98d1e9e65b5c404ffb034df779b0b676b205a9bb97074f3149078894c2b1c205

Analysis

max time kernel
117s
max time network
118s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
23-05-2024 06:39

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

Lithium-Nuker-V2-main.zip
Size

17.9MB
MD5

e39509ecfb30705abe7d7f3b76bc3422
SHA1

684ca977756e326319eaec224eff059b166ca8aa
SHA256

98d1e9e65b5c404ffb034df779b0b676b205a9bb97074f3149078894c2b1c205
SHA512

dbb8c535bb68e3f65a1f61d452ecfcac7c1bc89c2219b9498d5c947888528bf7c74f97c15bc194f762923a706e8da2081c3996495a16233b48fff05d8c992356
SSDEEP

196608:rnTrBfs7iYmyE8yNjPt86GAustWEfIv2dGadV0r5W1Se29UD4QXhfD82nYV7HhUf:rnTL8ijKAtW/axQUD4QVYtomNxfIAi

Score

1^/10

Malware Config

Signatures

C:\Windows\Explorer.exe
C:\Windows\Explorer.exe /idlist,,C:\Users\Admin\AppData\Local\Temp\Lithium-Nuker-V2-main.zip
1⤵
PID:2856

C:\Windows\explorer.exe
"C:\Windows\explorer.exe"
1⤵
PID:1456

C:\Windows\System32\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\Users\Admin\Desktop\CompareRequest.vbs" C:\Users\Admin\Downloads\BlockReceive.xlsm C:\Users\Admin\Downloads\CloseWait.ADTS C:\Users\Admin\Downloads\ConvertMerge.MOD C:\Users\Admin\Downloads\AssertSwitch.emf C:\Users\Admin\Downloads\BackupEnter.svgz C:\Users\Admin\Downloads\BackupPing.vdw
1⤵
PID:2960

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\Downloads\AssertSwitch.emf

Filesize
331KB

MD5
d183fe3414f2c463be24123e14941b7d

SHA1
8e8d11f9318eeb3b3286550f0a0f1a1c3ebdbe0c

SHA256
baa3625b35c29de731262c04f87b300e681c19cf238357927d2fd1b37ba79cae

SHA512
b8199aa6350c306d74c3357d7369b0ea4969b4c4d7e97064441f7c3893735337da4964a639291c37c24ba081605bef5a8a3a48812a4834b4ec801b3a3e24fff4

Download Submit
C:\Users\Admin\Downloads\BackupEnter.svgz

Filesize
673KB

MD5
37dbf8a724af23a810e8bc1812951dfd

SHA1
07145238f069ef3347c3c78c19bac7b913e18f69

SHA256
0a81a0e343ee2fa66c972d4d5831cdc852f476ec068cead21bd15791c97c399a

SHA512
9eca064a96a9c4cb64e1c84bed22efdc7b1c2ca0c53d4b7bbb13456bd8e52e6e8166a798d0bb2626158f26e5d65ce429bfb90afad904e91639db888dfc6f1cdf

Download Submit
C:\Users\Admin\Downloads\BackupPing.vdw

Filesize
445KB

MD5
05a53e648cda95ec025d6342c48adfcd

SHA1
f8a86f6b3c6231f92e5d50b15dd564a971f686cb

SHA256
1d4e6bad072dd0558f0a1185df8408f736b7d48e208154839e283520ec8757c9

SHA512
f28cbf95b1ff7412a4756109ea5b95afacad03fc9b9f904417dcc8844379de76d2b355f3d7bc55bbba2559708495ca082d74a4a9179f9e78d1b81aee456f083a

Download Submit
C:\Users\Admin\Downloads\BlockReceive.xlsm

Filesize
208KB

MD5
1e71a57f0281ef6affdbf22fbcf8e11b

SHA1
d999919785248da9a9ebbebc834df5c42b39be25

SHA256
5d20a23b0ea838ba2c2a3eec209fcf94893fe63f402249e58f9eec1725fe6950

SHA512
0f7cb5c7dbbcab771bef96808c00dcea3ed0cf2287996aaba8890d9586134c5be9cb73e1f9b5b2057ebee2a5d84c91d86ab2e8b74212cdd51dd95538c284537c

Download Submit
C:\Users\Admin\Downloads\CloseWait.ADTS

Filesize
436KB

MD5
e5864624d1ee46f82244e571bb2cf61f

SHA1
03057cdbac2a532931b299df9acc2b3888c1f0e6

SHA256
aa787def378e8ae6f0c2732ab61bf979925742ce74dd0231e79567b72a17ac89

SHA512
5d1373bc66b0b97e7c6b145f01aa8ba5e294d354c42c0a8231108386630d383f2f04cb0b5c9ac5243d599e5ce4402472401b6e7286852b81847ecd66651ad64d

Download Submit
C:\Users\Admin\Downloads\ConvertMerge.MOD

Filesize
464KB

MD5
995cf645c94bde6274f6f380a480fbb2

SHA1
48561f89ea7d8b28105fee92b78dfb9139df7a42

SHA256
c5317a219a0a7f455f73c755ea07f0edfd1677965abea4511f539ad6ee348ec1

SHA512
6bc9453de64f5d97cede56a2e36a40bcd0f637f85f434a2e44868517a1377568e050707550ca8b94fa7c56be20c67f849abec60d31d77aa298d31dde8639009f

Download Submit
C:\Users\Admin\Downloads\DebugCompress.mpg

Filesize
341KB

MD5
12f4c6fea65726b91790b18332eae5d4

SHA1
0d07716b1d8a89c7bd97f1e70a3082b92b806e91

SHA256
75c86c7c7c20266758429c37ff202dd509dd9a15d620aaa766046d7222e23113

SHA512
873d5f3cf7d083190a07479cc5668ca21e6c08b25910b92b28f1e7b6050f4c05b71d8f76754bbcb7454776a68591726084d150b224df6fcff3189db2d9a4ccb1

Download Submit
C:\Users\Admin\Downloads\DebugLimit.bmp

Filesize
388KB

MD5
549cd0f7e0a97dd8118877e6baf2e1a2

SHA1
c556933f145b022430191fe53880470c196397de

SHA256
362959535ed13342f7fa2223be19771bff328621651f41743ec861fabd16ea13

SHA512
f090a30bce4fb7f513233644373981676de096f141318beaa28dcd91ef5cbb87673898a58a196b27d37cda7261648bf0addec64ad4334b9e52ea143b2bd5b4af

Download Submit
C:\Users\Admin\Downloads\EnableSkip.wpl

Filesize
218KB

MD5
7d26a76b97105af75d4ef4e1a4ffe537

SHA1
e70a8fbe46dec657d55217fcf26a394d50e92deb

SHA256
614bc0d2246dda5c389761a00f1744df10fd6dce9b84408c2e7305cf8761f096

SHA512
435b9dfcc4535558568cb7ab5d0b2993ee6e791fcc3b89df6713c9ef2abe719a728941efa8197c3973f03a6784ef8f1020af216efe37777811b9520c9724e9e0

Download Submit
C:\Users\Admin\Downloads\ExpandRepair.potx

Filesize
180KB

MD5
af8d9a664983d87b527a8e8f603a773f

SHA1
14d2795c75ea6c7efda2c92af938b27ca45ca767

SHA256
037ddce3797383dc3fdc789e2b9789052e0454fdb46010cb482ab4aa86cfbd60

SHA512
09b4660bc89af773b401fca9dc9bcaf43c33d0afc6499c126902dd40379bc1bad8730f8d1eea0026647d486a496b5106e534903ab64911318ad5038e3d332126

Download Submit
C:\Users\Admin\Downloads\GrantResume.ps1

Filesize
417KB

MD5
56ca8d54ace53ef79233942f48fd8a10

SHA1
62b54094bba4b2ed52faee1284308ef514ed981d

SHA256
86e25f37777bf4c385d31a7b647154b9fceb40cc36e0c15bf8de69fa72e6ced4

SHA512
7e72c0226b32a7760dd60f18ff38e020344910691461ef68f2ec482851af7b97b60ff485e17df0708b00d4f62608532ba93fa8361f7fc3d531d7ae9ae9fa368e

Download Submit
C:\Users\Admin\Downloads\GrantSave.wdp

Filesize
360KB

MD5
9c0d2931446fd68dae19aca5b0545276

SHA1
41da27b27e57eb0f821ae0d06d1a658d0c1f3d17

SHA256
2031ce110c3837fa1b6c73b5599b125188dc48015cfa24d29b532d4017332cbd

SHA512
7919cc9d51d02bb2fc27e8832fdd13219e69171296097b95c6abc59f99820a5d2ddad548800a42bb51a7841e1b1095079627b6cdbd283e0e31c880a3c92e4aa5

Download Submit
C:\Users\Admin\Downloads\HideStep.vsx

Filesize
303KB

MD5
750935c6f64e39dbb6584fbf99197a89

SHA1
af04ab2172269520aea30516d4094b7eadf3787d

SHA256
cc0175bf2ca2e2b5830fc1a32e7823f5af61077e0fec9718ba7f6eb0c5985bac

SHA512
57bebfdbda9fce71aff99728994a30707b1f894d53f285e9798e3776b3b163f4e661b7d2405515e5b36d90820efa5c68c5577cb610e2a35895668a83d8688e3a

Download Submit
C:\Users\Admin\Downloads\ImportConvert.vsd

Filesize
398KB

MD5
9f688cb0f685c63ceab72b6b2dc49a52

SHA1
dd2f4c99c7df30c779d652ab7026dd06772abb0d

SHA256
7fc3cb20501b958d92065bd3c8ea625cc60c1dc5fc954c58eefe8438f2bb4719

SHA512
6b3e36fac4ceb5643a65f780797edbb0681a42a6271756f7d849e33337881081fe697595340e5a6829014ebde89f5d9df6f72d503006b435691bf81196ff495a

Download Submit
C:\Users\Admin\Downloads\InitializeRepair.ttc

Filesize
322KB

MD5
63c9a547e70deecd0c90ac3ab5aa0cc5

SHA1
9b5d616f54bcddd15bfd8e8363757905e6a890e3

SHA256
744b6035a0b5134b651e3803160f2b1b60c1352961be5c1e3c155b29dd058319

SHA512
6ca4e8d686aacabc80b9987478bfaf21799e14031b31a8dd3653701ab5b3f4c35e9968599df5b35e8607f4f38bce7f6a924e69643053d423beadc950f0da10ba

Download Submit
C:\Users\Admin\Downloads\InvokeReceive.asp

Filesize
255KB

MD5
0cdd3f5e467fec7beb0dc6327be45350

SHA1
d119bcb7f3617872b450e0ff0c758f707cd8229d

SHA256
d5721cfe56dd44852a0be5a17cf23c02b9099fe11f9cb6042e1487bc271d3b00

SHA512
e539885dee6b993efd035b290b11abed9298de169142772e788aa16e06a3381d94b70145eb6ddf121e327ce50fa32f70ce6b4bd0b7b3dd9bd318eade901a9a2e

Download Submit
C:\Users\Admin\Downloads\MergeConvertTo.wps

Filesize
199KB

MD5
c85138e68d515cf3c2bc38436b8c9053

SHA1
752ff954f417ad27961d1133234369533f86d2c0

SHA256
f7b1008419c6eff3f75181ea1096a6555bcd4138cde1cdaacdf24a10d12ff1fe

SHA512
3cd9bdb8784bbecf2a476e656f6576d1d86cf3a08761f04f05bed58acb8b53fd567421d2a25745dedca1e92182ce0de1f8cd107dcdb3e9ad6ebb72ecf401c3ac

Download Submit
C:\Users\Admin\Downloads\MoveRename.avi

Filesize
379KB

MD5
cf6ce1f0061d423a9526060e266d5dbf

SHA1
04fae3bf82ec76ade22d329213d594f19ccaf57e

SHA256
6ee27d2a1da258d73d5836cd2a238df26fa74e796f110ba6ab00f74a2df97605

SHA512
081813589ff7cdd5b9c6ed6877910e73599e042b4b14c8f90fa1423970653230d607eb5a04ee8c3b43ef7f186fca2a65c94184fb1138ec53fe95c6e89b42b0c6

Download Submit
C:\Users\Admin\Downloads\MoveStep.wmf

Filesize
483KB

MD5
214f8c6604a3c64f293d18718bf13afb

SHA1
493ae6fd9fe1bd2dcb47c0962d2466ceffee20ec

SHA256
d78df87e3bc3ea49a42554a7a8bffda94affaaaaca5cd534d27fe25fc897a890

SHA512
2fd50de347b5e094981393a0935a2c39e07e9f17eb6c8bff6d2010165d207c23cb29022ce475d6b1301de3fe304720ca33a72d28af29dadd3055ddf0d6c9ccf3

Download Submit
C:\Users\Admin\Downloads\ProtectRename.rm

Filesize
455KB

MD5
3904e25426372412b954f34980f92300

SHA1
08511d23ee46eb48ed8c5bee7a0b436202188737

SHA256
459fd72457fb71e74164e9d2e294ecb049221cfde2ee05e9e720856058aedac8

SHA512
9a8b785ea9126bf71a4780a222e5bdc68af7c8dd6a7a79d8617f01083f9798c0e0c425208ab5dd3a44d0711acfa1018039261c8004b3e2d8866718c824a43991

Download Submit
C:\Users\Admin\Downloads\PublishOpen.mpg

Filesize
293KB

MD5
68e5891da98e618b7787a0accbc24932

SHA1
18827b64e6e32b8ca1a2f91ab45d5e446442c1de

SHA256
8a288bf7a1eb8bcd163150d8576d0b4864f595cf7d869038efbc03e7991fa505

SHA512
dacd914f982e4979f5269f7685ffc42c48a7468df3e8667a51f6985af45a42ad812459024c1c7ef3153080ac4b4db42ff322471c97049611c53f3b94cba42355

Download Submit
C:\Users\Admin\Downloads\ReceiveNew.pptx

Filesize
493KB

MD5
567e92b22acff5ca1d37d495641399bc

SHA1
f2516369ae5f7720d3b00723de46b20090552913

SHA256
0f8974aaecb998e76172187b21fb7cfcfcae1512ec1f7dcac968ea8ce9c85617

SHA512
c8e5d6c0e9fbdaa7c108504e16fe5574616ce5863f59374acc243e4fc889dbd6c5cf1bf44010a5bd8c8c6bb26167473ae81af72dd66c6d4055ddc09085e82e30

Download Submit
C:\Users\Admin\Downloads\RecentPlaces.lnk

Filesize
363B

MD5
0025c3a7d7c4e90e58332958b00d83c4

SHA1
01dd4fdb260f66923004acb5a874111a9d14da38

SHA256
36db348143da1b5c16b9074940e85761950ee30b533b7ca75924f2f4ef6b253b

SHA512
b5631c94bad794541d16f2fa3a02018f4b34b680b63a9f3b6a3da4329216567a7ba9ceb8d4bd18165b0e55142f42e039f160ec675c0946237c276de1a6e642c4

Download Submit
C:\Users\Admin\Downloads\ResolveConvertFrom.cab

Filesize
426KB

MD5
47796594edc597e219ea105b39105601

SHA1
1bbc3f3e2f7b523a22b9136bbfe8fa20419afbf6

SHA256
277ec610f9d36ec73738d6afb77c9ba0ee190d076856a6d7488a9788e4d0ace1

SHA512
41d2f63d637238e942dc7f060a47fa229df52cb322abdac8736e2f2ea8b9ef8f0694b405db75e107aaeed342e04b1f064a6c2c65670e7c01a027ca67e14dade7

Download Submit
C:\Users\Admin\Downloads\RestartUnblock.emf

Filesize
265KB

MD5
180d457f3687cecb170a75580c00834f

SHA1
543fa4fa394227c7305d2bd75a4ec00bb22ee763

SHA256
2b1d2439e81396cccbfcfdddd241349f2a43d6c27291f2624352934342f77b4f

SHA512
7bbb109e15bd0e850cca6808867f9baf7607704e40edefb5c160fe5dcedbd31bb0d050df487c97b81346615f84e70b07afd51574f3c5af44c1aadcb24115293d

Download Submit
C:\Users\Admin\Downloads\RestorePop.avi

Filesize
274KB

MD5
f7d4cf572606a7de42e5cfe993b008ec

SHA1
c5588c566f2ca332545baf34e67429555d4405fa

SHA256
4013c45b0f6e09687f8c334bf565f0f17ab41a1aae981713e145cb698f91f336

SHA512
373424f3b2faa912266cddacdbb7d0c432a4185e17924e8ceadb4e63039a296570dc379859f2af2e41e32739c78f9e7c824d29c6be70a83b720e06a495949c4c

Download Submit
C:\Users\Admin\Downloads\SelectJoin.vdx

Filesize
369KB

MD5
3f8f0ac3ba6fc33715f26f968a6c67db

SHA1
671f298749d0e70319e9605211b498cf467e89f7

SHA256
8d24e98e31f6d798007ab1f8fb84d52ccd81c582dd6e838b713013024a2076dc

SHA512
5c283a2f485c2d9bee4163bcc0bf536e46fddbe65ba2ccbf45fa187bf76c6f54398fb9668ccd478777ea317b0508880b4b9081d554ec6ca03bb7c9bd425c5509

Download Submit
C:\Users\Admin\Downloads\SendResume.jpg

Filesize
284KB

MD5
b028db1ad9376e2d38ce1c9d5a22064d

SHA1
e44d5428e8f597f043e7fe01b664de5a47fd2d06

SHA256
4f9f43a2d65e529fbccead5806a20fd04eb9c2366a6dc6d921146609c45e7b80

SHA512
470b9e71aa990b87ddd6cfa131ce7df6a13ebf73dc0b526fe1bf5b2569fd0d599f6df95a9f9b8f2000361838b047405f9b0816d9b24e050b2cfb60c4f791894f

Download Submit
C:\Users\Admin\Downloads\SplitSwitch.cfg

Filesize
350KB

MD5
77f3227754524875f966edf2adcef712

SHA1
2a6be67d332bb78a6db67ad2c55cf1696707385b

SHA256
7a802ee89ca8078e589e968c942b6b4b1f615882f7680db29ee5e5e3182ef4ed

SHA512
b145935fdc2b8b45ed8c0cad07609aef9ab299229f97d2569f1dc35ddb9df89d28879577f1ce3c09d740638d17a58c838431f718e33747af35555413a451f985

Download Submit
C:\Users\Admin\Downloads\StopGet.xltm

Filesize
407KB

MD5
3e95554085694e204dabed3e8239f3d0

SHA1
90487868d6b5fe6c4ad646837828335593646aaa

SHA256
7bff49b65669df178ae38692f081e0e798558a37449be49f1c5e0906f26d6ab0

SHA512
834d4e16dfa05cfdf729ed9da91ed9c1f78f763af9c0abdba88a9e0bcb95a990c998431d945ec6865663421b6388b4a432ad44d11a2e073c429fda63d6da88fe

Download Submit
C:\Users\Admin\Downloads\StopSend.pptx

Filesize
189KB

MD5
36177af3e65046d1cbbd0fb3781bf6ca

SHA1
e418c582c94f4fe41ac32d137302ebaba08696a3

SHA256
9f76e0369294a8fd1381323de5068644698b6b456eb3fee023f572fe1f2ec6c5

SHA512
9a4c713ff150f8ca94a84e580ba4cf9010455b5cf24d0c15f779a8d02c3bbb5f4551f0d4073eb70b4ca019ad57b7857a5b0778937a0865563339ededaa6bb46d

Download Submit
C:\Users\Admin\Downloads\SuspendAdd.reg

Filesize
246KB

MD5
b5ecb6c8537440b5f77f5e3c4f3ed730

SHA1
d1b348011be17f15d1212ff2076d1ca487c0a471

SHA256
b881a85caa0aa9fb52b7f4de7e858a6580aab3ec6034887e5f921b23e21a996b

SHA512
57ba6fcbb02c8b412b6d62a7f8210b5ee4d6a09ac2a81acbaa6b1d13706888ea33bf6a94171ac5eb588aad45c437d79bfab7cd268ac74ce93de72122767fcdd8

Download Submit
C:\Users\Admin\Downloads\SyncDebug.cfg

Filesize
227KB

MD5
56a663e60efd3a6df2c96b47d4763e5a

SHA1
56cb149fde6343adf296cf359556c9dad6b12488

SHA256
a45ebb07ec334ac65f7fb60d9f803d97948b8317f161725a10a00ca952a74900

SHA512
e60d31b6008c86d808f402e7be733220c8d83617871955968200dc83279f91250c0ccc1134bbe3d10c8bc589b9f9718575f2d6dd7a92a51857a576f4ce6b0b0c

Download Submit
C:\Users\Admin\Downloads\UnblockReceive.M2T

Filesize
474KB

MD5
9907a3c1571f8f5606f2ac6c52697afc

SHA1
43a05b27c012c43148345ed6d54e7f3aa13066c3

SHA256
0c1503eee78839992b6dedf2ba6564b1847703529b1f06b8cb7a4d06d80b5a44

SHA512
27a6c6cbefec6b4e71ffe8b420a58b1ad44644f2e9e55863f2bd74525d896af3ae085f22e92bb8c8e502487a6b434ebd9e359426a8dab65297b3c9030b1935f8

Download Submit
C:\Users\Admin\Downloads\UninstallFormat.mpa

Filesize
237KB

MD5
a51a29eb5e992a464d2a9e7926eb6d58

SHA1
42bfd23078e8fecd9a53e42d87c35e3662cefb7f

SHA256
e4173bd617585a14e64ee063fd8da3dac618677db0040318300b51ce32e700e0

SHA512
cbdb9216ba188a21306e175204eb562435bb76fffce505c596691d10746d0191bedbc11c66a551f9be71c2bc6ec94efee3d50f2e7eafcf7b25aec0ee0b6b68d5

Download Submit
C:\Users\Admin\Downloads\WatchSearch.exe

Filesize
312KB

MD5
f0b288bfc2564762937c3b9781ba21ff

SHA1
a0cd9ded7b6ff0e8b2860da68ff294913a86cec5

SHA256
bbcb57a90646962174122b245d2ab2d0f053f4fae20a78bb7d0937cffbaf9d43

SHA512
ad360905025dc7bf668d41076815c6765e260a0d7b44fbf8e599750554a23ebb814b93c1f2ffbd6a4c2c59b6752ccbe2e484e17d8e1307252dc1072cd221b68b

Download Submit
C:\Users\Admin\Downloads\WriteDisconnect.pptx

Filesize
170KB

MD5
5f62421a79a154c3ed55a46e2d845ef6

SHA1
5f2b85dd0b0d7e1e54de573b98a1f1aff2317013

SHA256
40c97d1a1ca9db3be4b1fa8d0211d74186b063a6c59ba96c238d08e8279896d3

SHA512
24580d8a0cb054b260ee9981d7c28a3c6456c4bbf0048cdf5dcf599d31d26f5195ca8fe0145e45e7540e4d36583fa9ddb521d6e2604f0f53d8f7504e2d1f074e

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads