Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    147s
  • max time network
    147s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    03/01/2024, 10:49

General

  • Target

    368fc9646632b7386685a60ee5b865b7fccfd07d93b14f7fbbde8677780d0581.exe

  • Size

    4.3MB

  • MD5

    1004ab75e81bee70b0b7e7ab1683f1e1

  • SHA1

    179727c10df6f99844fe4d010511dd8cc51991bd

  • SHA256

    368fc9646632b7386685a60ee5b865b7fccfd07d93b14f7fbbde8677780d0581

  • SHA512

    d8c24846c9a651deb6ff0e0cf092646928c0bb2ccd2dfe8a6cbc5c616fd77fa44df6a6e5289b1f1ea3553b2e0aa2dcf2c0f906bcc759d1c8bfd9195998f8d508

  • SSDEEP

    49152:qMLPIdiWU/o5LcUekfbj+whw5+r5u8QeKxFOJxdb4vZKVB:bLPIAN/nUeKbj+UFKdzOJDb4v+B

Score
8/10

Malware Config

Signatures

  • Downloads MZ/PE file
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\368fc9646632b7386685a60ee5b865b7fccfd07d93b14f7fbbde8677780d0581.exe
    "C:\Users\Admin\AppData\Local\Temp\368fc9646632b7386685a60ee5b865b7fccfd07d93b14f7fbbde8677780d0581.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:2604

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    6KB

    MD5

    fb5f34e8901d4ebfd1f53f58bdb27b7d

    SHA1

    8ed9095e40d3da8b66701316489c3c729f856a77

    SHA256

    c671999c4ab4a3f52d2522bb3118d42e73bac6a15ae9b522fbfecd2f87c4033f

    SHA512

    38e9e801ffa9da433640e888caf343218b0a521654664bbb4f5f730933ea66f662f25d7ba309d162f2fb9760984d65199ed95bb35665cb7f0a5d435556e1573c

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    5KB

    MD5

    1edaf2139207405a5bdca57e72474e8f

    SHA1

    0ca1c2ea644b997811869e6ad7be480c77c606e5

    SHA256

    1ff2085296d60ec73d8e9378e8a0f7691d198eb300980f318b1f49e2cb951667

    SHA512

    efcb9b68bcff0a510966f9d3c2e7f796b498e2928d053260ff98727ba41b5fdda1d5560535b47ba22458748344699af25c723f26398fb793c8c5cf490b32f41f

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    5KB

    MD5

    7dc5ea64657192360c4b59fb4a6a7beb

    SHA1

    f6c44b2dc0c34781a3749d6a312cf60f05c1e0bc

    SHA256

    fd8436ab25aca3dbf58872a7a99b870908d01f8e23003b28916ca10904dd8ff0

    SHA512

    664ab5803555afc576a0fbb6776ee331552127aecfbba6cd7c6fc134a3a843f6d8ae6b71eb318f4cc0d65d2c3a9736d9ecd5ae1a3e50fa8a27c5f6ec73e199cb

  • C:\Users\Admin\AppData\Roaming\Yandex\ui

    Filesize

    38B

    MD5

    3b05b322f397cc91699d2ae998913d4e

    SHA1

    2a9a815af31d9d67308ffc6df368083530552226

    SHA256

    8f5ae424835e7e65172c1b3899f58e20eff48514f783542f7db789a67a941e77

    SHA512

    ee36bc0e5b5ffb812735e48c1c06c7a721c04601e8b5a790e0fc4fc19f65486b9b79a57082ce778aaf3ce044493c959a27fe463d2ed980598207d40203a3b1fa