Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    156s
  • max time network
    164s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240226-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
  • submitted
    19/03/2024, 10:04

General

  • Target

    329102326e20481e73b8feb887d621db140dc8729837937a8b3f4b02527c8833.exe

  • Size

    4.7MB

  • MD5

    8b884128cc6c069b6be8e498480b50cd

  • SHA1

    dd7d07d17604558cf254fbadcf2dd784ca22c4af

  • SHA256

    329102326e20481e73b8feb887d621db140dc8729837937a8b3f4b02527c8833

  • SHA512

    1f07ae8384aec4a37a0351c5fa2cb99540f60092b7f506c0940378d08898c3737626ce7eee3b98a3f0c7f157cc4d661e2db7fd2b783c2853780210f165034817

  • SSDEEP

    49152:dc2XwJXdAk1PBOldp9rEbjB/hKTYYd6zTaMubLmjVPU5+r5u8QeKxFOJxdb4vZKN:pXwJNf1pip9AbjBwsaMW6KdzOJDb4v+

Score
8/10

Malware Config

Signatures

  • Downloads MZ/PE file
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\329102326e20481e73b8feb887d621db140dc8729837937a8b3f4b02527c8833.exe
    "C:\Users\Admin\AppData\Local\Temp\329102326e20481e73b8feb887d621db140dc8729837937a8b3f4b02527c8833.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:3812

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    2KB

    MD5

    fbc74cda0c99e5bc3bf331cc4ca343e4

    SHA1

    516cfade24b42f4abff339fd30d136333fc6dfff

    SHA256

    7e149da280215631a10eacd625b24ce6632c8e7d8ca4541693a7094233f8b22e

    SHA512

    174f58726fbcdfb44817808001af85c6fab34bb4c5f5e6e55480f8646ca634babfeed51fc30bf1ed2fedcb186578c79934a5365bad07de94f21c03befcc049e8

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    7KB

    MD5

    41d84caade4c1d3e244355738318eeb8

    SHA1

    4f22a4204849ab64ec808d69b98a34d00a185ded

    SHA256

    73ae622d7570ca2a0040ee8bf937b2fa332eb3281acf9e3fd63e61896132eafa

    SHA512

    364b5e9ac1eb94bdab40276cde19b21e4ba23677173ce27e1858b45e0215d441a54e0d39a5d0d20747b558028027a83acedc72ac91f7b8405fffe52a65d0a24b

  • C:\Users\Admin\AppData\Roaming\Yandex\ui

    Filesize

    38B

    MD5

    c9ef8d9f3c853779ac0a09ee41251aa7

    SHA1

    1f3ea698d9a411aeb10d5a86c8f70f02cf11f3d6

    SHA256

    63fb3c5b265dadb3cc901dec557fdce665e0ce71cdb0c090425bff2fee44e38d

    SHA512

    38e23ff35675df87f3e5c2e7799a97d31b1c29ed02cfd43928986912edbed23dfed3fe3f5f1e2d4de9eaaab8e5a4bec336424c1e9ff9d8ffbcb75392eb355bc9