Analysis

  • max time kernel
    144s
  • max time network
    149s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230915-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
  • submitted
    10/10/2023, 16:00

General

  • Target

    6fdc8b072d5e7169f86ec0b12ab4757dc6ab5304b8b645e9372b473213808536.exe

  • Size

    4.1MB

  • MD5

    70da28be664a9d0b83ceb9c48ecf1ee6

  • SHA1

    eb3236eab00594f3138cefb53450365ded49e611

  • SHA256

    6fdc8b072d5e7169f86ec0b12ab4757dc6ab5304b8b645e9372b473213808536

  • SHA512

    11bda089d1cf9ba87ea44bc6c3a6948318aab237dab7a5e8a0968831ba2b3a920bb1fb03b3caf3a218ce0cc83607273e68daa6b7f67fda9feda93990d5c0f46b

  • SSDEEP

    49152:tDnaVVMzMvkMUzM3n5xlmSY+r5u8QeKxFOJxdb4vZKV:NaVizMvkMUg3n5xLKdzOJDb4v+

Score
8/10

Malware Config

Signatures

  • Downloads MZ/PE file
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\6fdc8b072d5e7169f86ec0b12ab4757dc6ab5304b8b645e9372b473213808536.exe
    "C:\Users\Admin\AppData\Local\Temp\6fdc8b072d5e7169f86ec0b12ab4757dc6ab5304b8b645e9372b473213808536.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:496

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    5KB

    MD5

    26b3b4aa609f51f344bbf6ef6c574896

    SHA1

    16951fa7b4cfa717659aefb7047e01c4629768f6

    SHA256

    b996a6a5f0a866906b8c6007101b8bafbb72eb5ecdae27548642a3327bbed11b

    SHA512

    c741b2a0c4fcd14f68dbd194b3c5d4f78e79e221dfdae0988837afc1fff070fa623747ed88893e29823ad63a385832db5f1d818043af0f18d88586a5fae4cfe0

  • C:\Users\Admin\AppData\Roaming\Yandex\ui

    Filesize

    38B

    MD5

    188d4f5386a6e8ab11dc882551240bfa

    SHA1

    6ba0a4a115812f14bae5841d5cfe423268481d08

    SHA256

    779834a679829ce3e8b7d75232a7aeff1fa07b467210ffd0d802a703ca67b8aa

    SHA512

    732426559c86bbeb0502d719ad71021dbcf95a171463300e30ec840b99be63510c7b552f30d876063415f0ee3ddcf44ac4e85f1803af41df0e91d8960abf5d3d