Analysis

  • max time kernel
    142s
  • max time network
    148s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230703-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system
  • submitted
    29/08/2023, 18:50

General

  • Target

    13da490df323901282b95fea1283b4d7d54bcf9f12d137046b8493d0a1839fa6.exe

  • Size

    4.5MB

  • MD5

    f7ea1971298e33320403978a65934d72

  • SHA1

    d5462a32c6fcf3ec17fbbeb3c9e83e3cf702d469

  • SHA256

    13da490df323901282b95fea1283b4d7d54bcf9f12d137046b8493d0a1839fa6

  • SHA512

    97f5db1077858c679dfb5e2badcf02c1341dba35773d10cee72f541cf84b2c132df31c024e180c7c7b20587be8540e286d3b47a40322070c5f10779617174fcd

  • SSDEEP

    98304:B9xEpja9gwFK2JcwtTwPAHqx+gKdzOJDb4v+:6p3tawN0v+

Score
8/10

Malware Config

Signatures

  • Downloads MZ/PE file
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\13da490df323901282b95fea1283b4d7d54bcf9f12d137046b8493d0a1839fa6.exe
    "C:\Users\Admin\AppData\Local\Temp\13da490df323901282b95fea1283b4d7d54bcf9f12d137046b8493d0a1839fa6.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:840

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

          Filesize

          1KB

          MD5

          cafc8edb15405191095a2f66f9f0ac61

          SHA1

          2bf54e8f84d0536dc1ffa85b75976b0d3c33a2b9

          SHA256

          1a434a3577fb15fdc16a1201709f95092cef30e4c45c224d5bdb0d57790d2192

          SHA512

          39047a02030e1f40227ebfd1ff8d7ab07f751ccfe78cbeab597b9187df2a76eaa04ca9e19bcecd79d5217dde02b4ff19f2d1ddf2679903021bcb6ef21a013856

        • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

          Filesize

          6KB

          MD5

          3ac340b9f5d6cf6084417e8ac6b2ee01

          SHA1

          cc7e70eedf030edc7b2301e207267e0bc5abe622

          SHA256

          9865103b9b88b6adfc4e176afd130f0203af527fc61ec4b060bd72f215e98242

          SHA512

          2854641b6a6247bdd795b5c6f57ee93c798107ce16c962a67201065ffc6bc84ecf1db23e00cc4f9d241b81c9226b37508d5427c093fa83c092bd38f403f29e31

        • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

          Filesize

          7KB

          MD5

          bba58c7a2aa7baa9b2c15a278fde0d6f

          SHA1

          f54b7ccce9e9707df01f5f3df8ad231ce761987b

          SHA256

          f7799bc2c2604e81ed4349a4fcef4ca20d2419f8ad0acdc4088286c767c86869

          SHA512

          6acb3fcd1c427e1c54ed1d8bc4af619ea56099da5b49b8195c7aa403ac32e73adb8252c200a5306d2e57359fd3349277038387df6460fc24de93df38c529152d

        • C:\Users\Admin\AppData\Roaming\Yandex\ui

          Filesize

          38B

          MD5

          9c698f35b83049d3004215d7477e36d8

          SHA1

          8efdd90fbf85b31405390c6647e05abc17e90921

          SHA256

          5a7b42901a0b95e0aedd7608ba63b2b12ec29c1cf0174f2e2288af4703d4a711

          SHA512

          cb08e1816b74ce3fb1d6cdd1a9e8202ce8ef891824ea62fc5c8e9a4d59f9bc99dbcbf1fc059b9224a14306a1d5b1ee3f0ba71d0f62a66f4cada2e250466ccb94