ef9f27e6e7672f2033fb24ec69500334fa1c80db9bdb677ccb94a56c641e0260

Analysis

max time kernel
118s
max time network
123s
platform
windows7_x64
resource
win7-20230831-en
resource tags

arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
submitted
18-09-2023 19:35

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

ef9f27e6e7672f2033fb24ec69500334fa1c80db9bdb677ccb94a56c641e0260.exe
Size

3.7MB
MD5

ca48234d8dea0a822025d0b17b7ef2a5
SHA1

e52e04ab102220d67233fea4eeb19231af01150e
SHA256

ef9f27e6e7672f2033fb24ec69500334fa1c80db9bdb677ccb94a56c641e0260
SHA512

ef0b0f6848180ab98b94eda7ba3c6b8e07250e629214a4618d8757fb5f08e2be4a062b775f58eb014a25b59e9a07db2ba5af6aac1a7d5df5d981acaf84c7dcd8
SSDEEP

49152:iDCLomiK+15C6mBPtS3FpAB+r5u8QeKxFOJxdb4vZKVx6:cootK+1k6mLYKdzOJDb4v+x

Score

8^/10

Malware Config

Signatures

Downloads MZ/PE file

Loads dropped DLL 2 IoCs

pid	Process
1940	ef9f27e6e7672f2033fb24ec69500334fa1c80db9bdb677ccb94a56c641e0260.exe
1940	ef9f27e6e7672f2033fb24ec69500334fa1c80db9bdb677ccb94a56c641e0260.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1940	ef9f27e6e7672f2033fb24ec69500334fa1c80db9bdb677ccb94a56c641e0260.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
1940	ef9f27e6e7672f2033fb24ec69500334fa1c80db9bdb677ccb94a56c641e0260.exe

C:\Users\Admin\AppData\Local\Temp\ef9f27e6e7672f2033fb24ec69500334fa1c80db9bdb677ccb94a56c641e0260.exe
"C:\Users\Admin\AppData\Local\Temp\ef9f27e6e7672f2033fb24ec69500334fa1c80db9bdb677ccb94a56c641e0260.exe"
1⤵
- Loads dropped DLL
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1940

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Temp\lite_installer.log

Filesize
4KB

MD5
5d1ad3acaad1545e0f442e750af9d02b

SHA1
546a069f1068190e56358c0dd9ae060a5bb412b9

SHA256
5b1afc077e8f34ebe362067af36967e1b895ab8d3332bd2b6d3434ae2332cd0e

SHA512
e0e0ccb20b7552d7a1210516abc1910a2855b3e0b2fe822d5215771359d38c6119db090cf588e96a98ea8186a211dadffb74b35a1eb7f950980ea3d5c5df74ef

Download Submit
C:\Users\Admin\AppData\Roaming\Yandex\ui

Filesize
38B

MD5
f59fdad11f01da20c08e5322b61d56c2

SHA1
5a9678f95d383d48b8da0c36b0588ac20e47a96c

SHA256
70b31b36aac451af796b9de3fbc590d3892b57546d7e21d38ac67c70efa73ea0

SHA512
9b276a00ffda256e037953d54e3ae4ccee0271e40fd8e0e56b34f19b053d3741a90f9c73a0bfb3646abfaa6e83a4a891e29c8e54b5dabe0d85b0e712489c666d

Download Submit
\Users\Admin\AppData\Local\Temp\yb3295.tmp

Filesize
143.8MB

MD5
41e85a08b909a7b5bb0fcdbab3fd1048

SHA1
1c6f936c04b34b6f93f3361ebdeedaf95faeb77b

SHA256
e341180d389549f84087cf50e85ef2fde6b3870fdf4ec56f32639763f642218b

SHA512
8f1dee3607facf8b6ccad20c8244f33a619512cb23496ede62b2fe413b9caa630db484fb9fbae44aad726f9cc4a66d01f6d4426822453e66e79709e1a257ec5d

Download Submit
\Users\Admin\AppData\Local\Temp\yb3295.tmp

Filesize
143.8MB

MD5
41e85a08b909a7b5bb0fcdbab3fd1048

SHA1
1c6f936c04b34b6f93f3361ebdeedaf95faeb77b

SHA256
e341180d389549f84087cf50e85ef2fde6b3870fdf4ec56f32639763f642218b

SHA512
8f1dee3607facf8b6ccad20c8244f33a619512cb23496ede62b2fe413b9caa630db484fb9fbae44aad726f9cc4a66d01f6d4426822453e66e79709e1a257ec5d

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads