Analysis

  • max time kernel
    143s
  • max time network
    154s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230915-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
  • submitted
    06/10/2023, 16:56

General

  • Target

    f332b664252f89b7290ccf6d68a91b932cf093ca05fb37ac26a8f1ba41f88b5e.exe

  • Size

    4.6MB

  • MD5

    3eba16a05931d8191e6d6a72542aea06

  • SHA1

    607b913ab005c867256075dcf162b9ac8245c82f

  • SHA256

    f332b664252f89b7290ccf6d68a91b932cf093ca05fb37ac26a8f1ba41f88b5e

  • SHA512

    e18837055976b0acdf1ac16cf17d09cdb4e13efaf1bcfee287cdb9be016f9b5dc6429d9fed983ab1033bf9c57aafb5ebd15f0f710df81ebf7a84c1fe7e90e9c7

  • SSDEEP

    98304:WG1c5g+Wm3n0tQLCcvITqy9KdzOJDb4v+:KgALCoITqzwN0v+

Score
8/10

Malware Config

Signatures

  • Downloads MZ/PE file
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\f332b664252f89b7290ccf6d68a91b932cf093ca05fb37ac26a8f1ba41f88b5e.exe
    "C:\Users\Admin\AppData\Local\Temp\f332b664252f89b7290ccf6d68a91b932cf093ca05fb37ac26a8f1ba41f88b5e.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:3700

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

          Filesize

          1KB

          MD5

          7dbd116f2d3e86159a2fd51089778a5e

          SHA1

          907444f5f58229c75145c013ab27ba8c539be053

          SHA256

          e585812c2d5ec9c37c6601325501750c4c9622f957dc1535db55e72ac7a59bd7

          SHA512

          f14bdb1da03865050739cecd876404dbdc3695a6a5bde81765492593e25a0ee4792339fdb22a3c7f884c1470ac8b73bb62477716676d2b208a53f96224df4b94

        • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

          Filesize

          3KB

          MD5

          3b725de74178f9df8979f9aea4fb23d3

          SHA1

          1d1209631f0aec93e7a0e0f56e91bab416096a1b

          SHA256

          990f195c064dcfbe8842bde05db64e17b6dad5a7d66518e38b460e9b13d8b3ce

          SHA512

          c11cc6fe599f6f177475c60f5c0915e7e6844b6be90e1f5b6a1cf6a5c6a1352632578998447678375162a9bcdf73c37f7e14e0a9f0e4344533a498d24d293f8d

        • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

          Filesize

          6KB

          MD5

          243196b6db0328f9fb1219cc10586624

          SHA1

          d7328f42f1861862e0d3aa4080edc5959e1b7d1f

          SHA256

          c7af686a6e10b300772e654212fe24dd92a1799b8dfac9685103bc2d44355163

          SHA512

          37449153af875de5d24977670cef3f5b410dcca91469a69177cc1abe95a7c44b5021276f58985e903df62080a556dbf67075ee59dcfb3e8679b8f278df3f62fb

        • C:\Users\Admin\AppData\Roaming\Yandex\ui

          Filesize

          38B

          MD5

          dc65af68fea7ad2ea2e10a1dae9e4149

          SHA1

          83649766d89fcdb71bebb2ba71aaae11a8aa2f91

          SHA256

          707317107057052447c9c67bcc891dfca8bb2952f89e2fe8c156cb88d260271a

          SHA512

          9e7d158e0ae3640ffd535503da90c6f2ece80dd9a3bcbfe0f493d7d95846850dd240b0f6f8446efafaa7866c20fb4b146729237eb74aa7969dab962d522b801f