Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    141s
  • max time network
    152s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    31/12/2023, 15:20

General

  • Target

    8049971d8a5eb53a2e776e341c210f60fc003fb03df1754fe33f39683e75d760.exe

  • Size

    4.3MB

  • MD5

    dbe96d9c56e7894ebafe3b5e66be2ee8

  • SHA1

    5879416cc72ebdc6743103eef1a0f5795c408bf7

  • SHA256

    8049971d8a5eb53a2e776e341c210f60fc003fb03df1754fe33f39683e75d760

  • SHA512

    5df3ae9ca51d406c68112c5a273f14566f75b1a51d37111aa19213fa9792360440117c0cedccbf2c582c58f788ca0224eb6dd703dd74ac5e397117dbf03b4a8f

  • SSDEEP

    49152:qMLPIdiWU/o5LcUekfbj+whw5+r5u8QeKxFOJxdb4vZKVB:bLPIAN/nUeKbj+UFKdzOJDb4v+B

Score
8/10

Malware Config

Signatures

  • Downloads MZ/PE file
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\8049971d8a5eb53a2e776e341c210f60fc003fb03df1754fe33f39683e75d760.exe
    "C:\Users\Admin\AppData\Local\Temp\8049971d8a5eb53a2e776e341c210f60fc003fb03df1754fe33f39683e75d760.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:3136

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    5KB

    MD5

    a6c70e78458f4f5addc67e368f7db49a

    SHA1

    b04dfad8314159549f109157e78ca0f034dc9c84

    SHA256

    f4668aa78a68549cac7629f6db26c10f297e42cab6209856ee27eb7aec124852

    SHA512

    6bf07d2afdd912ffccbbded67e3cc728332f99bffc1893ef5d90ceec7e7b851b4e561631353a1748451f1798d1cbaff5508de3b5847ee904744b793407bdf6ef

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    5KB

    MD5

    d802181928e8a0836a34c8f19682e6f3

    SHA1

    60e308d621da7c79e221a792bcd418df498e48e9

    SHA256

    91e9c851542de6bdbc1d2b6c43a6536010fc9a140a8aaa0940eea5885c4c306c

    SHA512

    1d42b3c6a8ed706b7e55a83685ac34cde7019141e5bddce16b9f81c48afdaaed1f2948833c20c88d82f2d51532a1b857445de82e254f7185f52a20035f56334f

  • C:\Users\Admin\AppData\Roaming\Yandex\ui

    Filesize

    38B

    MD5

    e8bf85a8c21308e170c45b13d7aa1c11

    SHA1

    2126a12bc45ee6aa5d147d3991464b07671a286d

    SHA256

    7fccb0d1be66b3874199f29e4b30857d20d6185a1d492d26f00fbc83d825d596

    SHA512

    fdcb61c627f3bcbab08da01bc3133674e0966561d8d7caa32362a3ac5dde92ebf7cc15fdbf0d8a82b88269bebf6055a621654e8376c6106af07af8f6a9823a92