Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    132s
  • max time network
    127s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240419-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240419-enlocale:en-usos:windows10-2004-x64system
  • submitted
    03/05/2024, 08:15

General

  • Target

    6929464b0ac7b6bc77b52a9e532ee47f1640db45f1dd4167ccf24e8c301ec4bb.exe

  • Size

    2.3MB

  • MD5

    26ae8865f75ae782ce13bcc5660204f4

  • SHA1

    7512cc7bcfdcbf8fe0eec4549c9c15d916cfdafa

  • SHA256

    6929464b0ac7b6bc77b52a9e532ee47f1640db45f1dd4167ccf24e8c301ec4bb

  • SHA512

    c37ae66df32ba67ec832d018937d862c81be2fd1eddba6d5871d58e0184dc584d39766dd7921379550c024d2bc672da5a8014caa5463b5c15b53ed49966de775

  • SSDEEP

    49152:x4DE5KoEdy87AfT4COFCeBqP+r5u8QeM2d:0tdy87Af8COFnxKj

Score
8/10

Malware Config

Signatures

  • Downloads MZ/PE file
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\6929464b0ac7b6bc77b52a9e532ee47f1640db45f1dd4167ccf24e8c301ec4bb.exe
    "C:\Users\Admin\AppData\Local\Temp\6929464b0ac7b6bc77b52a9e532ee47f1640db45f1dd4167ccf24e8c301ec4bb.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:1436

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    10KB

    MD5

    785cc04f7b3e6f549d0e700bbc724bd6

    SHA1

    03b396c194075c16dbd261f29c5ae2c2c76ed0e3

    SHA256

    60216ef95f5b1184e48d57ecccb90b3dd9feebe54a048d1ad6bf7601d69a0d8b

    SHA512

    e9dd667d320938cf94aca40520964bebf469212eab499e8f0f4b46186e6e0b8e10c51c4da2c53724a8b0079196e9c2b5feef6eb2dea726224d5a5efe8eff61a8

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    5KB

    MD5

    26913609aa14232bc69ae42ef5399b05

    SHA1

    550a0b5a6a9fcd4f05897374c923a4ae0d5a6ab4

    SHA256

    60ebe2b1b6ea3ee5d84d8fe64fd7ff574dfee504ac6af3e20ee0cf5bd96d9718

    SHA512

    2003871934092b012ada062e233446b766dfec71a203fab4994b2b85d6ab00fe14009ee78b8ddb50ff429e4812b6f2e73d72d3e4648fc0242bb5341ae310b81d

  • C:\Users\Admin\AppData\Roaming\Yandex\ui

    Filesize

    38B

    MD5

    1bd8aaaaf6ce5e4922b61f0988cd1157

    SHA1

    59e29a73796788c238f5093f1d5f06a6147cbe1d

    SHA256

    6f1d6e98efd557d5474e300524a7b8468be4d6b03b7a1f19a786157974ef0ba3

    SHA512

    90b4de22dd3e3cafc6421a38d988bfec9212001450375ab2730e82587b74295c80fa42fd6e81e7ac531f228ee1f86a50d493de145156d1e884116afe1468a035