3b66981578c6d54c7ad1ee253bfccc6115090129543e0764b8bcc23a927fd02b | Triage

Analysis

max time kernel
117s
max time network
121s
platform
windows7_x64
resource
win7-20230712-en
resource tags

arch:x64arch:x86image:win7-20230712-enlocale:en-usos:windows7-x64system
submitted
11-08-2023 15:37

Sharing

Report Analysis Logs

General

Target

Lithium.exe
Size

890KB
MD5

83332fe00134c250f148e0a94678505d
SHA1

1addaf46f648f405597e3a529498e62c468c481e
SHA256

d8911b82b4afe86b6e78d7b52a5ee77f5f879bc98d5ada1d4acfdb4286955791
SHA512

e7896ce67d0e027fece52aa03da5e43cd9d76e109695619e1be97c0bda4090de952c4be1fc1565c73e2d55d818b7faafbd7dc8d470def8774dc42be5a97ae8e7
SSDEEP

12288:dlojVjiZbVxU8/UvSAYiSRy7pA2PicwVgMBJzxHRWDonobOnS8E9Q:/OGUgsSAYippAmifPeefnSb9

Score

1^/10

Malware Config

Signatures

Suspicious behavior: EnumeratesProcesses 34 IoCs

Processes:

Lithium.exe

pid	process
1952	Lithium.exe
1952	Lithium.exe
1952	Lithium.exe
1952	Lithium.exe
1952	Lithium.exe
1952	Lithium.exe
1952	Lithium.exe
1952	Lithium.exe
1952	Lithium.exe
1952	Lithium.exe
1952	Lithium.exe
1952	Lithium.exe
1952	Lithium.exe
1952	Lithium.exe
1952	Lithium.exe
1952	Lithium.exe
1952	Lithium.exe
1952	Lithium.exe
1952	Lithium.exe
1952	Lithium.exe
1952	Lithium.exe
1952	Lithium.exe
1952	Lithium.exe
1952	Lithium.exe
1952	Lithium.exe
1952	Lithium.exe
1952	Lithium.exe
1952	Lithium.exe
1952	Lithium.exe
1952	Lithium.exe
1952	Lithium.exe
1952	Lithium.exe
1952	Lithium.exe
1952	Lithium.exe

C:\Users\Admin\AppData\Local\Temp\Lithium.exe
"C:\Users\Admin\AppData\Local\Temp\Lithium.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:1952

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads