Overview

overview

8

Static

static

3

0fdc55e117...c4.exe

windows7-x64

8

0fdc55e117...c4.exe

windows10-2004-x64

8

Analysis

  • max time kernel
    143s
  • max time network
    149s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230915-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
  • submitted
    12/10/2023, 12:36

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    0fdc55e1171628fc2607dec692fd36ac17d8f4ee1d9fb08c48983fde2b958ac4.exe

  • Size

    3.7MB

  • MD5

    e06a5846b18e6b309946f06cda462350

  • SHA1

    67ac9aa62526c16fce1cd66141d495af7b792e6b

  • SHA256

    0fdc55e1171628fc2607dec692fd36ac17d8f4ee1d9fb08c48983fde2b958ac4

  • SHA512

    915269790221ad936435655faadd0c20787a7cdecf11d2be5d1cea4e0839ec1502c22deba820d4a480fcfb9444b8ae62b22819074f4af59613bc46eb55c244c4

  • SSDEEP

    49152:WhQ8lPzRnZp4y5C6mB0j4KTB+r5u8QeKxFOJxdb4vZKV8:SllLRnZp4yE6mdVKdzOJDb4v+8

Score
8/10

Malware Config

Signatures

  • Downloads MZ/PE file
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\0fdc55e1171628fc2607dec692fd36ac17d8f4ee1d9fb08c48983fde2b958ac4.exe
    "C:\Users\Admin\AppData\Local\Temp\0fdc55e1171628fc2607dec692fd36ac17d8f4ee1d9fb08c48983fde2b958ac4.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:400

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log
    Filesize

    1KB

    MD5

    1cb76827f7efaea5721d168db11963ba

    SHA1

    287745db439ba3f88b51b6e70e6080eaac2d48a3

    SHA256

    487a828f13e8d3ed7135121a90a07c33bdcc9d134c7fced609718d070362a274

    SHA512

    5e6fb756fa307a457db5a957cb694d18c88420af753e2189be9b288a4ebde128a767367fde381f0a71e1075c5472d69ea4601a8ecbf3378af02e18f33db744c7

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log
    Filesize

    4KB

    MD5

    3648d3759935e685ef05740df6516ced

    SHA1

    97d347e6df41bc1605f3f8fc1f0b1663dd9f5c01

    SHA256

    f0d3c2be984641c217bec4e27526e492ae427fdb2723f72f274611243f4085b5

    SHA512

    725925420271a00aa2c21962b1aed1e37bcf41d13e9af5d555af7859893ae17ff739d39bfbcb017ebaac8c49ae93560de89e0d514f0e747b47a18390c726f464

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log
    Filesize

    5KB

    MD5

    ef27917f716eccd503027aede03351c9

    SHA1

    9830c66dcf6f54c136b2d5c1c54922299094a013

    SHA256

    93472f632274c0692672d6094f97f7306eba3f66a15709e39f04562dd4abd18c

    SHA512

    4ba11b9420582959eb5d20c6028a60ecfacf64415c513a8d4e64482bd297256246eb74dfbb3ec0fe1561e10cccae2ce48455a5aa32d29b5713191378021678e4

    Download Submit

  • C:\Users\Admin\AppData\Roaming\Yandex\ui
    Filesize

    38B

    MD5

    44b9e131c6cd88e74ee8f8c112e8fa18

    SHA1

    537ced5ebec29b1e788558a56157824e0cb09c4d

    SHA256

    a4dea332291f2301f96895ff27549013e180a37867bc0408dbced7b806a4319b

    SHA512

    c2742fcf608fe489c0c1f79ca1f864ec9e31064ad53647b381db15d106acb80e94e752a57ec09552e02e39f62c59d580a1b82827574ca601a7acedbb1087f067

    Download Submit