Analysis

  • max time kernel
    127s
  • max time network
    137s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230703-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system
  • submitted
    18-08-2023 16:43

General

  • Target

    def10424efeac0cc92caeacce86a89eab2b776f4044ac58c4723425ded0d7a47.exe

  • Size

    4.2MB

  • MD5

    4a1ebf92cfabe5c26c5e6b6c5fdb492b

  • SHA1

    a4204c99d388ad6f1cd8f347d6144b7f0464bc29

  • SHA256

    def10424efeac0cc92caeacce86a89eab2b776f4044ac58c4723425ded0d7a47

  • SHA512

    e4ad068794ff637a98cc3ca69f6ac5acd2d9405a9881c591c444ee5894156ad31c75d2545272c01a339cc1a5080fcaf356458338b296df9914305aa577014bd3

  • SSDEEP

    98304:ydh5q7noS9h6mvDrQqBZm5LJKdzOJDb4v+y7:yZqNvQk+L0wN0v+

Score
8/10

Malware Config

Signatures

  • Downloads MZ/PE file
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\def10424efeac0cc92caeacce86a89eab2b776f4044ac58c4723425ded0d7a47.exe
    "C:\Users\Admin\AppData\Local\Temp\def10424efeac0cc92caeacce86a89eab2b776f4044ac58c4723425ded0d7a47.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:4648

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    1KB

    MD5

    3efae2ba635f57107fdb56e66ffc24dd

    SHA1

    5bb52d9bca7900fd5a634507d7c07b1dc1ea7d76

    SHA256

    757bea7f8e21b506f1e3c177d4af34f886ca51b94d9a7cd6f6a66751e07e5a54

    SHA512

    575aa2fc3e8769e764dc19c8106288c2863956cc24c79dff8abf12a10ad4ac2af5a031c29cae74921c7f2e4e5a85acca03053b22bd52ffab228ffeff28f17a64

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    5KB

    MD5

    a9820c9849833c7e8d98f516f2a9e428

    SHA1

    88cb37ff6f92a7273dece1ff0f6c53b279e36dba

    SHA256

    a89445e62970b975ac14dfce9a01942080ef94a057ae102fb20f18c12161ba38

    SHA512

    d385faca6fd0d25ff36c85fe6a6099d82a929c5bfbb54cff31bc04cb641dd75a71d0554a8e20f4a6dcd9491d3c26e6000e8679d3e378a300742ba8a41b10b4ec

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    5KB

    MD5

    a9820c9849833c7e8d98f516f2a9e428

    SHA1

    88cb37ff6f92a7273dece1ff0f6c53b279e36dba

    SHA256

    a89445e62970b975ac14dfce9a01942080ef94a057ae102fb20f18c12161ba38

    SHA512

    d385faca6fd0d25ff36c85fe6a6099d82a929c5bfbb54cff31bc04cb641dd75a71d0554a8e20f4a6dcd9491d3c26e6000e8679d3e378a300742ba8a41b10b4ec

  • C:\Users\Admin\AppData\Roaming\Yandex\ui

    Filesize

    38B

    MD5

    a788e3f196f9929a56037b5182d057a8

    SHA1

    c94d7c6d64edf76a43a1941e6247faf8f98d9cf6

    SHA256

    25fc0c0b9a2666cb4e3cec677177afd0e4e3cca86a887d52fa14f67672c2a75e

    SHA512

    d1bfbb361910912d5bb835ce7496fe7d4281d69e99742d371705c9bbe3a5c436a4c5aa27c709108b2aaed906074fc17299ab8e40404a6debdc97f15f5c49df6e