88418205ad303c208f27e1efeef81032ce7373d0d005cdbe4d890d7351b5674c | Triage™

Analysis

max time kernel
15s
max time network
18s
platform
windows10-1703_x64
resource
win10-20240404-en
resource tags

arch:x64arch:x86image:win10-20240404-enlocale:en-usos:windows10-1703-x64system
submitted
01/05/2024, 00:51

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
hacked client (rats) LMAO/Lithium-Lite.exe
Size 890KB
Sample240501-a7ksaadf64
SHA256 d8911b82b4afe86b6e78d7b52a5ee77f5f879bc98d5ada1d4acfdb4286955791
MD5 83332fe00134c250f148e0a94678505d
SHA1 1addaf46f648f405597e3a529498e62c468c481e
SHA512 e7896ce67d0e027fece52aa03da5e43cd9d76e109695619e1be97c0bda4090de952c4be1fc1565c73e2d55d818b7faafbd7dc8d470def8774dc42be5a97ae8e7
SSDEEP 12288:dlojVjiZbVxU8/UvSAYiSRy7pA2PicwVgMBJzxHRWDonobOnS8E9Q:/OGUgsSAYippAmifPeefnSb9
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

Suspicious behavior: EnumeratesProcesses 64 IoCs

pid	Process
2668	Lithium-Lite.exe
2668	Lithium-Lite.exe
2668	Lithium-Lite.exe
2668	Lithium-Lite.exe
2668	Lithium-Lite.exe
2668	Lithium-Lite.exe
2668	Lithium-Lite.exe
2668	Lithium-Lite.exe
2668	Lithium-Lite.exe
2668	Lithium-Lite.exe
2668	Lithium-Lite.exe
2668	Lithium-Lite.exe
2668	Lithium-Lite.exe
2668	Lithium-Lite.exe
2668	Lithium-Lite.exe
2668	Lithium-Lite.exe
2668	Lithium-Lite.exe
2668	Lithium-Lite.exe
2668	Lithium-Lite.exe
2668	Lithium-Lite.exe
2668	Lithium-Lite.exe
2668	Lithium-Lite.exe
2668	Lithium-Lite.exe
2668	Lithium-Lite.exe
2668	Lithium-Lite.exe
2668	Lithium-Lite.exe
2668	Lithium-Lite.exe
2668	Lithium-Lite.exe
2668	Lithium-Lite.exe
2668	Lithium-Lite.exe
2668	Lithium-Lite.exe
2668	Lithium-Lite.exe
2668	Lithium-Lite.exe
2668	Lithium-Lite.exe
2668	Lithium-Lite.exe
2668	Lithium-Lite.exe
2668	Lithium-Lite.exe
2668	Lithium-Lite.exe
2668	Lithium-Lite.exe
2668	Lithium-Lite.exe
2668	Lithium-Lite.exe
2668	Lithium-Lite.exe
2668	Lithium-Lite.exe
2668	Lithium-Lite.exe
2668	Lithium-Lite.exe
2668	Lithium-Lite.exe
2668	Lithium-Lite.exe
2668	Lithium-Lite.exe
2668	Lithium-Lite.exe
2668	Lithium-Lite.exe
2668	Lithium-Lite.exe
2668	Lithium-Lite.exe
2668	Lithium-Lite.exe
2668	Lithium-Lite.exe
2668	Lithium-Lite.exe
2668	Lithium-Lite.exe
2668	Lithium-Lite.exe
2668	Lithium-Lite.exe
2668	Lithium-Lite.exe
2668	Lithium-Lite.exe
2668	Lithium-Lite.exe
2668	Lithium-Lite.exe
2668	Lithium-Lite.exe
2668	Lithium-Lite.exe

C:\Users\Admin\AppData\Local\Temp\hacked client (rats) LMAO\Lithium-Lite.exe
"C:\Users\Admin\AppData\Local\Temp\hacked client (rats) LMAO\Lithium-Lite.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:2668

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads