Overview

overview

8

Static

static

3

d41820eefd...ee.exe

windows7-x64

8

d41820eefd...ee.exe

windows10-2004-x64

8

Analysis

  • max time kernel
    117s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    27/05/2024, 18:53

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target

    d41820eefdaa1791129775fd3cdb5d498cdcb53db3d2c6f15749500706946bee.exe

  • Size

    2.3MB

  • MD5

    f1a7a5ce677f62c6c0348da326eac6e9

  • SHA1

    f465d92bbaf60937e32240650ba9880f3fe1bf35

  • SHA256

    d41820eefdaa1791129775fd3cdb5d498cdcb53db3d2c6f15749500706946bee

  • SHA512

    dfb95a6951fff5569b79660bd05167c40c69c1d04f19bf5ceb1132ff22e262c6f9e8a80984385ba5a78efdf01a4460dd06da6687bd1d622ec4a6df101d312840

  • SSDEEP

    49152:cNwN6Kc2vJH0Cnbo/COlqVjX+a2b+r5u8Qegs:u4BvJH0CnbgCOlI/Kjs

Score
8/10

Malware Config

Signatures

  • Downloads MZ/PE file
  • Loads dropped DLL 2 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\d41820eefdaa1791129775fd3cdb5d498cdcb53db3d2c6f15749500706946bee.exe
    "C:\Users\Admin\AppData\Local\Temp\d41820eefdaa1791129775fd3cdb5d498cdcb53db3d2c6f15749500706946bee.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2240

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Local\Temp\Cab1F37.tmp
          Filesize

          65KB

          MD5

          ac05d27423a85adc1622c714f2cb6184

          SHA1

          b0fe2b1abddb97837ea0195be70ab2ff14d43198

          SHA256

          c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

          SHA512

          6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

          Download Submit

        • C:\Users\Admin\AppData\Local\Temp\lite_installer.log
          Filesize

          6KB

          MD5

          d74d97e5bf89a21bb8331943d2b82fcd

          SHA1

          4bca2b522d2b55125e9c5869a76009c3d3eb4624

          SHA256

          bceb18a53ea4dd9e53d659a5fe9095f7b3716390fb12948b211c1d03d724d1f6

          SHA512

          5f2764fa24b4fe1285eb62d60d477fb36cbb5781e667d90dae88706e9b688bbb23aa16244b953a0054d6db1c99cef804ccb2abe5ed29c21fd7f70d9beb42adfb

          Download Submit

        • C:\Users\Admin\AppData\Roaming\Yandex\ui
          Filesize

          38B

          MD5

          9f47dff51a36042b15eb49056c6a35d4

          SHA1

          7dedda114350bba3c797fe87224da6e6176c4660

          SHA256

          eeb7ff8a76f1a7d8e857081bc381bf8b702536b94433823ed313c3e4ca9c92d4

          SHA512

          49c9b8a1e805cf106ce7942748abc227b5c6b1255ac8adf0dd223a27943722505a32f0fd503dcf07c1613bb4a739ace7cc9baf6ff8f988b209238fc77b0f9c96

          Download Submit