Overview

overview

8

Static

static

3

a2f2612da7...18.exe

windows7-x64

8

a2f2612da7...18.exe

windows10-2004-x64

8

Analysis

  • max time kernel
    118s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20230831-en
  • resource tags

    arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
  • submitted
    11/10/2023, 06:12

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target

    a2f2612da731822b703dd2ef6d6ac60c6b9929762ddddd8ae02f994e45607b18.exe

  • Size

    6.2MB

  • MD5

    0371424029fe6c4528d7fcda6b0eb7d9

  • SHA1

    3d035f63336b1dbc2323da79990b4e9ec13bdad2

  • SHA256

    a2f2612da731822b703dd2ef6d6ac60c6b9929762ddddd8ae02f994e45607b18

  • SHA512

    24b2685ccd9c32e5a57dfcd533725118105adda7a57f8d50ebc5e3c50361d925b0745f0b7f315ce9ade3591d4a6aaaa028830c51e3b809c73641971c60c398dd

  • SSDEEP

    98304:TwdXBZ2/5fbjORDfIOXo55uwHruHhuDloKdzOJDb4v+2h:ikALY5zruHmJwN0v+

Score
8/10

Malware Config

Signatures

  • Downloads MZ/PE file
  • Loads dropped DLL 2 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\a2f2612da731822b703dd2ef6d6ac60c6b9929762ddddd8ae02f994e45607b18.exe
    "C:\Users\Admin\AppData\Local\Temp\a2f2612da731822b703dd2ef6d6ac60c6b9929762ddddd8ae02f994e45607b18.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1076

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Local\Temp\lite_installer.log
          Filesize

          1KB

          MD5

          b5695be44cd318b52c92ad79a7c9451e

          SHA1

          5ea0a86cbddc603874253516d59005b33e9dbba8

          SHA256

          622740111ce223b95bedecc0d9329c83e8e968363b9c60151880630829ff0c34

          SHA512

          1e183cfe0cc538e4daa8d25db7213bd5fc3af32ac957ce45d874e5374e528b36db71cbb74f30da8afca29c7b6dc364723b4e171bee39886cd555f2e5b9c97707

          Download Submit

        • C:\Users\Admin\AppData\Local\Temp\lite_installer.log
          Filesize

          5KB

          MD5

          3542bf6fb3781ad0f44c178839af1b05

          SHA1

          89128925fdd51247e3c299acda88fb7f591a12e6

          SHA256

          d7a9be47ce5087072ca180e2871030f88127e2435520caf2b0c813115a18db52

          SHA512

          38b81cd1a9e7da0cb3d74cc67267ab1482bc6298e112edf5a5deecc6120304dbb57f22ecf8c2c37800f4dee708eb91b5a490427f122c0c8b1dfe0bc90eaa2af7

          Download Submit

        • C:\Users\Admin\AppData\Local\Temp\lite_installer.log
          Filesize

          6KB

          MD5

          554ddc9c5894a72640956eb67cf0a1ce

          SHA1

          5ad165d6c3d633b59789c860c2b081c75a7819d4

          SHA256

          537844a2ebcf13cae4496abbb096cee44ce183a8fe2f875d7dac59481944129e

          SHA512

          f463115ed5d7f71759b65afda7202b9d824ccc4c7762232d85cebdd9e23d9ac15cf61ebcf88742fec2e9de4ae8965a0509d6de2dfb2e856564ca57ea2c21acd5

          Download Submit

        • C:\Users\Admin\AppData\Roaming\Yandex\ui
          Filesize

          38B

          MD5

          940b5aa3deb3c15ca3342aedc8a77672

          SHA1

          1071b2e6d20f416cc8252b9d4e661a6f840747f1

          SHA256

          4170482f3f0bc216c00c6c0ad466055512081ec948b030dcc29ab59658fec06b

          SHA512

          71628aff0ca442e5a4100660fa830877199c753226ad5eed5d193e7b240cd57d539a403ee43faa07060e2c06d04eee9a4e175bcd37201a0034bc49eb032e7917

          Download Submit

        • \Users\Admin\AppData\Local\Temp\yb8C96.tmp
          Filesize

          143.1MB

          MD5

          64ab3ce8df581e1e0dd5691d2e6248de

          SHA1

          ca1b4b7baf7a70393b257a0c552449af43c59d3a

          SHA256

          05065f7ecb1c7d2d85fadeb213663587830e297f5b19b3bb087189393fe25591

          SHA512

          5214e153ef0e40151ba9dc415f7d0fc043ed01db8aac62f1421d688f2315de3ff96cebfb921e1436a168abc7929f601a6cb042ac24bc982b22953ec4e59715ad

          Download Submit

        • \Users\Admin\AppData\Local\Temp\yb8C96.tmp
          Filesize

          143.1MB

          MD5

          64ab3ce8df581e1e0dd5691d2e6248de

          SHA1

          ca1b4b7baf7a70393b257a0c552449af43c59d3a

          SHA256

          05065f7ecb1c7d2d85fadeb213663587830e297f5b19b3bb087189393fe25591

          SHA512

          5214e153ef0e40151ba9dc415f7d0fc043ed01db8aac62f1421d688f2315de3ff96cebfb921e1436a168abc7929f601a6cb042ac24bc982b22953ec4e59715ad

          Download Submit