Analysis

  • max time kernel
    148s
  • max time network
    155s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230915-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
  • submitted
    04/10/2023, 20:07

General

  • Target

    82e87b1763cb6ca9d424d490ff203864c086d1e3ac107a836cd2894167c80026.exe

  • Size

    4.9MB

  • MD5

    87a5a74da37b2ef8b506dcf3e59ada8f

  • SHA1

    ca92a898de33745e899e655912e5bceb57ab3dbd

  • SHA256

    82e87b1763cb6ca9d424d490ff203864c086d1e3ac107a836cd2894167c80026

  • SHA512

    a81247d72cf08ebb188f789ed9d9c9a6cf123fee0472f436c83b2c415597c54f7ee507d6d2f15f1f94e4735e7e462a5cc395bce6ad66cb36c26c45936d20d332

  • SSDEEP

    98304:tTP0EZ36bjYOrtYtsRXIov2vRKdzOJDb4v+a:10EEYtaE8wN0v+a

Score
8/10

Malware Config

Signatures

  • Downloads MZ/PE file
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\82e87b1763cb6ca9d424d490ff203864c086d1e3ac107a836cd2894167c80026.exe
    "C:\Users\Admin\AppData\Local\Temp\82e87b1763cb6ca9d424d490ff203864c086d1e3ac107a836cd2894167c80026.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:888

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

          Filesize

          1KB

          MD5

          93910ce1e0284fb2f5d42cb5653c5abf

          SHA1

          8585278ff5dd08381874983e32812ef79cadc862

          SHA256

          a58a3988e6590bbb3dcc8e3f79a7c1a17b4b8b79fe4c8a446e4a8778453e18ac

          SHA512

          e38bdfbcaa047dfca8685ab5996bdfa821dc52702acb1ffe1261b2e2f70aca83e1fca609215ae20900f198654102079048f48a72fa97dff8b57023bb5e483393

        • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

          Filesize

          6KB

          MD5

          49eb77da916d317905170707cf52c4db

          SHA1

          156b4aabe456748109ede3d0d8d6f29bfc5368ce

          SHA256

          e913e136425ebe6dc798572505f773631678692e1011a6d556ffc64a088fae12

          SHA512

          5046a7cba9ab22aba2252d2f2ef321e36cfe7dabc0375356a014e2652f3be1abd93cfedee35bd6e93f0e4833cdf831a83ce96abef3ea15fedcc2b09688c13366

        • C:\Users\Admin\AppData\Roaming\Yandex\ui

          Filesize

          38B

          MD5

          eacdbc6615491654b7c31998ecc925f2

          SHA1

          f5196964008858ffe4e91235b756cdbf1448856e

          SHA256

          b2bf3692f24053b95fbe5272e37ccd3389a98f51c75e9ea7215f6b0c6d14e03a

          SHA512

          dcf4388ebfcc5f6fe861b2d0466829319608d35a1a3f71fb93c143518dce81162401ac07210fc7dfa25a4fb45d83ac152043fb33d219dc834a58222395c4aa27