Overview

overview

8

Static

static

3

25d207aa5a...c7.exe

windows7-x64

8

25d207aa5a...c7.exe

windows10-2004-x64

8

Analysis

  • max time kernel
    127s
  • max time network
    150s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    07-01-2024 13:07

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    25d207aa5ad2673319c12507b8935f8afb9b521366c58096cd23d849483be3c7.exe

  • Size

    5.1MB

  • MD5

    2efe79f30292fdee9e88743b7e58d981

  • SHA1

    2e50faa346bba7df5422f79fd1729212a4fa6be1

  • SHA256

    25d207aa5ad2673319c12507b8935f8afb9b521366c58096cd23d849483be3c7

  • SHA512

    782be94cb852120d17c8ea293a8b5f82283e1cd97a90e04cefac1ca442cd3746a617c9c0b89ffd19b37e46289b357dd4b78a3bf63d8368c11a6a7f1d84263b73

  • SSDEEP

    98304:8HenYKGxUcl3nT86Ytacv5Se1KdzOJDb4v+u:8Hr/YtacvuwN0v+u

Score
8/10

Malware Config

Signatures

  • Downloads MZ/PE file
  • Loads dropped DLL 2 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\25d207aa5ad2673319c12507b8935f8afb9b521366c58096cd23d849483be3c7.exe
    "C:\Users\Admin\AppData\Local\Temp\25d207aa5ad2673319c12507b8935f8afb9b521366c58096cd23d849483be3c7.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious use of SetWindowsHookEx
    PID:2516

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log
    Filesize

    3KB

    MD5

    204a72a928a405daa34cf19813ba1a42

    SHA1

    dd776a263b86941622358188a9041afd49eac833

    SHA256

    62959cc80968ed742795cfbb8bd5b8fcd0114baab879cd3da32cdd2607401690

    SHA512

    b828643ae7ee5258722bed8d389ea357d27320bf2aa94eb12c84020dd14bb809cb2c1997f2fa39552e199b5b15072b15f65d20a003879de36e9854fc4c068f5e

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log
    Filesize

    3KB

    MD5

    973d3d20b6059fb03cdf47d72c501062

    SHA1

    c49529faaef5fa2dc02c2f8927ecb2744016fa63

    SHA256

    983bdcc0255ec5a945057b5400638d4daf4b79ab8fbdec5b707b88ab5f3f7559

    SHA512

    f1f666078a0e7d4da36f7dd1883eaf59da024b262360b637bf2c0eea4f275a042aa290b57efc6e759b0a90eb2bc9d357a62930032e25709b5d4b8f46907b6a3d

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log
    Filesize

    4KB

    MD5

    c5ab2a438f9f2dad242eef73c18bf239

    SHA1

    a8e3d05a434b5128605f198ae7d20da4e86c3de4

    SHA256

    4e9dda38294f16a07419c9e5863fa97f3dc1c1267e134176fe5d8bd05171d821

    SHA512

    89b1b198fa17a2fda4f972d26061b087c11f3323ac91e47183139ccdbe4d03d0f84db1d4c27a97249f60b803597ce171b25c11df3563380055758012023f3ee2

    Download Submit

  • C:\Users\Admin\AppData\Roaming\Yandex\ui
    Filesize

    38B

    MD5

    e5cac2a72d34bd7173bc11411fe1c9ab

    SHA1

    fc71cc0f31d688f636dd60bd054cdcc0a6b97820

    SHA256

    215b32d14b7edf15a62ebc7e3e36330cb147927b849eac5843cf2415a173c975

    SHA512

    ec1394c15a12db750cf689aa2a434193c80e6f5afa24f40f772a34f341bf1c0116902490a4e460b3c8a53be4fb92ccf25225538a104a3577b6b6a9945786d80a

    Download Submit

  • \Users\Admin\AppData\Local\Temp\yb72DF.tmp
    Filesize

    141.6MB

    MD5

    e21114d0712a77832cd729b637aff3ff

    SHA1

    5e9575804a4279d59d66d91e805dbafd14a8c88d

    SHA256

    a11cdce809361cb62347137a921ab3c2ea7424266326daec0b1d3d4ec9ac7bc1

    SHA512

    91c7dc36d698d16c7f078c0656ef6d43f611f4e5844e7d1fef6e88983d94fdc08307c3e4668b798f484908d4c02b197fac7dccdf3105e929ac90d92b5ed9f6ba

    Download Submit

  • \Users\Admin\AppData\Local\Temp\yb72DF.tmp
    Filesize

    5.9MB

    MD5

    24076a4c00248f538acc35068f377b1b

    SHA1

    c5bdf6fba544817f43c232e8a0d0c52171ceecd2

    SHA256

    354ff2bbb2eed92d873f1007ace07d974ec0a848389b84a2bb0880a7c0e15191

    SHA512

    dd0f214532da9aaee77df80257256c60b46e38080cfc0176af2b4fdda60dcc485c6ed37c65b72f2abe1dfa523cd0b449fa05ad226ea83fedc0708ab5c03deb99

    Download Submit