Analysis

  • max time kernel
    72s
  • max time network
    138s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230703-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system
  • submitted
    27-08-2023 22:22

General

  • Target

    aaabd343f76306138da9255ffbe67a018e8f6320100a7774a2fbc274d357fee5.exe

  • Size

    3.6MB

  • MD5

    bc47b3c0efd8dc1a77452f9cf6f46240

  • SHA1

    be879260be0f8fe1d23f076486a9059af63fa4f6

  • SHA256

    aaabd343f76306138da9255ffbe67a018e8f6320100a7774a2fbc274d357fee5

  • SHA512

    09c8473f1303e26e13d53d120bd362f36e234582356576c295c0f379ddfbb87ca0a1c5199dbbf098c9aa0f66e31ac52b5d1bc8660d613ccf6adcf00277fdfbd9

  • SSDEEP

    49152:FhQ8lPzRnZp4y5C6mB0j47cUWB+r5u8QeKxFOJxdb4vZKVU:DllLRnZp4yE6md3KdzOJDb4v+U

Score
8/10

Malware Config

Signatures

  • Downloads MZ/PE file
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\aaabd343f76306138da9255ffbe67a018e8f6320100a7774a2fbc274d357fee5.exe
    "C:\Users\Admin\AppData\Local\Temp\aaabd343f76306138da9255ffbe67a018e8f6320100a7774a2fbc274d357fee5.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:4996

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    1KB

    MD5

    4e206f885398e3bcb8d3c5d914a70582

    SHA1

    742762e0fc04b51f22dd2ad3263d59c418da97d1

    SHA256

    972b199a34d5567f2e2692cdeb1e0b46eefe08e72ec1fb2e37589f8a4a3d1c9c

    SHA512

    2488fdc90427bef188be6707ceab787dbcc1d791b83ddefa7805e495f2c99c73d4c0bd3f42c08d0921ca0f343d0a041e72db7bc29ddb8b7a3ea64f85998db0e5

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    3KB

    MD5

    d959ec62c0ba48f4aa2a9bee660fae9d

    SHA1

    b82ee14a4330f3424d6793db8639dc9b9f309576

    SHA256

    bb4dda7564548a6b2dc41a096ef998870a629406b176e9c47eab420754672e81

    SHA512

    70c5b479c17641e99db51e7bad8af44fb7695813074a71a0d386307e0471edebedf5068e45fbeba5315e4da2db9a53ca87cba28a8aac27d6084c381b9d0d9572

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    4KB

    MD5

    29c7ece24c376f33b6fec9bf831fd5eb

    SHA1

    f18efb9604e69940feaf6ece918d26321bdf43d7

    SHA256

    79c776c85f090b5f6d315057982e3da17ca3f407b47f6257b8e9391882999b0b

    SHA512

    d53242e539447e02f694dc381a3d68846a773f31319de83d1e1904ba67d712a16fc6f1dee0d9dbcd235a2297e20ed8804e4f1f2583af2f0e5ba27f39a7e6afd9

  • C:\Users\Admin\AppData\Roaming\Yandex\ui

    Filesize

    38B

    MD5

    5717a4122ec51e2248a8a8702a326702

    SHA1

    91f97daaabfc5b23a46213afba174ec0e4664f08

    SHA256

    064df15b26d4e264e0ff29292d5be0ecb7ec1865bbfdcbcf67e60d4fe4616211

    SHA512

    14bff8df7c044357af8878da6ba5ca0c9e1cbdd752612b6b65ca576dc7d603f697eaaaf02d19c43ab64b570216a8e27de06e6cf5f4ef07bee51cd300eead5b49