Analysis

  • max time kernel
    146s
  • max time network
    158s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230915-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
  • submitted
    10/10/2023, 19:05

General

  • Target

    47b1b297e38511c6e6dcb22f75d514669c71e14dd2c2324944739ed989abb212.exe

  • Size

    4.9MB

  • MD5

    aaa952e88e3df28d6ad87005f96e23a0

  • SHA1

    f2b5ed5a64e2fa514d6279c5e128ccdb3e1594bb

  • SHA256

    47b1b297e38511c6e6dcb22f75d514669c71e14dd2c2324944739ed989abb212

  • SHA512

    3782295ad11296fa9de717249a1febd11d1f42ffba84b7698ce535cdf77e3a0ebf988797590ceb0ec481a1473786322f53d8cee31f09b050b0bd018d3d26232e

  • SSDEEP

    98304:tTP0EZ36bjYOrtYtsRXIov2vRKdzOJDb4v+a:10EEYtaE8wN0v+a

Score
8/10

Malware Config

Signatures

  • Downloads MZ/PE file
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\47b1b297e38511c6e6dcb22f75d514669c71e14dd2c2324944739ed989abb212.exe
    "C:\Users\Admin\AppData\Local\Temp\47b1b297e38511c6e6dcb22f75d514669c71e14dd2c2324944739ed989abb212.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:4624

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

          Filesize

          1KB

          MD5

          46658bf5f7aaa9a3c3b2221b93ef98c1

          SHA1

          54b5a01879ed69ee1ede9ea7b3aff72f4b1c2a5a

          SHA256

          966eb8d3fd8568ec1f5dac000cc2b679ae1250ed7ddee1b9ebc2dc5e3f176f89

          SHA512

          36bc9abb1f1fd682ae3cc12084058f0eaec75a6e2de935acd3a9a5bf6b03af0e30a719d40cbc939c344fb41a41fa3a3ce303ff137990518acbf63ad5db34a841

        • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

          Filesize

          3KB

          MD5

          675646118652aa7eebecd7ab0230d4ff

          SHA1

          45fbca52ac1d02f4857258ae78c0f04d85be89df

          SHA256

          fb13d42b4aa2367bcf3e88eda161eb58fb59990a96e9933d4dc231461d8b4011

          SHA512

          a531fb614dc2c938c043e4f816a6fd724f02fd4f6d5cac756dee7797177940019d1fd89a15350c66ebc9b2ca2b46bc6728bf58a4a682c0f4b93aec0a45967e0b

        • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

          Filesize

          4KB

          MD5

          429ecfd565802522ddd348169a89e593

          SHA1

          e9c3cc7a9d6a855f89f9a2b83afdf4e3682bcc0d

          SHA256

          0f65de109eb1a98a68a88f5f9359b5c85410c3ace6d933b1931131fe69120dc2

          SHA512

          50fe2b42aef45530a66bfab6593c83c6a4b77fed16657ace33ec3f3b87a76e414c6eb0114bb9a96b914e77d1242453e4d2f1780d854fb012b6b52ff05c05cb92

        • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

          Filesize

          5KB

          MD5

          368b1d7dac0fdd27c65bc11e05449d6f

          SHA1

          39f3a611882dac2484afd964c1d36f921e353b2e

          SHA256

          a12a4fb4cacc03f041d2f75fe566ac0662490c2540485cef5399497c7fa04fce

          SHA512

          3e24bc11d3534e0382b6cf871f0d48d698c97f65b5d428896e8acd127608534151e8013fee30d807fce4655ebbbcbf0ccfe0d8d7206024a655952bdc62f6cff4

        • C:\Users\Admin\AppData\Roaming\Yandex\ui

          Filesize

          38B

          MD5

          4890667f1936fe8490dbf15ab7a660ba

          SHA1

          eae7e199e2b9291cf2731007cb55c532cd0120ba

          SHA256

          cfe8c362c0ce6e24081fe58e4a73741b0fc32434a084b36e4e144c0346566950

          SHA512

          32bbc64d11d4e7956c4f5bcaaf55d3086de2be10f9a67aae3bcc75dbde4a23096ee197c1b507cf7330f539a86ebf206794538e049be4a1f8c08d302752589b0c