Analysis

  • max time kernel
    150s
  • max time network
    156s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230831-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230831-enlocale:en-usos:windows10-2004-x64system
  • submitted
    02/09/2023, 17:22

General

  • Target

    fb316de133d819a2aea90a4cc12e1fb93448d50c6e6b275068e00ae9ab024b0c.exe

  • Size

    3.7MB

  • MD5

    5624dfeaa97a66e7b03559b3921b962e

  • SHA1

    925c48aea345357e75dc39156590d664db1d8d76

  • SHA256

    fb316de133d819a2aea90a4cc12e1fb93448d50c6e6b275068e00ae9ab024b0c

  • SHA512

    2ebc128cefc02d70e4dcd074e439b92de40ac3297a31c5f2a2232784f04316017fd54ff5c69455c2c57f533977b0fbaf2840d84f14f014604cfddbfdd0225dd6

  • SSDEEP

    49152:WhQ8lPzRnZp4y5C6mB0j4KTB+r5u8QeKxFOJxdb4vZKV8:SllLRnZp4yE6mdVKdzOJDb4v+8

Score
8/10

Malware Config

Signatures

  • Downloads MZ/PE file
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\fb316de133d819a2aea90a4cc12e1fb93448d50c6e6b275068e00ae9ab024b0c.exe
    "C:\Users\Admin\AppData\Local\Temp\fb316de133d819a2aea90a4cc12e1fb93448d50c6e6b275068e00ae9ab024b0c.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:5080

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

          Filesize

          1KB

          MD5

          b730fc6ddce446a1ead0a3a77b8d8807

          SHA1

          7e5b8924f53b1ae3ad75359c72fab3bd30442001

          SHA256

          c5354657c6ba97e9bea886be3c75c3a8535a9d420fa8ae075562ac095f97411c

          SHA512

          b680db3017bc2580db9bf170fc00f03dafa54bcb716809b4b071bf6937742101969d4faa091f53a02fa2821215c83fa556324e2d45907345f64a31ef5ed6376e

        • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

          Filesize

          5KB

          MD5

          78ffc556df348c18675bbfe00f9d7024

          SHA1

          a7dbdbb6f4b9f23318a8bbb208acdeb11fc84ebb

          SHA256

          3871daa9b60f482ef01027bfdb2782f23926ebed9ca30db13196b60a148a02c5

          SHA512

          ec2ca5bb20eedbdf3cc288fed9b12eca2b798f4774753365ddc810449e476521dc6a7502e686422868cecff77a52c897b9d93523e414ed2a5cd2349a477906f7

        • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

          Filesize

          5KB

          MD5

          d973585fc2f96eb119afe3787e2398fa

          SHA1

          356eaad673c0012b7a675c632a8f56898756cd2d

          SHA256

          ea0ddf00d84f592b2733f2fa2c807f84b723acb5358a6043a6a4edcf1625aa38

          SHA512

          09ca485266ae2e6d6208ea0c5d5e703daf4368b2aeed20b0aca8fc6c74a5409ec4f14b9d62aeaaeec12d880f743106a590d99a373a44e18d6f8c4813c067650e

        • C:\Users\Admin\AppData\Roaming\Yandex\ui

          Filesize

          38B

          MD5

          a6bf05929749391e0d3b8de94d1825f0

          SHA1

          23cc01647a615c8175c7dabdd856d66b18bc8ae2

          SHA256

          8eb74061ebfcb1eb6201063314b5c7f6651a4e1c2904e71209f412fb2d022c8b

          SHA512

          5353df718b53aaddac6ea15cc3bcc57ba59f18ad4c06ec82ec5c4bf91eb3ad44d838b8e8ac0d61ebae6307bf5f9edf05ed29db6740f3a3e5fbd3cde3fa146aed