Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    121s
  • max time network
    147s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    05/10/2024, 05:55

General

  • Target

    b3a0d9dc3a7ebe0f9a31acea02134e1577c476c282ae67d0d5a5520c8fa4f4fc.exe

  • Size

    11.0MB

  • MD5

    ba46dd7c30fd1f01578683dd1fb92253

  • SHA1

    a8185dadf6221fba2656f1572e621527150eda50

  • SHA256

    b3a0d9dc3a7ebe0f9a31acea02134e1577c476c282ae67d0d5a5520c8fa4f4fc

  • SHA512

    fe79785d2635b66e329adf1c760fb5befeec3bbb3065c371181b8b6f313cbd015ab868c35252bdc1f2e80b76e924c66e9b1ec88a7562beb4707b33b39c27c933

  • SSDEEP

    196608:pQp60nTosfS0NTxePePDdh0iCULKkOa8z1s6NXuAktmBlU4I4:psnlfRrDjtLKkOa8ps6puAktIz

Score
8/10

Malware Config

Signatures

  • Downloads MZ/PE file
  • Loads dropped DLL 2 IoCs
  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\b3a0d9dc3a7ebe0f9a31acea02134e1577c476c282ae67d0d5a5520c8fa4f4fc.exe
    "C:\Users\Admin\AppData\Local\Temp\b3a0d9dc3a7ebe0f9a31acea02134e1577c476c282ae67d0d5a5520c8fa4f4fc.exe"
    1⤵
    • Loads dropped DLL
    • System Location Discovery: System Language Discovery
    • Suspicious use of SetWindowsHookEx
    PID:2748

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    4KB

    MD5

    3a3b384c130deec84c4a71ab984a95b7

    SHA1

    117664fdcb25ca6591d856effd870fa0400769a9

    SHA256

    de3466d1d3dbbd3f75b465e14fd03b0ab14b70537ca824628067e1c7d78a47c9

    SHA512

    e6915c5aebed833be68f067318374272f3c53829cf89fcb52d70e960dbb52051ad32ee1efc0ba8bf932ab14191a9d5cdbd366b9f56c39edba16345991850f202

  • C:\Users\Admin\AppData\Roaming\Yandex\ui

    Filesize

    38B

    MD5

    cebda9c4dfffbab8b3449459923669ec

    SHA1

    b4cbfafc67513f85f76e5acfcb7082d041210e06

    SHA256

    46195e9edf1f53556febf710044d008bc197482be49ba1e5c4e945abecb86707

    SHA512

    e7b3e634565900fbfbd0c6b7c24d66f0726e77a77a53d43ac3d8562e89ce6b3d1b3504db58d38b349894f335a55cc3d9807ef41331722beb7fed1ad6b6069652