Analysis

  • max time kernel
    148s
  • max time network
    143s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230915-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
  • submitted
    02/10/2023, 16:24

General

  • Target

    7c5d497994c6c946923d982284ef8b7eed225e62c3adefa0338ad57a5c6da5d8.exe

  • Size

    4.6MB

  • MD5

    12fb388b5fb930a874bcb06e5f21fb69

  • SHA1

    901cdaeafc6aff64078b286e0e669cd16c97fc55

  • SHA256

    7c5d497994c6c946923d982284ef8b7eed225e62c3adefa0338ad57a5c6da5d8

  • SHA512

    1bda5d695244b54c10a5b8d9550526cce28c9c5c0fbb2a9047665cb6367dece3d0cf544d8a146b04cfe509f2697c2eaf772dc13d127b6cd19e42f7444e94a0be

  • SSDEEP

    98304:WG1c5g+Wm3n0tQLCcvITqy9KdzOJDb4v+:KgALCoITqzwN0v+

Score
8/10

Malware Config

Signatures

  • Downloads MZ/PE file
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\7c5d497994c6c946923d982284ef8b7eed225e62c3adefa0338ad57a5c6da5d8.exe
    "C:\Users\Admin\AppData\Local\Temp\7c5d497994c6c946923d982284ef8b7eed225e62c3adefa0338ad57a5c6da5d8.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:3108

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    6KB

    MD5

    32d1b6342c129027ac313b1a1e6c3231

    SHA1

    a71d99422ff749684948dfd5482d155f37ec26b4

    SHA256

    1671d1bea67b51f4f8e222e7f7bb7d6b9296cfaec779f8c0a0a2e3c94ce78742

    SHA512

    d6fcbf20950a3ee21dc9037f151b2c7a05c35db4b26bc6a194a52da8f32a0c9d516e02bf379d68dac0bb84e1dc76941b9ba9be04308b71f3439d968f2235f3ff

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    6KB

    MD5

    32d1b6342c129027ac313b1a1e6c3231

    SHA1

    a71d99422ff749684948dfd5482d155f37ec26b4

    SHA256

    1671d1bea67b51f4f8e222e7f7bb7d6b9296cfaec779f8c0a0a2e3c94ce78742

    SHA512

    d6fcbf20950a3ee21dc9037f151b2c7a05c35db4b26bc6a194a52da8f32a0c9d516e02bf379d68dac0bb84e1dc76941b9ba9be04308b71f3439d968f2235f3ff

  • C:\Users\Admin\AppData\Roaming\Yandex\ui

    Filesize

    38B

    MD5

    be387c38e54385c2e54ba7168c566965

    SHA1

    f4f9efaa43cea094d7e3352ce148e9c34142bdbb

    SHA256

    a3fb7d38a52f8ef6a5295c5a103770e89eb0487f8d8e5a171308ff19c30e3a34

    SHA512

    6f19e521c0d296686b6d634e59bbb26b563ac5e6a2a5a5494bd19bcb054551bf456624169b0eecc81bfdd0f9eb2ecd634ba260dd4e5c57c49ecceb6fa212c4af