Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    138s
  • max time network
    150s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    03/01/2024, 06:52

General

  • Target

    08f50161d4c9eef2b72416f0730101d3aa7561564f0361491cec2a6515318125.exe

  • Size

    4.3MB

  • MD5

    4bb5e6710f4dceeac781afb59e82007e

  • SHA1

    998415668b4f2204f7ec73874e1d13096384bf2f

  • SHA256

    08f50161d4c9eef2b72416f0730101d3aa7561564f0361491cec2a6515318125

  • SHA512

    e69b0e7b09683a1b2e26186b522ae627b5e4bf32913b5d788d98beb2ce0ea4ac7a344beb44f8fe566636e940aaa19f80e277495e083021547e691a33bf69eee8

  • SSDEEP

    49152:8MLPIdiWU/o5LcUekfbj+whN5+r5u8QeKxFOJxdb4vZKVA:JLPIAN/nUeKbj+UmKdzOJDb4v+A

Score
8/10

Malware Config

Signatures

  • Downloads MZ/PE file
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\08f50161d4c9eef2b72416f0730101d3aa7561564f0361491cec2a6515318125.exe
    "C:\Users\Admin\AppData\Local\Temp\08f50161d4c9eef2b72416f0730101d3aa7561564f0361491cec2a6515318125.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:4176

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    2KB

    MD5

    ffdba3a3a8e050e3e97ed64c9830f524

    SHA1

    1f347c62def63f6f0bbd9c1fc930084020eadf6f

    SHA256

    6e19b2c17218b3fc89f068b404d26dd253182147c07227f1d39b2b9bc3c55c17

    SHA512

    8438ba8d59ac0a7c048a6d6b9cdedb0ef592c0be7558f50ffacbe76c286fcc125cc280c17d9ffc329a8d95cff539320d167b2aae4638a096177b25c813630e12

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    4KB

    MD5

    7660d1f58139bc09b2cb1aa8c2d34026

    SHA1

    29939feec563cecc7587bce85d2c18fe42af3304

    SHA256

    2b43a3f146582a4522df378281d1391122c3ae517e6e0866e28c3ec056a8b7c1

    SHA512

    999365cb9cbbc8107312ba619f78e1a8aebaa3edb4ae3c3caaaa7472aff2074f79a02c3842098cb06e743c623a580d608192c9f69ab45d94c4cfd895bb87d22e

  • C:\Users\Admin\AppData\Roaming\Yandex\ui

    Filesize

    38B

    MD5

    cc1eca87954c7c87db80c68a30ff505c

    SHA1

    bd531dbe65d1ed4fbf8bb35d75bc918cd1f2e8a4

    SHA256

    3226b009f2f2ed70aa7a970b11f1db7c4ffbd1914ac4bf20b00164109f394a3d

    SHA512

    f4360ef4550001e69dbbb2b3f51fc5be7b225ddea2462e60a4bcc0d0dd6bed59ccd3fa120834ee89b1746a75749e43d47323e0d4c5c5987c51dd8b986d105e43