Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

3

d41820eefd...ee.exe

windows7-x64

8

d41820eefd...ee.exe

windows10-2004-x64

8

Analysis

  • max time kernel
    117s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    27/05/2024, 18:53

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    d41820eefdaa1791129775fd3cdb5d498cdcb53db3d2c6f15749500706946bee.exe

  • Size

    2.3MB

  • MD5

    f1a7a5ce677f62c6c0348da326eac6e9

  • SHA1

    f465d92bbaf60937e32240650ba9880f3fe1bf35

  • SHA256

    d41820eefdaa1791129775fd3cdb5d498cdcb53db3d2c6f15749500706946bee

  • SHA512

    dfb95a6951fff5569b79660bd05167c40c69c1d04f19bf5ceb1132ff22e262c6f9e8a80984385ba5a78efdf01a4460dd06da6687bd1d622ec4a6df101d312840

  • SSDEEP

    49152:cNwN6Kc2vJH0Cnbo/COlqVjX+a2b+r5u8Qegs:u4BvJH0CnbgCOlI/Kjs

Score
8/10

Malware Config

Signatures

  • Downloads MZ/PE file
  • Loads dropped DLL 2 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\d41820eefdaa1791129775fd3cdb5d498cdcb53db3d2c6f15749500706946bee.exe
    "C:\Users\Admin\AppData\Local\Temp\d41820eefdaa1791129775fd3cdb5d498cdcb53db3d2c6f15749500706946bee.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2240

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\Cab1F37.tmp
    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log
    Filesize

    6KB

    MD5

    d74d97e5bf89a21bb8331943d2b82fcd

    SHA1

    4bca2b522d2b55125e9c5869a76009c3d3eb4624

    SHA256

    bceb18a53ea4dd9e53d659a5fe9095f7b3716390fb12948b211c1d03d724d1f6

    SHA512

    5f2764fa24b4fe1285eb62d60d477fb36cbb5781e667d90dae88706e9b688bbb23aa16244b953a0054d6db1c99cef804ccb2abe5ed29c21fd7f70d9beb42adfb

    Download Submit

  • C:\Users\Admin\AppData\Roaming\Yandex\ui
    Filesize

    38B

    MD5

    9f47dff51a36042b15eb49056c6a35d4

    SHA1

    7dedda114350bba3c797fe87224da6e6176c4660

    SHA256

    eeb7ff8a76f1a7d8e857081bc381bf8b702536b94433823ed313c3e4ca9c92d4

    SHA512

    49c9b8a1e805cf106ce7942748abc227b5c6b1255ac8adf0dd223a27943722505a32f0fd503dcf07c1613bb4a739ace7cc9baf6ff8f988b209238fc77b0f9c96

    Download Submit