Overview

overview

8

Static

static

3

5e52b020ea...ea.exe

windows7-x64

8

5e52b020ea...ea.exe

windows10-2004-x64

8

Analysis

  • max time kernel
    120s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20230831-en
  • resource tags

    arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
  • submitted
    14/10/2023, 05:09

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target

    5e52b020ea40876aacc290b65ff19b3bf7fb9080b0548ecb08be3afa67eb6eea.exe

  • Size

    4.9MB

  • MD5

    b2a9c876261bc2181cd5c77be30dbbd2

  • SHA1

    84cbd004fb2c684148fd4058319fb92c9d775843

  • SHA256

    5e52b020ea40876aacc290b65ff19b3bf7fb9080b0548ecb08be3afa67eb6eea

  • SHA512

    60a34be69d7c08b8cbe1f19eb4a6fad0f8f248bb2ab48f08cfc509b3a3795cc793a5e3a8af7503282c46dee2d6e83f59a3f6caaedd76f4edf698dcc9b1ee4717

  • SSDEEP

    98304:JmHxs33+rz+kDBre2PUi7KdzOJDb4v+y:MxsTf2MHwN0v+y

Score
8/10

Malware Config

Signatures

  • Downloads MZ/PE file
  • Loads dropped DLL 2 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\5e52b020ea40876aacc290b65ff19b3bf7fb9080b0548ecb08be3afa67eb6eea.exe
    "C:\Users\Admin\AppData\Local\Temp\5e52b020ea40876aacc290b65ff19b3bf7fb9080b0548ecb08be3afa67eb6eea.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:3044

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Local\Temp\Cab34F6.tmp
          Filesize

          61KB

          MD5

          f3441b8572aae8801c04f3060b550443

          SHA1

          4ef0a35436125d6821831ef36c28ffaf196cda15

          SHA256

          6720349e7d82ee0a8e73920d3c2b7cb2912d9fcf2edb6fd98f2f12820158b0bf

          SHA512

          5ba01ba421b50030e380ae6bbcd2f681f2a91947fe7fedb3c8e6b5f24dce9517abf57b1cf26cc6078d4bb53bde6fcfb2561591337c841f8f2cb121a3d71661b9

          Download Submit

        • C:\Users\Admin\AppData\Local\Temp\lite_installer.log
          Filesize

          4KB

          MD5

          9f727bcfe77f1ac814ecbeb1ab385321

          SHA1

          f76beb5f23ffae5c2f217a9d15fb441c4cb6a9aa

          SHA256

          6ee476526a77be8884d591aa70cb7b49b2e27fb664ea0592614496487bba048b

          SHA512

          7cf835f0df59db79b307dd2b3bca12be6211d0648e92e57542ea63aa46c455b55cd7fb936af5b40d4b64780b24cbbba2a63db83d208398c301807ed08a67b820

          Download Submit

        • C:\Users\Admin\AppData\Roaming\Yandex\ui
          Filesize

          38B

          MD5

          2647710a0209bb50a6d4c48f18ac3675

          SHA1

          5bb45cc556d19bd8ab40284a2d548b6e550d86ff

          SHA256

          4a1469414a906ba4abedcaff6b1500b54a72b88ebb1466ad5cdac18eb04fad7a

          SHA512

          b8e1c6296f35bd6a2efaf85d2875e3133815ff47b99b90251535c78d4d1a18304850341162c0f2c9d6dcb99859b1cf90a944eb358f7d7a0a488417a10e0fe095

          Download Submit

        • \Users\Admin\AppData\Local\Temp\yb2FB8.tmp
          Filesize

          143.1MB

          MD5

          036b2f7390449bf5e629e6b971341322

          SHA1

          e18a2c46baafa9d42a976e4e7113bb6674cfb5d3

          SHA256

          37bd0d324c8b6d88c2ceb9d134af62d8142bab4189402767429e325801bc79dd

          SHA512

          75639c212f834d6c7a527706e9567ceea4e00dd080f21bc97cfd5e9e7ae7fff097c47f653023db50eb550779f3f8ce069fb4df7435780b58493cc75fb0fc8887

          Download Submit

        • \Users\Admin\AppData\Local\Temp\yb2FB8.tmp
          Filesize

          143.1MB

          MD5

          036b2f7390449bf5e629e6b971341322

          SHA1

          e18a2c46baafa9d42a976e4e7113bb6674cfb5d3

          SHA256

          37bd0d324c8b6d88c2ceb9d134af62d8142bab4189402767429e325801bc79dd

          SHA512

          75639c212f834d6c7a527706e9567ceea4e00dd080f21bc97cfd5e9e7ae7fff097c47f653023db50eb550779f3f8ce069fb4df7435780b58493cc75fb0fc8887

          Download Submit