Analysis

  • max time kernel
    138s
  • max time network
    147s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230915-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
  • submitted
    08/10/2023, 16:28

General

  • Target

    128265857e59705314e304b1b5a54943915dffc84cfa2f6aa6e1f31822d66a66.exe

  • Size

    4.9MB

  • MD5

    400c4b3032ac4a4f507f6c06002c2199

  • SHA1

    676ac7c06948aa1e37d2f9848b857eff7791a6ef

  • SHA256

    128265857e59705314e304b1b5a54943915dffc84cfa2f6aa6e1f31822d66a66

  • SHA512

    b09d26ec9caa07e472c11a59c2fa5647ed35531b59917d2bf06bcc4f0c47123c1c556f7d5e89cb32289c9c1476da65efa48ca015f31ac373efeda635e7a85a15

  • SSDEEP

    98304:tTP0EZ36bjYOrtYtsRXIov2vRKdzOJDb4v+a:10EEYtaE8wN0v+a

Score
8/10

Malware Config

Signatures

  • Downloads MZ/PE file
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\128265857e59705314e304b1b5a54943915dffc84cfa2f6aa6e1f31822d66a66.exe
    "C:\Users\Admin\AppData\Local\Temp\128265857e59705314e304b1b5a54943915dffc84cfa2f6aa6e1f31822d66a66.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:4816

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

          Filesize

          1KB

          MD5

          e6f8ce8bb78ffcf8c7f5f5aa1b23a9c7

          SHA1

          81bb01c0864ca295e13ca04a45f0a445e38bb864

          SHA256

          67256c6982d169493861a577c9dc06859234f19a6b124eb29603e3ba3de1aae6

          SHA512

          7f5b06448d91327c4565d4a4501b4f38ec18ef08887ea68e6fd05f8fceb351d24578624528b254c1afd7271b0b1a2531b96ff3394023543fdeedef00586f2b31

        • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

          Filesize

          4KB

          MD5

          578bd50a8b50cee16cb4d7872e703160

          SHA1

          3f51fe18c8cb6fa84e38c535e13ebbbbaa27b928

          SHA256

          ffd93eb3b28377c82e1775645df1d449f33ea53cae5d98a85870c4bf9fd433fe

          SHA512

          2669451a0ce435244c15f5c8a3c96ce602cd08109784064678012a391f33624caaaf80ef4b3eeec6ae11d00826d26c70f0854882a879e0733453458a055e92a2

        • C:\Users\Admin\AppData\Roaming\Yandex\ui

          Filesize

          38B

          MD5

          ed0019201035955a16923ac9fae828c6

          SHA1

          f9544b45f53d302866a091707275cb3d92164f21

          SHA256

          162b9a013cc6304c57d1b0e70c0ccf7fbefc0daa91a1c9e776f4913673a62cba

          SHA512

          3f084b62ea3fc9da9be5e26cc95622f8596406266d34b8e278ed6f6a04b22e7e1f2907e21b5212093ab531ef327202227fcd6d0554686fbd40c7bc8968e8a88b