Overview
overview
6Static
static
3net8.0-win...UI.exe
windows7-x64
3net8.0-win...UI.exe
windows10-2004-x64
1net8.0-win...re.dll
windows7-x64
6net8.0-win...re.dll
windows10-2004-x64
6net8.0-win...ms.dll
windows7-x64
6net8.0-win...ms.dll
windows10-2004-x64
6net8.0-win...pf.dll
windows7-x64
6net8.0-win...pf.dll
windows10-2004-x64
6net8.0-win...x.html
windows7-x64
6net8.0-win...x.html
windows10-2004-x64
6net8.0-win...ain.js
windows7-x64
3net8.0-win...ain.js
windows10-2004-x64
3net8.0-win...lua.js
windows7-x64
3net8.0-win...lua.js
windows10-2004-x64
3net8.0-win...ain.js
windows7-x64
3net8.0-win...ain.js
windows10-2004-x64
3net8.0-win....de.js
windows7-x64
3net8.0-win....de.js
windows10-2004-x64
3net8.0-win....es.js
windows7-x64
3net8.0-win....es.js
windows10-2004-x64
3net8.0-win....fr.js
windows7-x64
3net8.0-win....fr.js
windows10-2004-x64
3net8.0-win....it.js
windows7-x64
3net8.0-win....it.js
windows10-2004-x64
3net8.0-win....ja.js
windows7-x64
3net8.0-win....ja.js
windows10-2004-x64
3net8.0-win...nls.js
windows7-x64
3net8.0-win...nls.js
windows10-2004-x64
3net8.0-win....ko.js
windows7-x64
3net8.0-win....ko.js
windows10-2004-x64
3net8.0-win....ru.js
windows7-x64
3net8.0-win....ru.js
windows10-2004-x64
3Analysis
- max time kernel
124s - max time network
127s - platform
windows10-2004_x64 - resource
win10v2004-20240802-en - resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system - submitted
19/09/2024, 05:12
Static task
static1
Behavioral task
behavioral1
Sample
net8.0-windows/LettuceUI.exe
Resource
win7-20240903-en
windows7-x64
Behavioral task
behavioral2
Sample
net8.0-windows/LettuceUI.exe
Resource
win10v2004-20240802-en
windows10-2004-x64
Behavioral task
behavioral3
Sample
net8.0-windows/Microsoft.Web.WebView2.Core.dll
Resource
win7-20240903-en
windows7-x64
Behavioral task
behavioral4
Sample
net8.0-windows/Microsoft.Web.WebView2.Core.dll
Resource
win10v2004-20240802-en
windows10-2004-x64
Behavioral task
behavioral5
Sample
net8.0-windows/Microsoft.Web.WebView2.WinForms.dll
Resource
win7-20240903-en
windows7-x64
Behavioral task
behavioral6
Sample
net8.0-windows/Microsoft.Web.WebView2.WinForms.dll
Resource
win10v2004-20240802-en
windows10-2004-x64
Behavioral task
behavioral7
Sample
net8.0-windows/Microsoft.Web.WebView2.Wpf.dll
Resource
win7-20240903-en
windows7-x64
Behavioral task
behavioral8
Sample
net8.0-windows/Microsoft.Web.WebView2.Wpf.dll
Resource
win10v2004-20240802-en
windows10-2004-x64
Behavioral task
behavioral9
Sample
net8.0-windows/bin/Monaco/index.html
Resource
win7-20240903-en
windows7-x64
Behavioral task
behavioral10
Sample
net8.0-windows/bin/Monaco/index.html
Resource
win10v2004-20240802-en
windows10-2004-x64
Behavioral task
behavioral11
Sample
net8.0-windows/bin/Monaco/vs/base/worker/workerMain.js
Resource
win7-20240903-en
windows7-x64
Behavioral task
behavioral12
Sample
net8.0-windows/bin/Monaco/vs/base/worker/workerMain.js
Resource
win10v2004-20240802-en
windows10-2004-x64
Behavioral task
behavioral13
Sample
net8.0-windows/bin/Monaco/vs/basic-languages/lua/lua.js
Resource
win7-20240708-en
windows7-x64
Behavioral task
behavioral14
Sample
net8.0-windows/bin/Monaco/vs/basic-languages/lua/lua.js
Resource
win10v2004-20240802-en
windows10-2004-x64
Behavioral task
behavioral15
Sample
net8.0-windows/bin/Monaco/vs/editor/editor.main.js
Resource
win7-20240903-en
windows7-x64
Behavioral task
behavioral16
Sample
net8.0-windows/bin/Monaco/vs/editor/editor.main.js
Resource
win10v2004-20240802-en
windows10-2004-x64
Behavioral task
behavioral17
Sample
net8.0-windows/bin/Monaco/vs/editor/editor.main.nls.de.js
Resource
win7-20240704-en
windows7-x64
Behavioral task
behavioral18
Sample
net8.0-windows/bin/Monaco/vs/editor/editor.main.nls.de.js
Resource
win10v2004-20240802-en
windows10-2004-x64
Behavioral task
behavioral19
Sample
net8.0-windows/bin/Monaco/vs/editor/editor.main.nls.es.js
Resource
win7-20240903-en
windows7-x64
Behavioral task
behavioral20
Sample
net8.0-windows/bin/Monaco/vs/editor/editor.main.nls.es.js
Resource
win10v2004-20240910-en
windows10-2004-x64
Behavioral task
behavioral21
Sample
net8.0-windows/bin/Monaco/vs/editor/editor.main.nls.fr.js
Resource
win7-20240903-en
windows7-x64
Behavioral task
behavioral22
Sample
net8.0-windows/bin/Monaco/vs/editor/editor.main.nls.fr.js
Resource
win10v2004-20240802-en
windows10-2004-x64
Behavioral task
behavioral23
Sample
net8.0-windows/bin/Monaco/vs/editor/editor.main.nls.it.js
Resource
win7-20240704-en
windows7-x64
Behavioral task
behavioral24
Sample
net8.0-windows/bin/Monaco/vs/editor/editor.main.nls.it.js
Resource
win10v2004-20240802-en
windows10-2004-x64
Behavioral task
behavioral25
Sample
net8.0-windows/bin/Monaco/vs/editor/editor.main.nls.ja.js
Resource
win7-20240903-en
windows7-x64
Behavioral task
behavioral26
Sample
net8.0-windows/bin/Monaco/vs/editor/editor.main.nls.ja.js
Resource
win10v2004-20240802-en
windows10-2004-x64
Behavioral task
behavioral27
Sample
net8.0-windows/bin/Monaco/vs/editor/editor.main.nls.js
Resource
win7-20240903-en
windows7-x64
Behavioral task
behavioral28
Sample
net8.0-windows/bin/Monaco/vs/editor/editor.main.nls.js
Resource
win10v2004-20240910-en
windows10-2004-x64
Behavioral task
behavioral29
Sample
net8.0-windows/bin/Monaco/vs/editor/editor.main.nls.ko.js
Resource
win7-20240708-en
windows7-x64
Behavioral task
behavioral30
Sample
net8.0-windows/bin/Monaco/vs/editor/editor.main.nls.ko.js
Resource
win10v2004-20240802-en
windows10-2004-x64
Behavioral task
behavioral31
Sample
net8.0-windows/bin/Monaco/vs/editor/editor.main.nls.ru.js
Resource
win7-20240903-en
windows7-x64
Behavioral task
behavioral32
Sample
net8.0-windows/bin/Monaco/vs/editor/editor.main.nls.ru.js
Resource
win10v2004-20240802-en
windows10-2004-x64
General
- Target net8.0-windows/LettuceUI.exe
- Size 389KB
- Sample240919-fvzcsssdpa
- SHA256 d07db79a12d4710fed9a3f591f016a49dcb3752e4acca40f477b0f1f5c720108
- MD5 9477c8bcbf1f0f513fd10bb5a34ed5e9
- SHA1 72d3a4412b43c8ed0c10aa6fcd3c396c85c2a71e
- SHA512 5297b46323b0974723ddbd3faff08899d8bde9ada7e44cedcf91ecd1bf3aba63d334abfbd70ef1286c950458ca5648ab03af89967c9b0c32b87b10cf453d44ef
- SSDEEP 6144:EjK4TDUqgpqWDLZ5H+xuZ04dhAxnoBiLLZ8XY8Xl9gTkHr:EZW3bkWW98X51N
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 6 IoCs
pid Process 3304 LettuceUI.exe 3304 LettuceUI.exe 3304 LettuceUI.exe 3304 LettuceUI.exe 3304 LettuceUI.exe 3304 LettuceUI.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\net8.0-windows\LettuceUI.exe"C:\Users\Admin\AppData\Local\Temp\net8.0-windows\LettuceUI.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
PID:3304
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --field-trial-handle=4212,i,13995403245988825027,7033610968827661507,262144 --variations-seed-version --mojo-platform-channel-handle=3864 /prefetch:81⤵PID:3276