddee920edb3586bd85b63.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:1496

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    1KB

    MD5

    237f132aaa28255cb2d65590f41a0b70

    SHA1

    85c3229fb22415d7034dfeb3ea5224c4fcd01a9c

    SHA256

    5d77ce8ebfa8604011cfb2a882af04ec9b4ab01fadafa62fe953b97d20124507

    SHA512

    861db19c924f10bb88f141dd5571347282d862ddf36fe7cf2b61d83590afde7a7a49ed191c64f0a6f480f0910e484da59de89adf1d75e125a1d62336a5a868a5

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    3KB

    MD5

    46856872c730fa8ba5a776c39588b236

    SHA1

    96facfdf1ecd03d16d59144d6141268fccda15c3

    SHA256

    3ff07989ce45fba466927ba14536f10c62ed386204550203d58be3a8291f614c

    SHA512

    e4fe71e2fcde0a6a14c3662ce8b9d0b2911e0711e3fc06754d9c8a9e779bea8b777d9d799424bdad20e2d378288e600016ecce0ae546ff2e3e181b4dd4de8847

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    5KB

    MD5

    dc633bb4fd050a157c2f707d9fbe2e2a

    SHA1

    b67444880a41d093853d0c6abf1359198145a070

    SHA256

    5b520ba3f5192c2a7a3c712ea3bd1b4a13ea9a506f19baf81997fc6bab1d6fef

    SHA512

    5e494c2ff374f0de8271b0cdefec1da4b9e4462e6ec560f54cd87e4397963acd0be2cfdda43199aa18d5257ea5841b3ddce53430ae3d7a329c2eae50b794790d

  • C:\Users\Admin\AppData\Roaming\Yandex\ui

    Filesize

    38B

    MD5

    70e6ae0083aa37b270a09b81dfdaf19b

    SHA1

    2d84853d084aa77b20fe71c9d2d066f178b88777

    SHA256

    e53d2108bb274f599389ae761293c5e8d87ec51c5a2b6a4152945a02e9d3900c

    SHA512

    ef416f33ee28b2b055d9e305df5f76894f130f231f0bea087e86466f6c15b0804139c8024266d4b2b46faa41b0e3d2d67b4c55ce6723ecf99bc918e1cc792140