2cd4638474119ba7351a993327cb60e3a8f5ac7aa755fa13083dadf61426fa5b

Analysis

max time kernel
118s
max time network
124s
platform
windows7_x64
resource
win7-20230712-en
resource tags

arch:x64arch:x86image:win7-20230712-enlocale:en-usos:windows7-x64system
submitted
29-08-2023 01:05

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

2cd4638474119ba7351a993327cb60e3a8f5ac7aa755fa13083dadf61426fa5b.exe
Size

3.6MB
MD5

3d3a7443f28308f933dc935891831d03
SHA1

3a894e6721fe3409e07a0eaa94de197b45fc2aac
SHA256

2cd4638474119ba7351a993327cb60e3a8f5ac7aa755fa13083dadf61426fa5b
SHA512

eed5c8e77c27d6a65a65c82f9dda101c4e199ce8a9d1d3502f138d927d469a38239af40e37fafbfc47749dbb8362de8f40572724c4d37d075890ae820143ee28
SSDEEP

49152:FhQ8lPzRnZp4y5C6mB0j47cUWB+r5u8QeKxFOJxdb4vZKVU:DllLRnZp4yE6md3KdzOJDb4v+U

Score

8^/10

Malware Config

Signatures

Downloads MZ/PE file

Loads dropped DLL 2 IoCs

pid	Process
2124	2cd4638474119ba7351a993327cb60e3a8f5ac7aa755fa13083dadf61426fa5b.exe
2124	2cd4638474119ba7351a993327cb60e3a8f5ac7aa755fa13083dadf61426fa5b.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2124	2cd4638474119ba7351a993327cb60e3a8f5ac7aa755fa13083dadf61426fa5b.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
2124	2cd4638474119ba7351a993327cb60e3a8f5ac7aa755fa13083dadf61426fa5b.exe

C:\Users\Admin\AppData\Local\Temp\2cd4638474119ba7351a993327cb60e3a8f5ac7aa755fa13083dadf61426fa5b.exe
"C:\Users\Admin\AppData\Local\Temp\2cd4638474119ba7351a993327cb60e3a8f5ac7aa755fa13083dadf61426fa5b.exe"
1⤵
- Loads dropped DLL
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2124

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Temp\Cab7198.tmp

Filesize
62KB

MD5
3ac860860707baaf32469fa7cc7c0192

SHA1
c33c2acdaba0e6fa41fd2f00f186804722477639

SHA256
d015145d551ecd14916270efad773bbc9fd57fad2228d2c24559f696c961d904

SHA512
d62ad2408c969a95550fb87efda50f988770ba5e39972041bf85924275baf156b8bec309ecc6409e5acdd37ec175dea40eff921ab58933b5b5b5d35a6147567c

Download Submit
C:\Users\Admin\AppData\Local\Temp\lite_installer.log

Filesize
1KB

MD5
c138e3880c128f17341a9c54a746e678

SHA1
a172c9e6d862364743ac66f9ffaedc541ea427c0

SHA256
ed7df404ed6a1d7204f18c81308ff56d5b94acf75320027f361b1df7567a14a6

SHA512
85752100dd99d83bfb5c107fb10f330c24037268c1cae0796191d1f75ac66c62c0fecdc257a4a3384d7ad17a88df77ca9d060badfcc7cfd66a8f4306de5fbad7

Download Submit
C:\Users\Admin\AppData\Local\Temp\lite_installer.log

Filesize
5KB

MD5
a9f1d10f4dc045644fad04212fa593bf

SHA1
724e3c1835014fd33b4076182c6a824a43d2f3f7

SHA256
6e16b6664dd2f558d0ca581d534284648895414a1a0f9c7ec8b64bde9ab99c2e

SHA512
592be3bc84698c85b80c0707977e70507fb9efa57005e8fbc1acd2428e2abe2c36fb63abeacf61a8050954f8a913eb4f25bd55982908e058030ede87c68c9b73

Download Submit
C:\Users\Admin\AppData\Roaming\Yandex\ui

Filesize
38B

MD5
feff3bfb293caf63f67e51d622894a25

SHA1
25c3097ae31d3c890ca4795382e51b59d8a77f04

SHA256
8d2b810bd2d88324b4b9f6a78a1d44312a4797952f6d5de8ee71287f4c9a91a9

SHA512
80470b2d652116bdb11e369c6b891ba5243ba5b7f25d4bffe9a33b4e37c129289e217c699ee0b2fafe46b14fa5d40051dba58dce6761b8d0de457c4b5bbda728

Download Submit
\Users\Admin\AppData\Local\Temp\yb6DB1.tmp

Filesize
129.0MB

MD5
db579794312316aa1138d010287a5dd2

SHA1
29aa232b671ea24c281ae1e8e3f4e7620f7c2a22

SHA256
e5104fa04845b01df203c4fd295a2183cce1f688154ef23ed73fd7b000edcfb3

SHA512
d67ae84449d74b5d2426943c4debd381bbb9234f7854b55d64f05472f8de5f7933bece0084bad92ef700d87b902670d5794fcec697135b6d5c22604e6a8e687b

Download Submit
\Users\Admin\AppData\Local\Temp\yb6DB1.tmp

Filesize
129.0MB

MD5
db579794312316aa1138d010287a5dd2

SHA1
29aa232b671ea24c281ae1e8e3f4e7620f7c2a22

SHA256
e5104fa04845b01df203c4fd295a2183cce1f688154ef23ed73fd7b000edcfb3

SHA512
d67ae84449d74b5d2426943c4debd381bbb9234f7854b55d64f05472f8de5f7933bece0084bad92ef700d87b902670d5794fcec697135b6d5c22604e6a8e687b

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads