Analysis

  • max time kernel
    142s
  • max time network
    148s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230703-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system
  • submitted
    21-08-2023 17:09

General

  • Target

    16533b7f7f79bf9571845b8042b8e6330e4da6715fbb860469fff8e37d0cf9ae.exe

  • Size

    4.2MB

  • MD5

    04dbedd371210acf1f474d3318fbddc0

  • SHA1

    b724d54e3f2701e8903f11f2c3829ef458d395d9

  • SHA256

    16533b7f7f79bf9571845b8042b8e6330e4da6715fbb860469fff8e37d0cf9ae

  • SHA512

    696d42b913e29cd45a6910ebb08d4819d99df161e411ceffd42ab88b59950316668164b189a67e2bcc023233c4839080bd6a49dc9d16e55df1c9de398eee9493

  • SSDEEP

    98304:1dh5q7noS9h6mvD1PfTLWKdzOJDb4v+q7:1ZqNJPLLlwN0v+

Score
8/10

Malware Config

Signatures

  • Downloads MZ/PE file
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\16533b7f7f79bf9571845b8042b8e6330e4da6715fbb860469fff8e37d0cf9ae.exe
    "C:\Users\Admin\AppData\Local\Temp\16533b7f7f79bf9571845b8042b8e6330e4da6715fbb860469fff8e37d0cf9ae.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:492

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    1KB

    MD5

    a21c6f7220a33fdf6dbc6012983881f3

    SHA1

    46828b3424e9902788f997749ac6b9bf996d1dc4

    SHA256

    0a8b1816bec97fcc4c81b474ace3e42d2146c82deb075981e11b444fa9bb346d

    SHA512

    11002245e7d4bccfd5cf363419a498a6fc2becdb003a05b86fc0c5438c5918aa25eeb342b4c72acc7ad57294672106b3d21a38a8a4a438dd60d46f17aa84e890

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    6KB

    MD5

    66eec53ffddae2b55dcae0dbef80a9c2

    SHA1

    d4682438d08576549f406ed8a8aa6eefe0f5e9ad

    SHA256

    3fb3c32a4879605956da09e0002c41b1cd19f774e23da958469e8a659ecf6b06

    SHA512

    13726055b8d290788f67d43e5d432363e349fc265a92a38f906a2eaf2795a16647c6f0cf083865231eea11b6d28e14db5bb72e3735ab9d59ca3de6589d6e1554

  • C:\Users\Admin\AppData\Roaming\Yandex\ui

    Filesize

    38B

    MD5

    303342ddb9536ad6c7a2769b08f72253

    SHA1

    e48fadb875dd95ba7525c8ec51880d8ec7bfc83c

    SHA256

    2ff7168f8071d8f04a6380a123c4d076c38692c3f71c4ff8a9124442ba1276dc

    SHA512

    03357a6b0c97593669546bfe87b1bf8942a95c8c4cba537476c2600f2d248d461390ee6452ca9a709773e1296a0eed0c004314d701edeeef6146782273d2f2b1