Analysis
-
max time kernel
119s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
-
submitted
23-05-2024 00:20
General
-
Target
$TEMP/Yandex.exe
-
Size
759KB
-
MD5
10dca0f2258ee6503b93ee5804aa4e2b
-
SHA1
3ba8b580d97510c6c76bd887bb682a5196521a15
-
SHA256
da696514fca4f93ad5bb13971c9a59cdcfce1a4748c80e191a8fc94be7bf0df7
-
SHA512
7d5bf5a7ef912aa6f14746114ed2a17c99fd04db6bc15fe6fec02141d6e17d68eb03c76c2439ab07a4767c6d37a4c268b08b7ffe41c4f123e184a6bbc9a12718
-
SSDEEP
12288:22FONX3LhEUt+g4wRvNvEFUL28WOORsDcRsQHvYd5uzDCZDJjTPwMV0kESO:22FONnL9PvES28WnyQPYqDS9jV0d9
Malware Config
Signatures
-
Downloads MZ/PE file
-
Loads dropped DLL 2 IoCs
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\$TEMP\Yandex.exe"C:\Users\Admin\AppData\Local\Temp\$TEMP\Yandex.exe"1⤵
- Loads dropped DLL
- Suspicious behavior: GetForegroundWindowSpam
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Users\Admin\AppData\Local\Temp\lite_installer.logFilesize
8KB
MD5f5b5d67bcf94823f049a11d7d504c1ed
SHA18de473da7bc54d521bd4e35113124e28c8062084
SHA2569e3d67c4a7f3917d37ebae395bbd85c3c861c9903ca4aba670eb7747c1f3a41b
SHA5123abffe09e180e49db03d54a96512bea9115f58440ebb3728d2f2b60fb0479bf57a2d5bb5ba4626db96235ce81c8dcd6450c7db8e1bcdadc96680cc5a0c294c21
-
C:\Users\Admin\AppData\Local\Temp\lite_installer.logFilesize
2KB
MD5498df3a633199d331e8d4ff917dab680
SHA1d50d0717ab229d49db85072bf7d7a4185fa30d61
SHA2568e7122198a58b207333146fdc700c92b9abee6be158b882bd98e01a4dee945a4
SHA512e5c252554baf25ce40be11e3f7bfe797e27225ca542be5250aa0d616ea9fdf352f0e90b593bc90be07a2038222e4f1597961dc6251e25a92407e1b88445a7e2f
-
memory/1732-60-0x00000000002E0000-0x00000000002E1000-memory.dmpFilesize
4KB
-
memory/1732-86-0x00000000002E0000-0x00000000002E1000-memory.dmpFilesize
4KB