Analysis

  • max time kernel
    143s
  • max time network
    150s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230915-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
  • submitted
    10-10-2023 19:05

General

  • Target

    86f2e115728c6053296aff560e68fc899bc9e94913873746c83ccc46d91abe49.exe

  • Size

    4.1MB

  • MD5

    0870f613eb38fad866a90a44b9e7744b

  • SHA1

    d48b6a488c546c8ebc3023b8656fc291d523c1c1

  • SHA256

    86f2e115728c6053296aff560e68fc899bc9e94913873746c83ccc46d91abe49

  • SHA512

    951c741b78f8490b26cc89ddaa17c9b1d12ac6e5afed9dafa7e76f53292bef228b3ebcfc0f7b5f838c5fc95a66b0c50d839224db1117f78f61f5c56b4378ed88

  • SSDEEP

    49152:tDnaVVMzMvkMUzM3n5xlmSY+r5u8QeKxFOJxdb4vZKV:NaVizMvkMUg3n5xLKdzOJDb4v+

Score
8/10

Malware Config

Signatures

  • Downloads MZ/PE file
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\86f2e115728c6053296aff560e68fc899bc9e94913873746c83ccc46d91abe49.exe
    "C:\Users\Admin\AppData\Local\Temp\86f2e115728c6053296aff560e68fc899bc9e94913873746c83ccc46d91abe49.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:4236

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    4KB

    MD5

    c41bf7270a5e052da13031011c302263

    SHA1

    5c3943720d5727c4a261deab2af7944bb1a38237

    SHA256

    115d5e234944e0d77fe8c1c6b0879b0b7057f3d17edb6f353f994b8d10a99ec8

    SHA512

    07a1940003e4fba17512f97b7b24c6c6f37069d287746e62ae881314e2c4b6894be2b42f3382808ac41a69fd965d89b5d40b0af1823eaeba55edac692ee264c6

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    5KB

    MD5

    0ae721bd56d01220f619a460337a925b

    SHA1

    5464bca194cac7237e503a13ae7ce48e8b2b95cc

    SHA256

    b85cb93e2d8e632a3b604e5b297aea490c83195398eb775ba8587c80b270b097

    SHA512

    76cd5e60bd9c442981a7d1445da7d185d3044949084036ba17fd5763d86abd3a468a222d5c21aeabfab071240193d117a8d9501fda97d5431676f0bf5f95fe72

  • C:\Users\Admin\AppData\Roaming\Yandex\ui

    Filesize

    38B

    MD5

    b38fa5f3fa8c8a2f4c9d2dfae06608f5

    SHA1

    0c8980ea8803d46aecca556046b4bb706c246e4b

    SHA256

    0c1cd4229554f9d3c6945ecde802c96944cd9c239d480610d1d3f70f528e6e8c

    SHA512

    b26287c42e5c23ccb0358df242c35e49bb7f6da047a344792910e25601f45bda625acbb4c7f9b9e6678da461d9eeb2a1e21302135614bd38990a302f1e23129c