Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    144s
  • max time network
    150s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    26/12/2023, 12:53

General

  • Target

    7c8ac4c5838f2bce9dd6f744aad2651731110f2a0b217afde954fb105f1a3738.exe

  • Size

    4.3MB

  • MD5

    3e6bd11a6b276d8a6cbf0cbed889db69

  • SHA1

    104e4fd01c3fa4d05304618c81c5a3bac6e96870

  • SHA256

    7c8ac4c5838f2bce9dd6f744aad2651731110f2a0b217afde954fb105f1a3738

  • SHA512

    0349723de7228aa3b49b1dc7ab9714062e9441e1b9869936fe41fc5c5d72b9fc37f5ed02aaa7da9b46440b73c3ffffc928a316d30ac4b19209e1dff86d949475

  • SSDEEP

    49152:qMLPIdiWU/o5LcUekfbj+whw5+r5u8QeKxFOJxdb4vZKVB:bLPIAN/nUeKbj+UFKdzOJDb4v+B

Score
8/10

Malware Config

Signatures

  • Downloads MZ/PE file
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\7c8ac4c5838f2bce9dd6f744aad2651731110f2a0b217afde954fb105f1a3738.exe
    "C:\Users\Admin\AppData\Local\Temp\7c8ac4c5838f2bce9dd6f744aad2651731110f2a0b217afde954fb105f1a3738.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:1360

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    1KB

    MD5

    0857f03067a861287862336e62b6f204

    SHA1

    78ff72b88cbd68ef83c36ca2dc66cdb36a2fa4ee

    SHA256

    708bead304db2bd3d6d95c24cd0d952f56d4e2983ada4a937dd6e71291206bf6

    SHA512

    d3efe8e99a4af36d52ebca20913a1e63678f1a4f6e80a97dc8ea9cf80f5b6d5a56f82eff67914c56351bfaad0a336f0292040e467a5f54c1245c6647f02fe5a0

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    4KB

    MD5

    adebf49373875888fb647d2056e0921a

    SHA1

    fd29c2b4722e1400d3939f46a3aa351cc55a8737

    SHA256

    7c8df0c699ee787fbd071fc434c0eaddc5e8eaa70799be6453b572df88f3eef0

    SHA512

    4436af350080c01f80614917325a33585b4157bab2caf1b6dca0fc96b1468a5aef26d15b00f5cc1de568c829adb711d36ac1659c38250d7d4be98b1cc4086e05

  • C:\Users\Admin\AppData\Roaming\Yandex\ui

    Filesize

    38B

    MD5

    f03db41743f5499b09308f70bd39cc70

    SHA1

    480417657795e62ed1f7ec9f3ef9a016e3746b8c

    SHA256

    ce344be9dae5805d8ab1ec640bb2d24110d55f1afe73af3ff3f774931b366550

    SHA512

    0a8f87d9c4dd18d1a244c5ec65ca1e79d13acba4fc6f258e49855142f4be11524fd22fa4b68052ff7306e1ee7d2816fc1689f027e5f0bec8e13a5065b065a2ee