Analysis

  • max time kernel
    123s
  • max time network
    129s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230703-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system
  • submitted
    25/08/2023, 01:00

General

  • Target

    a8a3b3b97a4fab575602fa2d91e4cb16db4dfdec7b273d6d007265903f2889e5.exe

  • Size

    4.5MB

  • MD5

    a8ba9e20ed0c3a47af85e44c0263ec73

  • SHA1

    a237896377af4bbfd7224a636a77fbbdc01c1456

  • SHA256

    a8a3b3b97a4fab575602fa2d91e4cb16db4dfdec7b273d6d007265903f2889e5

  • SHA512

    a69925d76bee54b830b0b4aa6c400a85826f69eed600bec8efa656a6c67d8d3a0541f130142c520f25b251abf20369bfeaf614b3de54e2a312cb51d4b3c1ddf6

  • SSDEEP

    98304:ZOLHzIDtxDSK2Qi26im50OORKdzOJDb4v+:qym50OlwN0v+

Score
8/10

Malware Config

Signatures

  • Downloads MZ/PE file
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\a8a3b3b97a4fab575602fa2d91e4cb16db4dfdec7b273d6d007265903f2889e5.exe
    "C:\Users\Admin\AppData\Local\Temp\a8a3b3b97a4fab575602fa2d91e4cb16db4dfdec7b273d6d007265903f2889e5.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:3312

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

          Filesize

          1KB

          MD5

          535e24688826c3380425a13b4b333a55

          SHA1

          360a409c9e45fe217f3d811e69930626c114f23e

          SHA256

          e5c25a73eba8f184912821b17d80359ff5b70ebcfa5fdfa0b24e6990036a3719

          SHA512

          756e0b01636affc54660ce1950ff7e27bf2e5da4f7d1a917fb4fdf548f0d38c55255d560a61b0f82a6393f40c226155b6ac9caa412f0ab1854d5f2319474e191

        • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

          Filesize

          3KB

          MD5

          bde8dadb743d6d9d47c90933fd038a8f

          SHA1

          b07a87fbdb4ce175d6f5a2f28caf4e67ca1602f2

          SHA256

          1b56b95010d82d8d7cf1e7c8763afe021e3582d34fc58c838163f15643aff048

          SHA512

          eabf32c7be669d5e3397f5cef22f03353da79f6e5d3ddbf28ac19896ca57c303563b4693147ebad79fb6eaad8c13e46c14ae1cadca884d16f9c51115eaa5661e

        • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

          Filesize

          5KB

          MD5

          d4493eba936f8311e67abd1ddd8d6a71

          SHA1

          9f121b8ae702f2295a99c280383b2ddba40773cb

          SHA256

          3c2350c15772584ded094a54eba7641bf28bd56360b96511a09e009cae6dedd5

          SHA512

          4105732b99767a988bf27152ea7c95c1e325d65d715693408146c155142bde4e4a4640fa1b5ba4864bf6bb35d1e969f7afadd3c2eba473bfbb83c901c0dba253

        • C:\Users\Admin\AppData\Roaming\Yandex\ui

          Filesize

          38B

          MD5

          6b79722adf628a3c37c49c365bfd61cc

          SHA1

          744cab7e9ccacf303654df6bb06ea148312b3219

          SHA256

          c8b1ed98fe84bf1baaaa0c7f524650076e331abc876b8e77a7a749cce046400e

          SHA512

          7a047f334b3b4a040ce98a9d34fcf8148e09226d544acf868d03cf18c811b78e7e79b3a3f8cfc9c3943f93ebe573129517977aa16419769d8d67780edd3baa0c