Analysis
- max time kernel
142s - max time network
155s - platform
windows10-2004_x64 - resource
win10v2004-20230915-en - resource tags
arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system - submitted
22/09/2023, 19:53
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
f9504f7a9ff0cbdd0a5891259f23ba5cd4f9ab533072291a98f97b6ce57fa828.exe
Resource
win7-20230831-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
f9504f7a9ff0cbdd0a5891259f23ba5cd4f9ab533072291a98f97b6ce57fa828.exe
Resource
win10v2004-20230915-en
2 signatures
150 seconds
General
- Target f9504f7a9ff0cbdd0a5891259f23ba5cd4f9ab533072291a98f97b6ce57fa828.exe
- Size 3.8MB
- Sample230922-ymb7eaaa5z
- SHA256 f9504f7a9ff0cbdd0a5891259f23ba5cd4f9ab533072291a98f97b6ce57fa828
- MD5 79170ab2c977528e71583bd650fc9777
- SHA1 08742f4ab020dd2f5b99986dec5f397d0aa9af96
- SHA512 32e35a122f29e400d7fcd7e0abb7887a8451ecade62c42ddcbb79213a16a2933e0590a8e2210fd8c3fcf282f03ae26040d7721a550c2ea434d48fe4fb984adde
- SSDEEP 49152:PyOjNMqkoakIOoq6K2t+GbzwIUFpzB+r5u8QeKxFOJxdb4vZKV:qcOxoa2orK2t+GwiKdzOJDb4v+
- MD5 SHA1 SHA512 SSDEEP
Score
8/10
Malware Config
Signatures
- Downloads MZ/PE file
- Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 3048 f9504f7a9ff0cbdd0a5891259f23ba5cd4f9ab533072291a98f97b6ce57fa828.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\57C8EDB95DF3F0AD4EE2DC2B8CFD4157
- Size 342B
- SHA256 e50639b95fa66af878ca50b0bd85811a17fbe07d131391d2b1af71c3674fd70b
- MD5 a9af9d30b83950bfaf278118e8a61b6d
- SHA1 86136dea8663c7f4d1531936a9e04f580ae0305a
- SHA512 a32a09c5e473fe915c37b613eedb84c2b943baa7c02b3b9d51eaff221b6e15e95fee4fafdccf895368adc5aca75ddc78f7e0aa5a302175b5e026c05279af74c1
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Temp\lite_installer.log
- Size 1KB
- SHA256 00e2ff093869ec62af59119178638573cc5b92b91d5248a55659e8ca1600a1fd
- MD5 987ca205e282a405441bc2ae0398ddf9
- SHA1 a18e03bb79ee68d3b6c8597512b58a1c67d48f77
- SHA512 4a2861242f93aef8c5dea573511c906370a8e41fafa500f0669b158abfd5cf53fa7aea2631a8a45433ee8879e122eeb794b54e87e4a8cd670f75c2db5f8f8031
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Temp\lite_installer.log
- Size 4KB
- SHA256 800437df2739cc94f5dbee04604ee8e7bc5a2fc57d7e5589378cca114a820472
- MD5 9ff623fa76fdab6eb04f38cf60280f50
- SHA1 17571bdb99221c10c86066e7c8a90d61a7ba2f33
- SHA512 860738914143b83d8cd1d160cae7e632006f1006f98cdb2030efa7d18e6a10ec390c3e8739112bac101dc1a18de60ccebfb36b51265cf272c23e18115cfbec0b
- SSDEEP 48:RBQw9V2YmFMoDl797t47+H2+mH28uoQ9525EPrwDrSr7BYnBVDrSms7bY1Avu:RZeFMoDlBWaHkHg5AEjwHYYBVHAY+2
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Roaming\Yandex\ui
- Size 38B
- SHA256 5325a07f29ee4961c20c5cacfd67892dccde37ca85873ee6c5c03e5ea4d4d0a7
- MD5 0d0e27416826ea69c0e1f3e19836efcf
- SHA1 f561100a67e97a3d92fec129800868f1d339a4a9
- SHA512 9da28a6e4399f9fb82b66756fc9d56ea64194b6121b820f82eeffa425ee36941e301cf1e8844a8cab32d3f1cf6c23c3ff45a920e6b5ef6fc8f7265a7665a9064
- MD5 SHA1 SHA512