Analysis

  • max time kernel
    131s
  • max time network
    161s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230915-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
  • submitted
    12/10/2023, 12:02

General

  • Target

    d307f9f341913d3dcd93f7140a209155e77eca1d9479265a8e1fa616cd0c08e9.exe

  • Size

    4.6MB

  • MD5

    4d08e51e39c96e9cd9d6735b8ed56b8b

  • SHA1

    6e840fc7d7ec4d226c342d021133e913bb64ce18

  • SHA256

    d307f9f341913d3dcd93f7140a209155e77eca1d9479265a8e1fa616cd0c08e9

  • SHA512

    98963d6c2d6c9e7811dbf264605232bd076c27fa6e1f20dc6b1cd797b6affcd7c8c804984e4241be891bd405d5769afce05f218f747b46e472f758835c57b2f4

  • SSDEEP

    98304:fcOxoa2orK2t+Gwo2xaWJWRzSKdzOJDb4v+:Tos2oWJWRzxwN0v+

Score
8/10

Malware Config

Signatures

  • Downloads MZ/PE file
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\d307f9f341913d3dcd93f7140a209155e77eca1d9479265a8e1fa616cd0c08e9.exe
    "C:\Users\Admin\AppData\Local\Temp\d307f9f341913d3dcd93f7140a209155e77eca1d9479265a8e1fa616cd0c08e9.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:4568

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    1KB

    MD5

    a8c868388b543efd7976f3adf5e49f95

    SHA1

    931955932db994854d0268aea2cbea5f44c26b4c

    SHA256

    5828f9f9025da788dc37014ec409e4ee46c596085a578079e7fad7b027f7d5e7

    SHA512

    46d667eda1bbcd8e35bcfeb012746250d2426c6d2ed5233b81c3ee8c11dad3e3aa7c611df890ebeb65db36d77b31699720051959b28b025c209f09581064c552

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    7KB

    MD5

    55926c7099d3062d2701e9b374bd535a

    SHA1

    0c2380e281e2cb79fcfa5c20c4ccbf6ab5d8bb66

    SHA256

    24692ce1b9d8ad039fc701ce5f49ddb17054b32879c0a7843e01994894101aac

    SHA512

    a5acfab61b1256ff9c673ad651f1d37a1d3c5e962ef0c3401ea9069a53719adcd6ba0a16c48ecb99ee51a63db077194e88d738956b42608c88da7727e165e951

  • C:\Users\Admin\AppData\Roaming\Yandex\ui

    Filesize

    38B

    MD5

    fd2371c62a2e058d4da2eb3f9369d2e1

    SHA1

    519925d3ddf17aa1495f350caafb3240d827c023

    SHA256

    532b8d27ad2ad6b172c8a9d3d4dd6124345a8d29343f8a8b3cb00c4de5a1013f

    SHA512

    3a2125f7a51200996a95ddaa4451c009751ddffc2966db90c0673a9329c11cf7e15c1905773ad106f2f2dea0b21fff0585b97ce28a085839bf48d179d5b9168a