88418205ad303c208f27e1efeef81032ce7373d0d005cdbe4d890d7351b5674c | Triage

Analysis

max time kernel
15s
max time network
18s
platform
windows10-1703_x64
resource
win10-20240404-en
resource tags

arch:x64arch:x86image:win10-20240404-enlocale:en-usos:windows10-1703-x64system
submitted
01-05-2024 00:51

Sharing

Report Analysis Logs

General

Target

hacked client (rats) LMAO/Lithium-Lite.exe
Size

890KB
MD5

83332fe00134c250f148e0a94678505d
SHA1

1addaf46f648f405597e3a529498e62c468c481e
SHA256

d8911b82b4afe86b6e78d7b52a5ee77f5f879bc98d5ada1d4acfdb4286955791
SHA512

e7896ce67d0e027fece52aa03da5e43cd9d76e109695619e1be97c0bda4090de952c4be1fc1565c73e2d55d818b7faafbd7dc8d470def8774dc42be5a97ae8e7
SSDEEP

12288:dlojVjiZbVxU8/UvSAYiSRy7pA2PicwVgMBJzxHRWDonobOnS8E9Q:/OGUgsSAYippAmifPeefnSb9

Score

1^/10

Malware Config

Signatures

Suspicious behavior: EnumeratesProcesses 64 IoCs

Processes:

Lithium-Lite.exe

pid	process
2668	Lithium-Lite.exe
2668	Lithium-Lite.exe
2668	Lithium-Lite.exe
2668	Lithium-Lite.exe
2668	Lithium-Lite.exe
2668	Lithium-Lite.exe
2668	Lithium-Lite.exe
2668	Lithium-Lite.exe
2668	Lithium-Lite.exe
2668	Lithium-Lite.exe
2668	Lithium-Lite.exe
2668	Lithium-Lite.exe
2668	Lithium-Lite.exe
2668	Lithium-Lite.exe
2668	Lithium-Lite.exe
2668	Lithium-Lite.exe
2668	Lithium-Lite.exe
2668	Lithium-Lite.exe
2668	Lithium-Lite.exe
2668	Lithium-Lite.exe
2668	Lithium-Lite.exe
2668	Lithium-Lite.exe
2668	Lithium-Lite.exe
2668	Lithium-Lite.exe
2668	Lithium-Lite.exe
2668	Lithium-Lite.exe
2668	Lithium-Lite.exe
2668	Lithium-Lite.exe
2668	Lithium-Lite.exe
2668	Lithium-Lite.exe
2668	Lithium-Lite.exe
2668	Lithium-Lite.exe
2668	Lithium-Lite.exe
2668	Lithium-Lite.exe
2668	Lithium-Lite.exe
2668	Lithium-Lite.exe
2668	Lithium-Lite.exe
2668	Lithium-Lite.exe
2668	Lithium-Lite.exe
2668	Lithium-Lite.exe
2668	Lithium-Lite.exe
2668	Lithium-Lite.exe
2668	Lithium-Lite.exe
2668	Lithium-Lite.exe
2668	Lithium-Lite.exe
2668	Lithium-Lite.exe
2668	Lithium-Lite.exe
2668	Lithium-Lite.exe
2668	Lithium-Lite.exe
2668	Lithium-Lite.exe
2668	Lithium-Lite.exe
2668	Lithium-Lite.exe
2668	Lithium-Lite.exe
2668	Lithium-Lite.exe
2668	Lithium-Lite.exe
2668	Lithium-Lite.exe
2668	Lithium-Lite.exe
2668	Lithium-Lite.exe
2668	Lithium-Lite.exe
2668	Lithium-Lite.exe
2668	Lithium-Lite.exe
2668	Lithium-Lite.exe
2668	Lithium-Lite.exe
2668	Lithium-Lite.exe

C:\Users\Admin\AppData\Local\Temp\hacked client (rats) LMAO\Lithium-Lite.exe
"C:\Users\Admin\AppData\Local\Temp\hacked client (rats) LMAO\Lithium-Lite.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:2668

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...