3e27b700795ceb40bcf3de5028816460efdf306d14504e10d0e50169723f87a9

Analysis

max time kernel
119s
max time network
124s
platform
windows7_x64
resource
win7-20230712-en
resource tags

arch:x64arch:x86image:win7-20230712-enlocale:en-usos:windows7-x64system
submitted
16/08/2023, 10:07

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

3e27b700795ceb40bcf3de5028816460efdf306d14504e10d0e50169723f87a9.exe
Size

4.4MB
MD5

c6df58e9cbf576845b547040379cc411
SHA1

d3c440086ad0956afdf2ca61fcab1b53c03ce475
SHA256

3e27b700795ceb40bcf3de5028816460efdf306d14504e10d0e50169723f87a9
SHA512

5ac4f3972caca8a7cc9ec60fa80c4a5bff9a6c0668784c0240dc0c2b1110e7fb2d06f5b9cff38a6eed930e1b0be828140e36f53967181acec32249ffdc73c283
SSDEEP

98304:F95xjBWDLaMaG0Or4sniiqG92KdzOJDb4v+g:TfWEOmiq4wN0v+

Score

8^/10

Malware Config

Signatures

Downloads MZ/PE file

Loads dropped DLL 2 IoCs

pid	Process
2348	3e27b700795ceb40bcf3de5028816460efdf306d14504e10d0e50169723f87a9.exe
2348	3e27b700795ceb40bcf3de5028816460efdf306d14504e10d0e50169723f87a9.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2348	3e27b700795ceb40bcf3de5028816460efdf306d14504e10d0e50169723f87a9.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
2348	3e27b700795ceb40bcf3de5028816460efdf306d14504e10d0e50169723f87a9.exe

C:\Users\Admin\AppData\Local\Temp\3e27b700795ceb40bcf3de5028816460efdf306d14504e10d0e50169723f87a9.exe
"C:\Users\Admin\AppData\Local\Temp\3e27b700795ceb40bcf3de5028816460efdf306d14504e10d0e50169723f87a9.exe"
1⤵
- Loads dropped DLL
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2348

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Temp\lite_installer.log

Filesize
1KB

MD5
bad21cd5b38bbeb903856b08dca673b3

SHA1
c823890c04aed53414c522b347f67ed4e0db9bbe

SHA256
a6715a4015af73490c5a659bf676502624f7bc4b4fd5924a52581eb8bd588363

SHA512
237499f6dc70ed85d990dec19512bcbbfe5a62f27b22729064ebd5294c3ae10c3eeed28477b3cb16a5f69125272df66c1338a5c4f935d16947a3afa74a6d9867

Download Submit
C:\Users\Admin\AppData\Local\Temp\lite_installer.log

Filesize
7KB

MD5
d97b2c4dfb5853645fe040c56c579378

SHA1
9203efbba1dc3c6c2309cd9ea4a45264088c9556

SHA256
7ba76dd2c7c397c583c7806531ccf704de431e377c010dd72c76fa9b1772a4b7

SHA512
16198e8af779110de8e6d44de02dbbd1eb70930c8a8021a0931d689b6d634e4b09d138af15b8f84fd69b1656a1aafaec3f74dedd95f096ec9f1ca4aceeaedc4c

Download Submit
C:\Users\Admin\AppData\Roaming\Yandex\ui

Filesize
38B

MD5
939df216eab8bfad3012be959818081d

SHA1
144ac3074c5183b56a31561f07fb78f4eb9e2487

SHA256
38674f7883761f27420eefb90e0fdf7ef6c22facb9d6bb6347d59b0edce6011a

SHA512
453ba3ab773725b8ee877d10542608c7a2352900d26a14fd5e6d96acdf4539f8cf2e9baadd4d6764efadb70335602cfe96f7281a1a7786413cc008b8a8e4b0ba

Download Submit
\Users\Admin\AppData\Local\Temp\yb85E2.tmp

Filesize
132.5MB

MD5
1ce2fe084095991c36f6b0fef4db5084

SHA1
271960fb20c9d48f2794dc472d5333869845177b

SHA256
31340c7e1034f633a169ca5b5ea57309af4f641508e582f0889f493cdc1fcd01

SHA512
db07fb508a841cfd1ec52f23e27d16ff97062d2267d109c9f3f3225f9530aea514916f46199300b67bbc1132a575036a1c5ab33009afff01001cd5e8cf9494e1

Download Submit
\Users\Admin\AppData\Local\Temp\yb85E2.tmp

Filesize
132.5MB

MD5
1ce2fe084095991c36f6b0fef4db5084

SHA1
271960fb20c9d48f2794dc472d5333869845177b

SHA256
31340c7e1034f633a169ca5b5ea57309af4f641508e582f0889f493cdc1fcd01

SHA512
db07fb508a841cfd1ec52f23e27d16ff97062d2267d109c9f3f3225f9530aea514916f46199300b67bbc1132a575036a1c5ab33009afff01001cd5e8cf9494e1

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads