Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    135s
  • max time network
    152s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    14/08/2024, 11:03

General

  • Target

    e3f75c98e19a9f3a1274d198d32b6e105d6676d9a54d403d65d0e4f034ab5d85.exe

  • Size

    10.9MB

  • MD5

    2ff15fadabf52afbada665fc8f5d7d5d

  • SHA1

    74d19d67cd3d178523f8314108bbf0380bc5219f

  • SHA256

    e3f75c98e19a9f3a1274d198d32b6e105d6676d9a54d403d65d0e4f034ab5d85

  • SHA512

    593edcdbbd7ce4935547ad7314b375fc80af1cc3694a8b4bf7fc7fe07cf76f120e4ab547621411ed4ef1df67916275b139d9dbb3d622fc641f78aaabfd401ae4

  • SSDEEP

    196608:ubGnWW5WySSJ7PbDdh0HtQba8z1sjzkAilU4I4:uKnW6Wy5J7PbDjOQba8psjzyz

Score
8/10

Malware Config

Signatures

  • Downloads MZ/PE file
  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\e3f75c98e19a9f3a1274d198d32b6e105d6676d9a54d403d65d0e4f034ab5d85.exe
    "C:\Users\Admin\AppData\Local\Temp\e3f75c98e19a9f3a1274d198d32b6e105d6676d9a54d403d65d0e4f034ab5d85.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious use of SetWindowsHookEx
    PID:2528

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    9KB

    MD5

    bb405fe3d893b9f5c0fad0a6b7e7e2ab

    SHA1

    2f8a068bb327f5a5929c658b37b14befa4a1cfa4

    SHA256

    7c222634edaa9da564213c74052cbef460ab1a6e24ef354da9d39bd95ec9110b

    SHA512

    a811284721f65b337cf3b8462dfa9299e0dd2a0d0d4889dae56e1acc3ef383cc6aa5a5007e643016ecc5dd3a07b1c34aeb2c7b7d69fc8f1cba7da09158cbf660

  • C:\Users\Admin\AppData\Roaming\Yandex\ui

    Filesize

    38B

    MD5

    e471ebfc7e73ea4957904ccef30f0aa0

    SHA1

    e81bb3f218062fe2aaa69bbd827103052367bea1

    SHA256

    fbfd28a80fa4765d0b4ac101a187574463bafa5e1f9599a22bc665648083808b

    SHA512

    3c80a6c70581645fe52d63ff8f6c1345840513084460433b26e9b8f741747d438e14d5e08edad4d67ccefcfbd373a07778768ada05f8a5a133bb330def794d70