Overview

overview

8

Static

static

3

9fbf3dbe73...4e.exe

windows7-x64

8

9fbf3dbe73...4e.exe

windows10-2004-x64

8

Analysis

  • max time kernel
    145s
  • max time network
    150s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230915-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
  • submitted
    02/10/2023, 15:27

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    9fbf3dbe733e0a4b882508a6ef31bb787ccb958fd7243efc91cb7c32fc83a54e.exe

  • Size

    4.1MB

  • MD5

    a89ea2908c2be0709d6e224a2d4fc3ec

  • SHA1

    fcce3b6d2636d7065f71999075887f737787a057

  • SHA256

    9fbf3dbe733e0a4b882508a6ef31bb787ccb958fd7243efc91cb7c32fc83a54e

  • SHA512

    e6406bd1b478beff2c9167244f05a0d4aa7ca50a8c2d90c95eb306b961070371dda8f462b64ee749e9db69cb05c6e1dd35987eecd9aca007386036c166e00156

  • SSDEEP

    49152:TmTMlGjQOsSzd3R8bj1LOht24RV5Y+r5u8QeKxFOJxdb4vZKVT:6TKOZx36bjNOhnKdzOJDb4v+T

Score
8/10

Malware Config

Signatures

  • Downloads MZ/PE file
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\9fbf3dbe733e0a4b882508a6ef31bb787ccb958fd7243efc91cb7c32fc83a54e.exe
    "C:\Users\Admin\AppData\Local\Temp\9fbf3dbe733e0a4b882508a6ef31bb787ccb958fd7243efc91cb7c32fc83a54e.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:4636

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log
    Filesize

    1KB

    MD5

    59472185599f853f29c94ec27036110d

    SHA1

    18a98ce83bbf30ab10ea1dd8c877591300ca4715

    SHA256

    588f4c99476a5567e9c5b888001b4caa5d09807c2db3d3baf64dd0b26b2976b2

    SHA512

    1374d2a4cc3858dd982ad56c7072d2657d189796acf6dbbbe506d7cd9c37eec1394eff944abcfa2475c95916c2c89b2193cf2396535fbcea0b63d478adac1caa

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log
    Filesize

    5KB

    MD5

    aa99e0ae49207cec84412d6e304320b1

    SHA1

    43afbc3f25a2efe67cefbfb3466579da1cbf87bf

    SHA256

    eb6fce9ffaf5548d1da1bfe968267f7782c992716a5c080c2a851e0895941d8b

    SHA512

    1cc48fdca6c71a46c252f99e15a88d6490c39d37f6e8e72cfbbe48bcb6d17981adf3425e61cf137ac70ecf64a96a2677b1914d64088bc256ebde08081a6eabed

    Download Submit

  • C:\Users\Admin\AppData\Roaming\Yandex\ui
    Filesize

    38B

    MD5

    870b6b44ebcdd563d2e4790c9ed278b5

    SHA1

    3bcdb4703e079243da8140df5d8253cd9af8d0a1

    SHA256

    71525e438b8e16d4d940de2faeced187a4fd932ad2536046faf0f07dbbc8d934

    SHA512

    b7cdfb0d311b346c93c771580f5146f3f1a7326ea9288653765a610bd529303eb2cc0387955f997ff6a1df1aa8c3b74b6d75794ca6f0c0cb9fd442b4190116d6

    Download Submit