Overview

overview

8

Static

static

3

a8a3b3b97a...e5.exe

windows7-x64

8

a8a3b3b97a...e5.exe

windows10-2004-x64

8

Analysis

  • max time kernel
    122s
  • max time network
    130s
  • platform
    windows7_x64
  • resource
    win7-20230712-en
  • resource tags

    arch:x64arch:x86image:win7-20230712-enlocale:en-usos:windows7-x64system
  • submitted
    25/08/2023, 01:00

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target

    a8a3b3b97a4fab575602fa2d91e4cb16db4dfdec7b273d6d007265903f2889e5.exe

  • Size

    4.5MB

  • MD5

    a8ba9e20ed0c3a47af85e44c0263ec73

  • SHA1

    a237896377af4bbfd7224a636a77fbbdc01c1456

  • SHA256

    a8a3b3b97a4fab575602fa2d91e4cb16db4dfdec7b273d6d007265903f2889e5

  • SHA512

    a69925d76bee54b830b0b4aa6c400a85826f69eed600bec8efa656a6c67d8d3a0541f130142c520f25b251abf20369bfeaf614b3de54e2a312cb51d4b3c1ddf6

  • SSDEEP

    98304:ZOLHzIDtxDSK2Qi26im50OORKdzOJDb4v+:qym50OlwN0v+

Score
8/10

Malware Config

Signatures

  • Downloads MZ/PE file
  • Loads dropped DLL 2 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\a8a3b3b97a4fab575602fa2d91e4cb16db4dfdec7b273d6d007265903f2889e5.exe
    "C:\Users\Admin\AppData\Local\Temp\a8a3b3b97a4fab575602fa2d91e4cb16db4dfdec7b273d6d007265903f2889e5.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2388

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Local\Temp\CabD4FE.tmp
          Filesize

          62KB

          MD5

          3ac860860707baaf32469fa7cc7c0192

          SHA1

          c33c2acdaba0e6fa41fd2f00f186804722477639

          SHA256

          d015145d551ecd14916270efad773bbc9fd57fad2228d2c24559f696c961d904

          SHA512

          d62ad2408c969a95550fb87efda50f988770ba5e39972041bf85924275baf156b8bec309ecc6409e5acdd37ec175dea40eff921ab58933b5b5b5d35a6147567c

          Download Submit

        • C:\Users\Admin\AppData\Local\Temp\lite_installer.log
          Filesize

          7KB

          MD5

          aa4ff12da2e4fb5263e0b1962830b7ce

          SHA1

          2a388a70e88ec03b42890d5d5e5b6472d9ae9104

          SHA256

          e2845196b1722fb89d70fe0b4117a0cd644a9e73c0ec3717d548c0e3534a4df3

          SHA512

          1f76d289ae02343ca372e60f6ab46a4960348aedd23d24ef138ddfb5c7db12d1a94312872e2354c6b7cae26af56c82d346408deabef29837ca99259a6c1f11d6

          Download Submit

        • C:\Users\Admin\AppData\Local\Temp\lite_installer.log
          Filesize

          7KB

          MD5

          db714d25f1c90e92c8cb59a5237ed9bc

          SHA1

          e749a17fc3efc82dc393a600636fd23807331968

          SHA256

          ea570f3f9d76e93d776f6f69ac43cc5805d3a68b3ad5872c3587a6b8b5b60c66

          SHA512

          5f4bf67afe5f41c54b51b2fb117c8523e0fee1d43ddee994761854ee4705150c1f5644a5f9e321986c4ff048a8560283f44038b90513d81cb9cf42570d235774

          Download Submit

        • C:\Users\Admin\AppData\Roaming\Yandex\ui
          Filesize

          38B

          MD5

          95911c4c3469b77d29cf30af0a4205bb

          SHA1

          9e4a4075cb50da5ecbbe4a82b4e98454ccf55093

          SHA256

          98cc559d8cea55465ea78753fe8e121ef45e555194822361ce3b1911b36ba793

          SHA512

          ae3498e810df24526fc7cf51bbfb46881be0ced0715abd48e5ce0965ab6d7270bb1f5a2442a75079adfff8d12eddd6defa145470c0ff119350c00c8e50af8cb1

          Download Submit

        • \Users\Admin\AppData\Local\Temp\ybC61D.tmp
          Filesize

          129.8MB

          MD5

          51a534ddfddb68c31a1ba04aa86d5e6d

          SHA1

          25a12cdb763d5cde3d7cfc2717c84a9c9e99c130

          SHA256

          c54ee5e9df39d78f2cd3fd6881e420e6d56c317b1aabf869686c6c40f9981b71

          SHA512

          1f206ad90ed780f65431068da1287dd2201fc5610bda669d3eaaecae48a85d1abd995ca32a6178c7ae1190c552c1eb328f44e0c0fe9cec4099f6f2fcf69b5548

          Download Submit

        • \Users\Admin\AppData\Local\Temp\ybC61D.tmp
          Filesize

          129.8MB

          MD5

          51a534ddfddb68c31a1ba04aa86d5e6d

          SHA1

          25a12cdb763d5cde3d7cfc2717c84a9c9e99c130

          SHA256

          c54ee5e9df39d78f2cd3fd6881e420e6d56c317b1aabf869686c6c40f9981b71

          SHA512

          1f206ad90ed780f65431068da1287dd2201fc5610bda669d3eaaecae48a85d1abd995ca32a6178c7ae1190c552c1eb328f44e0c0fe9cec4099f6f2fcf69b5548

          Download Submit