Analysis

  • max time kernel
    138s
  • max time network
    149s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230220-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
  • submitted
    24/05/2023, 11:05

General

  • Target

    52622.exe

  • Size

    2.3MB

  • MD5

    c0c8fa3ecf2ab85e839cbc9f3facec51

  • SHA1

    71b278f02c2f496e2acfa2fff7c6313fdeda5fe2

  • SHA256

    5145c7ea2b749236e814ed850f9d633a2f7e9cc554cf8a3b35f70402bcf6060a

  • SHA512

    55e21eaa974c5d1d3dbe600b58da1bfea1e5841e323b786ffe1242cf97fa8dfcb57707bf03da9796b35783efc61c241580730f9354c36693193434b1c241298c

  • SSDEEP

    24576:DBZXVrIgHS+L/HNXRYxWGIdFcsT2bBeQ+yOZAhHl1/JnlJ8wJpCngGc0R8WMfgUS:3dXRoseBlRnlJ8aTI+r5u8Qem

Score
8/10

Malware Config

Signatures

  • Downloads MZ/PE file
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\52622.exe
    "C:\Users\Admin\AppData\Local\Temp\52622.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:3520

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

          Filesize

          1KB

          MD5

          e78226c5e419ab7419b686e7c871589d

          SHA1

          466fe10fb90147c1cee3a48c8c49956fefa933e1

          SHA256

          f0fa4a11b2fae1ab89f5df51078dc5a7ac64c3a03a3e81a3999b8eeb212d9db3

          SHA512

          ef5a7d32abd4f3dae14aa92e3be09870fa4fb2ceb991e32c43fc5b7323f71c196a42cc6b703d94258ca8ff30f88bc9f832ce87044cd7a23ad35ac7b07b0b7c44

        • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

          Filesize

          4KB

          MD5

          f0de058f6b57cadf3aee232632fcb90e

          SHA1

          4fb033c979fc602b1469ec8d096cf3c3e31fc098

          SHA256

          99e106ac5d19dcadd1594265917e604d58598980ce8630164c40786845ed9907

          SHA512

          2d996c53b740ff5d195afd49954d0cee8f77a6eef47519b8803ee8ca333f35d6ead7b02e87d402254ad80b60ae4de4b84eff7002bdfe372d3e5a64a20b2d9394

        • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

          Filesize

          4KB

          MD5

          f0de058f6b57cadf3aee232632fcb90e

          SHA1

          4fb033c979fc602b1469ec8d096cf3c3e31fc098

          SHA256

          99e106ac5d19dcadd1594265917e604d58598980ce8630164c40786845ed9907

          SHA512

          2d996c53b740ff5d195afd49954d0cee8f77a6eef47519b8803ee8ca333f35d6ead7b02e87d402254ad80b60ae4de4b84eff7002bdfe372d3e5a64a20b2d9394

        • C:\Users\Admin\AppData\Roaming\Yandex\ui

          Filesize

          38B

          MD5

          f8e1286ad475c5e74980a46a0f9cb239

          SHA1

          87aaf10b46fee0fa2e92066bac66701d112f8dae

          SHA256

          5dcea5edd943bbef5845dd0cabdafa98f8854a29548cf15db2449ecd20a0d72d

          SHA512

          0fba4971566ea53f5ee8d07ebb2fcfe721b405381253f6d56d19e5ec962cf4b166b7df9318568efc6323f4688d8464502cd53d4b466cf027d727218f013dbf54