Analysis

  • max time kernel
    87s
  • max time network
    129s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230831-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230831-enlocale:en-usos:windows10-2004-x64system
  • submitted
    01-09-2023 15:21

General

  • Target

    ac5df6d63015cbecd994a92e840c7b9838cfd39d17ff9e3cb02696d47e61e45b.exe

  • Size

    3.7MB

  • MD5

    c3df123d73b520b2ca09b014152242d5

  • SHA1

    d94af3170b699ff746dd59afc7137d799beb3f16

  • SHA256

    ac5df6d63015cbecd994a92e840c7b9838cfd39d17ff9e3cb02696d47e61e45b

  • SHA512

    a9e71a0d432563b3d12ec4427bf4395d7ae320e421e9623ee6c3600d14912b081c378cd4716fe2cb41b321fef0bc65a697723268a7e560d48c341a9c63ce0a4d

  • SSDEEP

    49152:WhQ8lPzRnZp4y5C6mB0j4KTB+r5u8QeKxFOJxdb4vZKV8:SllLRnZp4yE6mdVKdzOJDb4v+8

Score
8/10

Malware Config

Signatures

  • Downloads MZ/PE file
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\ac5df6d63015cbecd994a92e840c7b9838cfd39d17ff9e3cb02696d47e61e45b.exe
    "C:\Users\Admin\AppData\Local\Temp\ac5df6d63015cbecd994a92e840c7b9838cfd39d17ff9e3cb02696d47e61e45b.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:3616

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    1KB

    MD5

    6a277831bcade92fb5fd5174c43f1113

    SHA1

    9ee8fb97e373fc165fdc734e20a13d5b5c531c36

    SHA256

    1c1a865e42573a960e2872dcf58fd230adbacc4fa27eee92971d9c46ff1bbf1e

    SHA512

    4b03e33f09a653e5c70a38a05a65ad5aefe120eadea2237bf6c8ca16d7d39ee956a1489b686cf27e1d884a656f4a8d1307c86eb5ee40eb27a343782f8b8b531f

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    5KB

    MD5

    8308cc79cc0ebfbb441a6d8510ce445f

    SHA1

    9f0b630e7a3767af37bfe3757775591a1442f83c

    SHA256

    2fd883f1a6951fab87080af75fa187fac74bef52ae81c11958a091de004359aa

    SHA512

    56a48557a956bdffb1ab085814585a9eeb85344620de76008b484f6216f80d4c60ad068fbd0f012f865d196ab0956ca39d9abbbead591ad99caa96dc9741cb27

  • C:\Users\Admin\AppData\Roaming\Yandex\ui

    Filesize

    38B

    MD5

    af097c17cb83a39f0275986d4c12110b

    SHA1

    6ed18e1e28f002e81a103eee24cdd991d77e946a

    SHA256

    ba2486801789331b582fc4a2855122409a7463616ae268658914ed21c78af3ab

    SHA512

    58f935145fcf7d16a4435b5367bf9e677600bfdc89321fdbeb64491e2444750b5f4b7735f32b722864732db89c7a939164fb441a794ba867ad030c0a9231c502