Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    148s
  • max time network
    152s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    03/01/2024, 20:23

General

  • Target

    2dd816133c4b45c4d7f90191683692b20b0a5d18dc81105e8eb346d44af91ceb.exe

  • Size

    5.1MB

  • MD5

    dd1e73723983973bfa0f00bbf2c53145

  • SHA1

    8cc237ea901d1f482ca5e0484e83d0a589072cf8

  • SHA256

    2dd816133c4b45c4d7f90191683692b20b0a5d18dc81105e8eb346d44af91ceb

  • SHA512

    67a99cd6673d2b240fdd8d3df77cabf864bc92d18e6270a2119dae9541886b4cda90a3a6ea7260c4b82343759bd72b843bb5fe7523274f035e264777a4f2c4f4

  • SSDEEP

    98304:8HenYKGxUcl3nT86Ytacv5Se1KdzOJDb4v+u:8Hr/YtacvuwN0v+u

Score
8/10

Malware Config

Signatures

  • Downloads MZ/PE file
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2dd816133c4b45c4d7f90191683692b20b0a5d18dc81105e8eb346d44af91ceb.exe
    "C:\Users\Admin\AppData\Local\Temp\2dd816133c4b45c4d7f90191683692b20b0a5d18dc81105e8eb346d44af91ceb.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:4260

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    1KB

    MD5

    41bd1ad0d758a7a51f567b8b75934e88

    SHA1

    02896e01a253dc8d854aaae1cb75f4c9c5b3ed5b

    SHA256

    6d897e55e0eaa8814290912819822a8a34bb962c66dd1aaeaf4865976a965c76

    SHA512

    cb8998c0a884af914a46eae5cb6daad7d7d7326a304dc78ea429dded9b16cdc8541208de262dc8e6dac578bda1d4337410ac28ac2885e5e219a092853e82f672

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    5KB

    MD5

    7bbd132a08e5921f36c011826c3277bc

    SHA1

    48623c119404e85530b89a4605ac794d4f1d9e7c

    SHA256

    fa76ee8ea15c09e55de5ae35d79f4e6530f80b956fdef699a2094772bdd78bd5

    SHA512

    e9e86f4a70bb8c7ae35e5ae86eed7a99ea85b66ac618a843cc3f6e002a789279a0c2a58cee31a9daa7dfe5f0b450184106a6e7004824d535a9b48347cb2770b3

  • C:\Users\Admin\AppData\Roaming\Yandex\ui

    Filesize

    38B

    MD5

    93c43fd33b98b8eafd93bc8368d9c82e

    SHA1

    7fb3ac81e5f3fb6581053eeebe9384735937be41

    SHA256

    87d8365e82b6737705781c00511150efa95a57dc722a5a6e6ac957c022b1e6cf

    SHA512

    2b5945850d17dded76b7e94bb9158823f40bd39c4d6404db08a8ab5a026ed7f7bdfe7d9e0a80231de00f0c397dbe84a277c870257045a170b67b0f9070357d29