Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    137s
  • max time network
    144s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20241007-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
  • submitted
    18/10/2024, 11:08

General

  • Target

    2b81b4b7f754296cb3a110fcec66e46303af49f7e81ef7f2873121799014b9a9.exe

  • Size

    10.3MB

  • MD5

    f22cceeeba54f88ad53fc2b623303b4c

  • SHA1

    e7fd674a3564c5ff4d5f6bc18006ec4a7986e574

  • SHA256

    2b81b4b7f754296cb3a110fcec66e46303af49f7e81ef7f2873121799014b9a9

  • SHA512

    2ba056db86aa9bd8b1c3dad5c1a4b7878b983dbf1400bb1651b429c546e532d59b485a4b7036a09877be8ee5cc1767181841a9f7463bcf8af645162361379f50

  • SSDEEP

    196608:dXHSVf+6b9oDdh0qTRxa8z1sULDSe9a+5crvT9YqS4lU4I4:dXHuf+6poDjBTRxa8psYSUa+arvSP0z

Score
8/10

Malware Config

Signatures

  • Downloads MZ/PE file
  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2b81b4b7f754296cb3a110fcec66e46303af49f7e81ef7f2873121799014b9a9.exe
    "C:\Users\Admin\AppData\Local\Temp\2b81b4b7f754296cb3a110fcec66e46303af49f7e81ef7f2873121799014b9a9.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious use of SetWindowsHookEx
    PID:3800

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    6KB

    MD5

    1efe66e4ac8c2c06b5cf619ce5632809

    SHA1

    ef5ccbbbcc6c9176d69e1f952ad1df2b811198e4

    SHA256

    da0d0843dbdbc4879306e1646f9fcbc2a7c83b48d252f486e8d64cf4fee243b0

    SHA512

    4f5a7883f6430e1bec1d240263ea310f833b5a9ca452af2e211f5d6586e872077d7073b73b2401e29ccd94c49b12351365d6a68c131f36bcf5a31dfa5bcb9b87

  • C:\Users\Admin\AppData\Roaming\Yandex\ui

    Filesize

    38B

    MD5

    94f2cf6ce8902d9412968256b549cbec

    SHA1

    473021cf6eaf75743a08b63827274e707815cb4d

    SHA256

    f7f845d5f94d3152bb08e3609b5d077812affc9444a076a10c89bdf4b80331ab

    SHA512

    c489fb1d8c28a0c9271677dae24199e00ef2519f31e1f904c731a7030d53fca95637c64c0e379e4e27d56314cd9641f0cc6ca0583fd77992293ec6b7f37e3ed9