1780525d82831fc63e43ec9e111a38dbb0ba02788012afef0e56c01a3b37845e

Analysis

max time kernel
119s
max time network
124s
platform
windows7_x64
resource
win7-20231020-en
resource tags

arch:x64arch:x86image:win7-20231020-enlocale:en-usos:windows7-x64system
submitted
15-11-2023 20:45

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

1780525d82831fc63e43ec9e111a38dbb0ba02788012afef0e56c01a3b37845e.exe
Size

4.9MB
MD5

88f18fa8dd520a677946bb53fc5ab472
SHA1

d56ab38c4d4629ac0646a4675363a96c52c4c114
SHA256

1780525d82831fc63e43ec9e111a38dbb0ba02788012afef0e56c01a3b37845e
SHA512

e6fd7d532365fb57f86c580c2aaefbd0512dd627c0bb56fe1cab4797e767de041fcbfcc4e7a72f5b1acbd747e66d6cbd89987d3a22f76e7a9e7a7af3fd8efac4
SSDEEP

49152:tHhWJb8R2TOaCZgdVDgCes3jII0Ee9Uc1c70oPBkgoY+r5u8QeKxFOJxdb4vZKV:RhQI4CudV8s3MKI2tkVKdzOJDb4v+

Score

8^/10

Malware Config

Signatures

Downloads MZ/PE file

Loads dropped DLL 2 IoCs

pid	Process
628	1780525d82831fc63e43ec9e111a38dbb0ba02788012afef0e56c01a3b37845e.exe
628	1780525d82831fc63e43ec9e111a38dbb0ba02788012afef0e56c01a3b37845e.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
628	1780525d82831fc63e43ec9e111a38dbb0ba02788012afef0e56c01a3b37845e.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
628	1780525d82831fc63e43ec9e111a38dbb0ba02788012afef0e56c01a3b37845e.exe

C:\Users\Admin\AppData\Local\Temp\1780525d82831fc63e43ec9e111a38dbb0ba02788012afef0e56c01a3b37845e.exe
"C:\Users\Admin\AppData\Local\Temp\1780525d82831fc63e43ec9e111a38dbb0ba02788012afef0e56c01a3b37845e.exe"
1⤵
- Loads dropped DLL
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:628

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Temp\lite_installer.log

Filesize
7KB

MD5
e649581893f56fbc9c5eff890e12eb4d

SHA1
6b6baaa235d00d08602c1ef2b4a5961e7920b91b

SHA256
c976434dd7cf1054d89bb839fdd7f2bdf227cba015bdeca7402cb619bc7f0801

SHA512
4a540f1908b7988ad101d3c7057901b326fe38dab3daa45ec8142a97b7631b2030338634ede9c8caaa2a01a5639e634b726f7004bafd864590d3aa743f26a91a

Download Submit
C:\Users\Admin\AppData\Roaming\Yandex\ui

Filesize
38B

MD5
79289ae2a29cc0a3264264854afed1af

SHA1
ec8617dd2a06a5fd1ce9eac9d757ba28bbf127d7

SHA256
752c40255fb16311356596649c06a8bf995616e8d8defc39f9dc8c610f055966

SHA512
eac04a107d40dd0552a13dc191fef6086ee3a7cd5f7c2837d669833edb2975e1dbfd68d8c36e379fadc5e0a6e143b220c1530b02d65c7b76368be1cbcdc7124c

Download Submit
\Users\Admin\AppData\Local\Temp\yb2F98.tmp

Filesize
140.7MB

MD5
3a6bbe19af05b72490b5410934777d66

SHA1
60abab13ccdc4595361c038524e0e930215bb09f

SHA256
2aca750337db0a3b960ba71080a4c2565cb09dbf739d358ca06982f50ff28a3f

SHA512
754e741e18772358a76bcdf54065f45ff33f49c9499ab9e8c7796362cd60c3a2db589b8477b7c105e64f8d9fdfc44eed4dc1112ec7c5f92a79f8d0c40bd64b94

Download Submit
\Users\Admin\AppData\Local\Temp\yb2F98.tmp

Filesize
140.7MB

MD5
3a6bbe19af05b72490b5410934777d66

SHA1
60abab13ccdc4595361c038524e0e930215bb09f

SHA256
2aca750337db0a3b960ba71080a4c2565cb09dbf739d358ca06982f50ff28a3f

SHA512
754e741e18772358a76bcdf54065f45ff33f49c9499ab9e8c7796362cd60c3a2db589b8477b7c105e64f8d9fdfc44eed4dc1112ec7c5f92a79f8d0c40bd64b94

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads