Overview

overview

8

Static

static

3

831cadcc5e...89.exe

windows7-x64

8

831cadcc5e...89.exe

windows10-2004-x64

8

Analysis

  • max time kernel
    119s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20230712-en
  • resource tags

    arch:x64arch:x86image:win7-20230712-enlocale:en-usos:windows7-x64system
  • submitted
    23/08/2023, 06:02

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    831cadcc5e0cdea170f1af51e6b75480aaa1a105f3c9dbf5bc7701ae4da58d89.exe
  • Size 4.5MB
  • Sample230823-grthtabg31
  • SHA256 831cadcc5e0cdea170f1af51e6b75480aaa1a105f3c9dbf5bc7701ae4da58d89
  • MD5 SHA1 SHA512 SSDEEP
Score
8/10

Malware Config

Signatures

  • Downloads MZ/PE file
  • Loads dropped DLL 2 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\831cadcc5e0cdea170f1af51e6b75480aaa1a105f3c9dbf5bc7701ae4da58d89.exe
    "C:\Users\Admin\AppData\Local\Temp\831cadcc5e0cdea170f1af51e6b75480aaa1a105f3c9dbf5bc7701ae4da58d89.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1580

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        lite_installer.log
        • Path C:\Users\Admin\AppData\Local\Temp\lite_installer.log
        • Size 865B
        • SHA256 67d5e34d01d95ca421c05279ff30a163e035378c4d0e85fb40684f2e7b3509f6
        • MD5 SHA1 SHA512
        Submit Download

        lite_installer.log
        • Path C:\Users\Admin\AppData\Local\Temp\lite_installer.log
        • Size 7KB
        • SHA256 d350b0e4cebb965601b356f69ef71158a8afc46efe9ffbf69ee2269c02968aa9
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        ui
        • Path C:\Users\Admin\AppData\Roaming\Yandex\ui
        • Size 38B
        • SHA256 f6791df53d8ff328562afc0262a3db93c5d9f7483c8bac1a3e92cfc47c488e84
        • MD5 SHA1 SHA512
        Submit Download

        yb92FC.tmp
        • Path \Users\Admin\AppData\Local\Temp\yb92FC.tmp
        • Size 129.8MB
        • SHA256 c54ee5e9df39d78f2cd3fd6881e420e6d56c317b1aabf869686c6c40f9981b71
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        yb92FC.tmp
        • Path \Users\Admin\AppData\Local\Temp\yb92FC.tmp
        • Size 129.8MB
        • SHA256 c54ee5e9df39d78f2cd3fd6881e420e6d56c317b1aabf869686c6c40f9981b71
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download