Analysis

  • max time kernel
    142s
  • max time network
    148s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230703-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system
  • submitted
    29/08/2023, 18:50

General

  • Target

    13da490df323901282b95fea1283b4d7d54bcf9f12d137046b8493d0a1839fa6.exe

  • Size

    4.5MB

  • MD5

    f7ea1971298e33320403978a65934d72

  • SHA1

    d5462a32c6fcf3ec17fbbeb3c9e83e3cf702d469

  • SHA256

    13da490df323901282b95fea1283b4d7d54bcf9f12d137046b8493d0a1839fa6

  • SHA512

    97f5db1077858c679dfb5e2badcf02c1341dba35773d10cee72f541cf84b2c132df31c024e180c7c7b20587be8540e286d3b47a40322070c5f10779617174fcd

  • SSDEEP

    98304:B9xEpja9gwFK2JcwtTwPAHqx+gKdzOJDb4v+:6p3tawN0v+

Score
8/10

Malware Config

Signatures

  • Downloads MZ/PE file
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\13da490df323901282b95fea1283b4d7d54bcf9f12d137046b8493d0a1839fa6.exe
    "C:\Users\Admin\AppData\Local\Temp\13da490df323901282b95fea1283b4d7d54bcf9f12d137046b8493d0a1839fa6.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:840

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    1KB

    MD5

    cafc8edb15405191095a2f66f9f0ac61

    SHA1

    2bf54e8f84d0536dc1ffa85b75976b0d3c33a2b9

    SHA256

    1a434a3577fb15fdc16a1201709f95092cef30e4c45c224d5bdb0d57790d2192

    SHA512

    39047a02030e1f40227ebfd1ff8d7ab07f751ccfe78cbeab597b9187df2a76eaa04ca9e19bcecd79d5217dde02b4ff19f2d1ddf2679903021bcb6ef21a013856

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    6KB

    MD5

    3ac340b9f5d6cf6084417e8ac6b2ee01

    SHA1

    cc7e70eedf030edc7b2301e207267e0bc5abe622

    SHA256

    9865103b9b88b6adfc4e176afd130f0203af527fc61ec4b060bd72f215e98242

    SHA512

    2854641b6a6247bdd795b5c6f57ee93c798107ce16c962a67201065ffc6bc84ecf1db23e00cc4f9d241b81c9226b37508d5427c093fa83c092bd38f403f29e31

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    7KB

    MD5

    bba58c7a2aa7baa9b2c15a278fde0d6f

    SHA1

    f54b7ccce9e9707df01f5f3df8ad231ce761987b

    SHA256

    f7799bc2c2604e81ed4349a4fcef4ca20d2419f8ad0acdc4088286c767c86869

    SHA512

    6acb3fcd1c427e1c54ed1d8bc4af619ea56099da5b49b8195c7aa403ac32e73adb8252c200a5306d2e57359fd3349277038387df6460fc24de93df38c529152d

  • C:\Users\Admin\AppData\Roaming\Yandex\ui

    Filesize

    38B

    MD5

    9c698f35b83049d3004215d7477e36d8

    SHA1

    8efdd90fbf85b31405390c6647e05abc17e90921

    SHA256

    5a7b42901a0b95e0aedd7608ba63b2b12ec29c1cf0174f2e2288af4703d4a711

    SHA512

    cb08e1816b74ce3fb1d6cdd1a9e8202ce8ef891824ea62fc5c8e9a4d59f9bc99dbcbf1fc059b9224a14306a1d5b1ee3f0ba71d0f62a66f4cada2e250466ccb94