Analysis

  • max time kernel
    142s
  • max time network
    152s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230703-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system
  • submitted
    31-08-2023 21:09

General

  • Target

    4fd663bef6af4e06a4eea9cca867751f27f508fbfc7a82a59b311f18ff883a2a.exe

  • Size

    4.5MB

  • MD5

    b74b8b4bfa57cb453d539e36a8a34249

  • SHA1

    0d1034b5d611122feee9170c605a309f4dd332ff

  • SHA256

    4fd663bef6af4e06a4eea9cca867751f27f508fbfc7a82a59b311f18ff883a2a

  • SHA512

    a74b8aee19d89a8b207ad6b04677f9403e79fabe2829962c0f67084175afd6348ecc1f6b15a20b56780bbe44ed7195b9e21c7d3434c7f9055a2607a49b01c4f9

  • SSDEEP

    98304:B9xEpja9gwFK2JcwtTwPAHqx+gKdzOJDb4v+:6p3tawN0v+

Score
8/10

Malware Config

Signatures

  • Downloads MZ/PE file
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\4fd663bef6af4e06a4eea9cca867751f27f508fbfc7a82a59b311f18ff883a2a.exe
    "C:\Users\Admin\AppData\Local\Temp\4fd663bef6af4e06a4eea9cca867751f27f508fbfc7a82a59b311f18ff883a2a.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:3728

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    1KB

    MD5

    4d00a6691e9390a393f2605776e9dc40

    SHA1

    a7a1aa7c26e8bbd187f4b5b518c4cf83adcb4645

    SHA256

    6d6b9e52c614128521b82a99cc40deb5d9f50ab465d588fc50f5aabbb8f211dc

    SHA512

    60bb50aaaa7c950f6bdc5c42cf80c44fd29d4e106c6378eb66ead1d63bcfe65af0a8f150caa3ab0a40d1297459d8943fdfb30f547e8e5562f7d2c17952ae66fb

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    3KB

    MD5

    dad245f156a6344b72b06e4d30c85ae4

    SHA1

    012c73267d5c2d9ae00a88e8116803d4846f16ad

    SHA256

    6a8ca9cb286909742f9b4b5b8da69737a4181148d055dea94fa58c638518c76f

    SHA512

    12961aff1dad30937643b231074db122624f2a124dc634afc2df2f2d8f2293c36ceac71d3915d7a193a1091df9cb9bddbf2ecac6fa37eb8e99fc3c7544a5637d

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    4KB

    MD5

    be11750f1c59d62e92ac6c27a9dff71d

    SHA1

    c36acf9341268df110573f7fe7a0c0bb241c5f0f

    SHA256

    e74e6175f8e888b036cc03bf43d531b87aa240fb236b1efdd93f03b34318da2d

    SHA512

    4a3ebc77cc9f7b8aedf340dfeb86f943767e3ce6766afb7f08efffdac55c589e10c15d89024cb3740546210911721bb488cff38e581e6bc7126bc1c022ebe228

  • C:\Users\Admin\AppData\Roaming\Yandex\ui

    Filesize

    38B

    MD5

    1351c2ec9b8df08605e6e63906dde66e

    SHA1

    471b70a187849d763424bf435d7b202a7bf8d370

    SHA256

    a710b055339ee21b56bb9a383af645f248a69fc12aa8785885f70f5c93427c1b

    SHA512

    d279423209cbb63f8cca3ce3a5ef8f0b922538f8bd2654c868a613a2571145199b8724be4e74b872374e07553bf8ebd8de5700cb5ee584367f108c905c21c32f