Analysis

  • max time kernel
    137s
  • max time network
    146s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230915-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
  • submitted
    10/10/2023, 20:25

General

  • Target

    17bb46cdb1d684c632cdf35ebeea6822bd223a5e0101a63ce509ab21e330fab0.exe

  • Size

    4.9MB

  • MD5

    b30a249fb02f79d3baa640bfc596d013

  • SHA1

    8684294bdc9ef257a362456baf0976325c4132fa

  • SHA256

    17bb46cdb1d684c632cdf35ebeea6822bd223a5e0101a63ce509ab21e330fab0

  • SHA512

    49b9ad95b044fe76c898d83beb64b8f7617565566c658b77a5b9486edd6ea042109c20161a97bf87d2097c8866f2a2f2142072d14fe209804f7bf1d6445d33cd

  • SSDEEP

    98304:nwdXBZ2/5fbjORDgt/loIKKdzOJDb4v+rh:GkPtaIJwN0v+

Score
8/10

Malware Config

Signatures

  • Downloads MZ/PE file
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\17bb46cdb1d684c632cdf35ebeea6822bd223a5e0101a63ce509ab21e330fab0.exe
    "C:\Users\Admin\AppData\Local\Temp\17bb46cdb1d684c632cdf35ebeea6822bd223a5e0101a63ce509ab21e330fab0.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:3792

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    11KB

    MD5

    f7677570229c3de0bb2795be632a1a3b

    SHA1

    bd6c7f057c39c010cab4218db4e6c40f1ccba935

    SHA256

    b8b8fb1553157f8f6f760d06383c32ff24f16b2f9f96f214efabfbb7530b85c4

    SHA512

    3825db82481619028f8ba92a37e1fe937bf82e3d0cca8b6bd884f03e145773ec606125351a62b61b87264ddb919cc37a601a01ec3dae6186278dbe1ef3a1cd81

  • C:\Users\Admin\AppData\Roaming\Yandex\ui

    Filesize

    38B

    MD5

    0c10e4c2209d79649c7360e3086adb2f

    SHA1

    46ebc916e70be33839a8db52d39dd1073b7de8c8

    SHA256

    f67df83886d76ca72064de5fd97851231e1de2a235f0f4ba9b167412941d8dd1

    SHA512

    be0b6061225fd150d4467d64698c701e5b74969065418da1700b077a953bffebf4887f0cb0f98af18927c1dcd737815bab680a2c639c7c6ffaf145e66d7d4441