Analysis
- max time kernel
140s - max time network
148s - platform
windows10-2004_x64 - resource
win10v2004-20230915-en - resource tags
arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system - submitted
02/10/2023, 12:25
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
86ea1975f5a2745f11ec80ddd709ab41fe0ff090b04557d5f5b80b35aff29954.exe
Resource
win7-20230831-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
86ea1975f5a2745f11ec80ddd709ab41fe0ff090b04557d5f5b80b35aff29954.exe
Resource
win10v2004-20230915-en
2 signatures
150 seconds
General
- Target 86ea1975f5a2745f11ec80ddd709ab41fe0ff090b04557d5f5b80b35aff29954.exe
- Size 4.1MB
- Sample231002-plnz5scd47
- SHA256 86ea1975f5a2745f11ec80ddd709ab41fe0ff090b04557d5f5b80b35aff29954
- MD5 0efd40672f4b2b93c3d9623837cb45c1
- SHA1 3289ad5fd6106846bad4436611858e2a5a8e8254
- SHA512 374f81465da471166b0b6d4db30dbeec5afc80ff3dd8d28e51d267bdb7b3e9649b1f789e1ec892cd34ba177cd86532fa79e3f0a3ab8d31d38d032e5978475a4e
- SSDEEP 49152:QmTMlGjQOsSzd3R8bj1LOhtt+RVHY+r5u8QeKxFOJxdb4vZKVY:9TKOZx36bjNOhqKdzOJDb4v+Y
- MD5 SHA1 SHA512 SSDEEP
Score
8/10
Malware Config
Signatures
- Downloads MZ/PE file
- Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 4488 86ea1975f5a2745f11ec80ddd709ab41fe0ff090b04557d5f5b80b35aff29954.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\lite_installer.log
- Size 1KB
- SHA256 664eae17406cbeab1a282667381e6179161fd6ac1abb74278b0fee7b3d4ce54b
- MD5 afadf1f74c5391f3017a00c6fd489052
- SHA1 5f578b072f16ebc715d820c220c4284ba6cd8f01
- SHA512 62ddef7f2110c14b215dc38004fdef71ebb8c5ab526664b2f4e61c70b644a38e7dd27c029bbaf48f5b9b89f26d745d213f8dfa126256bff2d1cbd8c80feb72cc
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Temp\lite_installer.log
- Size 4KB
- SHA256 9b92504da8f9567141c68bd73b6298abab8f42721021a0cfb7bffd10e4869b8c
- MD5 321228f2022b761397a1f40aebc9e651
- SHA1 027fc3e87a2cee3af4395f104860016fc7921023
- SHA512 8f958464ca2bed0b06a8518fc42594fe4689dbb5ec6f1a414fe08e36722275a5dc8e00b06e7819a66b2da0cadbfdbfda79320af87f873b0c7050e9645ca87eeb
- SSDEEP 48:LkAB7koFwCvkk2S5WW+8178/74471jH22mH28S0Q9V2BAnNq5aY1nWWIdVaY1Dvu:LkARkoXck+b60P5jHaHWV7qQYtIiYZ2
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Roaming\Yandex\ui
- Size 38B
- SHA256 a6b383b6490e1049603934919cee95149a0f455de5d970de64093f232fc8f9d4
- MD5 65db278ed79e4e4fc50a4797e1b2e093
- SHA1 f65b5179c1421d5453be07ef2cba6abfa8b1e1d8
- SHA512 6936c7b1958a8123dd44aaad52a062a488e657c7526efc2952123f2e9a302bb2f44384a15eb99c36c57da564b673fd861c4069d784f36ef3a7aad4753748c460
- MD5 SHA1 SHA512