Analysis

  • max time kernel
    140s
  • max time network
    146s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230915-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
  • submitted
    18/09/2023, 11:38

General

  • Target

    08e8ad70e0141ac5a8754d0469adddd017de97d483dfa6400955e7a1334d2639.exe

  • Size

    4.4MB

  • MD5

    6315388f13df5126cbcddcd7605ed9cb

  • SHA1

    56b2d7c53610212af92ffc0d14fae3af65f5ad43

  • SHA256

    08e8ad70e0141ac5a8754d0469adddd017de97d483dfa6400955e7a1334d2639

  • SHA512

    a99481cf3042ed2d3b08746e4dd22cedf3e659f08c8a50c7744576b04f68b65e5bbb8b0c0899831ffe4cf73a8b67d76f504a00f468d54789ed4e556ed3f65b36

  • SSDEEP

    49152:2DCLomiK+15C6mBPtNdkvbSQvwbM2dI8B+r5u8QeKxFOJxdb4vZKVt6:AootK+1k6mLkSQY4PdKdzOJDb4v+t

Score
8/10

Malware Config

Signatures

  • Downloads MZ/PE file
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\08e8ad70e0141ac5a8754d0469adddd017de97d483dfa6400955e7a1334d2639.exe
    "C:\Users\Admin\AppData\Local\Temp\08e8ad70e0141ac5a8754d0469adddd017de97d483dfa6400955e7a1334d2639.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:3024

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

          Filesize

          5KB

          MD5

          3dc7179a2d5f3ec0b894b704f64288cf

          SHA1

          66ffb3b1ab652ff33c5a15ed7ac3052becb57df6

          SHA256

          b9b988ce5e2d45229b68f74d454fe71b4d8745c691c2c444ffa9ad12f39f7408

          SHA512

          df067f90af65c9c5f15042c173c407358d3f8426ac3227d09ba15220e6d38acae1d2453af0e19b12ee4d4aeb6840bfab0934a74bc5701c4a28a55ed682739aee

        • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

          Filesize

          7KB

          MD5

          33aa7ae39a2763f5f5478697045414fd

          SHA1

          4603b5eef90b9803d48a19ba42c536452cadeb63

          SHA256

          55c2dc69dad21db638a234e06fce98f470739f7c818cf2b6c8aef97861acd6a5

          SHA512

          5289ba77a2ee0f17e2e0f08e72c133d1eb16af350ef2c04059d3fd73d9e93106058bf3473cf7116f6d4fc58c0e6f197a934b588395f58c7bdceb19ebf6d3c1d3

        • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

          Filesize

          6KB

          MD5

          bfb8e9ce93555d2ee524858a3d92127d

          SHA1

          90f46ceda53c27d50ba6c59a26ddb0eedaf7e87f

          SHA256

          dd423fa09680af82a60e0c8e61f1fffe39b17f692fa4acae6dad699c399c3d48

          SHA512

          ddde77110bd6766fc1a3254ff8a9687308137c92cf32d06ffea9dfc12a5168a7619448e01a4550a023706806fb84a3a883d987f2c5519039a6b27202dd491a4c

        • C:\Users\Admin\AppData\Roaming\Yandex\ui

          Filesize

          38B

          MD5

          4541c8d7e9a3f68e1e6fd739f0fab2ea

          SHA1

          d0ae07affcbc20d73e463acd4b0a79ce3c1662ed

          SHA256

          cdefdf6563484f74b691e8980e2bdfcfbb857a81353759f38bd1a8cdf7953ff3

          SHA512

          736be2f9213313de472dca41a2407551ec7170c0397aa0bc4d17a110966cca9e7782b5ef026852191186b27b4c2c839cca32744327bb272780de056ac824e765