220984cb3b923dcb0b389039238748b33e9dfa703d7924131b0c5e9491583c89

Analysis

max time kernel
121s
max time network
125s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
24/02/2024, 02:34

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

220984cb3b923dcb0b389039238748b33e9dfa703d7924131b0c5e9491583c89.exe
Size

7.5MB
MD5

8f7323e6b3f78692fb5d15bc0a647971
SHA1

074725e47d5403bd3794057688fc6aaba64957fd
SHA256

220984cb3b923dcb0b389039238748b33e9dfa703d7924131b0c5e9491583c89
SHA512

41b1cc7c1072b315171442cf68ae28438b9db80fc2cd8c134bcb96dbf561433f5ecd03d0954713f98cdea443c0c0f3128463f6cda7f8721749d9ab23dc8ece56
SSDEEP

98304:5Bgn2qZd5Gr5aLTdAmfcXID954YOh8NbFPCQwDfWw08dGODav43c9NO:SZd5sQcXkL4YOeNly7W38NDaW8NO

Score

8^/10

Malware Config

Signatures

Downloads MZ/PE file

Loads dropped DLL 2 IoCs

pid	Process
1928	220984cb3b923dcb0b389039238748b33e9dfa703d7924131b0c5e9491583c89.exe
1928	220984cb3b923dcb0b389039238748b33e9dfa703d7924131b0c5e9491583c89.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
1928	220984cb3b923dcb0b389039238748b33e9dfa703d7924131b0c5e9491583c89.exe

C:\Users\Admin\AppData\Local\Temp\220984cb3b923dcb0b389039238748b33e9dfa703d7924131b0c5e9491583c89.exe
"C:\Users\Admin\AppData\Local\Temp\220984cb3b923dcb0b389039238748b33e9dfa703d7924131b0c5e9491583c89.exe"
1⤵
- Loads dropped DLL
- Suspicious use of SetWindowsHookEx
PID:1928

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Temp\lite_installer.log

Filesize
3KB

MD5
f23935cc76d027a9c12cdfaa23219a2f

SHA1
d4927854ce373291ce7b8465f4bc16f00dbb092b

SHA256
9aa17b5d534f276f27d971c2a21b95c9a630958e3a3c5f1927c0b874e783e513

SHA512
8fa29ca412a7bd04825fe041249c1e96dd57be8554857a1cf10e7954b855a92e1244d284fee1a18ae8f8eb804d4a7d9b9b1f8d4ef3913df11e3065726ade184d

Download Submit
C:\Users\Admin\AppData\Local\Temp\lite_installer.log

Filesize
3KB

MD5
5fca83a333f52406d740074d1f01dee3

SHA1
7b1fda204be930f37556762e7f274e215083a525

SHA256
44d1b953cd76de7a35af01c2a4cab25fc4faa9bc194001d05e257c1831ed2750

SHA512
8a71ca53d2f9d2ca3045d23e2b8a5de87ea03fd85323af7d64f2f6ffafa028c575ee35201bc10236f4009408fdeb2bd4c5d98ca37b010f799da34ad0cbe5e85f

Download Submit
C:\Users\Admin\AppData\Local\Temp\lite_installer.log

Filesize
4KB

MD5
ed2b2ba4fcdc1456eba2c822e65b087c

SHA1
f465ac718a6e0d1791f8b41dab1f9504286f5ee2

SHA256
442d201f037532060db49303a99f0261ba7b1dfb53e6ec6e82dd719befefa0ae

SHA512
e03f02c388cba64997cccba18e697178c0a4a944f89d9f90ef6073ded8f13cef41051036c5d0467484758901d9269b2ec9c6b5ffa557f3d85956cbb118bf67c7

Download Submit
C:\Users\Admin\AppData\Roaming\Yandex\ui

Filesize
38B

MD5
643b41a65ac6051fd86252785122255f

SHA1
37a7040530d600555ad4b9100338f8913b710d56

SHA256
50c5c2ea06aca6a32b2b4c1adfefa39ccc017076832a6baf2b34d13f4f245f7a

SHA512
4f76f0b0f69929b4c33eda51318003618e103c96c4648cf61f6fae8fe55edef6a3374c5c792afeaf3505ac9cf3e6909c12132ab9e4cbdf62d3055782f73a3af7

Download Submit
\Users\Admin\AppData\Local\Temp\yb30C1.tmp

Filesize
528KB

MD5
a09b63692e81e2625bcb60744c317c0b

SHA1
3e44f4bf8867d5085a5db4d89c72027da4d117e9

SHA256
eb0122477a3670376a4de221645be82fb13b5c8e58dac344d3ad8a22ac247479

SHA512
586863d84866c8f0001927617d9be063bbd1a14ecad501c1a493c0409cfbfbcfd066d79ee7b141ca25dccd85ae0a9c6687ba12df4d8ba5f793ae97fdad64f534

Download Submit
\Users\Admin\AppData\Local\Temp\yb30C1.tmp

Filesize
322KB

MD5
2f03c58be998604409645d1ab6ffd16b

SHA1
c39cb57ec55dc7c1539cae628c5a618e5d3a2848

SHA256
95ea481b98fb52c96ba66be73b68fc45099be865d2564dccf68540f7df8b691e

SHA512
d7629d8a567fa05d7ebd95443b1bad3d8645ae4b68de8ae6e896914ed1512814b91a3caaddccbf18b07762b2e2ed658aee2a71c71cf38f9250d582a53f41a09a

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads