Analysis

  • max time kernel
    122s
  • max time network
    126s
  • platform
    windows7_x64
  • resource
    win7-20231023-en
  • resource tags

    arch:x64arch:x86image:win7-20231023-enlocale:en-usos:windows7-x64system
  • submitted
    23-11-2023 21:03

General

  • Target

    ad17545f88bd79deccde9cf365a9fa361ea74d304df8cfa7ba906dc50c396313.exe

  • Size

    4.7MB

  • MD5

    c7666ecadde09b2494f51375cb0b06e4

  • SHA1

    d4d1af37283e28ce0e16c1a35540bd423506124b

  • SHA256

    ad17545f88bd79deccde9cf365a9fa361ea74d304df8cfa7ba906dc50c396313

  • SHA512

    62d6c372ab02eba5be6263a8176c8f35f7605c1143404fe26f3acfb356553c46707377048e725dc8e1e67b7d91f3abe309f185dfbc87b9850601049e93d0e813

  • SSDEEP

    98304:d2XeHdZChmK2dhsD6F3Y+IUKdzOJDb4v+k:BdZL3jIDwN0v+k

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\ad17545f88bd79deccde9cf365a9fa361ea74d304df8cfa7ba906dc50c396313.exe
    "C:\Users\Admin\AppData\Local\Temp\ad17545f88bd79deccde9cf365a9fa361ea74d304df8cfa7ba906dc50c396313.exe"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:460

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    4KB

    MD5

    3814a71fa5be4b64eaaa29917f595c28

    SHA1

    2df0348946565325cd2db479d64f201fe2eee006

    SHA256

    07409a09cb134b598088f3316a4b1810385220e56826a9c80124bc11931df5d4

    SHA512

    b3a8350c6dbe1a6e78e951044942fdb412d226b942b4e1a5c401685fc3053da328dc78b569a5d8662e9feb84bf0dbbade1c3bbb49f87509eaaa951125ea52db0

  • C:\Users\Admin\AppData\Roaming\Yandex\ui

    Filesize

    38B

    MD5

    5599cdf98d3181685b5534410b87c359

    SHA1

    8b93fed07c521c6e9ab5402b79f027543088b0e0

    SHA256

    9913819aa09e7758f21c6335c63ad261486daa1559e3724a85190fe99d8935d3

    SHA512

    f2cc71bb0aa4658be0f7b03482b9a21293dc5a3cf42a5f42a3c27b5093f6c54494e40274c4780396701bf4aa0d1b52411aa164af404be0dd8a7f8547a3040af4