Analysis

  • max time kernel
    137s
  • max time network
    144s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230915-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
  • submitted
    29-09-2023 19:20

General

  • Target

    72f9176b4970083d8769e2f4c30b87d21c64e1b224553e5f4d0a62cdf7202dc1.exe

  • Size

    4.9MB

  • MD5

    7a67a4c76a9a18314d63d256aa6894dc

  • SHA1

    1da948b85b5b36e1d01863824e8998941d105d5b

  • SHA256

    72f9176b4970083d8769e2f4c30b87d21c64e1b224553e5f4d0a62cdf7202dc1

  • SHA512

    48fc0f76ac4c7db46a7edfc3acb294719b49d2242cb5ff130d28b8201d58a102c49a98b996d1d26c893e2972f495cd494908e5455b8829cdb25d360341b7fe3a

  • SSDEEP

    98304:nwdXBZ2/5fbjORDgt/loIKKdzOJDb4v+rh:GkPtaIJwN0v+

Score
8/10

Malware Config

Signatures

  • Downloads MZ/PE file
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\72f9176b4970083d8769e2f4c30b87d21c64e1b224553e5f4d0a62cdf7202dc1.exe
    "C:\Users\Admin\AppData\Local\Temp\72f9176b4970083d8769e2f4c30b87d21c64e1b224553e5f4d0a62cdf7202dc1.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:1416

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    6KB

    MD5

    93a17a66e30b6bb48b601c23cb65dced

    SHA1

    11740f420f913a3077273009abdee549897c9725

    SHA256

    16477afd8a04a847c5fed457b3d8d21f4f79c5a218549f6cd895c512841aa169

    SHA512

    d0db4cd80d72f40c5f1f3f9fccaa6faff8cec139fb62c9a2a2980ad3eb5dc8c3c21fc851ed6a461ae3699a3287c4c049c3a538b62537da8902a696540feece98

  • C:\Users\Admin\AppData\Roaming\Yandex\ui

    Filesize

    38B

    MD5

    261f47594dcf34f2fa067021e25244c6

    SHA1

    fbd51b6e29d6842e0d2f362c5509589fc5e582ed

    SHA256

    19e09c902cf7fc72435bf77cc49487f755b8c0c9d655e8bed30b7a15a720beb2

    SHA512

    95f06c5e4fcc3a74ba700ef297d85a8ade213019fa64942586edc2c7efca908fe24655e73e00cdcf78060caae9593b8bc3538385befbc9d97e0e9af36beaf835