Analysis

  • max time kernel
    83s
  • max time network
    128s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230703-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system
  • submitted
    16-08-2023 04:10

General

  • Target

    adf3116bb6cfee0d76af0f4864e634e7e4de4ee178da8050b59ca1178b52a4cf.exe

  • Size

    4.2MB

  • MD5

    e8d6a19a64d9c4ac4b70fc76577063f4

  • SHA1

    2f2666f3b810ac86d3673f6564a7f8693d4b6f04

  • SHA256

    adf3116bb6cfee0d76af0f4864e634e7e4de4ee178da8050b59ca1178b52a4cf

  • SHA512

    308fb64c2d7bfa487cfdbf956fd7d40f5e9141508c8c1db46ff89b23e426b6b62283a73afde2787bc3764721c6cf501b0fab2120bf3948f393aa74ec48009dde

  • SSDEEP

    98304:1dh5q7noS9h6mvD1PfTLWKdzOJDb4v+q7:1ZqNJPLLlwN0v+

Score
8/10

Malware Config

Signatures

  • Downloads MZ/PE file
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\adf3116bb6cfee0d76af0f4864e634e7e4de4ee178da8050b59ca1178b52a4cf.exe
    "C:\Users\Admin\AppData\Local\Temp\adf3116bb6cfee0d76af0f4864e634e7e4de4ee178da8050b59ca1178b52a4cf.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:4544

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    3KB

    MD5

    1d2a29591fbe1bb034fb21e50df87a49

    SHA1

    7315ae461443a81863b88505067b5dd2dffd5590

    SHA256

    5fc6e6f733ca8995b84efaf8170b80f0ca6e3f60e0822b154395fe0dbf93318c

    SHA512

    17fe03b533c084c774944ce6d375d74937afa1f0e072100173a628daff904056c0dad9250f921afd5d4809484a3ed3434974e36639ceddb4f4ff654d505dccca

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    6KB

    MD5

    296d042bd368741716b6bb8da05b0adc

    SHA1

    be9965b4c7f4e4f51b92c43810ffa299b57b4a3e

    SHA256

    536c83f2d3624eb313f739f48ea728a87a1c155dbf0a32fce0e54a077fdd8d8f

    SHA512

    f0d2086f64663d5cbe8ef133ac9f9defa85549c1cc0068f4f02bce5dbc9ca553f7b8f194d28cdbda7e14735757e7168bc9a43da8b695328a9bc969ce3407c282

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    7KB

    MD5

    415915de90cac4a9ca45428fc0eb4f7b

    SHA1

    990251bdb32509044a55848e42364ff93e10d02f

    SHA256

    e18ebc62f3e8e259bb37de9075a1af767485e608c545b589e8b4415239058181

    SHA512

    44913678993adeb3881013130fd70c2dc2176543f23c4eba9e63e68bc667e3de410be306c05abdb2cbb628b9ef03cc9da6f5c6574ba3d7a28dcb5b5dee521939

  • C:\Users\Admin\AppData\Roaming\Yandex\ui

    Filesize

    38B

    MD5

    13493818a8e291342dbda78f881b184f

    SHA1

    c042eaa0b295e5fd6b3cc715d24274036313f0ae

    SHA256

    c769d249eae1270b2cb1061b2f67ebb421db35590dedc371835a5a10820ff950

    SHA512

    24f3cdfa68b861fb73f8dc19470ec3d691d98f42ce7a0e2f451f8e51ceab1caa049a5fc3d52748d02f226855dd54498984fd746558318f43d33646c79c4b01da