Analysis

  • max time kernel
    142s
  • max time network
    147s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230915-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
  • submitted
    08-10-2023 08:25

General

  • Target

    99ad1410750061c3a1b30a8c39c7ea5ee8c136af7dfa46f4f82acf92ee4d5d37.exe

  • Size

    4.6MB

  • MD5

    99ec81fb03ee7a0e2983c42134a4f724

  • SHA1

    e8b6da15a735c23ad9f3dbac8b9a93cc3b6ac0f6

  • SHA256

    99ad1410750061c3a1b30a8c39c7ea5ee8c136af7dfa46f4f82acf92ee4d5d37

  • SHA512

    efcc644e94cedee3605e356e4ace94170b4b003e0e2284ef59c05f37c968a0d3faa7def273178afe4dc5b6c3e212870d36b8d9c54772639b1c657dc5232131b0

  • SSDEEP

    98304:IG1c5g+Wm3n0tzGoFrnoNspKdzOJDb4v+:UgjGoFrn4wN0v+

Score
8/10

Malware Config

Signatures

  • Downloads MZ/PE file
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\99ad1410750061c3a1b30a8c39c7ea5ee8c136af7dfa46f4f82acf92ee4d5d37.exe
    "C:\Users\Admin\AppData\Local\Temp\99ad1410750061c3a1b30a8c39c7ea5ee8c136af7dfa46f4f82acf92ee4d5d37.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:4552

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    1KB

    MD5

    a9bdf67027b2237e2405785c298f839f

    SHA1

    23d1522f0d894ebd3da5f16b5c3cdf9f365b9a31

    SHA256

    a5af048f7a30e09ad0563f1ceefefe9414e442145cba44732b104cb4bc9de864

    SHA512

    68514d76262887566eec879a91d45471f8031a3c09908e34b7ad958a826e9b95fa9ad4ff104cfb94dcefe89a391a31373a1ca6a3c22636c91f28446f9c489b5c

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    7KB

    MD5

    40e749a4351d7a2e3ec52a737963b9e0

    SHA1

    ee38b13ea1bc5c5a2dbd5669c71f2003be05d1dc

    SHA256

    8e8261f44c1fda4d3cca76132b260a70d01a8be29e0fce189392aea79974fa96

    SHA512

    b9b9f5157f3bfb539f63d66c84fad0ec2a1a1f300c6b9255f1c70c5731bc1328b37147cd6be7511cf22b1243c5c219e80d2613de42f13970268d5f9201da651a

  • C:\Users\Admin\AppData\Roaming\Yandex\ui

    Filesize

    38B

    MD5

    f088ced73952ee6589c96f9b3a232f5e

    SHA1

    5b86b3e788f71553fcc8c6731f723c4b4ef4b8b2

    SHA256

    657ee70a95850bf1553c3225b8655c675b620672129882bf566b858c03bdb7bc

    SHA512

    9d19f47d6e0994b1f16e3832ea80c918bde97e1939e38fe1e84d14cb551847c029f76a453734bce78cef31c96b871a98306ba92657b2d6b17aeae7b9aba89651