Overview

overview

8

Static

static

3

1247265e41...08.exe

windows7-x64

8

1247265e41...08.exe

windows10-2004-x64

8

Analysis

  • max time kernel
    142s
  • max time network
    147s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230915-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
  • submitted
    17-09-2023 14:17

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    1247265e41cf51dbfd02be339baab500b502519be7c6a8d86f97576effb24e08.exe

  • Size

    3.7MB

  • MD5

    632a6937a61ac9ff7ccdad754031b095

  • SHA1

    99d5778261af37c49e267e8d31f6038c015c99d9

  • SHA256

    1247265e41cf51dbfd02be339baab500b502519be7c6a8d86f97576effb24e08

  • SHA512

    0a62d4ffb0d307b03354c306a71db3c136cab2feec411425e613b7214cc48a5a281ecf8aa434d99165ca36467f7d6749506a0d6c917c6c46dd3285169bb7808c

  • SSDEEP

    49152:iDCLomiK+15C6mBPtS3FpAB+r5u8QeKxFOJxdb4vZKVx6:cootK+1k6mLYKdzOJDb4v+x

Score
8/10

Malware Config

Signatures

  • Downloads MZ/PE file
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\1247265e41cf51dbfd02be339baab500b502519be7c6a8d86f97576effb24e08.exe
    "C:\Users\Admin\AppData\Local\Temp\1247265e41cf51dbfd02be339baab500b502519be7c6a8d86f97576effb24e08.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:2728

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log
    Filesize

    1KB

    MD5

    5183c6511c41a2edb8c9f3098b4d6557

    SHA1

    69dd84884f5393de5d0d216808d9d422282a750d

    SHA256

    b0cc6b7d0d1d6a159f3ea5330cbd90805c9d50bd69eb4d565c789fc8c116e150

    SHA512

    76c8adfb4d14e1b398b0283b25845d6c5f7e0dec36c5a1903a58a9de4c64dbcb08bc370ceb327d82c17500e3ac3547ff0afd6e9144abedcca2dd7c050ca6bcb3

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log
    Filesize

    5KB

    MD5

    1ac8529aa11a60310e56785c5678bee4

    SHA1

    c0f8dc4d24090932b3fabebec7ae0d728363597a

    SHA256

    e42962e06bac23fe45823f572fe7ac42d8ca81916a5afdf1f0bf9a4b8c7784fe

    SHA512

    c97b4caa1eaa0a309d7037d7cdd04586626f3d09162cc4ecc24b53286d9f90e90602dc47daa1c10062f1455ebd76d0defbd21b49ee7ec33b06fe5b2547abfc72

    Download Submit

  • C:\Users\Admin\AppData\Roaming\Yandex\ui
    Filesize

    38B

    MD5

    4249e43cba69fd36f3e0f529f44cec67

    SHA1

    a8299a007b77b9dd2889421aced185bc14593697

    SHA256

    106d4e7b64ceae7a5c1a0301597c43e8cd92c302505f2997b819dc0c6e304797

    SHA512

    cd61eeb748b107c3a70b2cc39e73619b8bf8d957481a2ff37378090f5845a157605259407eae7b0e888dc4044cbfb3273d88e3f8f132cdc20918465b560d5305

    Download Submit