Resubmissions

12/07/2024, 09:40

240712-lnl2saxhlr 6

12/07/2024, 07:28

240712-jax6saterk 6

Analysis

  • max time kernel
    90s
  • max time network
    155s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240709-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
  • submitted
    12/07/2024, 07:28

General

  • Target

    ALM_V5_3_SP4_Upd4/ALM32/LLAITF/setup.exe

  • Size

    381KB

  • MD5

    d8b0331f228afaf019ed664b4091ff42

  • SHA1

    59e479ce5c41c316e16cda1e84e138f476db4d0c

  • SHA256

    1d52960be9c2a0d2ebf4603ea72474fd8da5ef83650ea8b27a4a4d20d73efc67

  • SHA512

    2e7dbba2ba310c139fe10d9904f36d954c39b73e222378423199d6d62190ef64252b250540fff73ba44e774609d3eeadc7a2575d4cb6181233ca06bc4045d157

  • SSDEEP

    6144:gFAOW2U2sp8obiAWV5SHS374bbQHBno8o+Rpw1R4I:kAOjU2Z5V5Zy0no8FmQI

Score
1/10

Malware Config

Signatures

  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\ALM_V5_3_SP4_Upd4\ALM32\LLAITF\setup.exe
    "C:\Users\Admin\AppData\Local\Temp\ALM_V5_3_SP4_Upd4\ALM32\LLAITF\setup.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:2184

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\ProgramData\Siemens\Automation\Logfiles\Setup\LLAITF_LOG.TXT

    Filesize

    540B

    MD5

    5b225f99ae18c15c41043ca0b57179d0

    SHA1

    7e78ec04a93fcbaae33c6f214a194b4b11717c57

    SHA256

    5c89fe9e10f689ce45c1c9ab8289e9fb96d635ca8968b7ebd9ee2146c3bb90a9

    SHA512

    284dd3ff2c2d0fb63869229bf7eef51f4ec9980f281952c17cdfb94e06ed2e55689a80605db06566c9d1dd216bd1a813986506db0fb64d5f43bf263a5fa96535

  • C:\ProgramData\Siemens\Automation\Logfiles\Setup\LLAITF_LOG.TXT

    Filesize

    1KB

    MD5

    30d0827eca3adfb57d41604a15f5cc61

    SHA1

    29d8412154fb94a5dd2469b9006b468ba4755c7a

    SHA256

    2b8d18d6a3c70ce23f2f855750ec35aed0d7eaf99ed919357a69188e39b8e70c

    SHA512

    34a6194f15d1a5b95a026214a6b654b480fe0d2d1ca6cb99499580dfaa588321e8db97e26dad0edc2b0bae046fde11f99fcbcd044829e2dd67a6dd91bf254b8f

  • C:\ProgramData\Siemens\Automation\Logfiles\Setup\LLAITF_LOG.TXT

    Filesize

    1KB

    MD5

    bc8636f88e19eb6839dc2064d753b689

    SHA1

    ff041e687a2e220c5c471439df836f48ea8a431f

    SHA256

    c6d322e3cb7d887b13cab9006f1d689613505ac916e9237f5279afa9402ec777

    SHA512

    0794e0e767e2ca0430f3b765ddea8794c133f7904cec7b8ba7d405eaf2e0ccfb8bb4283ecbe9e0697682332b673bd0f7a9310955b964478200d7c3d63da59bec

  • C:\Users\Admin\AppData\Local\Temp\CompTemp_Log.txt

    Filesize

    421B

    MD5

    7117eda4e745a1f5d9ba2c77456dcb18

    SHA1

    0993e536fc07a26642a43c37c18f29e47b400c4f

    SHA256

    23958e424dbff3eb6f933848c4ebd0b42be39f3b218522c0e7a222788801accc

    SHA512

    2ac5420011e8f7cc95faa3138daca34607d1b2413df41cb23875cf5a02db05cd24ded62653ba5f4bb0b39c56f492a188389a50b0ca56407f9d52ea960f4b506f