Analysis

  • max time kernel
    142s
  • max time network
    155s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230915-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
  • submitted
    21/09/2023, 11:33

General

  • Target

    2bb8291ecf0f88de6be9574522cfb350cf44c843636d103a48983f95f14cb126.exe

  • Size

    4.6MB

  • MD5

    272fa87448f5da552b073d9e54f3d6b7

  • SHA1

    0b26f5bde7e7fc63547498566ba900b46666f5f1

  • SHA256

    2bb8291ecf0f88de6be9574522cfb350cf44c843636d103a48983f95f14cb126

  • SHA512

    3fa67436222a8c15f6b67b21537ae6fbf0f01da2d19489ba9adc5ac9910037a9431e4d3fc6c32f2916ae39e06db2f7bc4960a447227721f19924b64827d20da1

  • SSDEEP

    98304:fcOxoa2orK2t+Gwo2xaWJWRzSKdzOJDb4v+:Tos2oWJWRzxwN0v+

Score
8/10

Malware Config

Signatures

  • Downloads MZ/PE file
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2bb8291ecf0f88de6be9574522cfb350cf44c843636d103a48983f95f14cb126.exe
    "C:\Users\Admin\AppData\Local\Temp\2bb8291ecf0f88de6be9574522cfb350cf44c843636d103a48983f95f14cb126.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:4560

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\57C8EDB95DF3F0AD4EE2DC2B8CFD4157

    Filesize

    342B

    MD5

    c37ae68f6da5feb4004f03899f02ae00

    SHA1

    f8ca082b4c420078ec85b34cf0da7fea83dd7bdc

    SHA256

    0acde3c6d274e3ef4f88d3cc317c108268a60fe7bab2aaf83a507ec6403243a0

    SHA512

    0940b84fab68ef556779beab5e3daec8b4f29a80d11db2ae0fe76d53360186469f86f3148778bca83d23e8cc39035e416f1ce32476a261c3d083e2a20b1d3992

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    1KB

    MD5

    8f19dafffe9a2e3085a2bd3fc20ece26

    SHA1

    8fc8bd29d28bd97bc7bc059156bb03df8cf02ebb

    SHA256

    443084f95923917b9adb15201a7adac15691b55ee95c84c826b31f4250a23b89

    SHA512

    db5a9e2f34cc4de6a235cca72fcec368601f975aec5c4cb8c93e68115d2648889ba2260037017570d6021037304bda439d07d8811e4eab669d376203e57da1f3

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    4KB

    MD5

    4a531ea66c3fcb673cff334c850a44d3

    SHA1

    e1869ff12e4eabf280cfadacefc85ce3fff80d68

    SHA256

    74a04b88eb402d92fb0d63fd5b59980b1b903a263d32e07e063c22708075d6ae

    SHA512

    8dc75f7cac7fbc982d524aa5b5a45ff9dd9d400b97054f1cd217f360670e6b0017d2c1c01d6dc7cd00d6717b69e9141cc15459546981a530ae4153f43d115e17

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    4KB

    MD5

    4a531ea66c3fcb673cff334c850a44d3

    SHA1

    e1869ff12e4eabf280cfadacefc85ce3fff80d68

    SHA256

    74a04b88eb402d92fb0d63fd5b59980b1b903a263d32e07e063c22708075d6ae

    SHA512

    8dc75f7cac7fbc982d524aa5b5a45ff9dd9d400b97054f1cd217f360670e6b0017d2c1c01d6dc7cd00d6717b69e9141cc15459546981a530ae4153f43d115e17

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    5KB

    MD5

    a8fc1bfe37581c3252adcd6dfc206ed1

    SHA1

    d450ac5c20878ef628c7986e14e24e2d2aea562c

    SHA256

    630e9b1d125b54780221e8d1490ce078226963fb02b4e2198948701cafcb2afe

    SHA512

    cc517c935ce932fca7eeff69b892aed32e2b7de975af725602ef41ec320420aaab6d1a08189069cac24dcfb844545c4f4be8198984bbed445db3c19273e1093d

  • C:\Users\Admin\AppData\Roaming\Yandex\ui

    Filesize

    38B

    MD5

    71766a037321239ee3f6dfa49f949d67

    SHA1

    46c72d0e78b757b89cb40ef9feb3f2ed48504d3a

    SHA256

    63701e9256160f259841299a1580cf8a047f4f5e01ba285b2898e17106af5381

    SHA512

    df226bdb2851834598924570cb1efe92bfa33ebd4adc8e988eb34fd1cc174adfe360ae41bce475625a92e9bfe7fd0ec987201a6d02006e5d4a1a35b4f07cd07c