Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    22s
  • max time network
    89s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    09/01/2024, 19:35

General

  • Target

    652a6a38f977c72de024b910d0fd77ca72ca03859eaca6bcce33acd217a12a4e.exe

  • Size

    4.3MB

  • MD5

    0d028ee24b4bad70dac095588e9b672d

  • SHA1

    c8554058204cd7db35b06a2fb526667e1ac7696e

  • SHA256

    652a6a38f977c72de024b910d0fd77ca72ca03859eaca6bcce33acd217a12a4e

  • SHA512

    4987616557e19ddfd4f6cb7848a563bdb5a964577fd27d288402ac124137482628429ccd29a0f2039f2e4081f2686389ce0776b6689ea1b17f6299229469f50d

  • SSDEEP

    49152:qMLPIdiWU/o5LcUekfbj+whw5+r5u8QeKxFOJxdb4vZKVB:bLPIAN/nUeKbj+UFKdzOJDb4v+B

Score
8/10

Malware Config

Signatures

  • Downloads MZ/PE file
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\652a6a38f977c72de024b910d0fd77ca72ca03859eaca6bcce33acd217a12a4e.exe
    "C:\Users\Admin\AppData\Local\Temp\652a6a38f977c72de024b910d0fd77ca72ca03859eaca6bcce33acd217a12a4e.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:2900

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    5KB

    MD5

    2200c273fb3d0279180db23939d68cff

    SHA1

    7434b58607864f0d9bad59d4c90545e34372cba4

    SHA256

    e8d539342ffb0cf5c3683f26290db75c27bf70fc7ccadc00bfdecf8ebab3912c

    SHA512

    ee8d75b565a6535dd8b893c0d4c2dcb9ad361444aacaa978ef3c5a2cec52fa1f40a14b5c6114c6b0af30abd6b28c96b59c397fca826a247bfe412d366ddf6ff1

  • C:\Users\Admin\AppData\Roaming\Yandex\ui

    Filesize

    38B

    MD5

    c3d32e261b8a3743d02d1e0dba895768

    SHA1

    68c63585efd02c679d5bef895c61c0bb385baa7a

    SHA256

    9cce8675d90b4d768b0ce1761b12a7d259d216a02ffaf50f07820e8ac864e5dc

    SHA512

    e9ae6e2ebd6c478e90add5110530888b188e12b20882a67aa45828fe74dc9c5416490122b50d81e16b165e8b22da0e806842d82fa3bf02d71fb64814ed8e33d6