Analysis

  • max time kernel
    143s
  • max time network
    148s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230831-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230831-enlocale:en-usos:windows10-2004-x64system
  • submitted
    01/09/2023, 09:30

General

  • Target

    83373ccfb560b140b9f91feb5a68bdf0125ca88b98b39a0ce3222e9621fac075.exe

  • Size

    3.7MB

  • MD5

    ddaee7709edf093f6803e2090bf72c7f

  • SHA1

    44aaa109dbac42b35800cfd291d68470d3f26922

  • SHA256

    83373ccfb560b140b9f91feb5a68bdf0125ca88b98b39a0ce3222e9621fac075

  • SHA512

    1419de7fffdeee27831dc52a705e6d44496576ac8312ea5aa503f204764c5721efe929a19a1b8b1b59cb4b76bc0100a7d595db14217764d098c96080a0c992d4

  • SSDEEP

    49152:WhQ8lPzRnZp4y5C6mB0j4KTB+r5u8QeKxFOJxdb4vZKV8:SllLRnZp4yE6mdVKdzOJDb4v+8

Score
8/10

Malware Config

Signatures

  • Downloads MZ/PE file
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\83373ccfb560b140b9f91feb5a68bdf0125ca88b98b39a0ce3222e9621fac075.exe
    "C:\Users\Admin\AppData\Local\Temp\83373ccfb560b140b9f91feb5a68bdf0125ca88b98b39a0ce3222e9621fac075.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:2716

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    1KB

    MD5

    ba9ef6175b90406569685cf7d2808476

    SHA1

    c97adc2f80547e4de8f80e9519d70718ff2ff5bc

    SHA256

    22f77f5871977d4179f101f0dcd081c83f74cfb1cf6f6ca8bf78f375600f97cd

    SHA512

    96b4aff7a2cca474a068de195c32854873a245d020b443d8422c987f445c46e5c26cb34b161076b70f4c0289b0fc3a5cbd2ee2aa88693a07ec58515a90dc50ba

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    5KB

    MD5

    92c3998a488eea30d573bbe7a6b38494

    SHA1

    7cf748787f51c9cc3bdd89cd5b3c58c83e68e932

    SHA256

    3eaad2c194c9d4f0d9afc718169854a804889c50725ef1b11768b7cd991cde23

    SHA512

    31fd7664a49d7e9d4e6297f1f14c20918added9879a2093fa586c9dacd8afe6c39f039ba0f2f3fb8517128789329a29f2acecc681fb6b6c6130c0b29e3fde85c

  • C:\Users\Admin\AppData\Roaming\Yandex\ui

    Filesize

    38B

    MD5

    1aa297134c72a9f90e9ecc709726c8de

    SHA1

    385276ace5ea102bb9bf3e53e92a12892b9703d9

    SHA256

    a37a17d9c170734575c4091dada8e122131ac34fe9fa67173f2f09afd7da9613

    SHA512

    d0f82fbd341e6cdb06c50f5ea38f2cf50bb8cf82957e9c6e7a4322b8514f58ee276377afa6cb961b3f42aad5ebc968e6dfde90ba2c1627ceaa399fa8b4f420e2