Analysis

  • max time kernel
    149s
  • max time network
    157s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230915-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
  • submitted
    12/10/2023, 06:58

General

  • Target

    9df0392c0c87ed27030018b9f34fcec077348410bf07d0da2aca601ae0953359.exe

  • Size

    4.0MB

  • MD5

    2b31fd4d7edef1a6dabcec3320bd8a05

  • SHA1

    82aca819e4c7261276ce10be31600a241251b70e

  • SHA256

    9df0392c0c87ed27030018b9f34fcec077348410bf07d0da2aca601ae0953359

  • SHA512

    2723eb3cda944b501f2f81e0c82132ad624000353cbae786a645da8d58cbd58eb07231f056c0a4a0b5f160cab9b0c77cb59d863f90b110485d40848fca9dbe8e

  • SSDEEP

    49152:Q0N3IpkodZfdlTXKnB3nZduwP4oY+r5u8QeKxFOJxdb4vZKV:B3IfZfdJXKB3nZdhKdzOJDb4v+

Score
8/10

Malware Config

Signatures

  • Downloads MZ/PE file
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\9df0392c0c87ed27030018b9f34fcec077348410bf07d0da2aca601ae0953359.exe
    "C:\Users\Admin\AppData\Local\Temp\9df0392c0c87ed27030018b9f34fcec077348410bf07d0da2aca601ae0953359.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:2560

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    1KB

    MD5

    b87626a94c818616c79bbb7b791354ea

    SHA1

    0fe7775b9e1f8663df833f9c224ef201afa619dd

    SHA256

    3110d02c553079754010a2b1d95c9b2beddd4ef0ab54871880e5336c4d8b1369

    SHA512

    09bf9a932437bac6fe3ed8258e0a1be268d22c7e8a009e9b350d44457602aba6cb6665ca015b966a15163e8a683a0429b47ed47e28184d0749861b424aced606

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    4KB

    MD5

    b050e2798388d9d6688e050d65610258

    SHA1

    4125df596980c815f81d8dd99b3581fe30da14e0

    SHA256

    31f2a87fdb74f93651ba22223f0f3999a43ff99c7373382a6d2ccb92b123f34f

    SHA512

    1dd894dd653bc4b02574f405942f099e3127a7bd512b65b6eb90f8cf6bdf4018ae280de74e00c12651f98959b5ddaeedef6937dd82698ba0efd13d1a25100aca

  • C:\Users\Admin\AppData\Roaming\Yandex\ui

    Filesize

    38B

    MD5

    5ce5f901efe2e28fe9f232ca574f2375

    SHA1

    f9a9f70ccc013b79f44aa0f3a4d66d67b815af95

    SHA256

    2e83fb6dc9e11dec9d54574144381550dfaf78da83ea3a7c7670bb228efe9a56

    SHA512

    9ce7c41ce627cd5add492ab4a4f5483ef8048bc8175a3697bfe72f14f0bb2091a6e1415a7310bcfe27637b89bf7ddd8977c0a123866eef2fe6c1dd889943a901