Analysis

  • max time kernel
    121s
  • max time network
    134s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230703-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system
  • submitted
    16/08/2023, 05:02

General

  • Target

    0486ff2a94ad7841abbc226417838038ad79b4337d00d1afa5b648a85e444485.exe

  • Size

    4.2MB

  • MD5

    483ebe22909e2a0f494845b72953d71c

  • SHA1

    f56ac606e1d90312f638c78e91ae17b67447826f

  • SHA256

    0486ff2a94ad7841abbc226417838038ad79b4337d00d1afa5b648a85e444485

  • SHA512

    ba4f3b7256940cb134e238eefbf781e874787d3a573dfe100f6142f70b7d887f84a22d33d920a86f18941e08d750256267312d1f2b51c297de59c17a5b22d0f2

  • SSDEEP

    98304:1dh5q7noS9h6mvD1PfTLWKdzOJDb4v+q7:1ZqNJPLLlwN0v+

Score
8/10

Malware Config

Signatures

  • Downloads MZ/PE file
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\0486ff2a94ad7841abbc226417838038ad79b4337d00d1afa5b648a85e444485.exe
    "C:\Users\Admin\AppData\Local\Temp\0486ff2a94ad7841abbc226417838038ad79b4337d00d1afa5b648a85e444485.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:2628

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    6KB

    MD5

    979d3cf849d7ca865a01f97a9fab0e97

    SHA1

    5aaf91b43eb977a358f8e8634a9083ae446b6e1e

    SHA256

    590772419d21460a625e96c30ccc5d83a6f8c0b5ebe72cd3ea9194e329044bf7

    SHA512

    857c4d778efe8f7dd91c20c1fee798d22eabe9aeae1e4316012e096ae7c335dad1d8f43ad255383605a6927c3d3f0b3318377623317e12e5efbc78598078830f

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    4KB

    MD5

    1cb54dacc4ce8eccf3a5dfba28381f71

    SHA1

    ed0914e53f3ec4a295c7b93749d0ac271504875b

    SHA256

    b10fff1ea5301fa9382647aedb593a76bc0caaf4b702f6650fe12b55e8d7dd78

    SHA512

    77ba3a1c65f52a900330a6401c2214272b1f5e6570a5cde7af06aec8222dfe0559179296e9ab4980f9ff12eed5b111c5eaa3e06c477f7fcf6235b7d9e3edf226

  • C:\Users\Admin\AppData\Roaming\Yandex\ui

    Filesize

    38B

    MD5

    dc51d45eba46ec0c5603873b39e6e11d

    SHA1

    9188c3563303c2770aeeb28c8d86a8a7c0141f7e

    SHA256

    0076452b7a0502b56a4b5e9476df9ec5652908bf481eab3ed62eff93e5e9b272

    SHA512

    d880e151eafe77165a8c52689750cd551d5a67a5c19a718bb6ebe1fc452b9f5c050b8502e283c324eba369090430bc68528a29e4782df75f81ff70193e215a14