Analysis

  • max time kernel
    121s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20231020-en
  • resource tags

    arch:x64arch:x86image:win7-20231020-enlocale:en-usos:windows7-x64system
  • submitted
    11/12/2023, 18:00

General

  • Target

    5ad9f94f3332c1f6a6f7d97b85cb39a61d8da0ae4175fa7f739b20605ee4c234.exe

  • Size

    4.7MB

  • MD5

    df8636e5487b0307a06a5ce4df693bd7

  • SHA1

    3f3ded49701b007b95e14279777f2b1c149439d1

  • SHA256

    5ad9f94f3332c1f6a6f7d97b85cb39a61d8da0ae4175fa7f739b20605ee4c234

  • SHA512

    f4e6b8dac3db95b8ccde59bbbc75718541ff4fccfbf0a1797f4c445822c19bf927f8ef2279c7ec774f61094a72afcfc4f223650ef082b8128337829694de0547

  • SSDEEP

    49152:dc2XwJXdAk1PBOldp9rEbjB/hKTYYd6zTaMubLmjVPU5+r5u8QeKxFOJxdb4vZKN:pXwJNf1pip9AbjBwsaMW6KdzOJDb4v+

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\5ad9f94f3332c1f6a6f7d97b85cb39a61d8da0ae4175fa7f739b20605ee4c234.exe
    "C:\Users\Admin\AppData\Local\Temp\5ad9f94f3332c1f6a6f7d97b85cb39a61d8da0ae4175fa7f739b20605ee4c234.exe"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1684

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    5KB

    MD5

    b0723e4ee7c8e121b2f8a4f12ca05194

    SHA1

    c81ce5be0cd60ce93f834e38299954e7f5a57be7

    SHA256

    a01d1dd843ac008bb2c207a26a3d872a7141af36f51efad8c0f85dc58902aebc

    SHA512

    04dc434d1bafeb3500a04ee1e4d5655e46760c75b64e1d25f900396b343a6662d1191388ecbe84be946a49d946bbabebeb0876a95def7a8b189b9fc5baae0e19

  • C:\Users\Admin\AppData\Roaming\Yandex\ui

    Filesize

    38B

    MD5

    14dbda277cdaae1aec0b35a9455e37cf

    SHA1

    dbf05b5941e2a718af7df52e96b4cf22ed754a1f

    SHA256

    880d47e8b00afb1b592d32a9aeb0b802ca5a97b5fe2235f2bd310dccfc6cb64b

    SHA512

    991187cd6395c74f6ebbfbdf93cd3a6fc120824f1dd08efc9007965626808deea9de66d83115d9985465c7c48c7d9cf9ba9fe61024fe2450c7f036245958c618