Analysis

  • max time kernel
    138s
  • max time network
    145s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230703-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system
  • submitted
    17-08-2023 22:44

General

  • Target

    f531a3adae5cc81978238b7f5c36b4a04b7ca76becb2dc2768dbbceff1028f01.exe

  • Size

    4.3MB

  • MD5

    6d67b16183fd11ebb0a65119becdc537

  • SHA1

    0819eb5a597c22ad1d79da41f336913855f07578

  • SHA256

    f531a3adae5cc81978238b7f5c36b4a04b7ca76becb2dc2768dbbceff1028f01

  • SHA512

    04a1cf5443ded5c79fa39dca96c076a8c64441fbae3add12a3a0f31349625c37d308631a7a41294aed089a49e765e534ff9c6f6253c08f3e5fe4cc840a1fda2d

  • SSDEEP

    98304:/OLHzIDtxDSK2Qi2D1jmyEXLvDKdzOJDb4v+:c2REXL+wN0v+

Score
8/10

Malware Config

Signatures

  • Downloads MZ/PE file
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\f531a3adae5cc81978238b7f5c36b4a04b7ca76becb2dc2768dbbceff1028f01.exe
    "C:\Users\Admin\AppData\Local\Temp\f531a3adae5cc81978238b7f5c36b4a04b7ca76becb2dc2768dbbceff1028f01.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:3276

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    1KB

    MD5

    09354aaeba849b5a05399c7c5a0b69bd

    SHA1

    6fecc0b0946fca5c45cf73defef8e5d20d93a7d8

    SHA256

    a8347a21269ec42ff10eec29513b962a970754eecf4bc7dfd8b813e1094f39ab

    SHA512

    69b128898cd7879d81e80fe52513bf1804076332b6333a4f65158f8409e221db59daf717f8d842c737b28aef436f785347c54ec196d24c51eb23ca586b0e3c50

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    3KB

    MD5

    f35fdc6a1d18126f6e1c8ecab5e579fb

    SHA1

    58475fdb856158556e2e10c138db0dcf3b5d8808

    SHA256

    a7423f852b1e4ad986b9fd73847a806e3a2c4a2975f08f6292711dba42966fac

    SHA512

    d898ec8b01e9f9f681858d548211796dc29f7aecbcb3b2f4179cbe7a88c6b5958ad29dd1907c7d0db4274df470af88ceaeb170896573828c8d38cbd727ee76ad

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    6KB

    MD5

    3db1b37c73a905b5f587c6d62e4e9aef

    SHA1

    287aa3c72e8a08e3941526a7004b4a4dac515d6c

    SHA256

    cb7c742ae308a632fadef9c66bc8b54762a177c9087b1fd27a83569bc3cd0a78

    SHA512

    87b844256a50891b607a295f114b20b984e5c95bd3c442ab454403a5477f174453f77f0cb45728fdb37bb89dbbef764a594a62fe9781cc7e9d2f5442d8cd4fb0

  • C:\Users\Admin\AppData\Roaming\Yandex\ui

    Filesize

    38B

    MD5

    8bd9ce9040b18e9d0c956cff8c78a6e1

    SHA1

    5dec31ce639d33660139fbb453a1eb1e69182583

    SHA256

    ca258aec6a332bc138df5775cd4f4e02215dc5f51b075bcab385f8eed2abf04e

    SHA512

    a69b90cc2051669d2dd810dd59bc811dc651e9adaeecdbc48ad9ab52aad148fe1fa048a8167d03a6c89ef934e25893107998732468da9aa780d5a16a34b0347e