Analysis

  • max time kernel
    143s
  • max time network
    148s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230915-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
  • submitted
    30-09-2023 11:39

General

  • Target

    64a3f9d3a8dc4262828e0509fdcffb57da0bb5db75dfdb06f084a297eda335e3.exe

  • Size

    4.9MB

  • MD5

    5c1da64e8db2b6ff3a6560a783cd73e9

  • SHA1

    308512788926c18a05e490b3eaf10426af759eed

  • SHA256

    64a3f9d3a8dc4262828e0509fdcffb57da0bb5db75dfdb06f084a297eda335e3

  • SHA512

    853b4e45f74bd82b580c97fb3de38ae4693bceaa9bfc1e3f25a921db4737e379c4de33ba8046d35343bc31103390db5b19c12df71260705e837dd885daade559

  • SSDEEP

    98304:nwdXBZ2/5fbjORDgt/loIKKdzOJDb4v+rh:GkPtaIJwN0v+

Score
8/10

Malware Config

Signatures

  • Downloads MZ/PE file
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\64a3f9d3a8dc4262828e0509fdcffb57da0bb5db75dfdb06f084a297eda335e3.exe
    "C:\Users\Admin\AppData\Local\Temp\64a3f9d3a8dc4262828e0509fdcffb57da0bb5db75dfdb06f084a297eda335e3.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:1676

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    2KB

    MD5

    3e2e306338894e92c2abf88bc0cc2a59

    SHA1

    c8300004576f93b3cee819b6d6a1f862e549b45a

    SHA256

    2f786b5b105c17273db80a917f4d0f566512f0e38871413d253fe06501e221fe

    SHA512

    57cf419f1a4da7ad72e8ad666588ac714cbe09853bf4a4bccb4ffa497a957678c1d78d32f790a434aa8caf00b96545427ac1ed75bbb2f2812170220171529ed1

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    6KB

    MD5

    5cef4fd4431192bc52565fa195d2a452

    SHA1

    f753ccb0bf9740df5f975bce9187c2b89258d31a

    SHA256

    bf9e5fd4e1bfc5c7ce8b90c782ac8bd6080dfb8a9009f2ff242a589308a962d7

    SHA512

    fa54d1af58c456d37fa0ee8cf0c73a6d05b8a0a4e7c1486e19566eaff3c03db26fd135551f52b847f92907d0f12e5dcc59d93a37d3d4bf64790c5340e415acc5

  • C:\Users\Admin\AppData\Roaming\Yandex\ui

    Filesize

    38B

    MD5

    b4fa7ef5401e449f43c8bac2ebff8c58

    SHA1

    d9db59fe80386d645c4417bc824dc078d4a9415f

    SHA256

    94f8539b722a3681773443d1cf771558f54f9154cf4563891cd08fba16e7eabe

    SHA512

    138b53e41b6a89698377771b061fd0315995bea027fc328aee334e4e4e90d9880ce2b27348615319ce2ccf277ae1fd9f9df7fe97e350cdb6f2acff4a1c798cfe