Analysis

  • max time kernel
    141s
  • max time network
    152s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230915-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
  • submitted
    05-10-2023 23:50

General

  • Target

    79bb0970a2862c5a240320dcc121d03c6d2b2525be16d2327e4b7ea278e9ff3d.exe

  • Size

    4.1MB

  • MD5

    d39da693302f5f10a568cae38ab553c0

  • SHA1

    5b4de02081dbf78c460b1fb30e2571e2c3791f00

  • SHA256

    79bb0970a2862c5a240320dcc121d03c6d2b2525be16d2327e4b7ea278e9ff3d

  • SHA512

    14488941797b1501741a822c66bf5f5a3affaaf76e24cf3233e30054df1a0a8118c4055d58087b06441bca7fd45509aed6e1c742996512d8723139a892b22a1b

  • SSDEEP

    49152:nJG1P05g+Wzi3n0txCvRV1Y+r5u8QeKxFOJxdb4vZKV:JG1c5g+Wm3n0t2KdzOJDb4v+

Score
8/10

Malware Config

Signatures

  • Downloads MZ/PE file
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\79bb0970a2862c5a240320dcc121d03c6d2b2525be16d2327e4b7ea278e9ff3d.exe
    "C:\Users\Admin\AppData\Local\Temp\79bb0970a2862c5a240320dcc121d03c6d2b2525be16d2327e4b7ea278e9ff3d.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:492

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    1KB

    MD5

    bbb68bdcda15d976e39fb8d5cf9a7653

    SHA1

    5b5310b531400a965d065119f18205963f3b17a9

    SHA256

    b0b73ee2c89de5c1154cb26b3d8a1631dc8002c0ad083c1b37fbc2295982755b

    SHA512

    8d46efbdd25ab1487d0a057ba2db29a31e9a323def74dd4d7afcd8c7af8e50eb53d2b2cd9a2f2feb33e3a612b098286ad0e6f4e2fb31897eb8153b9cc61f9801

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    3KB

    MD5

    85d2bebf4364c8a281a79ee1c5438dcb

    SHA1

    3fbda99d71ee04b953d9934f12c58a29e38cd132

    SHA256

    15a2d94c4b8b823aed61b17c106d3ffdfc9808cdced8d99a1d7927cdc71a0dca

    SHA512

    3e0652bb20d7648aabef8778b1d037d1abdc5d003bcfd8273ee0a7bebc163723f3bb4246dddee92b6fd2fdc39a929e0b05ec474a5a54b290310aba3f11f02dda

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    4KB

    MD5

    b6b9f05c48931f1248b128443741e35b

    SHA1

    5a3d67f2eadf9b6475eff3b91512cb7a3e8d2a9e

    SHA256

    6b93d8716b17860e3b27d96d85636402e561abb389a392c9f454442cfaf09f51

    SHA512

    85120a10c5086859ed69888a1ddd1082cac55871972534130e5842c154a757296c435576151037e6609516b769c2f0ea49eb429c622286363982165f2337a9f6

  • C:\Users\Admin\AppData\Roaming\Yandex\ui

    Filesize

    38B

    MD5

    cb42178431ef66e31558425d151fe244

    SHA1

    f5d01f67af455a948d12165a47698ae1cc1ec3d0

    SHA256

    223d4a6af12186aa83de4342ba03a7ed9dc7a0267726e630cf210f61ebcf40cd

    SHA512

    b586c5eece46f25d4892d3166450c73372688dfa94639504fa9bd387876053dc06ea7c90cc6d3625544c62addbaf084a4585d9ff3d344a7726af8b98ac248db3