Analysis

  • max time kernel
    142s
  • max time network
    147s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230703-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system
  • submitted
    22-08-2023 07:22

General

  • Target

    8859436e50baa008cc1ac83d42c62370406710b14b9855dba0d0fcc11e5fba2e.exe

  • Size

    2.8MB

  • MD5

    094e7cbd274998785e706e4c668648b3

  • SHA1

    edd2199f69640aba318ccce4e6e18cdcbac13fef

  • SHA256

    8859436e50baa008cc1ac83d42c62370406710b14b9855dba0d0fcc11e5fba2e

  • SHA512

    4663658f65414c3a15cdc3da0e0715dad68687c38acd23ea582156d67eb6340771abd743a189730e5ceaae03f334dede843311922f53c9caa9114032f6563779

  • SSDEEP

    49152:ieDBcrFsiR1ZwV38W6CbABY+r5u8QeLxdjZKVq1v:iCGrGiR1ZSsW6qCKoDj+o

Score
8/10

Malware Config

Signatures

  • Downloads MZ/PE file
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\8859436e50baa008cc1ac83d42c62370406710b14b9855dba0d0fcc11e5fba2e.exe
    "C:\Users\Admin\AppData\Local\Temp\8859436e50baa008cc1ac83d42c62370406710b14b9855dba0d0fcc11e5fba2e.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:3388

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    1KB

    MD5

    18622a6ca83f75a2781eda68f643381b

    SHA1

    21250d9a7c0471331058df9c7b635e05c0312079

    SHA256

    aa8438381df62097a9b5896e6318c6ba0d57107f277a405c7c62906f9b91a265

    SHA512

    a665b386d03595bc844d2c73ea19967d0445b19977ac066f2b54b0c2b25fff1bf338b9a5f8d051b319a38bbd33f37dee9c8dad1a6ceb5380db14545ebd493035

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    5KB

    MD5

    778847e8237b582e990cd80de74fb5db

    SHA1

    b4472f37739400d116c17f143757a8bafeae635a

    SHA256

    a74365597ccd0b25f3fc5952c0f51c97985372acb01d95e43f3c09e53fbdee80

    SHA512

    466d591caeec2f3983e30ad696845b21ad84c3fb55ee22dd470150c697e1e372dc86ba987702f7f9f19c66f0bec7e611615ee4ba3602f42c593826a2801015da

  • C:\Users\Admin\AppData\Roaming\Yandex\ui

    Filesize

    38B

    MD5

    11207839489ff5e74f2bdff210294f1c

    SHA1

    dda9313eb54197add04fe956d334f0a3297bba0f

    SHA256

    6dab26322a86ef462448b565b3ac1a7813e2a724843db6d42a79384b24b500fb

    SHA512

    58d8025ca26f17896a3ee0e84cdd03a2c27b38cd9adbe524d391186f54c140243c18b19d1d72e956f701e2c01d2ce762f03879b59f5182d2c25a9ba643e987ec