Analysis

  • max time kernel
    211s
  • max time network
    237s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230915-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
  • submitted
    11/10/2023, 14:52

General

  • Target

    f8bdc9daa0070bab1f75c5cb64e03ee86c91bfdb3c15c2483cc6b4c3c02b6afa.exe

  • Size

    4.2MB

  • MD5

    2bfdca1adff2000dd7b12ca4bbca0227

  • SHA1

    6c3f3dd5aa667f1a005aab23e6c7ee8df544f2a8

  • SHA256

    f8bdc9daa0070bab1f75c5cb64e03ee86c91bfdb3c15c2483cc6b4c3c02b6afa

  • SHA512

    16b0e06f361c206644697032cf56dae9bcbc98decbf140984780475d1b1b4bc4e623e0664aa38adadb4cb307075a014859370d7c98c80ba629e04617a70face5

  • SSDEEP

    98304:B5wxWzZowQos6myn7WcrU6b7SKdzOJDb4v+:fSWFoCRxwN0v+

Score
8/10

Malware Config

Signatures

  • Downloads MZ/PE file
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\f8bdc9daa0070bab1f75c5cb64e03ee86c91bfdb3c15c2483cc6b4c3c02b6afa.exe
    "C:\Users\Admin\AppData\Local\Temp\f8bdc9daa0070bab1f75c5cb64e03ee86c91bfdb3c15c2483cc6b4c3c02b6afa.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:3200

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

          Filesize

          6KB

          MD5

          a344009e0704bbc11745b84f61ddcdf5

          SHA1

          474c62785d95554f352e6d77c3c975cbd431c944

          SHA256

          285742fc64af69862346e5456d906970db8d9a2a3a72545a1e67b7e5703e5110

          SHA512

          429f46ca5e7014780b48d4dca3138dba26ef38ec90b6917eb358e863f46adc92b667fad4bb12c91495a3c9d32ac4605a32f8b28ee7e26f76eed12030c4409586

        • C:\Users\Admin\AppData\Roaming\Yandex\ui

          Filesize

          38B

          MD5

          c38e2ced4e0db35380e69df93996a374

          SHA1

          079f894541001b33c166b8040c0a2933c9db078a

          SHA256

          30940220728fad34baebe9e66d5f0f403296219871330b3227b8d36731d2208d

          SHA512

          31d846807b43a4ec465c73397fca2772767acabeb694089a389e9207857a42902006f647f3147edaff12fd00ad9fbaf3c13471f6d52ad2dec0106e1d59d900ce