Analysis

  • max time kernel
    143s
  • max time network
    152s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230703-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system
  • submitted
    17-08-2023 11:29

General

  • Target

    a51f6da4ee19cf3dd3ab9658f8f0a75c39bfdf8bf3b0df00f9f2361b0720cee6.exe

  • Size

    4.2MB

  • MD5

    a634a3f85a554c2025a0ecadb5b0c7a3

  • SHA1

    72b73a29d6e9d202864d610cebf6d398e7b2a957

  • SHA256

    a51f6da4ee19cf3dd3ab9658f8f0a75c39bfdf8bf3b0df00f9f2361b0720cee6

  • SHA512

    46cce6bb67e3c4182ddfea8d9287173d48ba516d62dd3ea68322a676a32ce6de22d884c883b52fb08736369d2a6702c4ded6bdefa09730944071a18520b2132f

  • SSDEEP

    98304:1dh5q7noS9h6mvD1PfTLWKdzOJDb4v+q7:1ZqNJPLLlwN0v+

Score
8/10

Malware Config

Signatures

  • Downloads MZ/PE file
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\a51f6da4ee19cf3dd3ab9658f8f0a75c39bfdf8bf3b0df00f9f2361b0720cee6.exe
    "C:\Users\Admin\AppData\Local\Temp\a51f6da4ee19cf3dd3ab9658f8f0a75c39bfdf8bf3b0df00f9f2361b0720cee6.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:392

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    6KB

    MD5

    f2879fed5dee535abc928ecb6df4d48a

    SHA1

    04969d58de46b0b54a40297b2ad09d94481dd9ca

    SHA256

    e4eef691f6e20c6595ece84d4d8ff847170c1140616624a48523530a98a113ec

    SHA512

    68e2e39f3cd00ad6b15d6c799df6c94b5c39a16535c846c02bdc73b6ad37a9af11bc8da0b5736fdaba0464aa79e7824435411504a8e4cb8275e22bb08da6d109

  • C:\Users\Admin\AppData\Roaming\Yandex\ui

    Filesize

    38B

    MD5

    bcf12aea742bb587f4426af7cd39d217

    SHA1

    a31cffa447d6f1d5daf8bcc99eaf124e5c00b598

    SHA256

    6bf4bf661ef020cdae50daeeb44436c93e6ca900e3f8f162a1ae7edb6830c2c5

    SHA512

    3f59b358891f31e753fb6344b3136ec4f584a0d8d537bb06f3732a340c889194d9a8ca0f4ed98061f98f295b3d2837b5a4805f9f9ebeb120cd0d2a908635f7ed