Analysis

  • max time kernel
    145s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230915-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
  • submitted
    11/10/2023, 11:28

General

  • Target

    faca71561bb627b5832d366f32654be60deb40bc5233780139b8cf1c0fbd7476.exe

  • Size

    4.1MB

  • MD5

    da9f8bcc4511c6a63575ed7ec35858f5

  • SHA1

    3f7d8a3f26c0c993dbd8de16838bd02a86cfc743

  • SHA256

    faca71561bb627b5832d366f32654be60deb40bc5233780139b8cf1c0fbd7476

  • SHA512

    e314d8eae76bc9aa78b68f9f2bda4398e724d4dd7bd3ed42e8fead64abb658c5584ced78426a9f98522066b8962b8f8e95cfb18a3e3c65174441294d6adf24b1

  • SSDEEP

    49152:EMwdK4BjNb2Btv5FpbjVgRDRh1OY+r5u8QeKxFOJxdb4vZKV0hu:jwdXBZ2/5fbjORDiKdzOJDb4v+0h

Score
8/10

Malware Config

Signatures

  • Downloads MZ/PE file
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\faca71561bb627b5832d366f32654be60deb40bc5233780139b8cf1c0fbd7476.exe
    "C:\Users\Admin\AppData\Local\Temp\faca71561bb627b5832d366f32654be60deb40bc5233780139b8cf1c0fbd7476.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:3652

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

          Filesize

          1KB

          MD5

          de4c345d6b77115b478bac4530c431a5

          SHA1

          f25923f6a02966962fee56a2bf279e8c2b440080

          SHA256

          7578a423b18271d2a6ae1a9bd224457982e4bab80f1dbb84d0c81a3712caf9ba

          SHA512

          d485734b8bd5ea14fe1d696975464f3af77649284edc8b6f3ad66b06ab0b34d260d3e9e59ed955957038d524a09c232a9bfd9666a80196aa45fdaea76c827779

        • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

          Filesize

          3KB

          MD5

          7bb7599171ee2f041fd031b2f6c21b0b

          SHA1

          491671475c8080fe9b6a6b62f1bbe28eef75b301

          SHA256

          1f794d64bdb817c003f06f9aeda905455ba7b314b4b75885845fca47df0d1e0f

          SHA512

          a78c2a20513e537bce66db3fb39526c530225f8ce5697790ff2844e183c53f40b3c01eee8c448a45b77ff6fdea223bcfc7510ffef2ba9d2701e649dbe9c24b7b

        • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

          Filesize

          5KB

          MD5

          580ad37fa15472081ea8cf5e593325ca

          SHA1

          f1d8d3aa3861cab39d70902d0344ef567863c09d

          SHA256

          a5abcbec42dcf499a40a09335e24f5af1f218b083afc86e73bd303713c97e1c6

          SHA512

          b2fd2f97e492dfae32d45de76e423ee8faa7487a8c9d0c071183f9abee82676dd3b225bccf85789900d99ab6171af700f985949c46c102448a5d7e23687aff65

        • C:\Users\Admin\AppData\Roaming\Yandex\ui

          Filesize

          38B

          MD5

          a0d7efc0958e4971d589a008c139af6a

          SHA1

          e2e7ac8d5c6564a09137e024edb59cc3588b3d68

          SHA256

          97def86a74924e68b03e716dfdcfb2f23b98a8864f7946400e00e05982edf3c8

          SHA512

          a403bf648827999d230d77a301fb793d81884d3799c5ecdeafb8b750dccf70ed66dad9285c12814541404daf326205fe14223067b45293c4e738a9a658e3ab81